Prosím o kontrolu zasekává se net Vyřešeno

[gena17]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:45:54, on 1.1.2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18999)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program files\P4G\BatteryLife.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\ASScrPro.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVG\AVG10\avgtray.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\TATA pc\Downloads\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.15.10\bh\BabylonToolbar.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll
O2 - BHO: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.15.10\BabylonToolbarTlbr.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll (file missing)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [P2Go_Menu] "C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [ADSMTray] C:\Program Files\ASUS\ASUS Data Security Manager\ADSMTray.exe
O4 - HKLM\..\Run: [ATKOSD2] "C:\Program Files\ATKOSD2\ATKOSD2.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AVG_TRAY] C:\Program Files\AVG\AVG10\avgtray.exe
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: FancyStart daemon.lnk = ?
O8 - Extra context menu item: &Winamp Search - C:\ProgramData\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O9 - Extra 'Tools' menuitem: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll
O13 - Gopher Prefix:
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ADSM Service (ADSMService) - ASUSTek Computer Inc. - C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG10\avgwdsvc.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: SmileyCentral Service (SmileyCentral_1vService) - SmileyCentral - C:\PROGRA~1\SMILEY~2\bar\1.bin\1vbarsvc.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe

--
End of file - 10129 bytes

[Reklama]

[memphisto]

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

Vypni si rez.ochrany i firewall.
Stáhni si Dr. Web CureIt
dej update , po aktualizaci dej start.
Tlacitky dole muzeš soubor léčit(systémové soubory), smazat, přesunout nebo přejmenovat


Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Update Malwarebytes' Anti-Malware (Aktualizace Malwarebytes' Anti-Malware) a Launch Malwarebytes' Anti-Malware (Spustit aplikaci Malwarebytes' Anti-Malware), pokud jo tak klikni na tlačítko Finish
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Perform Quick Scan (Provést rychlý sken) a klikni na tlačítko Scan (Skenovat)
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- pak zvol možnost Save Logfile a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

[gena17]

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5438

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

2.1.2011 1:33:38
mbam-log-2011-01-02 (01-33-33).txt

Typ kontroly: Úplný test (C:\|D:\|)
Testované objekty: 275458
Uplynulý čas: 1 hodin, 6 minut, 57 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 5

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Users\Laurynka\AppData\Local\Google\Chrome\user data\Default\Cache\f_00016b (Backdoor.Bot) -> No action taken.
d:\všechno\fleška\moja fleška\moje flash1\kody nero8\nero8keygen.exe (Trojan.Downloader) -> No action taken.
d:\všechno\fleška\moja fleška\moje flash1\kody nero8\nero8x.exe (RiskWare.Tool.CK) -> No action taken.
d:\všechno\fleška\programky\Nero\kody nero8\nero8keygen.exe (Trojan.Downloader) -> No action taken.
d:\všechno\fleška\programky\Nero\kody nero8\nero8x.exe (RiskWare.Tool.CK) -> No action taken.

[memphisto]

- Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Vypni rezidentní štít antiviru a antispywaru
Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[gena17]

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5438

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18999

3.1.2011 21:13:21
mbam-log-2011-01-03 (21-13-21).txt

Typ kontroly: Rychlý test
Testované objekty: 174148
Uplynulý čas: 11 minut, 9 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[gena17]

ComboFix 11-01-03.01 - TATA pc 03.01.2011 21:26:50.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3062.1907 [GMT 1:00]
Spuštěný z: c:\users\TATA pc\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-12-03 do 2011-01-03 )))))))))))))))))))))))))))))))
.

2011-01-03 20:46 . 2011-01-03 20:51 -------- d-----w- c:\users\TATA pc\AppData\Local\temp
2011-01-03 20:46 . 2011-01-03 20:46 -------- d-----w- c:\users\Laurynka\AppData\Local\temp
2011-01-03 20:46 . 2011-01-03 20:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-03 20:46 . 2011-01-03 20:46 -------- d-----w- c:\users\Dylinka\AppData\Local\temp
2011-01-02 17:35 . 2011-01-02 17:35 -------- d-----w- c:\program files\Machinarium
2011-01-02 12:08 . 2011-01-02 12:08 -------- d-----w- c:\users\Laurynka\AppData\Local\AVG Security Toolbar
2011-01-02 11:33 . 2011-01-02 11:33 -------- d-----w- c:\users\Dylinka\AppData\Local\AVG Security Toolbar
2011-01-01 21:58 . 2011-01-01 21:58 -------- d-----w- c:\users\TATA pc\DoctorWeb
2011-01-01 21:44 . 2011-01-01 21:44 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Malwarebytes
2011-01-01 21:44 . 2011-01-01 21:44 -------- d-----w- c:\progra~2\Malwarebytes
2011-01-01 21:44 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-01 21:44 . 2011-01-02 00:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-01 21:44 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-01 14:44 . 2011-01-01 14:44 -------- d-----w- c:\users\TATA pc\AppData\Local\Winamp Toolbar
2011-01-01 10:54 . 2011-01-01 10:54 -------- d-----w- c:\users\Laurynka\AppData\Local\Microsoft Games
2010-12-31 21:47 . 2010-12-31 22:02 -------- d-----w- c:\users\Dylinka\AppData\Roaming\Winamp
2010-12-31 21:09 . 2010-12-31 21:29 -------- d-----w- c:\program files\Online TV Player 4
2010-12-31 11:43 . 2010-12-14 13:39 21312 ----a-w- c:\windows\system32\authuitu.dll
2010-12-31 11:43 . 2010-12-14 13:39 29504 ----a-w- c:\windows\system32\uxtuneup.dll
2010-12-30 13:44 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-12-30 13:44 . 2006-09-28 15:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2010-12-30 13:43 . 2010-12-31 21:51 -------- d-----w- c:\program files\Winamp Detect
2010-12-30 13:43 . 2011-01-01 18:43 -------- d-----w- c:\program files\Winamp Toolbar
2010-12-30 13:43 . 2010-12-30 13:43 -------- d-----w- c:\progra~2\Winamp Toolbar
2010-12-30 13:42 . 2010-12-30 13:42 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-12-30 13:42 . 2011-01-01 15:03 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Winamp
2010-12-30 13:42 . 2010-12-31 21:52 -------- d-----w- c:\program files\Winamp
2010-12-30 09:56 . 2010-12-30 09:57 -------- d-----w- c:\users\Dylinka\AppData\Local\Google
2010-12-28 08:28 . 2010-12-28 08:28 -------- d-----w- C:\IJJI
2010-12-28 08:06 . 2010-12-28 09:11 -------- d-----w- c:\users\TATA pc\AppData\Roaming\ijjigame
2010-12-25 13:40 . 2010-12-25 15:51 -------- d-----w- c:\users\Dylinka\AppData\Roaming\Babylon
2010-12-25 10:04 . 2010-12-25 10:32 -------- d-----w- c:\users\Laurynka\AppData\Roaming\Babylon
2010-12-25 07:19 . 2010-08-08 11:46 142336 ----a-w- c:\program files\Mozilla Firefox\BabyFox.dll
2010-12-25 07:19 . 2010-12-25 07:19 -------- d-----w- c:\program files\Babylon
2010-12-25 07:19 . 2010-12-28 07:39 -------- d-----w- c:\progra~2\Babylon
2010-12-25 07:19 . 2010-12-26 09:33 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Babylon
2010-12-25 07:18 . 2010-12-25 07:19 -------- d-----w- c:\program files\VideoConverter
2010-12-25 07:10 . 2010-12-25 07:10 -------- d-----w- C:\$AVG
2010-12-25 07:08 . 2010-12-25 07:08 -------- d-----w- c:\program files\QuickTime
2010-12-25 07:08 . 2010-12-25 07:08 -------- d-----w- c:\program files\Xilisoft
2010-12-20 12:58 . 2010-07-28 17:14 22016 ----a-w- c:\program files\Mozilla Firefox\plugins\npijjiFFPlugin1.dll
2010-12-20 12:58 . 2010-12-20 12:58 -------- d-----w- c:\progra~2\ijjigame
2010-12-20 09:34 . 2010-12-28 09:17 -------- d-----w- c:\program files\REACTOR
2010-12-19 17:06 . 2010-12-19 17:06 -------- d-----w- c:\progra~2\Nokia
2010-12-19 16:57 . 2009-07-14 17:45 132224 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2010-12-19 16:57 . 2009-07-14 17:48 64512 ----a-w- c:\windows\system32\WUDFSvc.dll
2010-12-19 16:57 . 2009-07-14 17:48 39936 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2010-12-19 16:57 . 2009-07-14 17:48 162304 ----a-w- c:\windows\system32\WUDFPlatform.dll
2010-12-19 16:57 . 2009-07-14 17:45 92672 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2010-12-19 16:57 . 2009-07-14 17:45 195584 ----a-w- c:\windows\system32\WUDFHost.exe
2010-12-19 16:57 . 2009-07-14 17:48 567808 ----a-w- c:\windows\system32\WUDFx.dll
2010-12-19 16:52 . 2009-07-14 17:45 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2010-12-19 16:52 . 2009-07-14 17:45 38480 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2010-12-19 15:55 . 2010-12-19 15:55 -------- d-----w- c:\program files\MIKSOFT
2010-12-19 15:47 . 2010-12-19 15:47 -------- d-----w- c:\progra~2\ReviverSoft
2010-12-19 15:47 . 2010-12-23 08:52 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Broad Intelligence
2010-12-19 15:47 . 2010-12-19 15:48 -------- d-----w- c:\users\TATA pc\AppData\Local\OpenCandy
2010-12-19 15:47 . 2010-12-19 15:47 -------- d-----w- c:\users\TATA pc\AppData\Roaming\OpenCandy
2010-12-19 15:47 . 2010-12-23 08:52 -------- d-----w- c:\program files\MediaCoder
2010-12-19 14:35 . 2010-12-25 18:20 -------- d-----w- c:\users\TATA pc\AppData\Roaming\CENZURA HD
2010-12-19 14:30 . 2010-12-19 14:30 -------- d-----w- c:\program files\FDRLab
2010-12-19 06:48 . 2010-12-19 06:49 -------- d-----w- c:\users\Laurynka\AppData\Local\Google
2010-12-19 06:44 . 2010-12-19 06:44 -------- d-----w- c:\users\Laurynka\AppData\Roaming\PC Suite
2010-12-18 21:24 . 2010-12-18 21:24 -------- d-----w- c:\program files\MSXML 4.0
2010-12-18 20:22 . 2010-12-18 20:22 -------- d-----w- c:\users\Dylinka\AppData\Roaming\PC Suite
2010-12-18 18:28 . 2010-12-18 18:28 -------- d-----w- c:\users\Public\CyberLink
2010-12-18 18:28 . 2010-12-18 18:28 -------- d-----w- c:\users\TATA pc\AppData\Roaming\CyberLink
2010-12-18 18:24 . 2010-12-18 18:24 -------- d-----w- c:\program files\Common Files\CyberLink
2010-12-18 18:22 . 2010-12-18 18:21 29480 ----a-w- c:\windows\system32\msxml3a.dll
2010-12-17 22:48 . 2010-12-19 17:18 -------- d-----w- c:\users\TATA pc\AppData\Local\Nokia
2010-12-17 22:39 . 2008-08-26 09:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-12-17 22:39 . 2010-12-17 22:39 -------- d-----w- c:\program files\PC Connectivity Solution
2010-12-17 22:32 . 2010-12-19 16:57 -------- d-----w- c:\users\TATA pc\AppData\Roaming\PC Suite
2010-12-17 22:32 . 2010-12-19 16:57 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Nokia
2010-12-17 22:32 . 2010-12-19 16:56 -------- d-----w- c:\progra~2\PC Suite
2010-12-17 22:30 . 2010-12-17 22:30 -------- d-----w- c:\program files\Common Files\PCSuite
2010-12-17 22:30 . 2010-12-17 22:41 -------- d-----w- c:\program files\Common Files\Nokia
2010-12-17 22:29 . 2010-12-17 22:32 -------- d-----w- c:\program files\DIFX
2010-12-17 22:28 . 2010-12-17 22:39 -------- dc----w- c:\windows\system32\DRVSTORE
2010-12-17 22:24 . 2010-02-26 13:32 92672 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-12-17 22:24 . 2010-12-17 22:40 -------- d-----w- c:\program files\Nokia
2010-12-17 22:22 . 2010-12-17 22:22 -------- d-----w- c:\progra~2\Installations
2010-12-15 12:21 . 2010-10-12 15:53 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll
2010-12-15 12:21 . 2010-10-12 13:41 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe
2010-12-15 12:21 . 2010-10-12 13:41 515584 ----a-w- c:\program files\Windows Mail\wab.exe
2010-12-15 12:21 . 2010-10-18 13:31 2038272 ----a-w- c:\windows\system32\win32k.sys
2010-12-13 22:55 . 2009-08-11 16:44 1401856 ----a-w- c:\windows\system32\msxml6.dll
2010-12-11 22:00 . 2010-12-11 22:00 -------- d-----w- c:\users\Dylinka\AppData\Roaming\TuneUp Software
2010-12-11 17:52 . 2010-12-11 17:52 515848 ----a-w- c:\progra~2\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2010-12-11 17:34 . 2010-12-11 17:35 -------- d-----w- c:\program files\The KMPlayer
2010-12-11 09:39 . 2010-12-27 14:52 -------- d-----w- c:\users\TATA pc\AppData\Local\Microsoft Games
2010-12-11 06:37 . 2010-12-11 06:37 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-12-11 06:36 . 2010-12-11 06:37 -------- d-----w- c:\progra~2\McAfee Security Scan
2010-12-11 06:36 . 2010-12-11 06:36 -------- d-----w- c:\progra~2\McAfee
2010-12-11 06:36 . 2010-12-14 08:36 -------- d-----w- c:\program files\McAfee Security Scan
2010-12-09 10:47 . 2010-12-09 10:47 12800 ----a-w- c:\program files\Mozilla Firefox\plugins\npwachk.dll
2010-12-08 17:04 . 2010-12-10 19:20 -------- d-----w- c:\program files\Boiling Point - Cesta do pekel
2010-12-08 06:00 . 2010-12-08 06:00 -------- d-----w- c:\users\Laurynka\AppData\Roaming\TuneUp Software
2010-12-07 19:58 . 2010-12-14 13:43 31552 ----a-w- c:\windows\system32\TURegOpt.exe
2010-12-07 19:57 . 2010-12-07 19:57 -------- d-----w- c:\users\TATA pc\AppData\Roaming\TuneUp Software
2010-12-07 19:57 . 2011-01-03 19:50 -------- d-----w- c:\program files\TuneUp Utilities 2011
2010-12-07 19:57 . 2010-12-07 20:00 -------- d-----w- c:\progra~2\TuneUp Software
2010-12-07 19:57 . 2010-12-07 19:57 -------- d-sh--w- c:\progra~2\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2010-12-07 05:30 . 2010-12-07 05:30 -------- d-----w- c:\program files\Windows Portable Devices
2010-12-07 05:15 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2010-12-07 05:15 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2010-12-07 05:15 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2010-12-07 05:12 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2010-12-07 05:12 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2010-12-07 05:12 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2010-12-06 17:09 . 2010-12-06 17:10 -------- d-----w- c:\windows\system32\ca-ES
2010-12-06 17:09 . 2010-12-06 17:10 -------- d-----w- c:\windows\system32\eu-ES
2010-12-06 17:09 . 2010-12-06 17:10 -------- d-----w- c:\windows\system32\vi-VN
2010-12-06 05:36 . 2010-12-06 05:36 -------- d-----w- c:\users\Laurynka\AppData\Roaming\AVG10
2010-12-06 04:27 . 2010-10-19 04:27 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2010-12-06 04:27 . 2010-03-05 14:01 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-12-05 23:03 . 2010-12-05 23:03 -------- d-----w- c:\users\Dylinka\AppData\Roaming\AVG10
2010-12-05 15:30 . 2010-12-05 15:30 -------- d-----w- c:\users\TATA pc\AppData\Roaming\AVG10
2010-12-05 15:29 . 2010-12-05 15:29 -------- d--h--w- c:\progra~2\Common Files
2010-12-05 15:26 . 2011-01-03 19:55 -------- d-----w- c:\progra~2\AVG10
2010-12-05 15:23 . 2010-12-05 18:26 -------- d-----w- c:\program files\AVG
2010-12-05 15:04 . 2010-12-05 15:23 -------- d-----w- c:\progra~2\MFAData
2010-12-05 14:59 . 2010-12-30 09:20 -------- d-----w- c:\users\Dylinka\AppData\Roaming\skypePM
2010-12-05 14:40 . 2010-12-05 14:40 -------- d-----w- c:\windows\system32\EventProviders
2010-12-05 10:41 . 2010-12-05 10:41 -------- d-----w- c:\progra~2\Nexon

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-03 19:59 . 2009-08-05 01:08 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-12-18 18:21 . 2009-08-05 00:15 505128 ----a-w- c:\windows\system32\msvcp71.dll
2010-12-18 18:21 . 2009-08-05 00:15 353576 ----a-w- c:\windows\system32\msvcr71.dll
2010-11-16 11:01 . 2010-12-03 12:49 6273872 ----a-w- c:\progra~2\Microsoft\Windows Defender\Definition Updates\{E21EFADD-7F44-4630-9CFE-2B7BB35BDBF3}\mpengine.dll
2010-11-04 18:55 . 2010-12-15 12:20 601600 ----a-w- c:\windows\system32\schedsvc.dll
2010-10-19 09:41 . 2010-12-02 16:40 222080 ------w- c:\windows\system32\MpSigStub.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]
"P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-14 210216]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-01-12 98304]
"ADSMTray"="c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2008-04-01 266240]
"ATKOSD2"="c:\program files\ATKOSD2\ATKOSD2.exe" [2007-10-18 7737344]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-11-20 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-11-20 173592]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-12-23 6707744]
"ASUS Screen Saver Protector"="c:\windows\ASScrPro.exe" [2009-08-05 33136]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-05 1029416]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2008-12-23 1833504]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-11-20 150552]
"RemoteControl10"="c:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{DC905847-D537-427F-BF91-47CC7ACCDE58}\_DF3A81D17C478A2A6C60A5.exe [2009-8-5 12862]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\ASUS\ASUS Data Security Manager\ASPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\TATA pc\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"KPeerNexonEU"=c:\nexon\NEXON_EU_Downloader\nxEULauncher.exe
"WMPNSCFG"=c:\program files\Windows Media Player\WMPNSCFG.exe
"ehTray.exe"=c:\windows\ehome\ehTray.exe
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"NokiaOviSuite2"=c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"ASUS Camera ScreenSaver"=c:\windows\ASScrProlog.exe
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"BabylonToolbar"="c:\program files\BabylonToolbar\BabylonToolbar\1.4.15.10\BabylonToolbarsrv.exe" /md I
"Babylon Client"=c:\program files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
"BDRegion"=c:\program files\Cyberlink\Shared files\brs.exe
"WinampAgent"="c:\program files\Winamp\winampa.exe"
"NokiaMServer"=c:\program files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup

R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-01-15 227232]
S2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/12/18 19:24];c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-03-13 11:58 87536]
S2 SmileyCentral_1vService;SmileyCentral Service;c:\progra~1\SMILEY~2\bar\1.bin\1vbarsvc.exe [2010-12-03 28766]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2010-12-14 1517376]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2010-10-07 10064]


--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - MBAMSWISSARMY
*Deregistered* - MBAMSwissArmy

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2011-01-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1000Core.job
- c:\users\TATA pc\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-02 17:25]

2011-01-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1000UA.job
- c:\users\TATA pc\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-02 17:25]

2011-01-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1001Core.job
- c:\users\Laurynka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-19 06:48]

2011-01-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1001UA.job
- c:\users\Laurynka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-19 06:48]

2011-01-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1002Core.job
- c:\users\Dylinka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-30 09:56]

2011-01-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1002UA.job
- c:\users\Dylinka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-30 09:56]

2011-01-03 c:\windows\Tasks\User_Feed_Synchronization-{C724958F-20F6-41EB-A65E-FF8CA24C542C}.job
- c:\windows\system32\msfeedssync.exe [2010-12-15 04:25]

2011-01-03 c:\windows\Tasks\User_Feed_Synchronization-{D2F06C7F-1555-421A-89C5-13373A602E1D}.job
- c:\windows\system32\msfeedssync.exe [2010-12-15 04:25]

2011-01-03 c:\windows\Tasks\User_Feed_Synchronization-{E1DD6131-0081-4B04-83EE-68F748D5EA45}.job
- c:\windows\system32\msfeedssync.exe [2010-12-15 04:25]
.
.
------- Doplňkový sken -------
.
IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: Translate this web page with Babylon - c:\program files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
IE: Translate with Babylon - c:\program files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
FF - ProfilePath - c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/sli ... ie7&query=
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsear ... searchfor=
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Personas: personas@christopher.beard - %profile%\extensions\personas@christopher.beard
FF - Ext: Babylon: ffxtlbr@babylon.com - %profile%\extensions\ffxtlbr@babylon.com
FF - Ext: Winamp Toolbar: {0b38152b-1b20-484d-a11f-5e04a9b0661f} - %profile%\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
FF - Ext: SmileyCentral: 1vffxtbr@SmileyCentral_1v.com - c:\program files\SmileyCentral_1v\bar\1.bin
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: browser.sessionstore.resume_from_crash - false
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

URLSearchHooks-{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - (no file)
URLSearchHooks-{A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
URLSearchHooks-{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - (no file)
Toolbar-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-03 21:51
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...


C:\ADSM_PData_0150

sken byl úspešně dokončen
skryté soubory: 1

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(740)
c:\program files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll

- - - - - - - > 'Explorer.exe'(3876)
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
.
Celkový čas: 2011-01-03 21:53:42
ComboFix-quarantined-files.txt 2011-01-03 20:53

Před spuštěním: Volných bajtů: 170 070 872 064
Po spuštění: Volných bajtů: 171 445 243 904

- - End Of File - - DACFFC007EE513D5ACD8B9FDBEDE4325

[memphisto]

Otevři si Poznámkový blok (Start -> Spustit... a napiš do okna Notepad a dej Ok.
Zkopíruj do něj následující celý text označený zeleně:
Poznámka: Nepoužij k označení skriptu funkci VYBRAT VŠE

Kód: Vybrat vše

KillAll::
Folder::
c:\users\TATA pc\AppData\Local\Winamp Toolbar
c:\program files\Winamp Toolbar
c:\progra~2\Winamp Toolbar
c:\progra~2\McAfee Security Scan
c:\progra~2\McAfee
c:\program files\McAfee Security Scan
c:\progra~1\SMILEY~2

Driver::
SmileyCentral_1vService
McComponentHostService

DDS::
IE: &Winamp Search - c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html

Firefox::
FF - ProfilePath - c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\
FF - prefs.js: browser.search.defaulturl - hxxp://slirsredirect.search.aol.com/sli ... ie7&query=
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsear ... searchfor=
FF - Ext: Winamp Toolbar: {0b38152b-1b20-484d-a11f-5e04a9b0661f} - %profile%\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
FF - Ext: SmileyCentral: 1vffxtbr@SmileyCentral_1v.com - c:\program files\SmileyCentral_1v\bar\1.bin

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

RegNull::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]


Zvol možnost Soubor -> Uložit jako... a nastav tyto parametry:
Název souboru: zde napiš: CFScript.txt
Uložit jako typ: tak tam vyber Všechny soubory
Ulož soubor na plochu.
Ukonči všechna aktivní okna.

Uchop myší vytvořený skript CFScript.txt, přemísti ho nad stažený program ComboFix.exe a když se oba soubory překryjí, skript upusť.
- Automaticky se spustí ComboFix
- Vlož sem log, který vyběhne v závěru čistícího procesu

Toto otestuj na Virustotal
c:\windows\Installer\{DC905847-D537-427F-BF91-47CC7ACCDE58}\_DF3A81D17C478A2A6C60A5.exe

Klikni vpravo od okénka na Vybrat a v Exploreru najdi požadovaný soubor v Tvém PC. Označ ho myší a klikni na Otevřít , poté klikni na Send File. Pokud už byl soubor testován , objeví se okno ve kterém klikni na Reanalyze. Soubor se začne postupně testovat více antivirovými programy. Až skončí test posledního antiviru , objeví se nahoře result a červeně počet nákaz , např. 0/40 , nebo 1/40. Pak zkopíruj myší odkaz na tuto stránku a vlož ji do svého příspěvku.

[gena17]

děkuji zejtra to tu bude

[memphisto]

Bude to asi dlouhé, tak to klidně rozděl na více témat

[gena17]

http://www.virustotal.com/file-scan/report.html?id=03858c143e8796c8a10aaaa88244d00fb8d10e4b3591d08c97ba995404ba67f3-1294118048
šast 1

[jaro3]

ještě ten log po scriptu v Combofixu.

[gena17]

ComboFix 11-01-04.01 - TATA pc 04.01.2011 18:04:45.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3062.2065 [GMT 1:00]
Spuštěný z: c:\users\TATA pc\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\TATA pc\Desktop\CFScript.txt.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\progra~1\SMILEY~2
c:\progra~1\SMILEY~2\bar\1.bin\1vbar.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vbarsvc.exe
c:\progra~1\SMILEY~2\bar\1.bin\1vdatact.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vdyn.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vfeedmg.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vhighin.exe
c:\progra~1\SMILEY~2\bar\1.bin\1vhtml.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vhtmlmu.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vhttpct.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vidle.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vimpipe.exe
c:\progra~1\SMILEY~2\bar\1.bin\1vmedint.exe
c:\progra~1\SMILEY~2\bar\1.bin\1vmlbtn.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vmsg.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vPlugin.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vradio.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vregfft.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vscript.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vskin.dll
c:\progra~1\SMILEY~2\bar\1.bin\1vskplay.exe
c:\progra~1\SMILEY~2\bar\1.bin\CHROME.MANIFEST
c:\progra~1\SMILEY~2\bar\1.bin\chrome\1vffxtbr.jar
c:\progra~1\SMILEY~2\bar\1.bin\INSTALL.RDF
c:\progra~1\SMILEY~2\bar\1.bin\LOGO.BMP
c:\progra~1\SMILEY~2\bar\1.bin\NP1vStub.dll
c:\progra~1\SMILEY~2\bar\Message\COMMON.T8S
c:\progra~1\SMILEY~2\bar\Settings\s_pid.dat
c:\progra~2\McAfee Security Scan
c:\progra~2\McAfee Security Scan\ftstate.ini
c:\progra~2\McAfee
c:\progra~2\McAfee\MCLOGS\Common\McCHSvc\McCHSvc000.log
c:\progra~2\McAfee\MCLOGS\McUICnt\McUICnt\McUICnt000.log
c:\progra~2\McAfee\MCLOGS\PartnerCustom\McCHSvc\McCHSvc000.log
c:\progra~2\McAfee\MCLOGS\PartnerCustom\McUICnt\McUICnt000.log
c:\progra~2\McAfee\MCLOGS\PartnerCustom\SecurityScan_Release\SecurityScan_Release000.log
c:\progra~2\McAfee\MCLOGS\PartnerCustom\SSScheduler\SSScheduler000.log
c:\progra~2\McAfee\MCLOGS\SecurityScanner\McUICnt\McUICnt000.log
c:\progra~2\Winamp Toolbar
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\buttons\alerts\alert.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\buttons\alerts\alerts.css
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\buttons\alerts\alerts.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\buttons\alerts\alerts.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\buttons\alerts\alerts.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\buttons\defaultButtons.xml
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\buttons\searchedit.bmp
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\arrow_left.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\arrow_left_on.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\arrow_right.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\arrow_right_on.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_buy.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_buy_on.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_enqall_off.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_enqall_on.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_info.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_info_on.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_play.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_play_on.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_playall_off.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_playall_on.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_playlist.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\images\qap_playlist_on.jpg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\mediamonitor.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\mediamonitor\mediamonitor.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\rss\menu.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\rss\menu.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\rss\qap.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\rss\rss.css
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\rss\rss.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\rss\rss.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\rss\staf.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\rss\staf.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\about.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\addcustombutton.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\addcustombutton_confirm.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\addsearch.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\ani_media_icon.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\blocker.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_down_1.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_down_2.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_normal_1.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_normal_2.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_over_1.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\blue_input_over_2.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\branding.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_movedowndisabled.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_movedowndown.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_movedownover.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_movedownup.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_moveupdisabled.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_moveupdown.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_moveupover.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_moveupup.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_nextdown.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_nextover.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_nextup.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_prevdown.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_prevover.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\button_prevup.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\buttonManager.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\buttons.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\buttons_frame.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\clearprints.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\clearprints_confirm.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\content.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\content_header01.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\content_header02.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\custom_button.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\custombutton.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\customize_icon.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\defaultsearch.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\disabled_input_1.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\disabled_input_2.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\dot.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\dropcustombutton.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\firsttimepage.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\footprints.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\footprints_frame.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\general_icon.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_down_1.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_down_2.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_normal_1.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_normal_2.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_over_1.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\green_input_over_2.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\latest.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\metrics.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\olderversion.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\options_frame.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_bottom_left.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_bottom_right.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_bottom_tile.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_left_tile.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_right_tile.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_left.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_left_bot.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_left_large.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_right.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_right_bot.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_right_large.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\pan_top_tile.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\popup_icon.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\popups_frame.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\popups_icon.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\preferences.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\preferences.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\privacy_icon.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\renamecustombutton.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\resettoolbar.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\search.js
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\search_frame.htm
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\search_icon.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\SettingTabActive.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\SettingTabNormal.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\SettingTabOver.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\sidebar_bg.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\sidebar_bottom.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\sidebar_left.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\sidebar_top.gif
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\ui\stylesheet.css
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\winamptb.cfg
c:\progra~2\Winamp Toolbar\ieToolbar\resources\en-US\winamptbres.dll
c:\program files\McAfee Security Scan
c:\program files\McAfee Security Scan\2.0.181\AVScanComponent.dll
c:\program files\McAfee Security Scan\2.0.181\AVScanner.ini
c:\program files\McAfee Security Scan\2.0.181\avvclean.dat
c:\program files\McAfee Security Scan\2.0.181\avvnames.dat
c:\program files\McAfee Security Scan\2.0.181\avvscan.dat
c:\program files\McAfee Security Scan\2.0.181\config.dat
c:\program files\McAfee Security Scan\2.0.181\ftconfig.ini
c:\program files\McAfee Security Scan\2.0.181\McAfee.ico
c:\program files\McAfee Security Scan\2.0.181\mcbrwsr2.dll
c:\program files\McAfee Security Scan\2.0.181\MCCompHostConfig.ini
c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe
c:\program files\McAfee Security Scan\2.0.181\mcscan32.dll
c:\program files\McAfee Security Scan\2.0.181\mcuicnt.exe
c:\program files\McAfee Security Scan\2.0.181\McUpdater.dll
c:\program files\McAfee Security Scan\2.0.181\sa_cache_sqlite.dll
c:\program files\McAfee Security Scan\2.0.181\sa_http_win32.dll
c:\program files\McAfee Security Scan\2.0.181\sa_mbl.dll
c:\program files\McAfee Security Scan\2.0.181\sa_store_sqlite.dll
c:\program files\McAfee Security Scan\2.0.181\sacore.db
c:\program files\McAfee Security Scan\2.0.181\sacore.dll
c:\program files\McAfee Security Scan\2.0.181\sacoredata\uds_filetypes.txt
c:\program files\McAfee Security Scan\2.0.181\sacoredata\uds_hosting.txt
c:\program files\McAfee Security Scan\2.0.181\sacoredata\uds_tlds.txt
c:\program files\McAfee Security Scan\2.0.181\SecurityScanner.dll
c:\program files\McAfee Security Scan\2.0.181\SecurityScanner_LD.dll
c:\program files\McAfee Security Scan\2.0.181\sqlite3.dll
c:\program files\McAfee Security Scan\2.0.181\SSCustom_LD.dll
c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe
c:\program files\McAfee Security Scan\2.0.181\WebInfoScanner.dll
c:\program files\McAfee Security Scan\2.0.181\WMIScanner.dll
c:\program files\McAfee Security Scan\uninstall.exe
c:\program files\SmileyCentral_1v\bar\1.bin\1vbar.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vbarsvc.exe
c:\program files\SmileyCentral_1v\bar\1.bin\1vdatact.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vdyn.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vfeedmg.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vhighin.exe
c:\program files\SmileyCentral_1v\bar\1.bin\1vhtml.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vhtmlmu.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vhttpct.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vidle.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vimpipe.exe
c:\program files\SmileyCentral_1v\bar\1.bin\1vmedint.exe
c:\program files\SmileyCentral_1v\bar\1.bin\1vmlbtn.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vmsg.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vPlugin.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vradio.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vregfft.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vscript.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vskin.dll
c:\program files\SmileyCentral_1v\bar\1.bin\1vskplay.exe
c:\program files\SmileyCentral_1v\bar\1.bin\CHROME.MANIFEST
c:\program files\SmileyCentral_1v\bar\1.bin\chrome\1vffxtbr.jar
c:\program files\SmileyCentral_1v\bar\1.bin\INSTALL.RDF
c:\program files\SmileyCentral_1v\bar\1.bin\LOGO.BMP
c:\program files\SmileyCentral_1v\bar\1.bin\NP1vStub.dll
c:\program files\Winamp Toolbar
c:\program files\Winamp Toolbar\apopup.dll
c:\program files\Winamp Toolbar\install.log
c:\program files\Winamp Toolbar\msvcr71.dll
c:\program files\Winamp Toolbar\uninstall.exe
c:\program files\Winamp Toolbar\winampTbServer.exe
c:\program files\Winamp Toolbar\winamptbServerPS.dll
c:\program files\Winamp Toolbar\xprt5.dll
c:\programdata\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
c:\users\TATA pc\AppData\Local\Winamp Toolbar
c:\users\TATA pc\AppData\Local\Winamp Toolbar\ieToolbar\en-US\buttons.xml
c:\users\TATA pc\AppData\Local\Winamp Toolbar\ieToolbar\en-US\default_aol.xml
c:\users\TATA pc\AppData\Local\Winamp Toolbar\ieToolbar\en-US\domains.xml
c:\users\TATA pc\AppData\Local\Winamp Toolbar\ieToolbar\en-US\ietbconfig.xml
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\IWinampPlayer.xpt
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\IWinampUninstallObserver.xpt
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampTBPlayer.dll
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampUninstallObserver.js
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\chrome.manifest
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\chrome\winamptoolbar.jar
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\install.rdf
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\META-INF\MANIFEST.MF
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\META-INF\ZIGBERT.RSA
c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\META-INF\ZIGBERT.SF

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_McComponentHostService
-------\Service_SmileyCentral_1vService


((((((((((((((((((((((((( Soubory vytvořené od 2010-12-04 do 2011-01-04 )))))))))))))))))))))))))))))))
.

2011-01-04 17:11 . 2011-01-04 17:18 -------- d-----w- c:\users\TATA pc\AppData\Local\temp
2011-01-04 17:11 . 2011-01-04 17:11 -------- d-----w- c:\users\Laurynka\AppData\Local\temp
2011-01-04 17:11 . 2011-01-04 17:11 -------- d-----w- c:\users\Dylinka\AppData\Local\temp
2011-01-04 17:11 . 2011-01-04 17:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-01-04 08:17 . 2010-11-16 11:01 6273872 ----a-w- c:\progra~2\Microsoft\Windows Defender\Definition Updates\{7C6D859E-C7A1-450F-AEFF-A7E9681C054D}\mpengine.dll
2011-01-02 17:35 . 2011-01-02 17:35 -------- d-----w- c:\program files\Machinarium
2011-01-02 12:08 . 2011-01-02 12:08 -------- d-----w- c:\users\Laurynka\AppData\Local\AVG Security Toolbar
2011-01-02 11:33 . 2011-01-02 11:33 -------- d-----w- c:\users\Dylinka\AppData\Local\AVG Security Toolbar
2011-01-01 21:58 . 2011-01-01 21:58 -------- d-----w- c:\users\TATA pc\DoctorWeb
2011-01-01 21:44 . 2011-01-01 21:44 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Malwarebytes
2011-01-01 21:44 . 2011-01-01 21:44 -------- d-----w- c:\progra~2\Malwarebytes
2011-01-01 21:44 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-01 21:44 . 2011-01-02 00:33 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-01-01 21:44 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-01 10:54 . 2011-01-01 10:54 -------- d-----w- c:\users\Laurynka\AppData\Local\Microsoft Games
2010-12-31 21:47 . 2010-12-31 22:02 -------- d-----w- c:\users\Dylinka\AppData\Roaming\Winamp
2010-12-31 21:09 . 2010-12-31 21:29 -------- d-----w- c:\program files\Online TV Player 4
2010-12-31 11:43 . 2010-12-14 13:39 21312 ----a-w- c:\windows\system32\authuitu.dll
2010-12-31 11:43 . 2010-12-14 13:39 29504 ----a-w- c:\windows\system32\uxtuneup.dll
2010-12-30 13:44 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-12-30 13:44 . 2006-09-28 15:05 2414360 ----a-w- c:\windows\system32\d3dx9_31.dll
2010-12-30 13:43 . 2010-12-31 21:51 -------- d-----w- c:\program files\Winamp Detect
2010-12-30 13:42 . 2010-12-30 13:42 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-12-30 13:42 . 2011-01-01 15:03 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Winamp
2010-12-30 13:42 . 2010-12-31 21:52 -------- d-----w- c:\program files\Winamp
2010-12-30 09:56 . 2010-12-30 09:57 -------- d-----w- c:\users\Dylinka\AppData\Local\Google
2010-12-28 08:28 . 2010-12-28 08:28 -------- d-----w- C:\IJJI
2010-12-28 08:06 . 2010-12-28 09:11 -------- d-----w- c:\users\TATA pc\AppData\Roaming\ijjigame
2010-12-25 13:40 . 2010-12-25 15:51 -------- d-----w- c:\users\Dylinka\AppData\Roaming\Babylon
2010-12-25 10:04 . 2010-12-25 10:32 -------- d-----w- c:\users\Laurynka\AppData\Roaming\Babylon
2010-12-25 07:19 . 2010-08-08 11:46 142336 ----a-w- c:\program files\Mozilla Firefox\BabyFox.dll
2010-12-25 07:19 . 2010-12-25 07:19 -------- d-----w- c:\program files\Babylon
2010-12-25 07:19 . 2010-12-28 07:39 -------- d-----w- c:\progra~2\Babylon
2010-12-25 07:19 . 2010-12-26 09:33 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Babylon
2010-12-25 07:18 . 2010-12-25 07:19 -------- d-----w- c:\program files\VideoConverter
2010-12-25 07:10 . 2010-12-25 07:10 -------- d-----w- C:\$AVG
2010-12-25 07:08 . 2010-12-25 07:08 -------- d-----w- c:\program files\QuickTime
2010-12-25 07:08 . 2010-12-25 07:08 -------- d-----w- c:\program files\Xilisoft
2010-12-20 12:58 . 2010-07-28 17:14 22016 ----a-w- c:\program files\Mozilla Firefox\plugins\npijjiFFPlugin1.dll
2010-12-20 12:58 . 2010-12-20 12:58 -------- d-----w- c:\progra~2\ijjigame
2010-12-20 09:34 . 2010-12-28 09:17 -------- d-----w- c:\program files\REACTOR
2010-12-19 17:06 . 2010-12-19 17:06 -------- d-----w- c:\progra~2\Nokia
2010-12-19 16:57 . 2009-07-14 17:45 132224 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2010-12-19 16:57 . 2009-07-14 17:48 64512 ----a-w- c:\windows\system32\WUDFSvc.dll
2010-12-19 16:57 . 2009-07-14 17:48 39936 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2010-12-19 16:57 . 2009-07-14 17:48 162304 ----a-w- c:\windows\system32\WUDFPlatform.dll
2010-12-19 16:57 . 2009-07-14 17:45 92672 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2010-12-19 16:57 . 2009-07-14 17:45 195584 ----a-w- c:\windows\system32\WUDFHost.exe
2010-12-19 16:57 . 2009-07-14 17:48 567808 ----a-w- c:\windows\system32\WUDFx.dll
2010-12-19 16:52 . 2009-07-14 17:45 445008 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2010-12-19 16:52 . 2009-07-14 17:45 38480 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2010-12-19 15:55 . 2010-12-19 15:55 -------- d-----w- c:\program files\MIKSOFT
2010-12-19 15:47 . 2010-12-19 15:47 -------- d-----w- c:\progra~2\ReviverSoft
2010-12-19 15:47 . 2010-12-23 08:52 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Broad Intelligence
2010-12-19 15:47 . 2010-12-19 15:48 -------- d-----w- c:\users\TATA pc\AppData\Local\OpenCandy
2010-12-19 15:47 . 2010-12-19 15:47 -------- d-----w- c:\users\TATA pc\AppData\Roaming\OpenCandy
2010-12-19 15:47 . 2010-12-23 08:52 -------- d-----w- c:\program files\MediaCoder
2010-12-19 14:35 . 2010-12-25 18:20 -------- d-----w- c:\users\TATA pc\AppData\Roaming\CENZURA HD
2010-12-19 14:30 . 2010-12-19 14:30 -------- d-----w- c:\program files\FDRLab
2010-12-19 06:48 . 2010-12-19 06:49 -------- d-----w- c:\users\Laurynka\AppData\Local\Google
2010-12-19 06:44 . 2010-12-19 06:44 -------- d-----w- c:\users\Laurynka\AppData\Roaming\PC Suite
2010-12-18 21:24 . 2010-12-18 21:24 -------- d-----w- c:\program files\MSXML 4.0
2010-12-18 20:22 . 2010-12-18 20:22 -------- d-----w- c:\users\Dylinka\AppData\Roaming\PC Suite
2010-12-18 18:28 . 2010-12-18 18:28 -------- d-----w- c:\users\Public\CyberLink
2010-12-18 18:28 . 2010-12-18 18:28 -------- d-----w- c:\users\TATA pc\AppData\Roaming\CyberLink
2010-12-18 18:24 . 2010-12-18 18:24 -------- d-----w- c:\program files\Common Files\CyberLink
2010-12-18 18:22 . 2010-12-18 18:21 29480 ----a-w- c:\windows\system32\msxml3a.dll
2010-12-17 22:48 . 2010-12-19 17:18 -------- d-----w- c:\users\TATA pc\AppData\Local\Nokia
2010-12-17 22:39 . 2008-08-26 09:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-12-17 22:39 . 2010-12-17 22:39 -------- d-----w- c:\program files\PC Connectivity Solution
2010-12-17 22:32 . 2010-12-19 16:57 -------- d-----w- c:\users\TATA pc\AppData\Roaming\PC Suite
2010-12-17 22:32 . 2010-12-19 16:57 -------- d-----w- c:\users\TATA pc\AppData\Roaming\Nokia
2010-12-17 22:32 . 2010-12-19 16:56 -------- d-----w- c:\progra~2\PC Suite
2010-12-17 22:30 . 2010-12-17 22:30 -------- d-----w- c:\program files\Common Files\PCSuite
2010-12-17 22:30 . 2010-12-17 22:41 -------- d-----w- c:\program files\Common Files\Nokia
2010-12-17 22:29 . 2010-12-17 22:32 -------- d-----w- c:\program files\DIFX
2010-12-17 22:28 . 2010-12-17 22:39 -------- dc----w- c:\windows\system32\DRVSTORE
2010-12-17 22:24 . 2010-02-26 13:32 92672 ----a-w- c:\windows\system32\nmwcdcls.dll
2010-12-17 22:24 . 2010-12-17 22:40 -------- d-----w- c:\program files\Nokia
2010-12-17 22:22 . 2010-12-17 22:22 -------- d-----w- c:\progra~2\Installations
2010-12-15 12:21 . 2010-10-12 15:53 33280 ----a-w- c:\program files\Windows Mail\wabfind.dll
2010-12-15 12:21 . 2010-10-12 13:41 66048 ----a-w- c:\program files\Windows Mail\wabmig.exe
2010-12-15 12:21 . 2010-10-12 13:41 515584 ----a-w- c:\program files\Windows Mail\wab.exe
2010-12-15 12:21 . 2010-10-18 13:31 2038272 ----a-w- c:\windows\system32\win32k.sys
2010-12-13 22:55 . 2009-08-11 16:44 1401856 ----a-w- c:\windows\system32\msxml6.dll
2010-12-11 22:00 . 2010-12-11 22:00 -------- d-----w- c:\users\Dylinka\AppData\Roaming\TuneUp Software
2010-12-11 17:52 . 2010-12-11 17:52 515848 ----a-w- c:\progra~2\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2010-12-11 17:34 . 2010-12-11 17:35 -------- d-----w- c:\program files\The KMPlayer
2010-12-11 09:39 . 2010-12-27 14:52 -------- d-----w- c:\users\TATA pc\AppData\Local\Microsoft Games
2010-12-11 06:37 . 2010-12-11 06:37 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-12-09 10:47 . 2010-12-09 10:47 12800 ----a-w- c:\program files\Mozilla Firefox\plugins\npwachk.dll
2010-12-08 17:04 . 2010-12-10 19:20 -------- d-----w- c:\program files\Boiling Point - Cesta do pekel
2010-12-08 06:00 . 2010-12-08 06:00 -------- d-----w- c:\users\Laurynka\AppData\Roaming\TuneUp Software
2010-12-07 19:58 . 2010-12-14 13:43 31552 ----a-w- c:\windows\system32\TURegOpt.exe
2010-12-07 19:57 . 2010-12-07 19:57 -------- d-----w- c:\users\TATA pc\AppData\Roaming\TuneUp Software
2010-12-07 19:57 . 2011-01-03 19:50 -------- d-----w- c:\program files\TuneUp Utilities 2011
2010-12-07 19:57 . 2010-12-07 20:00 -------- d-----w- c:\progra~2\TuneUp Software
2010-12-07 19:57 . 2010-12-07 19:57 -------- d-sh--w- c:\progra~2\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2010-12-07 05:30 . 2010-12-07 05:30 -------- d-----w- c:\program files\Windows Portable Devices
2010-12-07 05:15 . 2009-09-10 02:00 1164800 ----a-w- c:\windows\system32\UIRibbonRes.dll
2010-12-07 05:15 . 2009-09-10 02:00 92672 ----a-w- c:\windows\system32\UIAnimation.dll
2010-12-07 05:15 . 2009-09-10 02:01 3023360 ----a-w- c:\windows\system32\UIRibbon.dll
2010-12-07 05:12 . 2009-10-08 21:08 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2010-12-07 05:12 . 2009-10-08 21:08 234496 ----a-w- c:\windows\system32\oleacc.dll
2010-12-07 05:12 . 2009-10-08 21:07 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2010-12-06 17:09 . 2010-12-06 17:10 -------- d-----w- c:\windows\system32\ca-ES
2010-12-06 17:09 . 2010-12-06 17:10 -------- d-----w- c:\windows\system32\eu-ES
2010-12-06 17:09 . 2010-12-06 17:10 -------- d-----w- c:\windows\system32\vi-VN
2010-12-06 05:36 . 2010-12-06 05:36 -------- d-----w- c:\users\Laurynka\AppData\Roaming\AVG10
2010-12-06 04:27 . 2010-10-19 04:27 7680 ----a-w- c:\program files\Internet Explorer\iecompat.dll
2010-12-06 04:27 . 2010-03-05 14:01 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-12-05 23:03 . 2010-12-05 23:03 -------- d-----w- c:\users\Dylinka\AppData\Roaming\AVG10

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-04 17:18 . 2009-08-05 01:08 45056 ----a-w- c:\windows\system32\acovcnt.exe
2010-12-18 18:21 . 2009-08-05 00:15 505128 ----a-w- c:\windows\system32\msvcp71.dll
2010-12-18 18:21 . 2009-08-05 00:15 353576 ----a-w- c:\windows\system32\msvcr71.dll
2010-12-05 07:35 . 2010-12-05 07:35 235 ----a-w- c:\windows\system32\nxEuUninstall.bat
2010-12-05 07:34 . 2010-12-05 07:34 446464 ----a-w- c:\windows\NEXON_EU_DownloaderUpdater.exe
2010-10-19 09:41 . 2010-12-02 16:40 222080 ------w- c:\windows\system32\MpSigStub.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ADSMOverlayIcon1]
@="{A8D448F4-0431-45AC-9F5E-E1B434AB2249}"
[HKEY_CLASSES_ROOT\CLSID\{A8D448F4-0431-45AC-9F5E-E1B434AB2249}]
2007-06-02 00:08 143360 ----a-w- c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"LightScribe Control Panel"="c:\program files\Common Files\LightScribe\LightScribeControlPanel.exe" [2008-06-09 2363392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CLMLServer"="c:\program files\CyberLink\Power2Go\CLMLSvc.exe" [2008-07-19 104936]
"P2Go_Menu"="c:\program files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" [2008-06-14 210216]
"HControlUser"="c:\program files\ASUS\ATK Hotkey\HControlUser.exe" [2008-01-12 98304]
"ADSMTray"="c:\program files\ASUS\ASUS Data Security Manager\ADSMTray.exe" [2008-04-01 266240]
"ATKOSD2"="c:\program files\ATKOSD2\ATKOSD2.exe" [2007-10-18 7737344]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-11-20 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-11-20 173592]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-12-23 6707744]
"ASUS Screen Saver Protector"="c:\windows\ASScrPro.exe" [2009-08-05 33136]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-05 1029416]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2008-12-23 1833504]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-11-20 150552]
"RemoteControl10"="c:\program files\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
FancyStart daemon.lnk - c:\windows\Installer\{DC905847-D537-427F-BF91-47CC7ACCDE58}\_DF3A81D17C478A2A6C60A5.exe [2009-8-5 12862]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli c:\program files\ASUS\ASUS Data Security Manager\ASPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Google Update"="c:\users\TATA pc\AppData\Local\Google\Update\GoogleUpdate.exe" /c
"KPeerNexonEU"=c:\nexon\NEXON_EU_Downloader\nxEULauncher.exe
"WMPNSCFG"=c:\program files\Windows Media Player\WMPNSCFG.exe
"ehTray.exe"=c:\windows\ehome\ehTray.exe
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"NokiaOviSuite2"=c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"ASUS Camera ScreenSaver"=c:\windows\ASScrProlog.exe
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"BabylonToolbar"="c:\program files\BabylonToolbar\BabylonToolbar\1.4.15.10\BabylonToolbarsrv.exe" /md I
"Babylon Client"=c:\program files\Babylon\Babylon-Pro\Babylon.exe -AutoStart
"BDRegion"=c:\program files\Cyberlink\Shared files\brs.exe
"WinampAgent"="c:\program files\Winamp\winampa.exe"
"NokiaMServer"=c:\program files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup

S2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2010/12/18 19:24];c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl [2010-03-13 11:58 87536]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2010-12-14 1517376]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2010-10-07 10064]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2008-06-09 17:14 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'

2011-01-03 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1000Core.job
- c:\users\TATA pc\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-02 17:25]

2011-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1000UA.job
- c:\users\TATA pc\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-02 17:25]

2011-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1001Core.job
- c:\users\Laurynka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-19 06:48]

2011-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1001UA.job
- c:\users\Laurynka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-19 06:48]

2011-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1002Core.job
- c:\users\Dylinka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-30 09:56]

2011-01-04 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3524426304-1737470713-3755686768-1002UA.job
- c:\users\Dylinka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-12-30 09:56]

2011-01-04 c:\windows\Tasks\User_Feed_Synchronization-{C724958F-20F6-41EB-A65E-FF8CA24C542C}.job
- c:\windows\system32\msfeedssync.exe [2010-12-15 04:25]

2011-01-04 c:\windows\Tasks\User_Feed_Synchronization-{D2F06C7F-1555-421A-89C5-13373A602E1D}.job
- c:\windows\system32\msfeedssync.exe [2010-12-15 04:25]

2011-01-04 c:\windows\Tasks\User_Feed_Synchronization-{E1DD6131-0081-4B04-83EE-68F748D5EA45}.job
- c:\windows\system32\msfeedssync.exe [2010-12-15 04:25]
.
.
------- Doplňkový sken -------
.
IE: Translate this web page with Babylon - c:\program files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
IE: Translate with Babylon - c:\program files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
FF - ProfilePath - c:\users\TATA pc\AppData\Roaming\Mozilla\Firefox\Profiles\eu5fjy5b.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: network.proxy.type - 0
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Personas: personas@christopher.beard - %profile%\extensions\personas@christopher.beard
FF - Ext: Babylon: ffxtlbr@babylon.com - %profile%\extensions\ffxtlbr@babylon.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: PC Sync 2 Synchronisation Extension: bkmrksync@nokia.com - c:\program files\Nokia\Nokia PC Suite 7\bkmrksync
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\program files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: browser.sessionstore.resume_from_crash - false
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-McAfee Security Scan - c:\program files\McAfee Security Scan\uninstall.exe
AddRemove-Winamp Toolbar - c:\program files\Winamp Toolbar\uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-04 18:18
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...


C:\ADSM_PData_0150

sken byl úspešně dokončen
skryté soubory: 1

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD10\NavFilter\000.fcl"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(680)
c:\program files\ASUS\ASUS Data Security Manager\ASPWDFLT.dll

- - - - - - - > 'Explorer.exe'(3000)
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt.dll
c:\program files\ASUS\ASUS Data Security Manager\OverlayIconShlExt1.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
c:\program files\ASUS\ATK Hotkey\ASLDRSrv.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\windows\system32\WLANExt.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
c:\program files\P4G\BatteryLife.exe
c:\windows\system32\conime.exe
c:\program files\ASUS\ATK Hotkey\MsgTranAgt.exe
c:\program files\ASUS\ATK Hotkey\HControl.exe
c:\program files\ASUS\Splendid\ACMON.exe
c:\program files\Wireless Console 2\wcourier.exe
c:\windows\System32\ACEngSvr.exe
c:\program files\ASUS\ATK Hotkey\ATKOSD.exe
c:\program files\ASUS\ATK Hotkey\KBFiltr.exe
c:\program files\ASUS\ATK Hotkey\WDC.exe
c:\windows\system32\igfxsrvc.exe
.
**************************************************************************
.
Celkový čas: 2011-01-04 18:21:22 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-01-04 17:21
ComboFix2.txt 2011-01-03 20:53

Před spuštěním: Volných bajtů: 171 274 854 400
Po spuštění: Volných bajtů: 170 961 584 128

- - End Of File - - A24B61EBEB2F67C081D4C13253E22572