Opera 9.23

No neviem co sa stalo, ale dost mi zacala padat Opera, ako mi vypise chybu kde mate moznost odeslat a neodesílat Preco mi to robi?

Žeby si sem vložil log z HijackThis?

Asi to bude treba...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:22:35, on 8. 9. 2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Eset\Eset Smart Security\ekrn.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Eset\Eset Smart Security\egui.exe
C:\Program Files\ICQLite\ICQLite.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Free Desktop Clock\DesktopClock.exe
D:\FRAPS\FRAPS.EXE
C:\Program Files\DAEMON Tools Pro\DTProAgent.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Opera\Opera.exe
d:\Install\Downloaded\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: 127.255.255.255 serial.alcohol-soft.com
O1 - Hosts: 127.255.255.255 www.alcohol-soft.com
O1 - Hosts: 127.255.255.255 images.alcohol-soft.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CHelper Class - {99A7C4DD-B2E6-4CA0-BB6E-737A61364155} - C:\Program Files\Eurotran2002i\e11.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\PROGRA~1\FlashGet\getflash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\Eset\Eset Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [ICQ Lite] "C:\Program Files\ICQLite\ICQLite.exe" -minimize
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SkinClock] C:\Program Files\Free Desktop Clock\DesktopClock.exe
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Fraps] D:\FRAPS\FRAPS.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\YzShadow\YzShadow.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Nástrojová lišta RoboFormu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Prispôsobiť menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Stiahnuť položku pomocou FlashGetu - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Stiahnuť všetky položky pomocou FlashGetu - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Uložiť formulár - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Vyplniť formulár - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Vyplniť formulár - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Vyplniť formulár - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Uložiť - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Uložiť formulár - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: Eurotran - {572BF76C-9EFF-4e1e-93DE-72EF1E91B3DF} - C:\Program Files\Eurotran2002i\e11.dll
O9 - Extra 'Tools' menuitem: Eurotran - {572BF76C-9EFF-4e1e-93DE-72EF1E91B3DF} - C:\Program Files\Eurotran2002i\e11.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: Nástrojová lišta RoboFormu - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 1576268578
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{293B9E49-A260-4BB6-9DEC-21D8C2CFE821}: NameServer = 217.119.113.244,217.119.113.245
O17 - HKLM\System\CCS\Services\Tcpip\..\{3BC07F4F-9297-489C-9168-D7DE5F5334AF}: NameServer = 217.119.113.244,217.119.113.245
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Eset HTTP server (EhttpSrv) - Unknown owner - C:\Program Files\Eset\Eset Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - Eset - C:\Program Files\Eset\Eset Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 13081 bytes

Toto fixni:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)


Čo si robil predtým, ako to začalo padať?

inac ta nova opera ze ma problemi tak nvm . ja mam staru

Väčšinou to padá keď veľa sťahujem

Stiahni MWAV --->
ftp://ftp.microworldsystems.com/download/tools/mwav.exe
ftp://update.mailscan.info/download/tools/mwav.exe
http://www.mwti.net/download/tools/mwav.exe


Vlož log z poľa "Informace o nalezených hrozbách" --->




Stiahni ComboFix –->
http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exe

Riaď sa inštrukciami na obrazovke, neklikaj, počítač môže byť reštartovaný. Vlož na fórum obsah súbora C:\ComboFix.txt


Zdroj obrázka: strongyweb.xf.cz

No teda, a ja som si myslel že PC mám čistý...

MWAV:

Objekt "flashget Unclassified" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "killav.nbd Browser Hijacker" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "killav.nbd Browser Hijacker" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "grokster Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "NULLBYTE Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "grokster Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "rohbot Worm" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "killav.nbd Browser Hijacker" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "Possible Fujacks-type Worm" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "DVDFab Platinum_is1". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "Flashpoint". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{27DC856A-0916-4988-8198-8714DDD3183D}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{71FB03C4-7900-4236-818D-A159EEDC88F0}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{7B63B2922B174135AFC0E1377DD81EC2}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{8ADFC4160D694100B5B8A22DE9DCABD9}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{90120000-0010-0405-0000-0000000FF1CE}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{A49F249F-0C91-497F-86DF-B2585E8E76B7}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{AF708E87-ACA2-42FC-AF41-B50226F4C787}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{B1899CD8-9584-4DC5-00AE-48F47CF81183}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{C920EFB6-59DB-472D-B445-21821477AD17}". Provedené akce: Nic nebylo provedeno.
Soubor C:\WINDOWS\system32\pskill.exe indentifikován jako "not-a-virus:RiskTool.Win32.PsKill.e". Provedené akce: Nic nebylo provedeno.


ComboFix bude za chvíľku...

ComboFix.txt =>

ComboFix 07-09-08.8 - "Janko" 2007-09-08 15:26:36.2 - NTFSx86
Syst‚m Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.548 [GMT 2:00]
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\regedit.com
C:\WINDOWS\system32\pskill.exe
C:\WINDOWS\system32\taskmgr.com


((((((((((((((((((((((((( Files Created from 2007-08-08 to 2007-09-08 )))))))))))))))))))))))))))))))
.

2007-09-07 15:25 <DIR> d-------- C:\Program Files\Fifa Master
2007-09-05 18:27 <DIR> d-------- C:\Program Files\Xara
2007-09-05 18:27 <DIR> d-------- C:\Program Files\Common Files\Xara
2007-09-05 16:49 5,248 --a------ C:\WINDOWS\system32\drivers\a347scsi.sys
2007-09-05 16:49 160,640 --a------ C:\WINDOWS\system32\drivers\a347bus.sys
2007-09-05 16:49 <DIR> d-------- C:\Program Files\Alcohol Soft
2007-09-04 14:41 139,264 --a------ C:\WINDOWS\system32\eax.dll
2007-09-04 14:41 <DIR> d-------- C:\Program Files\Creative
2007-09-04 14:28 319,488 -ra------ C:\WINDOWS\system32\MafiaSetup.exe
2007-09-02 14:41 <DIR> d-------- C:\Program Files\Baner Maker 6 Pro
2007-09-02 13:35 <DIR> d-------- C:\Program Files\SFT Loader
2007-09-01 15:23 <DIR> d-------- C:\Program Files\ReflexiveArcade
2007-09-01 12:50 266,360 --a------ C:\WINDOWS\system32\TweakUI.exe
2007-09-01 11:17 3,840 --a------ C:\WINDOWS\system32\drivers\BANTExt.sys
2007-09-01 11:17 <DIR> d-------- C:\Program Files\Belarc
2007-08-29 13:56 <DIR> d-------- C:\Program Files\Download
2007-08-29 13:26 <DIR> d-------- C:\Program Files\DkZ Update
2007-08-29 13:23 <DIR> d-------- C:\Program Files\DkZ Studio
2007-08-28 15:19 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\TrackMania United
2007-08-28 11:52 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Locktime
2007-08-28 08:55 <DIR> d-------- C:\Program Files\OpenAL
2007-08-27 13:58 <DIR> d-------- C:\Program Files\ICQLite
2007-08-26 19:44 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-08-26 19:24 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\DAEMON Tools Pro
2007-08-26 19:21 <DIR> d-------- C:\Program Files\DAEMON Tools Pro
2007-08-26 17:09 545 --a------ C:\WINDOWS\UC.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\RAR.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\PKZIP.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\PKUNZIP.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\NOCLOSE.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\LHA.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\ARJ.PIF
2007-08-26 11:09 <DIR> d-------- C:\Program Files\Common Files\InterVideo
2007-08-26 11:08 116,472 --------- C:\WINDOWS\system32\pxcpyi64.exe
2007-08-26 11:07 <DIR> d-------- C:\Program Files\DivX
2007-08-26 11:07 <DIR> d-------- C:\Program Files\Common Files\LightScribe
2007-08-26 11:04 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Ulead Systems
2007-08-26 10:09 <DIR> d-------- C:\DOCUME~1\Janko\Contacts
2007-08-26 10:00 <DIR> d-------- C:\Program Files\MSN Messenger
2007-08-25 14:13 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2007-08-25 10:43 991 --a------ C:\WINDOWS\unins000.dat
2007-08-25 10:43 669,002 --a------ C:\WINDOWS\unins000.exe
2007-08-24 07:58 <DIR> d-------- C:\Program Files\UseNeXT
2007-08-24 07:49 <DIR> d-------- C:\Program Files\Registry Shower 2007
2007-08-23 13:08 <DIR> d-------- C:\Program Files\Mgutil
2007-08-23 12:10 51,720 --a------ C:\WINDOWS\system32\drivers\epfwtdi.sys
2007-08-23 12:10 49,672 --a------ C:\WINDOWS\system32\drivers\epfw.sys
2007-08-23 12:10 30,728 --a------ C:\WINDOWS\system32\drivers\epfwndis.sys
2007-08-23 12:08 33,288 --a------ C:\WINDOWS\system32\drivers\eamon.sys
2007-08-23 12:08 25,096 --a------ C:\WINDOWS\system32\drivers\easdrv.sys
2007-08-22 18:05 442,368 -ra------ C:\WINDOWS\system32\vp6vfw.dll
2007-08-21 10:44 29,704 --a------ C:\WINDOWS\system32\uxtuneup.dll
2007-08-21 10:44 <DIR> d-------- C:\Program Files\TuneUp Utilities 2007
2007-08-21 10:05 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\FogelSoft
2007-08-20 20:49 5,800 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd
2007-08-20 20:32 <DIR> d-------- C:\Program Files\HyCam2
2007-08-20 19:32 20,480 --a------ C:\WINDOWS\system32\wbload.dll
2007-08-20 19:32 <DIR> d-------- C:\Program Files\Stardock
2007-08-20 15:47 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
2007-08-19 15:22 <DIR> d-------- C:\Program Files\Registry Repair
2007-08-15 19:37 557,056 --a------ C:\WINDOWS\system32\WONshell.dll
2007-08-15 19:37 44,544 --a------ C:\WINDOWS\system32\GIF89.DLL
2007-08-15 19:37 24,928 --a------ C:\WINDOWS\system32\Sigres.exe
2007-08-15 19:37 233,472 --a------ C:\WINDOWS\system32\SNWValid.dll
2007-08-15 19:37 196,608 --a------ C:\WINDOWS\system32\WONauth.dll
2007-08-15 19:37 1,204,224 --a------ C:\WINDOWS\system32\SierraNW.dll
2007-08-15 19:37 <DIR> d-------- C:\Program Files\Sierra On-Line
2007-08-15 14:21 <DIR> d-------- C:\Program Files\Common Files\ACD Systems
2007-08-15 14:21 <DIR> d-------- C:\Program Files\ACD Systems
2007-08-15 14:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\ACD Systems
2007-08-15 09:12 <DIR> d-------- C:\Program Files\MSXML 6.0
2007-08-13 09:51 12,800 --a------ C:\WINDOWS\system32\WING32.DLL
2007-08-13 09:51 <DIR> d-------- C:\Program Files\BSP Multimedia

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-08 10:59 --------- d-a------ C:\DOCUME~1\ALLUSE~1\DATAAP~1\TEMP
2007-09-05 17:54 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-09-02 19:40 --------- d-------- C:\Program Files\FlashGet
2007-09-01 11:25 --------- d-------- C:\Program Files\Opera
2007-09-01 11:07 --------- d-------- C:\Program Files\A4Desk
2007-09-01 11:00 --------- d-------- C:\Program Files\WinASO
2007-09-01 10:59 --------- d-------- C:\Program Files\Lavasoft
2007-08-28 08:55 409600 --a------ C:\WINDOWS\system32\wrap_oal.dll
2007-08-28 08:55 114688 --a------ C:\WINDOWS\system32\OpenAL32.dll
2007-08-28 07:26 --------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-08-28 07:25 --------- d-------- C:\Program Files\AGEIA Technologies
2007-08-26 19:14 685816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-08-22 12:10 --------- d-------- C:\Program Files\Zoner
2007-08-21 13:13 --------- d-------- C:\Program Files\Common Files\InstallShield
2007-08-21 10:44 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\TuneUp Software
2007-08-20 20:50 65575 --a------ C:\WINDOWS\BricoPackUninst.cmd
2007-08-20 14:19 --------- d-------- C:\Program Files\Winamp
2007-08-19 15:27 --------- d-------- C:\Program Files\Mozilla Thunderbird
2007-08-19 15:27 --------- d-------- C:\Program Files\DOSBox-0.70
2007-08-19 15:27 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\QuickTime
2007-08-15 09:13 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Microsoft Help
2007-08-14 16:55 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Test Drive Unlimited
2007-08-01 17:25 --------- d-------- C:\Program Files\ScanSoft
2007-08-01 15:42 --------- d-------- C:\Program Files\CoffeeCup Software
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2007-07-30 18:08 --------- d-------- C:\Program Files\Lavalys
2007-07-28 14:01 --------- d-------- C:\Program Files\Bonjour
2007-07-28 13:52 --------- d-------- C:\Program Files\Common Files\Macrovision Shared
2007-07-28 13:30 203264 --a------ C:\WINDOWS\system32\britain.scr
2007-07-28 09:18 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\FLEXnet
2007-07-27 18:55 --------- d-------- C:\Program Files\Common Files\Adobe Systems Shared
2007-07-27 18:55 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Adobe Systems
2007-07-26 13:20 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\InstallShield
2007-07-25 20:04 --------- d-------- C:\Program Files\Google
2007-07-25 10:32 --------- d-------- C:\Program Files\Common Files\Real
2007-07-25 10:02 --------- d-------- C:\Program Files\Microsoft Visual Studio 8
2007-07-24 12:36 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Eset
2007-07-23 11:50 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\SwiftSwitch
2007-07-23 10:43 --------- d-------- C:\Program Files\Everstrike Software
2007-07-21 10:13 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Lavasoft
2007-07-20 19:02 --------- d-------- C:\Program Files\Common Files\Everstrike Software
2007-07-17 15:05 107888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-07-16 19:24 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Kaspersky Lab Setup Files
2007-07-16 13:42 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Age of Empires 3
2007-07-16 09:47 --------- d-------- C:\Program Files\Common Files\BOONTY Shared
2007-07-16 09:47 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\BOONTY
2007-07-12 09:35 --------- d-------- C:\Program Files\Common Files\DirectX
2007-07-11 10:28 --------- d-------- C:\Program Files\CDRLabel 7.0
2007-07-11 10:28 --------- d-------- C:\Program Files\CD obaly
2007-07-09 19:25 223128 --a------ C:\WINDOWS\system32\drivers\vaxscsi.sys
2007-07-09 18:39 --------- d-------- C:\Program Files\Domain Tools
2007-07-09 17:35 --------- d-------- C:\Program Files\Apple Software Update
2007-07-09 15:34 --------- d-------- C:\Program Files\SUPERAntiSpyware
2007-07-09 14:59 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\SUPERAntiSpyware.com
2007-07-09 14:57 --------- d-------- C:\Program Files\OLYMPUS
2007-07-09 14:56 --------- d-------- C:\Program Files\PIXELA
2007-07-09 14:54 --------- d-------- C:\Program Files\QuickTime
2007-07-09 14:53 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Apple Computer
2007-07-05 16:00 2277888 --a------ C:\WINDOWS\system32\TUKernel.exe
2007-06-26 08:10 1104896 --a------ C:\WINDOWS\system32\msxml3.dll
2007-06-19 15:32 282112 --a------ C:\WINDOWS\system32\gdi32.dll
2007-06-17 00:11 51200 --a------ C:\WINDOWS\nircmd.exe
2007-06-13 15:23 975872 --a------ C:\WINDOWS\explorer.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-27 04:47 C:\WINDOWS\RTHDCPL.EXE]
"SkyTel"="SkyTel.EXE" [2006-05-16 12:04 C:\WINDOWS\SkyTel.exe]
"SoundMan"="SOUNDMAN.EXE" [2002-03-21 04:23 C:\WINDOWS\SOUNDMAN.EXE]
"AlcWzrd"="ALCWZRD.EXE" [2006-05-04 10:26 C:\WINDOWS\ALCWZRD.EXE]
"nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 12:22]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 12:22]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-04-23 19:57]
"egui"="C:\Program Files\Eset\Eset Smart Security\egui.exe" [2007-08-23 12:09]
"ICQ Lite"="C:\Program Files\ICQLite\ICQLite.exe" [2006-07-27 20:12]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-18 14:00]
"SkinClock"="C:\Program Files\Free Desktop Clock\DesktopClock.exe" [2006-10-01 16:50]
"RocketDock"="C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" [2007-03-19 00:05]
"Fraps"="D:\FRAPS\FRAPS.EXE" [2006-10-26 11:44]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:55]
"DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [2007-06-22 14:45]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce]
"ICQ Lite"=C:\Program Files\ICQLite\ICQLite.exe -trayboot

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoWinKeys"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll 2007-03-05 16:36 140976 C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=wbsys.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Janko^Nabídka Start^Programy^Po spuštění^Hotkeys.lnk]
backup=C:\WINDOWS\pss\Hotkeys.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Janko^Nabídka Start^Programy^Po spuštění^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
backup=C:\WINDOWS\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Janko^Nabídka Start^Programy^Po spuštění^Yahoo! Widget Engine.lnk]
backup=C:\WINDOWS\pss\Yahoo! Widget Engine.lnkStartup

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
"RoboForm"="C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"PCSuiteTrayApplication"=C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime

R1 easdrv;easdrv;C:\WINDOWS\system32\DRIVERS\easdrv.sys
R1 epfwtdi;epfwtdi;C:\WINDOWS\system32\DRIVERS\epfwtdi.sys
R2 eamon;EAMON;C:\WINDOWS\system32\DRIVERS\eamon.sys
R2 ekrn;Eset Service;"C:\Program Files\Eset\Eset Smart Security\ekrn.exe"
R2 epfw;epfw;C:\WINDOWS\system32\DRIVERS\epfw.sys
R2 LF30FS;LF30FS;\??\C:\Program Files\Everstrike Software\Lock Folder XP 3.5\LF30XP.sys
R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe -k netsvcs
R3 Epfwndis;Eset Personal Firewall;C:\WINDOWS\system32\DRIVERS\Epfwndis.sys
R3 EPPSCSIx;EPPSCSI Driver;C:\WINDOWS\system32\DRIVERS\EPPSCAN.sys
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver;C:\WINDOWS\system32\drivers\WmBEnum.sys
R3 WmFilter;Logitech WingMan HID Filter Driver;C:\WINDOWS\system32\drivers\WmFilter.sys
R3 WmXlCore;Logitech WingMan Translation Layer Driver;C:\WINDOWS\system32\drivers\WmXlCore.sys
S0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys
S3 EhttpSrv;Eset HTTP server;"C:\Program Files\Eset\Eset Smart Security\EHttpSrv.exe"
S3 GVCplDrv;GVCplDrv;C:\WINDOWS\system32\drivers\GVCplDrv.sys
S3 NtApm;Ovladač rozhraní služby NT Apm/Legacy;C:\WINDOWS\system32\DRIVERS\NtApm.sys
S3 usb2vcom;Nokia CA-42 USB;C:\WINDOWS\system32\DRIVERS\usb2vcom.sys
S3 WmVirHid;Logitech Virtual Hid Device Driver;C:\WINDOWS\system32\drivers\WmVirHid.sys
S4 Boonty Games;Boonty Games;"C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
Schedule
UxTuneUp


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
AutoRun\command- G:\LaunchU3.exe -a

.
Contents of the 'Scheduled Tasks' folder
"2007-08-31 15:16:08 C:\WINDOWS\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-08 15:28:07
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-08 15:28:50
C:\ComboFix-quarantined-files.txt ... 2007-09-08 15:28
.
--- E O F ---

ComboFix-quarantined-files.txt




_No toto.. Bude treba mithFraudFix?

Stiahni Avenger -–>
http://swandog46.geekstogo.com/avenger.exe

Spustiť – „Input script manually“ – Lupa – Skopírovať kód – „Done“ – Semafor – Potvrdiť – Nasleduje reštart PC


Mohol by si mi zaslať na mail zálohu avengeru a ComboFixa, ktorá bude/je na C v priečinku Avenger ---> backup.zip a celý priečinok ---> C:\Qoobox

Zabaľ súbory do archívu RAR s heslom "infected" (menu rozšírené - nastaviť heslo) a pošlite ho na adresu threat.samples@gmail.com


Ďakujem



Otestuj na http://www.virustotal.com a výsledky vlož sem:

C:\WINDOWS\unins000.exe
C:\WINDOWS\unins000.dat
C:\WINDOWS\system32\Sigres.exe

Virustotal nič nenašiel... RAR sa posiela práve teraz... Ďakujem

Diki


Ako sa správa počítač?

Ako pred tým.. Ide všetko normálne, Opera zatial ešte nespadla... Ďakujem

No do kelu, neviem ale stále mi to robí.. A už nielen Opera.. Teraz som sťahoval 3.5 GB cez Blizzard Downloader a keď som už mal 1 GB, prišla chyba Do kelu čo mám ešte v PC???

Preinštaluj Operu nanovo => zmažeš všetky jej súbory z tempu a pod.

Ok tím sa možno opraví Opera, ale čo s ostatním softwarom?

Vlož nový log z ComboFixu a MWAV.

Tak to asi až zajtra, práve kontrolujem ESS System Volume Inf na C aj D, a mám ešte veľa práce (hranie hier )

Edit: OK, idem dať ComboFix...

Log:


ComboFix 07-09-08.8 - "Janko" 2007-09-13 19:38:28.3 - NTFSx86
Syst‚m Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.644 [GMT 2:00]
.

((((((((((((((((((((((((( Files Created from 2007-08-13 to 2007-09-13 )))))))))))))))))))))))))))))))
.

2007-09-13 14:59 73,216 --a------ C:\WINDOWS\ST6UNST.EXE
2007-09-13 14:59 282,624 -ra------ C:\WINDOWS\Setup1.exe
2007-09-13 14:59 102,400 --a------ C:\WINDOWS\system32\VB6STKIT.DLL
2007-09-13 14:59 <DIR> d-------- C:\Program Files\10 Prst…
2007-09-11 18:49 <DIR> d-------- C:\WINDOWS\vf_hip
2007-09-11 18:49 <DIR> d-------- C:\Program Files\Hide IP Platinum
2007-09-09 17:56 <DIR> d-------- C:\Program Files\Steam
2007-09-09 16:58 <DIR> d-------- C:\Program Files\Internet Download Manager
2007-09-09 12:43 443,752 --a------ C:\WINDOWS\system32\d3dx10_33.dll
2007-09-09 12:43 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll
2007-09-09 12:43 261,480 --a------ C:\WINDOWS\system32\xactengine2_7.dll
2007-09-09 12:43 1,123,696 --a------ C:\WINDOWS\system32\D3DCompiler_33.dll
2007-09-09 12:34 <DIR> d-------- C:\Program Files\vypnipc
2007-09-08 18:39 526,184 --a------ C:\WINDOWS\system32\XceedCry.dll
2007-09-08 18:39 <DIR> d-------- C:\Program Files\LMSOFT Web Creator Pro 4
2007-09-05 18:27 <DIR> d-------- C:\Program Files\Xara
2007-09-05 16:49 5,248 --a------ C:\WINDOWS\system32\drivers\a347scsi.sys
2007-09-05 16:49 160,640 --a------ C:\WINDOWS\system32\drivers\a347bus.sys
2007-09-05 16:49 <DIR> d-------- C:\Program Files\Alcohol Soft
2007-09-04 14:41 139,264 --a------ C:\WINDOWS\system32\eax.dll
2007-09-04 14:41 <DIR> d-------- C:\Program Files\Creative
2007-09-02 13:35 <DIR> d-------- C:\Program Files\SFT Loader
2007-09-01 15:23 <DIR> d-------- C:\Program Files\ReflexiveArcade
2007-09-01 12:50 266,360 --a------ C:\WINDOWS\system32\TweakUI.exe
2007-09-01 11:17 3,840 --a------ C:\WINDOWS\system32\drivers\BANTExt.sys
2007-09-01 11:17 <DIR> d-------- C:\Program Files\Belarc
2007-08-29 13:26 <DIR> d-------- C:\Program Files\DkZ Update
2007-08-29 13:23 <DIR> d-------- C:\Program Files\DkZ Studio
2007-08-28 15:19 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\TrackMania United
2007-08-28 11:52 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Locktime
2007-08-28 08:55 <DIR> d-------- C:\Program Files\OpenAL
2007-08-27 13:58 <DIR> d-------- C:\Program Files\ICQLite
2007-08-26 19:44 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll
2007-08-26 19:24 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\DAEMON Tools Pro
2007-08-26 19:21 <DIR> d-------- C:\Program Files\DAEMON Tools Pro
2007-08-26 17:09 545 --a------ C:\WINDOWS\UC.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\RAR.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\PKZIP.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\PKUNZIP.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\NOCLOSE.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\LHA.PIF
2007-08-26 17:09 545 --a------ C:\WINDOWS\ARJ.PIF
2007-08-26 11:09 <DIR> d-------- C:\Program Files\Common Files\InterVideo
2007-08-26 11:08 116,472 --------- C:\WINDOWS\system32\pxcpyi64.exe
2007-08-26 11:07 <DIR> d-------- C:\Program Files\DivX
2007-08-26 11:07 <DIR> d-------- C:\Program Files\Common Files\LightScribe
2007-08-26 11:04 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Ulead Systems
2007-08-26 10:09 <DIR> d-------- C:\DOCUME~1\Janko\Contacts
2007-08-26 10:00 <DIR> d-------- C:\Program Files\MSN Messenger
2007-08-25 14:13 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2007-08-25 10:43 991 --a------ C:\WINDOWS\unins000.dat
2007-08-25 10:43 669,002 --a------ C:\WINDOWS\unins000.exe
2007-08-24 07:58 <DIR> d-------- C:\Program Files\UseNeXT
2007-08-24 07:49 <DIR> d-------- C:\Program Files\Registry Shower 2007
2007-08-23 13:08 <DIR> d-------- C:\Program Files\Mgutil
2007-08-23 12:10 51,720 --a------ C:\WINDOWS\system32\drivers\epfwtdi.sys
2007-08-23 12:10 49,672 --a------ C:\WINDOWS\system32\drivers\epfw.sys
2007-08-23 12:10 30,728 --a------ C:\WINDOWS\system32\drivers\epfwndis.sys
2007-08-23 12:08 33,288 --a------ C:\WINDOWS\system32\drivers\eamon.sys
2007-08-23 12:08 25,096 --a------ C:\WINDOWS\system32\drivers\easdrv.sys
2007-08-22 18:05 442,368 -ra------ C:\WINDOWS\system32\vp6vfw.dll
2007-08-21 10:44 29,704 --a------ C:\WINDOWS\system32\uxtuneup.dll
2007-08-21 10:44 <DIR> d-------- C:\Program Files\TuneUp Utilities 2007
2007-08-21 10:05 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\FogelSoft
2007-08-20 20:49 5,800 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd
2007-08-20 20:32 <DIR> d-------- C:\Program Files\HyCam2
2007-08-20 19:32 20,480 --a------ C:\WINDOWS\system32\wbload.dll
2007-08-20 19:32 <DIR> d-------- C:\Program Files\Stardock
2007-08-20 15:47 47,360 --a------ C:\WINDOWS\system32\drivers\pcouffin.sys
2007-08-19 15:22 <DIR> d-------- C:\Program Files\Registry Repair
2007-08-15 19:37 557,056 --a------ C:\WINDOWS\system32\WONshell.dll
2007-08-15 19:37 44,544 --a------ C:\WINDOWS\system32\GIF89.DLL
2007-08-15 19:37 24,928 --a------ C:\WINDOWS\system32\Sigres.exe
2007-08-15 19:37 233,472 --a------ C:\WINDOWS\system32\SNWValid.dll
2007-08-15 19:37 196,608 --a------ C:\WINDOWS\system32\WONauth.dll
2007-08-15 19:37 1,204,224 --a------ C:\WINDOWS\system32\SierraNW.dll
2007-08-15 19:37 <DIR> d-------- C:\Program Files\Sierra On-Line
2007-08-15 14:21 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\ACD Systems
2007-08-15 09:12 <DIR> d-------- C:\Program Files\MSXML 6.0
2007-08-13 09:51 12,800 --a------ C:\WINDOWS\system32\WING32.DLL
2007-08-13 09:51 <DIR> d-------- C:\Program Files\BSP Multimedia

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-09-13 16:53 --------- d-a------ C:\DOCUME~1\ALLUSE~1\DATAAP~1\TEMP
2007-09-12 19:51 --------- d-------- C:\Program Files\FlashGet
2007-09-09 12:40 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-09-01 11:25 --------- d-------- C:\Program Files\Opera
2007-09-01 11:00 --------- d-------- C:\Program Files\WinASO
2007-09-01 10:59 --------- d-------- C:\Program Files\Lavasoft
2007-08-28 08:55 409600 --a------ C:\WINDOWS\system32\wrap_oal.dll
2007-08-28 08:55 114688 --a------ C:\WINDOWS\system32\OpenAL32.dll
2007-08-28 07:26 --------- d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-08-28 07:25 --------- d-------- C:\Program Files\AGEIA Technologies
2007-08-26 19:14 685816 --a------ C:\WINDOWS\system32\drivers\sptd.sys
2007-08-22 12:10 --------- d-------- C:\Program Files\Zoner
2007-08-21 13:13 --------- d-------- C:\Program Files\Common Files\InstallShield
2007-08-21 10:44 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\TuneUp Software
2007-08-20 20:50 65575 --a------ C:\WINDOWS\BricoPackUninst.cmd
2007-08-20 14:19 --------- d-------- C:\Program Files\Winamp
2007-08-19 15:27 --------- d-------- C:\Program Files\Mozilla Thunderbird
2007-08-19 15:27 --------- d-------- C:\Program Files\DOSBox-0.70
2007-08-19 15:27 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\QuickTime
2007-08-15 09:13 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Microsoft Help
2007-08-14 16:55 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Test Drive Unlimited
2007-08-01 17:25 --------- d-------- C:\Program Files\ScanSoft
2007-08-01 15:42 --------- d-------- C:\Program Files\CoffeeCup Software
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll
2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2007-07-30 18:08 --------- d-------- C:\Program Files\Lavalys
2007-07-28 14:01 --------- d-------- C:\Program Files\Bonjour
2007-07-28 13:52 --------- d-------- C:\Program Files\Common Files\Macrovision Shared
2007-07-28 13:30 203264 --a------ C:\WINDOWS\system32\britain.scr
2007-07-28 09:18 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\FLEXnet
2007-07-27 18:55 --------- d-------- C:\Program Files\Common Files\Adobe Systems Shared
2007-07-27 18:55 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Adobe Systems
2007-07-26 13:20 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\InstallShield
2007-07-25 20:04 --------- d-------- C:\Program Files\Google
2007-07-25 10:02 --------- d-------- C:\Program Files\Microsoft Visual Studio 8
2007-07-24 12:36 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Eset
2007-07-23 11:50 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\SwiftSwitch
2007-07-23 10:43 --------- d-------- C:\Program Files\Everstrike Software
2007-07-23 10:39 202160 --a------ C:\WINDOWS\system32\idmmbc.dll
2007-07-21 10:13 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Lavasoft
2007-07-20 19:02 --------- d-------- C:\Program Files\Common Files\Everstrike Software
2007-07-17 15:05 107888 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2007-07-16 19:24 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Kaspersky Lab Setup Files
2007-07-16 13:42 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\Age of Empires 3
2007-07-16 09:47 --------- d-------- C:\Program Files\Common Files\BOONTY Shared
2007-07-16 09:47 --------- d-------- C:\DOCUME~1\ALLUSE~1\DATAAP~1\BOONTY
2007-07-05 16:00 2277888 --a------ C:\WINDOWS\system32\TUKernel.exe
2007-06-26 08:10 1104896 --a------ C:\WINDOWS\system32\msxml3.dll
2007-06-19 15:32 282112 --a------ C:\WINDOWS\system32\gdi32.dll
2007-06-17 00:11 51200 --a------ C:\WINDOWS\nircmd.exe
2007-06-13 15:23 975872 --a------ C:\WINDOWS\explorer.exe
--------- C:\Program Files\10 Prstů
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-27 04:47 C:\WINDOWS\RTHDCPL.EXE]
"SkyTel"="SkyTel.EXE" [2006-05-16 12:04 C:\WINDOWS\SkyTel.exe]
"SoundMan"="SOUNDMAN.EXE" [2002-03-21 04:23 C:\WINDOWS\SOUNDMAN.EXE]
"AlcWzrd"="ALCWZRD.EXE" [2006-05-04 10:26 C:\WINDOWS\ALCWZRD.EXE]
"nwiz"="nwiz.exe" [2006-10-22 12:22 C:\WINDOWS\system32\nwiz.exe]
"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 12:22]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 12:22]
"WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-04-23 19:57]
"egui"="C:\Program Files\Eset\Eset Smart Security\egui.exe" [2007-08-23 12:09]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-18 14:00]
"SkinClock"="C:\Program Files\Free Desktop Clock\DesktopClock.exe" [2006-10-01 16:50]
"RocketDock"="C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe" [2007-03-19 00:05]
"Fraps"="D:\FRAPS\FRAPS.EXE" [2006-10-26 11:44]
"DAEMON Tools Pro Agent"="C:\Program Files\DAEMON Tools Pro\DTProAgent.exe" [2007-06-22 14:45]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoWinKeys"=0 (0x0)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll 2007-03-05 16:36 140976 C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"appinit_dlls"=wbsys.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Janko^Nabídka Start^Programy^Po spuštění^Hotkeys.lnk]
backup=C:\WINDOWS\pss\Hotkeys.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Janko^Nabídka Start^Programy^Po spuštění^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
backup=C:\WINDOWS\pss\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Janko^Nabídka Start^Programy^Po spuštění^Yahoo! Widget Engine.lnk]
backup=C:\WINDOWS\pss\Yahoo! Widget Engine.lnkStartup

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
"RoboForm"="C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe /onboot
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
"Steam"="C:\Program Files\Steam\Steam.exe" -silent

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"PCSuiteTrayApplication"=C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime
"OM_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
"ICQ Lite"="C:\Program Files\ICQLite\ICQLite.exe" -minimize

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime

R1 easdrv;easdrv;C:\WINDOWS\system32\DRIVERS\easdrv.sys
R1 epfwtdi;epfwtdi;C:\WINDOWS\system32\DRIVERS\epfwtdi.sys
R2 eamon;EAMON;C:\WINDOWS\system32\DRIVERS\eamon.sys
R2 ekrn;Eset Service;"C:\Program Files\Eset\Eset Smart Security\ekrn.exe"
R2 epfw;epfw;C:\WINDOWS\system32\DRIVERS\epfw.sys
R2 LF30FS;LF30FS;\??\C:\Program Files\Everstrike Software\Lock Folder XP 3.5\LF30XP.sys
R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe -k netsvcs
R3 Epfwndis;Eset Personal Firewall;C:\WINDOWS\system32\DRIVERS\Epfwndis.sys
R3 EPPSCSIx;EPPSCSI Driver;C:\WINDOWS\system32\DRIVERS\EPPSCAN.sys
R3 PSched;Plánovač paketů technologie QoS;C:\WINDOWS\system32\DRIVERS\psched.sys
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver;C:\WINDOWS\system32\drivers\WmBEnum.sys
R3 WmFilter;Logitech WingMan HID Filter Driver;C:\WINDOWS\system32\drivers\WmFilter.sys
R3 WmXlCore;Logitech WingMan Translation Layer Driver;C:\WINDOWS\system32\drivers\WmXlCore.sys
S0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys
S3 EhttpSrv;Eset HTTP server;"C:\Program Files\Eset\Eset Smart Security\EHttpSrv.exe"
S3 GVCplDrv;GVCplDrv;C:\WINDOWS\system32\drivers\GVCplDrv.sys
S3 NtApm;Ovladač rozhraní služby NT Apm/Legacy;C:\WINDOWS\system32\DRIVERS\NtApm.sys
S3 usb2vcom;Nokia CA-42 USB;C:\WINDOWS\system32\DRIVERS\usb2vcom.sys
S3 WmVirHid;Logitech Virtual Hid Device Driver;C:\WINDOWS\system32\drivers\WmVirHid.sys
S4 Boonty Games;Boonty Games;"C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
Schedule
UxTuneUp


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]

.
Contents of the 'Scheduled Tasks' folder
"2007-08-31 15:16:08 C:\WINDOWS\Tasks\1-Click Maintenance.job"
- C:\Program Files\TuneUp Utilities 2007\SystemOptimizer.exe
.
**************************************************************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-13 19:41:13
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-09-13 19:42:00
C:\ComboFix-quarantined-files.txt ... 2007-09-13 19:41
C:\ComboFix2.txt ... 2007-09-08 15:28
.
--- E O F ---

To naschvál dávaš v tučnom písme?


Otestuj:

C:\WINDOWS\ST6UNST.EXE
C:\WINDOWS\Setup1.exe

Prepáč, ak ti to vadí...
Eset Smart Security nič v tých dvoch súboroch nenašiel. Virustotal taktiež nič nenašiel...

Log z MWAV:

Objekt "flashget Unclassified" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "killav.nbd Browser Hijacker" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "killav.nbd Browser Hijacker" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "grokster Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "NULLBYTE Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "grokster Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "uplink Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Objekt "killav.nbd Browser Hijacker" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Záznam "HKCR\SharePoint.WebPartPage.Document" odkazuje na neplatný objekt "{388ED91D-7FD2-11D0-A60B-00A0C90A43FF}". Provedené akce: Nic nebylo provedeno.
Záznam "HKCR\SharePoint.WebPartPage.Document.1.0" odkazuje na neplatný objekt "{388ED91D-7FD2-11D0-A60B-00A0C90A43FF}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\PlugIns2\CX_FotoSlate3.apl". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\PlugIns2\CX_FotoSlate3.chm". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\PlugIns2\FSEngine3.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\PlugIns2\ID_PLP.apl". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\PlugIns2\IDE_ACDStd.apl". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\PlugIns2\IDE_ACDStd.chm". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\PlugIns2\XMLEditor3.exe". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\EN\ACDAppInfo40.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\EN\ACDInTouch40.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\ACD Systems\EN\ipwssl5.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\LightScribe\LSLauncher.exe". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\LightScribe\LSCAPI.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\LightScribe\LSCMHT.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\LightScribe\LSDrComm.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\LightScribe\LSImSE.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\LightScribe\Content\Getting Started.mht". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\Xara\XWC_ENG.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\Xara\XWFU_ENG.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\Xara\WebCommand_1_1.ocx". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\Xara\XFontMan_1_1.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\Xara\XaraDoc_1_9.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\Xara\WebFileUpdater_1_1.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\Xara\WmfFilter.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" odkazuje na neplatný objekt "C:\Program Files\Common Files\Xara\X3Dviewer_1_1.dll". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\114x175mm". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\127x178mm". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\4x6in". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\5x7in". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\89x127mm". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\8x10in". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A3 (297x420mm)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A4 (210x297mm)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A6 (105x148.5mm)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Hagaki (100x148mm)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Legal (8.5x14in)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Letter (8.5x11in)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\NoteCard (5.5x8.5in)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Tabloid (11x17in)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\114x175mm". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\127x178mm". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\4x6in". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\5x7in". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\89x127mm". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\8x10in". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A3 (297x420mm)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A4 (210x297mm)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A6 (105x148.5mm)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Hagaki (100x148mm)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Legal (8.5x14in)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Letter (8.5x11in)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\NoteCard (5.5x8.5in)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Tabloid (11x17in)". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Photo Albums". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Print Sheets". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Standard Photo Sizes". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Standard Photo Sizes\International". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Standard Photo Sizes\North America". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Tools". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Transforms". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Generators". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Pages". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Frames". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\114x175mm\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\114x175mm\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\127x178mm\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\127x178mm\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\4x6in\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\4x6in\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\5x7in\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\5x7in\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\89x127mm\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\89x127mm\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\8x10in\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\8x10in\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A3 (297x420mm)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A3 (297x420mm)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A4 (210x297mm)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A4 (210x297mm)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A6 (105x148.5mm)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\A6 (105x148.5mm)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Hagaki (100x148mm)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Hagaki (100x148mm)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Legal (8.5x14in)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Legal (8.5x14in)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Letter (8.5x11in)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Letter (8.5x11in)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\NoteCard (5.5x8.5in)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\NoteCard (5.5x8.5in)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Tabloid (11x17in)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Photo Album\Tabloid (11x17in)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\114x175mm\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\114x175mm\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\127x178mm\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\127x178mm\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\4x6in\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\4x6in\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\5x7in\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\5x7in\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\89x127mm\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\89x127mm\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\8x10in\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\8x10in\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A3 (297x420mm)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A3 (297x420mm)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A4 (210x297mm)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A4 (210x297mm)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A6 (105x148.5mm)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\A6 (105x148.5mm)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Hagaki (100x148mm)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Hagaki (100x148mm)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Legal (8.5x14in)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Legal (8.5x14in)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Letter (8.5x11in)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Letter (8.5x11in)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\NoteCard (5.5x8.5in)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\NoteCard (5.5x8.5in)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Tabloid (11x17in)\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\ACD Page Library\Print Sheet\Tabloid (11x17in)\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Calendars". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\CD and DVD". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Contact Sheets". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Greeting Cards". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Photo Albums\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Photo Albums\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Print Sheets\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\Print Sheets\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Creative Projects\T-Shirt Transfers". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\My Pages". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Standard Photo Sizes\International\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Standard Photo Sizes\International\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Standard Photo Sizes\North America\Landscape". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\ACD Systems\FotoSlate\3.0\Page Library\Standard Photo Sizes\North America\Portrait". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders" odkazuje na neplatný objekt "C:\Program Files\Common Files\LightScribe\Content". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".002". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".003". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".004". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".rar%2520". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".rar%2520%2520". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".upd". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".v20po". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".v20pp". Provedené akce: Nic nebylo provedeno.
Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".v20ppf". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "KB939683". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "Mafia Game". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{90120000-0010-0405-0000-0000000FF1CE}". Provedené akce: Nic nebylo provedeno.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{C920EFB6-59DB-472D-B445-21821477AD17}". Provedené akce: Nic nebylo provedeno.

Prečisti registre. Myslím, že tam žiadnu háveď nemáš.


Neviem, čo by to mohlo spôsobovať. Možno nejaký konflikt programov.