falešný poplach v Malwarebytes?

[jarda.otta]

dobrý den. Mám v pc utilitku asi 2 roky na uchovávání adres soubor Adresy.exe. Malware bytes mě nahlásil že je infikován trojanem VkHost. Co na tom může být pravdy, Na Virustotal jsem ho otestoval a ani jeden Antivir nic podezřelého nezjistil. Jak je to vlastně s Malwarebytes,nehlásí příliš často falešné poplachy, V mém případě to je už několikáty poplach co hlásí u běžných software. Na virus total to vždy dopadne ok. Děkuji

[Reklama]

[jaro3]

MbAM je velice dobrý program, chyby se objevují velmi zřídka , určitě ne často. Aktualizuješ program před každým skenem?

Vlož sem log z MbAM a odkaz na virus Total. Zkusím informovat. Jde tedy o soubor Adresy.exe ?

[jarda.otta]

po druhém scanu už mě MBAV nic neukázal. zkusil jsem i MWAV a ten našel také nějakou havěť a odstranil.Jinak podezřelé soubory testuji na www.virustotal.com a ten údajně napadený soubor se jmenuje adresy.exe.
mám stále pomalou rychlost připojení.Cca 4mbit ač má mít 30mbit. výměna pc za notebook po modemu je v poho. cca 25-28 mbit.
zde je výpis logu z RSIT jestli je vám k něčemu. děkuji za laskvost

Logfile of random's system information tool 1.06 (written by random/random)
Run by jaris at 2009-10-27 09:51:03
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 65 GB (22%) free of 297 GB
Total RAM: 2047 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:51:08, on 27.10.2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\TechSmith\Jing\Jing.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Secunia\PSI\psi.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\IncrediMail\bin\ImApp.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\Dwm.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\OTAK\software\UTILITY\RSIT(4).exe
C:\Users\jaris\Desktop\jaris.exe
C:\Windows\system32\SearchFilterHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: IE7Pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\ProgramData\LangSoft\WebIE.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Catcher Class - {ADECBED6-0366-4377-A739-E69DFBA04663} - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\ProgramData\LangSoft\WebIE.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Jing] C:\Program Files\TechSmith\Jing\Jing.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O8 - Extra context menu item: &Stáhnout FlashGetem - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Stáhnout všechny FlashGetem - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Grab and Drag - {000002a3-84fe-43f1-b958-f2c3ca804f1a} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\ProgramData\LangSoft\WebIE.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - (no file)
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - (no file)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1c9e9c6e1469ee0) (gupdate1c9e9c6e1469ee0) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe

--
End of file - 9859 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Malwarebytes' Scheduled Update for jaris.job
C:\Windows\tasks\User_Feed_Synchronization-{F601E435-7F1B-4885-ADA7-F72CB8713B0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00011268-E188-40DF-A514-835FCD78B1BF}]
IE7Pro BHO - C:\Program Files\IEPro\iepro.dll [2009-02-04 752744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2009-06-25 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
FGCatchUrl - C:\Program Files\FlashGet\jccatch.dll [2007-09-11 94308]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ADECBED6-0366-4377-A739-E69DFBA04663}]
Catcher Class - C:\Program Files\Moyea\FLV Downloader\MoyeaCth.dll [2007-12-05 94208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2009-02-27 349576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-31 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]
FlashGet GetFlash Class - C:\Program Files\FlashGet\getflash.dll [2007-09-11 163840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2009-02-27 349576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2009-06-25 520192]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2009-02-27 349576]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-02-06 2021400]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-03-27 13687328]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2009-03-27 92704]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2009-09-10 1312080]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2009-09-10 420176]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-31 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"Jing"=C:\Program Files\TechSmith\Jing\Jing.exe [2009-05-26 2893064]
"IncrediMail"=C:\Program Files\IncrediMail\bin\IncMail.exe [2008-11-12 243072]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"WEBTRAN"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\365dni]
C:\Program Files\365dníNET\365dniNET.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2009-02-27 640376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2009-02-27 38768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe [2009-08-13 177440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2009-10-10 203264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2006-12-10 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
C:\Program Files\Nero\Nero 7\InCD\InCD.exe [2006-07-25 1043968]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
C:\Program Files\Microsoft LifeCam\LifeExp.exe [2009-07-24 118640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Magentic]
C:\PROGRA~1\Magentic\bin\Magentic.exe /c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMusic FastStart]
C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe /command:faststart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2009-04-17 54576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-06-25 1414144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
C:\Program Files\PowerISO\PWRISOVM.EXE [2009-03-15 180224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2009-09-18 198160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VX3000]
C:\Windows\vVX3000.exe [2009-07-24 762208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\IEPro\MiniDM.exe"="C:\Program Files\IEPro\MiniDM.exe:*:Enabled:MiniDM"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2009-10-27 02:06:33 ----AD---- C:\Windows\VDLL.DLL
2009-10-27 02:06:33 ----AD---- C:\Windows\system32\runouce.exe
2009-10-27 02:06:33 ----AD---- C:\Windows\rundll16.exe
2009-10-27 02:06:33 ----AD---- C:\Windows\RUNDL132.EXE
2009-10-27 02:06:33 ----AD---- C:\Windows\logo1_.exe
2009-10-27 02:06:33 ----AD---- C:\Windows\logo_1.exe
2009-10-27 01:52:02 ----A---- C:\Windows\system32\msvcr80.dll
2009-10-27 01:52:01 ----A---- C:\Windows\system32\msvcp80.dll
2009-10-27 01:52:01 ----A---- C:\Windows\system32\eEmpty.exe
2009-10-22 16:49:15 ----D---- C:\ProgramData\Kaspersky SDK
2009-10-22 16:48:57 ----D---- C:\ProgramData\MicroWorld
2009-10-22 16:44:08 ----A---- C:\Windows\ntbtlog.txt
2009-10-21 06:43:25 ----A---- C:\Windows\system32\wups2.dll
2009-10-21 06:43:25 ----A---- C:\Windows\system32\wuauclt.exe
2009-10-21 06:43:24 ----A---- C:\Windows\system32\wucltux.dll
2009-10-21 06:43:24 ----A---- C:\Windows\system32\wuaueng.dll
2009-10-21 06:42:44 ----A---- C:\Windows\system32\wups.dll
2009-10-21 06:42:44 ----A---- C:\Windows\system32\wudriver.dll
2009-10-21 06:42:44 ----A---- C:\Windows\system32\wuapi.dll
2009-10-21 06:42:29 ----A---- C:\Windows\system32\wuwebv.dll
2009-10-21 06:42:29 ----A---- C:\Windows\system32\wuapp.exe
2009-10-21 06:42:08 ----A---- C:\Windows\system32\javaws.exe
2009-10-21 06:42:08 ----A---- C:\Windows\system32\javaw.exe
2009-10-21 06:42:08 ----A---- C:\Windows\system32\java.exe
2009-10-20 12:53:47 ----D---- C:\Program Files\Common Files\Borland Shared
2009-10-20 12:53:41 ----A---- C:\Windows\uninst.exe
2009-10-20 12:53:28 ----D---- C:\Program Files\MPresent
2009-10-18 12:17:40 ----D---- C:\Program Files\IrfanView
2009-10-17 15:42:17 ----A---- C:\Windows\system32\sipr3260.dll
2009-10-17 15:42:17 ----A---- C:\Windows\system32\drv43260.dll
2009-10-17 15:42:17 ----A---- C:\Windows\system32\drv33260.dll
2009-10-17 15:42:16 ----A---- C:\Windows\system32\wvc1dmod.dll
2009-10-17 15:42:16 ----A---- C:\Windows\system32\vp7vfw.dll
2009-10-17 15:42:16 ----A---- C:\Windows\system32\drv23260.dll
2009-10-17 15:42:16 ----A---- C:\Windows\system32\cook3260.dll
2009-10-17 00:50:27 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-10-14 08:29:57 ----A---- C:\Windows\system32\mshtml.dll
2009-10-14 08:29:55 ----A---- C:\Windows\system32\ieframe.dll
2009-10-14 08:29:54 ----A---- C:\Windows\system32\urlmon.dll
2009-10-14 08:29:54 ----A---- C:\Windows\system32\iertutil.dll
2009-10-14 08:29:53 ----A---- C:\Windows\system32\wininet.dll
2009-10-14 08:29:53 ----A---- C:\Windows\system32\msfeeds.dll
2009-10-14 08:29:52 ----A---- C:\Windows\system32\occache.dll
2009-10-14 08:29:52 ----A---- C:\Windows\system32\iedkcs32.dll
2009-10-14 08:29:51 ----A---- C:\Windows\system32\ieui.dll
2009-10-14 08:29:51 ----A---- C:\Windows\system32\iepeers.dll
2009-10-14 08:29:50 ----A---- C:\Windows\system32\msfeedssync.exe
2009-10-14 08:29:50 ----A---- C:\Windows\system32\msfeedsbs.dll
2009-10-14 08:29:50 ----A---- C:\Windows\system32\jsproxy.dll
2009-10-14 08:29:50 ----A---- C:\Windows\system32\ieUnatt.exe
2009-10-14 08:29:50 ----A---- C:\Windows\system32\iesysprep.dll
2009-10-14 08:29:50 ----A---- C:\Windows\system32\ie4uinit.exe
2009-10-14 08:29:49 ----A---- C:\Windows\system32\iesetup.dll
2009-10-14 08:29:49 ----A---- C:\Windows\system32\iernonce.dll
2009-10-14 08:29:01 ----A---- C:\Windows\system32\msasn1.dll
2009-10-14 08:28:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2009-10-14 08:28:48 ----A---- C:\Windows\system32\ntkrnlpa.exe
2009-10-14 08:28:44 ----A---- C:\Windows\system32\msv1_0.dll
2009-10-14 08:24:55 ----A---- C:\Windows\system32\WMSPDMOD.DLL
2009-10-13 13:38:44 ----D---- C:\Users\jaris\AppData\Roaming\PhotoFiltre Studio X
2009-10-13 13:38:31 ----D---- C:\Program Files\PhotoFiltre Studio X
2009-10-09 13:49:40 ----D---- C:\Program Files\Microsoft LifeCam
2009-10-09 13:47:32 ----A---- C:\Windows\system32\d3dx9_35.dll
2009-10-09 13:46:15 ----D---- C:\e6d8ba1011bf91d78f5a0af379c3af
2009-10-08 09:32:48 ----D---- C:\Program Files\LingvoSoft
2009-10-07 13:56:21 ----D---- C:\Program Files\7-Zip
2009-10-07 13:51:06 ----A---- C:\Windows\system32\BASSMOD.dll
2009-10-07 10:35:58 ----A---- C:\Users\jaris\AppData\Roaming\inst.exe
2009-10-06 08:31:30 ----A---- C:\Windows\365dní Uninstall Log.txt
2009-10-05 20:53:39 ----A---- C:\Windows\mauninst.exe
2009-10-05 20:53:22 ----D---- C:\Program Files\Media Art
2009-10-05 13:50:52 ----D---- C:\Users\jaris\AppData\Roaming\Ectaco
2009-10-01 12:48:15 ----D---- C:\Program Files\ConvertHelper
2009-10-01 09:04:13 ----D---- C:\ProgramData\NokiaMusic

======List of files/folders modified in the last 1 months======

2009-10-27 09:51:08 ----D---- C:\Windows\Prefetch
2009-10-27 09:51:01 ----D---- C:\Windows\Temp
2009-10-27 08:50:32 ----D---- C:\Program Files\PowerISO
2009-10-27 08:50:25 ----D---- C:\Windows
2009-10-27 08:24:51 ----A---- C:\Windows\NeroDigital.ini
2009-10-27 07:33:17 ----A---- C:\Windows\MAILTRAN.INI
2009-10-27 07:33:16 ----D---- C:\Program Files\Mozilla Firefox
2009-10-27 02:06:33 ----D---- C:\Windows\System32
2009-10-27 01:48:15 ----D---- C:\Windows\inf
2009-10-27 01:48:15 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-10-26 22:45:24 ----D---- C:\Users\jaris\AppData\Roaming\Skype
2009-10-25 23:36:52 ----D---- C:\Users\jaris\AppData\Roaming\uTorrent
2009-10-25 12:13:47 ----A---- C:\Windows\TRNCOM.INI
2009-10-22 16:49:15 ----HD---- C:\ProgramData
2009-10-22 16:16:19 ----D---- C:\Program Files\trend micro
2009-10-22 16:09:19 ----D---- C:\Users\jaris\AppData\Roaming\Apple Computer
2009-10-22 16:02:02 ----D---- C:\Windows\rescache
2009-10-22 15:44:47 ----D---- C:\Windows\system32\cs-CZ
2009-10-22 15:42:10 ----D---- C:\Windows\winsxs
2009-10-22 02:54:05 ----SHD---- C:\System Volume Information
2009-10-21 06:43:47 ----D---- C:\Windows\system32\catroot
2009-10-21 06:42:26 ----SHD---- C:\Windows\Installer
2009-10-21 06:42:03 ----D---- C:\Program Files\Java
2009-10-20 12:53:47 ----D---- C:\Program Files\Common Files
2009-10-20 12:53:28 ----RD---- C:\Program Files
2009-10-20 09:23:25 ----D---- C:\Users\jaris\AppData\Roaming\Vso
2009-10-20 09:15:23 ----D---- C:\Windows\Tasks
2009-10-20 09:14:33 ----D---- C:\Windows\system32\Tasks
2009-10-19 11:23:28 ----RD---- C:\Users
2009-10-19 07:32:45 ----RSD---- C:\Windows\assembly
2009-10-19 07:32:42 ----D---- C:\Program Files\Nokia
2009-10-19 07:32:42 ----D---- C:\Program Files\Common Files\Nokia
2009-10-19 07:13:17 ----SD---- C:\Windows\Downloaded Program Files
2009-10-18 11:58:19 ----D---- C:\Windows\system
2009-10-18 11:58:18 ----D---- C:\Windows\system32\drivers
2009-10-18 11:38:00 ----RD---- C:\Program Files\Skype
2009-10-18 10:00:37 ----D---- C:\Windows\Minidump
2009-10-18 00:14:09 ----D---- C:\ProgramData\Spybot - Search & Destroy
2009-10-18 00:05:51 ----D---- C:\Program Files\Spybot - Search & Destroy
2009-10-17 23:00:58 ----D---- C:\Program Files\Caricature Software
2009-10-17 15:42:17 ----D---- C:\Program Files\VSO
2009-10-17 13:20:59 ----SD---- C:\Users\jaris\AppData\Roaming\Microsoft
2009-10-17 08:38:02 ----D---- C:\ProgramData\Apple Computer
2009-10-17 08:38:02 ----D---- C:\Program Files\Common Files\Apple
2009-10-17 08:37:08 ----DC---- C:\Windows\system32\DRVSTORE
2009-10-16 07:15:03 ----D---- C:\Windows\Microsoft.NET
2009-10-16 07:13:17 ----D---- C:\Windows\system32\catroot2
2009-10-16 00:12:34 ----D---- C:\Program Files\Windows Mail
2009-10-16 00:12:33 ----D---- C:\Windows\ehome
2009-10-16 00:12:30 ----D---- C:\Windows\system32\migration
2009-10-16 00:12:26 ----D---- C:\Program Files\Internet Explorer
2009-10-15 09:56:37 ----HD---- C:\Program Files\InstallShield Installation Information
2009-10-14 12:29:36 ----D---- C:\Users\jaris\AppData\Roaming\dvdcss
2009-10-14 08:39:50 ----D---- C:\ProgramData\Microsoft Help
2009-10-09 13:46:51 ----D---- C:\Windows\Logs
2009-10-09 13:28:04 ----D---- C:\Temp
2009-10-09 13:09:02 ----D---- C:\Program Files\ArcSoft
2009-10-08 10:50:02 ----RSD---- C:\Windows\Fonts
2009-10-07 15:02:44 ----D---- C:\SOWTWARE
2009-10-05 14:49:25 ----D---- C:\Program Files\ESET
2009-10-04 21:35:36 ----D---- C:\Program Files\Pinnacle
2009-10-04 19:54:25 ----A---- C:\Windows\Graffiti5.2Pin.ini
2009-10-04 19:49:00 ----D---- C:\Program Files\Boris FX, Inc
2009-10-04 13:49:19 ----D---- C:\Program Files\Deskshare
2009-10-04 13:49:06 ----AD---- C:\ProgramData\TEMP
2009-10-04 12:28:53 ----D---- C:\Program Files\DScaler
2009-10-02 19:01:57 ----A---- C:\Windows\system32\mrt.exe
2009-10-02 15:00:33 ----D---- C:\Program Files\Zoner
2009-10-02 14:59:17 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-10-01 12:16:33 ----D---- C:\Program Files\The KMPlayer
2009-10-01 09:56:38 ----D---- C:\Users\jaris\AppData\Roaming\Nokia
2009-10-01 09:04:36 ----D---- C:\Windows\Globalization

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R1 epfwtdi;epfwtdi; C:\Windows\system32\DRIVERS\epfwtdi.sys [2009-02-06 56280]
R1 InCDPass;InCDPass; C:\Windows\system32\drivers\InCDPass.sys [2006-07-25 31488]
R1 incdrm;InCD Reader; C:\Windows\system32\drivers\InCDRm.sys [2006-07-25 33792]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-02-06 113448]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-02-06 130952]
R3 Afc;PPdus ASPI Shell; C:\Windows\system32\drivers\Afc.sys [2006-11-10 18688]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-02-06 33096]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
R3 MarvinBus;Pinnacle Marvin Bus; C:\Windows\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2009-09-10 19160]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-03-27 7738816]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-04-15 47360]
R3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544]
R3 RTSTOR;Realtek USB 2.0 Card Reader; C:\Windows\system32\drivers\RTSTOR.SYS [2009-04-08 64000]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]
R3 VX3000;VX-3000; C:\Windows\system32\DRIVERS\VX3000.sys [2009-07-24 1961328]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
R4 InCDfs;InCD File System; C:\Windows\system32\drivers\InCDFs.sys [2006-07-25 102912]
S3 3xHybrid;Pinnacle PCTV 100i-110i-300i-310i-MCE; C:\Windows\system32\DRIVERS\3xHybrid.sys [2006-11-22 1121536]
S3 Dot4;Ovladač MS IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 FlyPCI;FlyPCI; \??\C:\Windows\system32\drivers\FlyPCI.sys [2003-10-10 4134]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2009-03-19 136704]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsuc.sys [2009-03-19 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PSI;PSI; C:\Windows\system32\DRIVERS\psi_mf.sys [2009-06-17 12648]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2009-09-28 109056]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-02-06 727720]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2009-09-10 269648]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2009-07-24 139120]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-03-27 207392]
R2 ProtexisLicensing;ProtexisLicensing; C:\Windows\system32\PSIService.exe [2006-11-02 174656]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 gupdate1c9e9c6e1469ee0;Google Update Service (gupdate1c9e9c6e1469ee0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-06-10 133104]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-02-06 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-05-26 651720]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-11-20 136120]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-10-09 724992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
S4 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe [2006-07-25 849408]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-06-02 637952]

-----------------EOF-----------------

[memphisto]

Jaro3 chtěl log z Mbam a výsledek na odkaz z VirusTotal, tak je sem prosím vlož. Logy programu Mbam najdeš v záložce Protokoly

[jarda.otta]

dám ho sem. A mám dát úplný scan nebo stačí rychlý scan. Jsou tam jen tyto 2 volby. A za druhé z virustotal jste chtěl odkaz nebo výsledek testovaného souboru? a kde najdu záložku protokoly? děkuji

[guest]

Samozřejmě úplný sken a nezapomeň nejprve Mbam aktualizovat. log by se ti měl vygenerovat automaticky. Pokud ne, tak ho najdeš v záložce Záznamy - někde Protokoly.

[jarda.otta]

zde je log.Jinak jsem měřil rychlost a je 1mbyt místo 30. Eset smart security nic nenašel,MWAV a ani MBAV. TAK NEVÍM
Malwarebytes' Anti-Malware 1.41
Verze databáze: 3038
Windows 6.0.6002 Service Pack 2

27.10.2009 14:08:43
mbam-log-2009-10-27 (14-08-43).txt

Typ kontroly: Kompletní kontrola (C:\|)
Zkontrolované objekty: 328625
Uplynulý čas: 1 hour(s), 22 minute(s), 30 second(s)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované hodnoty registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
(Nebyly nalezeny žádné škodlivé položky)

[jaro3]

Myslel jsem ten log s tou nákazou...

Stáhni si program OTM (by OldTimer)
http://www.edisk.cz/stahni/07995/OTMove ... .39KB.html
a ulož si ho na disk C a spusť ho.
- Do levého sloupce (Paste Instructions for Items to be Moved) zkopíruj tyto cesty:
Poznámka: Nepoužij k označení funkci VYBRAT VŠE

Kód: Vybrat vše

:Processes
explorer.exe

:Services

:Reg

:Files
C:\Windows\VDLL.DLL
C:\Windows\system32\runouce.exe
C:\Windows\logo1_.exe
C:\Windows\logo_1.exe
C:\Windows\system32\eEmpty.exe
C:\Users\jaris\AppData\Roaming\inst.exe

:Commands
[purity]
[emptytemp]
[start explorer]
[Reboot]

- Po zkopírování klikni na tlačítko MoveIt! a vlož sem následně celý obsah z pravého sloupce, jinak uložený ve složce C:\_OTMoveIt\MovedFiles\, který bude informovat o výsledcích
- Je možné, že pokud nebudou moci být soubory odstraněny, budeš dotázán na restart počítače, v tom případě restart potvrď.

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.

//Ten log najdi tady:
C:\Documents and Settings\jméno\Data aplikací\Malwarebytes\Malwarebytes' Anti-Malware\Logs
u visty to bude trochu jinde...
a celou cestu k tomu souboru.

[jarda.otta]

asi jsem provedl něco špatného. jak už jsem nervozní,dělám chyby. omlouvám se. Nevšiml jsem si že ty cesty co jste mě poslal mají po pravé straně ještě roletové menu a zkopíroval jsem jen tuto část a teď nevím co s tím.A ještě jsem ho spouště z disku D
rocesses
explorer.exe

:Services

:Reg

:Files
C:\Windows\VDLL.DLL
C:\Windows\system32\runouce.exe
C:\Windows\logo1_.exe
C:\Windows\logo_1.exe
C:\Windows\system32\eEmpty.exe

v pravém sloupci bylo vše potvrzeno jako smazání ale zmizel mě průzkumník a všechny ikony s plochy a tak jsem ho musel spustit ve správci úloh.teď už mě nejde ten program spustit vůbec.jinak nelze najít na disku C:\_OTMoveIt\MovedFiles\,
Tak jsem ho teď přesunul na disk c a pokusím se to zopakovat
jinak to napsalo po té špatné polovině toto:
Files moved on Reboot...
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_17_1_21254319524.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_17_2_11254317614.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_101252299636.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_111251798274.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_121256587227.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_131256529648.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_141255871166.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_161255875401.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_181256608828.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_201256443684.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_211256047580.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_221253314821.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_231256533243.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_41256474968.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_71256486318.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_81255834421.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_91256598113.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_131255464259.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_141256630478.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_151256580891.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_161256495477.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_171256228477.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_181255914029.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_201255816817.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_211256414414.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_221256633414.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_231255334409.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_241256616032.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_251256485679.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_261255644011.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_271256583622.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_281256302333.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_291256454124.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_301256619633.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_311256457725.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_331255978809.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_341256605223.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_351256481572.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_361255641397.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_381256590193.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_391255636809.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_401256483356.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_411256637564.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_41256635937.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_421256475704.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_431256536850.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_441256642670.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_461256612430.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_471256594423.dat scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Files moved on Reboot...
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_17_1_21254319524.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_17_2_11254317614.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_101252299636.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_111251798274.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_121256587227.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_131256529648.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_141255871166.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_161255875401.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_181256608828.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_201256443684.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_211256047580.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_221253314821.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_231256533243.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_41256474968.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_71256486318.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_81255834421.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_1_91256598113.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_131255464259.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_141256630478.dat scheduled to be moved on reboot.
File move failed. C:\Users\jaris\AppData\Local\Temp\cteng_1_2_151256580891.dat scheduled to be


no a na druhý pokus mě to napsalo toto a chtělo reboot. Tak ho dám a vyčistím s tím druhým programem ATF Cleanerem.Sorry za mojí zbrklost

[jaro3]

Nic se neděje ten script můžeš zopakovat znovu.

[jarda.otta]

tak jsem ten script udělal znovu a zde je výsledek. a jak dál?
========== PROCESSES ==========
Process explorer.exe killed successfully.
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
File/Folder C:\Windows\VDLL.DLL not found.
File/Folder C:\Windows\system32\runouce.exe not found.
File/Folder C:\Windows\logo1_.exe not found.
File/Folder C:\Windows\logo_1.exe not found.
File/Folder C:\Windows\system32\eEmpty.exe not found.
File/Folder C:\Users\jaris\AppData\Roaming\inst.exe not found.
========== COMMANDS ==========
User's Temp folder emptied.
User's Internet Explorer cache folder emptied.
Windows Temp folder emptied.
File delete failed. C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\Cache\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\Cache\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\Cache\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\Cache\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\urlclassifier3.sqlite scheduled to be deleted on reboot.
FireFox cache emptied.
Opera cache emptied.
Temp folders emptied.
Explorer started successfully

OTM by OldTimer - Version 2.1.0.1 log created on 10272009_153409

Files moved on Reboot...
C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\Cache\_CACHE_001_ moved successfully.
C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\Cache\_CACHE_002_ moved successfully.
C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\Cache\_CACHE_003_ moved successfully.
C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\Cache\_CACHE_MAP_ moved successfully.
C:\Users\jaris\AppData\Local\Mozilla\Firefox\Profiles\3un2dknd.default\urlclassifier3.sqlite moved successfully.

Registry entries deleted on Reboot...

[jaro3]

Vypni si trvale rez. ochranu u Spybota.

Vypni rez. ochrany+firewall u ESET Smart Security a deaktivuj Spybot.

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

Vlož sem ten log z Malwarebytes' Anti-Malware, ten s tou nákazou (Adresy.exe), dej znovu na VT a vlož sem odkaz na výsledky všech antivirů.

Log najdeš zde:
C:\Users \jméno\AppData\Malwarebytes\Malwarebytes' Anti-Malware\Logs