A MBR-ben nem latot a combofix problemat,,de futtasd le ezt a programot,tedd az asztalra-futtasd es a logot tedd ide
http://www.virus-stell.com/2010/06/boot ... troja.html
most el kell menem de 1\ora mulva vissza terek.

leszedtem a gépről és nem tudom milyen változásnak kellene lennie, de nem látok változást rajta egyenlőre. A Panorama Maker 4. volt az ami nem teljesen jogtiszta volt valószínüleg azt vetted észre, hogy **** van vele. Mióta elkezdtük a vírusírtást gyorsúlt a gépem egyébként.
A master boot rekord is lett különben ellenőrizve már vagy miután az alap vírusokat leszedtük utána térünk rá?

nem ez nem a Daemon emulator,
valami media program es nem reg telepiteted,marciusban,
Ha nem kell szed le a geprol,,es ird meg hogy viselkedik a gep,

ArcSoft-os progim csak a panorama maker 4 van

ez megfelelő ezt megtaláltam:

c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

ez írta:

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 19:41 on 29/07/2010 by P.J. Howard (Administrator - Elevation successful)

========== filefind ==========

Searching for "archlp.sys"
No files found.

-=End Of File=-


ez a file elvileg a daemon tools filéje lenne? az leszedtem a gépről mert meg zakkant a progi.

na meg megnezuk egy progival ha letezik-e
amugy ehez a progi hoz tartozik
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

Tolds le az asztalra
Download>futtasd>>masold be az ablakba a zold textet- klik >look,,logot tedd ide.

letöltöttem elindítottam, de nincs ilyen filem alábbi linke te magad is meggyőződhetsz róla

http://www.howard.lapok.hu/keret.cgi?/nevtelen.htm

Töltsd le ezt atr.bat fajlót az asztalra..futtasd le,,és most mar megtalálod,
http://leteckaposta.cz/264236136

archlp.sys

Nincs ilyen nevű file a gépemem, nem találja, rákeresetem keresővel de úgy sem találja a filet.

Mar dehogy nem,,klikelsz Talozas-a megjeleno ablakban-felul bealitod C:\ es az also ures ablakba bemasolod az utvonalat
c:\windows\system32\drivers\archlp.sys
es klik-kuldes.

újra végig futattam most kidobta a dolgot, remélem ez is jó.

ComboFix 10-07-27.05 - P.J. Howard 010.07.29. 6:17.3.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.36.1038.18.3327.2811 [GMT 2:00]
Running from: d:\irando\Prg\virus irto progik\ComboFix.exe
Command switches used :: c:\documents and settings\P.J. Howard\Asztal\CFScript.txt
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((( Files Created from 2010-06-28 to 2010-07-29 )))))))))))))))))))))))))))))))
.

2010-07-28 18:40 . 2010-07-28 18:40 -------- d-----w- c:\program files\CCleaner
2010-07-28 17:18 . 2010-07-28 17:18 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Malwarebytes
2010-07-28 17:17 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-28 17:17 . 2010-07-28 17:17 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-28 17:17 . 2010-07-28 17:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-28 17:17 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-28 16:18 . 2010-07-28 16:19 -------- d-----w- C:\rsit
2010-07-28 16:18 . 2010-07-28 16:19 -------- d-----w- c:\program files\trend micro
2010-07-25 10:25 . 2010-07-25 10:25 -------- d-----w- c:\program files\undelelte plus
2010-07-25 10:11 . 2010-07-25 10:11 -------- d-----w- c:\documents and settings\P.J. Howard\Local Settings\Application Data\TouchStoneSoftware
2010-07-19 12:27 . 2010-07-19 12:32 -------- dc----w- c:\documents and settings\P.J. Howard\Local Settings\Application Data\MigWiz
2010-07-18 16:47 . 2010-07-18 16:47 -------- d-----w- c:\program files\1stbenison
2010-07-18 08:21 . 2010-07-18 08:21 -------- d-----w- c:\program files\Windows Easy Transfer 7
2010-07-18 06:58 . 2010-07-18 06:58 -------- d-----w- c:\program files\MSECache
2010-07-16 15:43 . 2010-07-16 15:43 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Mariaglorum
2010-07-16 15:37 . 2010-07-16 15:47 -------- d-----w- c:\program files\CD to MP3 Freeware
2010-07-16 15:29 . 2010-07-16 15:36 -------- d-----w- c:\program files\AltoMP3 Gold
2010-07-16 13:40 . 2010-07-16 13:40 -------- d-----w- c:\documents and settings\All Users\Application Data\MumboJumbo
2010-07-16 13:36 . 2010-07-16 13:36 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\HitPoint Studios
2010-07-16 13:36 . 2010-07-16 13:36 -------- d-----w- c:\documents and settings\All Users\Application Data\HitPoint Studios
2010-07-16 05:32 . 2010-07-22 13:10 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Paige Harper and the Tome of Mystery
2010-07-16 05:23 . 2010-07-16 05:23 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Floodlight Games
2010-07-16 05:23 . 2010-07-16 05:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Floodlight Games
2010-07-16 05:22 . 2010-07-16 05:22 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\FloodLightGames
2010-07-16 05:22 . 2010-07-16 05:22 -------- d-----w- c:\documents and settings\All Users\Application Data\FloodLightGames
2010-07-16 05:20 . 2010-07-16 05:23 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Flood Light Games
2010-07-16 05:20 . 2010-07-16 05:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Flood Light Games
2010-07-15 13:55 . 2010-07-15 13:55 262144 ------w- c:\windows\system32\wrap_oal.dll
2010-07-15 13:55 . 2004-06-22 13:44 5632 ------w- c:\windows\system32\drivers\Entech64.sys
2010-07-15 13:43 . 2010-07-15 13:43 -------- d-----w- c:\program files\MadOnion.com
2010-07-14 18:07 . 2008-02-14 06:12 1389056 ------r- c:\windows\system32\drivers\monfilt.sys
2010-07-14 18:07 . 2009-06-02 08:52 1374464 ------r- c:\windows\system32\drivers\viahduaa.sys
2010-07-14 18:06 . 2007-04-11 07:35 331184 ------w- c:\windows\system32\difxapi.dll
2010-07-14 18:06 . 2010-07-14 18:07 -------- d-----w- c:\program files\VIA
2010-07-14 17:57 . 2010-07-14 17:57 -------- d-----w- c:\documents and settings\P.J. Howard\Local Settings\Application Data\PackageAware
2010-07-14 17:44 . 2010-07-14 18:00 24 ------w- c:\windows\system32\DVCStateBkp-{00000005-00000000-00000002-00001102-00000002-80641102}.dat
2010-07-14 17:44 . 2010-07-14 18:00 24 ------w- c:\windows\system32\DVCState-{00000005-00000000-00000002-00001102-00000002-80641102}.dat
2010-07-14 03:29 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2010-07-12 03:18 . 2010-07-12 03:18 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\STV Software
2010-07-12 03:18 . 2010-07-13 14:53 -------- d-----w- c:\program files\SensorsViewPro41
2010-07-11 04:12 . 2010-07-11 04:12 -------- d-----w- c:\windows\system32\Futuremark
2010-07-11 04:12 . 2004-10-25 18:02 21664 ------w- c:\windows\system32\drivers\Entech.sys
2010-07-11 04:12 . 2001-11-19 17:05 3972 ------w- c:\windows\system32\drivers\PciBus.sys
2010-07-11 04:12 . 2010-07-15 13:55 -------- d-----w- c:\program files\Futuremark
2010-07-11 03:48 . 2008-06-14 17:36 272512 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-07-11 03:48 . 2009-12-31 16:50 353792 -c----w- c:\windows\system32\dllcache\srv.sys
2010-07-11 03:47 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-07-11 03:47 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-07-11 03:45 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2010-07-11 03:45 . 2008-05-01 14:36 331776 -c----w- c:\windows\system32\dllcache\msadce.dll
2010-07-11 03:43 . 2008-10-15 16:37 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2010-07-11 03:43 . 2009-07-31 04:35 1172480 -c----w- c:\windows\system32\dllcache\msxml3.dll
2010-07-11 03:43 . 2008-04-21 21:16 218112 -c----w- c:\windows\system32\dllcache\wordpad.exe
2010-07-10 21:23 . 2009-05-25 07:21 142336 ------r- c:\windows\system32\drivers\Rtenicxp.sys
2010-07-10 21:23 . 2009-03-03 12:18 73728 ------r- c:\windows\system32\RtNicProp32.dll
2010-07-10 21:22 . 2010-07-10 21:22 -------- d-----w- c:\program files\Realtek
2010-07-10 21:22 . 2010-07-10 21:22 -------- d-----w- c:\program files\Intel
2010-07-10 21:22 . 2009-06-16 04:05 53248 ------r- c:\windows\system32\CSVer.dll
2010-07-10 21:22 . 2010-07-10 21:22 -------- d-----w- C:\Intel
2010-07-10 21:21 . 2004-08-13 02:56 5810 ------r- c:\windows\system32\drivers\ASACPI.sys
2010-07-10 21:20 . 2009-04-02 12:30 10296 ------w- c:\windows\system32\drivers\ASUSHWIO.SYS
2010-07-10 21:09 . 2008-04-14 07:00 86016 -c----w- c:\windows\system32\dllcache\imekrmbx.dll
2010-07-10 21:07 . 2001-10-26 12:00 16384 -c----w- c:\windows\system32\dllcache\isignup.exe
2010-07-10 20:57 . 2001-10-26 12:00 24661 -c----w- c:\windows\system32\dllcache\spxcoins.dll
2010-07-10 20:57 . 2001-10-26 12:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
2010-07-10 20:57 . 2001-10-26 12:00 13312 -c----w- c:\windows\system32\dllcache\irclass.dll
2010-07-10 20:57 . 2001-10-26 12:00 13312 ----a-w- c:\windows\system32\irclass.dll
2010-07-10 17:18 . 2010-07-29 03:54 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-07-10 16:09 . 2010-05-06 10:35 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-07-10 16:09 . 2010-05-06 10:35 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-07-10 16:09 . 2010-05-06 10:35 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-07-10 16:09 . 2010-05-06 10:35 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-07-10 16:09 . 2010-05-06 10:35 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-07-10 16:09 . 2010-05-06 10:35 11076096 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-07-10 16:09 . 2010-05-06 10:35 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-07-10 16:08 . 2010-04-16 11:43 41984 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-07-10 15:44 . 2009-07-31 08:05 1372672 -c----w- c:\windows\system32\dllcache\msxml6.dll
2010-07-10 15:44 . 2008-04-14 06:41 89600 -c----w- c:\windows\system32\dllcache\msxml6r.dll
2010-07-10 15:44 . 2007-06-25 21:00 22060 -c----w- c:\windows\system32\dllcache\npds.zip
2010-07-10 15:44 . 2007-06-25 20:56 403 -c----w- c:\windows\system32\dllcache\npdrmv2.zip
2010-07-10 15:44 . 2008-04-14 07:01 102912 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2010-07-10 15:43 . 2008-04-14 07:02 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe
2010-07-10 15:42 . 2002-02-07 18:01 40960 ------w- c:\windows\system32\CTHELPER.EXE
2010-07-10 15:42 . 2002-03-13 15:25 57344 ------w- c:\windows\system32\CTAGENT.DLL
2010-07-10 15:28 . 2010-07-10 15:28 -------- d-----w- c:\program files\AGEIA Technologies
2010-07-10 15:28 . 2010-07-10 15:28 -------- d-----w- c:\windows\system32\AGEIA
2010-07-10 15:26 . 2009-07-03 03:11 457248 ------w- c:\windows\system32\nvudisp.exe
2010-07-10 15:24 . 2008-07-30 04:20 238088 ------w- c:\windows\system32\xactengine3_2.dll
2010-07-10 15:24 . 2008-07-10 09:01 467984 ------w- c:\windows\system32\d3dx10_39.dll
2010-07-10 15:24 . 2008-07-10 09:00 1493528 ------w- c:\windows\system32\D3DCompiler_39.dll
2010-07-10 15:24 . 2008-07-10 09:00 3851784 ------w- c:\windows\system32\D3DX9_39.dll
2010-07-10 15:24 . 2008-05-30 12:19 507400 ------w- c:\windows\system32\XAudio2_1.dll
2010-07-10 15:24 . 2008-05-30 12:18 238088 ------w- c:\windows\system32\xactengine3_1.dll
2010-07-10 15:24 . 2008-05-30 12:17 65032 ------w- c:\windows\system32\XAPOFX1_0.dll
2010-07-10 15:24 . 2008-05-30 12:17 25608 ------w- c:\windows\system32\X3DAudio1_4.dll
2010-07-10 15:23 . 2010-07-10 15:23 -------- d-----w- c:\program files\EXPERTool
2010-07-10 15:23 . 2007-03-16 08:11 12256 ------w- c:\windows\system32\drivers\TBPanel.sys
2010-07-10 15:21 . 2010-07-10 15:21 -------- d-----r- c:\windows\AsDmiHtm
2010-07-10 15:21 . 2010-07-10 15:21 -------- d-----w- c:\windows\system32\drivers\system32
2010-07-10 15:21 . 2010-07-10 15:21 -------- d-----w- c:\windows\system32\drivers\INF
2010-07-10 15:20 . 2008-04-14 07:02 76288 ----a-w- c:\windows\system32\usbui.dll
2010-07-01 16:27 . 2010-07-01 16:27 -------- d-----w- c:\program files\Common Files\Autodesk
2010-07-01 16:26 . 2010-07-01 16:26 -------- d-----w- c:\program files\DWG TrueView 2007
2010-07-01 16:13 . 2010-07-01 16:28 -------- d-----w- c:\program files\Autodesk
2010-07-01 04:00 . 2010-07-01 04:00 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\RawTherapeeAlpha
2010-07-01 04:00 . 2010-07-01 04:00 -------- d-----w- c:\program files\Raw Therapee 3.0 A1
2010-06-29 17:30 . 2010-06-28 20:57 38848 ------w- c:\windows\avastSS.scr

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-29 03:51 . 2001-10-26 12:00 467420 ----a-w- c:\windows\system32\perfh00E.dat
2010-07-29 03:51 . 2001-10-26 12:00 110664 ----a-w- c:\windows\system32\perfc00E.dat
2010-07-29 03:43 . 2009-01-01 15:51 -------- d-----w- c:\program files\FlashGet
2010-07-28 03:56 . 2009-10-04 12:17 -------- d-----w- c:\program files\Microsoft Silverlight
2010-07-27 17:30 . 2009-01-02 17:01 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-07-27 17:30 . 2009-01-02 17:00 183112 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-07-26 04:02 . 2010-05-28 16:59 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\vlc
2010-07-25 06:15 . 2010-05-28 17:41 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\dvdcss
2010-07-19 12:27 . 2009-01-01 13:14 82464 ----a-w- c:\documents and settings\P.J. Howard\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-07-18 07:19 . 2009-07-09 16:39 -------- d-----w- c:\program files\ArcSoft
2010-07-18 07:19 . 2009-07-09 16:39 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\ArcSoft
2010-07-18 07:17 . 2009-01-01 13:09 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-16 15:42 . 2010-06-02 16:56 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\iWin
2010-07-16 15:42 . 2010-06-02 16:56 -------- d-----w- c:\documents and settings\All Users\Application Data\iWin
2010-07-16 13:38 . 2009-07-03 04:17 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\PlayFirst
2010-07-16 13:38 . 2009-07-03 04:17 -------- d-----w- c:\documents and settings\All Users\Application Data\PlayFirst
2010-07-15 13:55 . 2010-07-14 17:43 86016 ------w- c:\windows\system32\OpenAL32.dll
2010-07-14 17:36 . 2009-01-01 13:07 -------- d-----w- c:\program files\Creative
2010-07-11 04:21 . 2009-03-16 10:17 1984 ------w- c:\windows\system32\d3d9caps.dat
2010-07-10 21:19 . 2010-06-21 12:32 -------- d-----w- c:\program files\ATI Technologies
2010-07-10 21:06 . 2010-01-03 04:43 23684 ------w- c:\windows\system32\emptyregdb.dat
2010-07-10 17:18 . 2009-01-01 15:44 691696 ------w- c:\windows\system32\drivers\sptd.sys
2010-07-10 17:17 . 2009-06-29 16:29 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2010-07-10 17:10 . 2009-01-01 17:14 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\DAEMON Tools
2010-07-10 15:28 . 2009-01-08 19:57 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-07-01 16:34 . 2009-01-02 12:03 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Autodesk
2010-07-01 16:28 . 2009-01-02 12:01 -------- d-----w- c:\program files\Common Files\Autodesk Shared
2010-07-01 16:26 . 2009-01-02 12:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Autodesk
2010-06-28 20:57 . 2010-05-28 17:35 165032 ------w- c:\windows\system32\aswBoot.exe
2010-06-28 20:37 . 2010-05-28 17:35 46672 ------w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 20:37 . 2010-05-28 17:35 165456 ------w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 20:33 . 2010-05-28 17:35 23376 ------w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 20:32 . 2010-05-28 17:35 100176 ------w- c:\windows\system32\drivers\aswmon2.sys
2010-06-28 20:32 . 2010-05-28 17:35 94544 ------w- c:\windows\system32\drivers\aswmon.sys
2010-06-28 20:32 . 2010-05-28 17:35 17744 ------w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-28 20:32 . 2010-05-28 17:35 28880 ------w- c:\windows\system32\drivers\aavmker4.sys
2010-06-28 10:05 . 2010-01-23 11:38 -------- d-----w- c:\program files\Hard Disk Sentinel
2010-06-23 04:44 . 2010-06-23 04:44 -------- d-----w- c:\program files\directx
2010-06-21 12:57 . 2009-01-02 09:13 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\ATI
2010-05-06 10:35 . 2004-08-17 14:47 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-02 08:09 . 2004-08-17 14:30 1851264 ----a-w- c:\windows\system32\win32k.sys
.

((((((((((((((((((((((((((((( SnapShot@2010-07-28_18.52.23 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-07-29 04:23 . 2010-07-29 04:23 16384 c:\windows\temp\Perflib_Perfdata_170.dat
+ 2001-10-26 12:00 . 2010-07-29 03:51 78674 c:\windows\system32\perfc009.dat
- 2001-10-26 12:00 . 2010-07-10 21:17 78674 c:\windows\system32\perfc009.dat
+ 2001-10-26 12:00 . 2010-07-29 03:51 459478 c:\windows\system32\perfh009.dat
- 2001-10-26 12:00 . 2010-07-10 21:17 459478 c:\windows\system32\perfh009.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-05-12 2181672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-15 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-04 1603152]
"IntelliType"="c:\program files\Microsoft Hardware\Keyboard\type32.exe" [2002-03-22 94208]
"Jet Detection"="c:\program files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2001-10-03 28672]
"CTStartup"="c:\program files\Creative\Splash Screen\CTEaxSpl.EXE" [2001-12-20 28672]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]
"EverioService"="c:\program files\CyberLink\PCM4Everio\EverioService.exe" [2006-11-22 151552]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"nwiz"="nwiz.exe" [2009-06-10 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-06-10 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-10 13758464]
"WINDVDPatch"="CTHELPER.EXE" [2002-02-07 40960]
"HDAudDeck"="c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2009-06-17 33628160]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Indˇt˘pult\
APC UPS Status.lnk - c:\program files\APC\APC PowerChute Personal Edition\Display.exe [2010-3-20 221247]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^AutoCAD indításgyorsító.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Indítópult\AutoCAD indításgyorsító.lnk
backup=c:\windows\pss\AutoCAD indításgyorsító.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^GammaTray.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Indítópult\GammaTray.lnk
backup=c:\windows\pss\GammaTray.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ------w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EverioService]
2006-11-22 20:10 151552 ------w- c:\program files\CyberLink\PCM4Everio\EverioService.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2006-01-12 13:40 155648 ------w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2008-12-03 11:47 1205760 ------w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
2000-05-11 00:00 90112 ------w- c:\windows\Updreg.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WINDVDPatch]
2002-02-07 18:01 40960 ------w- c:\windows\system32\CTHELPER.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"RichVideo"=2 (0x2)
"InCDsrv"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Research\\Microsoft WorldWide Telescope\\WWTExplorer.exe"=
"c:\\Program Files\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
"e:\\EA Games\\Need for Speed Most Wanted\\speed.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\FlashGet\\FlashGet.exe"=
"e:\\EA Games\\Need for Speed Undercover\\nfs.exe"=
"e:\\Microsoft Games\\Age of Empires\\Empires.exe"=
"e:\\Microsoft Games\\Age of Empires II\\EMPIRES2.EXE"=
"e:\\Microsoft Games\\Age of Empires II\\age2_x1\\age2_x1.exe"=

R0 CLBStor;InstantBurn Storage Helper Driver;c:\windows\system32\drivers\CLBStor.sys [2009.05.24. 15:31 10368]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2010.05.28. 19:35 165456]
R1 sensorsview;sensorsview;c:\program files\SensorsViewPro41\drv\sensorsview32.sys [2008.07.26. 20:30 14416]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2010.05.28. 19:35 17744]
R2 SensorsVService;SensorsVService;c:\program files\SensorsViewPro41\svservice.exe [2010.06.17. 19:01 923648]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2010.07.14. 20:07 1374464]
S1 archlp;archlp;c:\windows\system32\drivers\archlp.sys --> c:\windows\system32\drivers\archlp.sys [?]
S3 pccsmcfd;PCCS Mode Change Filter Driver;c:\windows\system32\drivers\pccsmcfd.sys [2009.03.05. 19:23 18816]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\i:\ntglm7x.sys --> i:\NTGLM7X.sys [?]
S3 TempLog;TempLog;c:\program files\Hard Disk Sentinel\HDSentinel.sys [2010.01.23. 13:38 3897]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [2009.01.01. 17:44 691696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-05-18 16:54 451872 ------w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uInternet Connection Wizard,ShellNext = iexplore
IE: &Letöltés a FlashGet-tel - c:\program files\FlashGet\jc_link.htm
IE: &Minden letöltése a FlashGet-tel - c:\program files\FlashGet\jc_all.htm
IE: E&xportálás Microsoft Excel formátumba - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://webcam1.sze.hu/activex/AMC.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-29 06:23
Windows 5.1.2600 Szervizcsomag 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTStartup = c:\program files\Creative\Splash Screen\CTEaxSpl.EXE /run???h??????s?????\?w? ?w???????w???w4???????.??w4???????4???TA?s4????????&8?????\??? ??? ???\???\???????????5?7~e?7~\???\????????B`??????C@?\???\??????s????\??????s\????&8?A??s?&8??C@?x???`|?w\?????@
HDAudDeck = c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-484763869-1229272821-682003330-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:7a,0c,28,22,63,63,63,15,ec,1e,6c,64,89,d7,79,6b,84,6d,7f,87,c4,d0,ba,
48,63,42,4d,37,c9,59,f1,8a,14,a8,a3,6b,23,77,83,d0,39,45,f2,7c,5d,f7,02,5b,\
"??"=hex:ed,98,74,3a,0a,a8,4f,c2,66,f2,93,d0,f0,7e,b7,4e

[HKEY_USERS\S-1-5-21-484763869-1229272821-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:1b,c7,63,c6,a8,c2,8c,0b,81,30,4d,c7,db,92,15,be,41,f5,6f,a3,87,
1b,39,1b,9a,97,b5,3f,a6,d6,9a,91,60,a5,78,58,cc,e1,1f,2c,c1,f4,69,e7,05,16,\
"rkeysecu"=hex:86,b2,aa,7c,45,df,24,48,71,e9,98,75,94,c4,7c,ae

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(700)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll

- - - - - - - > 'explorer.exe'(2288)
c:\windows\system32\WININET.dll
c:\windows\system32\ctagent.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Lavasoft\Ad-Aware\aawservice.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\APC\APC PowerChute Personal Edition\apcsystray.exe
c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files\APC\APC PowerChute Personal Edition\mainserv.exe
c:\windows\system32\CTsvcCDA.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\PnkBstrA.exe
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\MsPMSPSv.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Completion time: 2010-07-29 06:26:10 - machine was rebooted
ComboFix-quarantined-files.txt 2010-07-29 04:26
ComboFix2.txt 2010-07-28 18:53

Pre-Run: 30 795 948 032 bájt szabad
Post-Run: 30 782 976 000 bájt szabad

Current=7 Default=7 Failed=0 LastKnownGood=10 Sets=1,2,3,4,5,6,7,8,9,10
- - End Of File - - 38260E73B17809207F0230E5448F06E9

nem tudom bemásolmi, vagy beírni az útvonalat, csak tallozni tudom, valami túlterheltségre hivatkoznak, hogy e-mailban küldjem el a dolgot, ha jó nekem.

hello

megcsináltam a filet, rámásoltam, elindult kérte hogy állítsam le az avastot és a deamontoolst leállítottam, újraindult a gép, végig futott közben kidobot egy ilyet, hogy cscript.cfxxe helyezze be a lemezt mégse, újra, továb gombok, de közben csinálta amit kell és a tovább gombott nyomtam (ez már azelőző futatásnál is megjelent) végigfutott, újraindult, és kiírta, hogy finis, de nem adott semmit.

egyébként van weboldal ami azelött elindult most csak anyit ír ki rá hogy IT WORKS!

..pedig ott van a registryben:és ez valami ArcSoft Photostudio v 3D asztal hozománya:nézze a frisítéseket is..,de egyben egy backdoor!,mégha törölted is a programot,fut a háttérben,ráadásul elég régi hiba(kb 2 éves),amit a cég azóta sem javított

oda kelet klikelni a virustotalon-Prochazet-es aztan az ablakba bemasolni.
c:\windows\system32\drivers\archlp.sys
ok
kuldes,,
de mindegy majd holnap meg keresem,,most csinald meg eztet es a logot tedd ide,,majd holnap megnezem
Kinyitunk - Notepadot (Jegyzetfüzetet)igy: Start>futtatás>beírod: notepad
és bemásolod- a Kód: címszó alatt található zöld textet(Kód: szó nélkül), aztán a notepadba beillesztett textet elmentjük scriptnek az asztalra , úgy:- Fájl>Mentés Másként>Fájlnév>CFScript.txt>Fájl típusa>Minden fájl>Mentés.(Ásztálra),.Kész, az astalon lévő CFScript txt húzzunk rá a ComboFix ikonnyara. Es mostan megcsinalod eztett:

A combofix maga elindul es lehet hogy restartol es befejezi a scent.Amit majd ad ted ide.

nem találtam ilyen nevű filet. rákerestem keresővel is, de az sem talált.

eztet teszteld le a www.virustotal.com
c:\windows\system32\drivers\archlp.sys
a tesztrol a linket tedd ide.

Igen töröltem s cclinert is lefutattam és ott is töröltem mindent, végig futot az utolsó progi is itt a logja:

ComboFix 10-07-27.05 - P.J. Howard 010.07.28. 20:49:53.1.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1250.36.1038.18.3327.2821 [GMT 2:00]
Running from: d:\irando\Prg\virus irto progik\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\P.J. Howard\Application Data\ACD Systems\ACDSee\ImageDB.ddf
c:\windows\d.ini
c:\windows\UA000106.DLL

.
((((((((((((((((((((((((( Files Created from 2010-06-28 to 2010-07-28 )))))))))))))))))))))))))))))))
.

2010-07-28 18:40 . 2010-07-28 18:40 -------- d-----w- c:\program files\CCleaner
2010-07-28 17:18 . 2010-07-28 17:18 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Malwarebytes
2010-07-28 17:17 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-28 17:17 . 2010-07-28 17:17 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-28 17:17 . 2010-07-28 17:17 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-28 17:17 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-28 16:18 . 2010-07-28 16:19 -------- d-----w- C:\rsit
2010-07-28 16:18 . 2010-07-28 16:19 -------- d-----w- c:\program files\trend micro
2010-07-25 10:25 . 2010-07-25 10:25 -------- d-----w- c:\program files\undelelte plus
2010-07-25 10:11 . 2010-07-25 10:11 -------- d-----w- c:\documents and settings\P.J. Howard\Local Settings\Application Data\TouchStoneSoftware
2010-07-19 12:27 . 2010-07-19 12:32 -------- dc----w- c:\documents and settings\P.J. Howard\Local Settings\Application Data\MigWiz
2010-07-18 16:47 . 2010-07-18 16:47 -------- d-----w- c:\program files\1stbenison
2010-07-18 08:21 . 2010-07-18 08:21 -------- d-----w- c:\program files\Windows Easy Transfer 7
2010-07-18 06:58 . 2010-07-18 06:58 -------- d-----w- c:\program files\MSECache
2010-07-16 15:43 . 2010-07-16 15:43 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Mariaglorum
2010-07-16 15:37 . 2010-07-16 15:47 -------- d-----w- c:\program files\CD to MP3 Freeware
2010-07-16 15:29 . 2010-07-16 15:36 -------- d-----w- c:\program files\AltoMP3 Gold
2010-07-16 13:40 . 2010-07-16 13:40 -------- d-----w- c:\documents and settings\All Users\Application Data\MumboJumbo
2010-07-16 13:36 . 2010-07-16 13:36 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\HitPoint Studios
2010-07-16 13:36 . 2010-07-16 13:36 -------- d-----w- c:\documents and settings\All Users\Application Data\HitPoint Studios
2010-07-16 05:32 . 2010-07-22 13:10 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Paige Harper and the Tome of Mystery
2010-07-16 05:23 . 2010-07-16 05:23 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Floodlight Games
2010-07-16 05:23 . 2010-07-16 05:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Floodlight Games
2010-07-16 05:22 . 2010-07-16 05:22 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\FloodLightGames
2010-07-16 05:22 . 2010-07-16 05:22 -------- d-----w- c:\documents and settings\All Users\Application Data\FloodLightGames
2010-07-16 05:20 . 2010-07-16 05:23 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Flood Light Games
2010-07-16 05:20 . 2010-07-16 05:23 -------- d-----w- c:\documents and settings\All Users\Application Data\Flood Light Games
2010-07-15 13:55 . 2010-07-15 13:55 262144 ------w- c:\windows\system32\wrap_oal.dll
2010-07-15 13:55 . 2004-06-22 13:44 5632 ------w- c:\windows\system32\drivers\Entech64.sys
2010-07-15 13:43 . 2010-07-15 13:43 -------- d-----w- c:\program files\MadOnion.com
2010-07-14 18:07 . 2008-02-14 06:12 1389056 ------r- c:\windows\system32\drivers\monfilt.sys
2010-07-14 18:07 . 2009-06-02 08:52 1374464 ------r- c:\windows\system32\drivers\viahduaa.sys
2010-07-14 18:06 . 2007-04-11 07:35 331184 ------w- c:\windows\system32\difxapi.dll
2010-07-14 18:06 . 2010-07-14 18:07 -------- d-----w- c:\program files\VIA
2010-07-14 17:57 . 2010-07-14 17:57 -------- d-----w- c:\documents and settings\P.J. Howard\Local Settings\Application Data\PackageAware
2010-07-14 17:44 . 2010-07-14 18:00 24 ------w- c:\windows\system32\DVCStateBkp-{00000005-00000000-00000002-00001102-00000002-80641102}.dat
2010-07-14 17:44 . 2010-07-14 18:00 24 ------w- c:\windows\system32\DVCState-{00000005-00000000-00000002-00001102-00000002-80641102}.dat
2010-07-14 03:29 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2010-07-12 03:18 . 2010-07-12 03:18 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\STV Software
2010-07-12 03:18 . 2010-07-13 14:53 -------- d-----w- c:\program files\SensorsViewPro41
2010-07-11 04:12 . 2010-07-11 04:12 -------- d-----w- c:\windows\system32\Futuremark
2010-07-11 04:12 . 2004-10-25 18:02 21664 ------w- c:\windows\system32\drivers\Entech.sys
2010-07-11 04:12 . 2001-11-19 17:05 3972 ------w- c:\windows\system32\drivers\PciBus.sys
2010-07-11 04:12 . 2010-07-15 13:55 -------- d-----w- c:\program files\Futuremark
2010-07-11 03:48 . 2008-06-14 17:36 272512 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-07-11 03:48 . 2009-12-31 16:50 353792 -c----w- c:\windows\system32\dllcache\srv.sys
2010-07-11 03:47 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-07-11 03:47 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-07-11 03:45 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2010-07-11 03:45 . 2008-05-01 14:36 331776 -c----w- c:\windows\system32\dllcache\msadce.dll
2010-07-11 03:43 . 2008-10-15 16:37 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2010-07-11 03:43 . 2009-07-31 04:35 1172480 -c----w- c:\windows\system32\dllcache\msxml3.dll
2010-07-11 03:43 . 2008-04-21 21:16 218112 -c----w- c:\windows\system32\dllcache\wordpad.exe
2010-07-10 21:23 . 2009-05-25 07:21 142336 ------r- c:\windows\system32\drivers\Rtenicxp.sys
2010-07-10 21:23 . 2009-03-03 12:18 73728 ------r- c:\windows\system32\RtNicProp32.dll
2010-07-10 21:22 . 2010-07-10 21:22 -------- d-----w- c:\program files\Realtek
2010-07-10 21:22 . 2010-07-10 21:22 -------- d-----w- c:\program files\Intel
2010-07-10 21:22 . 2009-06-16 04:05 53248 ------r- c:\windows\system32\CSVer.dll
2010-07-10 21:22 . 2010-07-10 21:22 -------- d-----w- C:\Intel
2010-07-10 21:21 . 2004-08-13 02:56 5810 ------r- c:\windows\system32\drivers\ASACPI.sys
2010-07-10 21:20 . 2009-04-02 12:30 10296 ------w- c:\windows\system32\drivers\ASUSHWIO.SYS
2010-07-10 21:09 . 2008-04-14 07:00 86016 -c----w- c:\windows\system32\dllcache\imekrmbx.dll
2010-07-10 21:07 . 2001-10-26 12:00 16384 -c----w- c:\windows\system32\dllcache\isignup.exe
2010-07-10 20:57 . 2001-10-26 12:00 24661 -c----w- c:\windows\system32\dllcache\spxcoins.dll
2010-07-10 20:57 . 2001-10-26 12:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
2010-07-10 20:57 . 2001-10-26 12:00 13312 -c----w- c:\windows\system32\dllcache\irclass.dll
2010-07-10 20:57 . 2001-10-26 12:00 13312 ----a-w- c:\windows\system32\irclass.dll
2010-07-10 17:18 . 2010-07-10 17:18 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2010-07-10 17:06 . 2010-07-10 17:20 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-07-10 16:09 . 2010-05-06 10:35 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2010-07-10 16:09 . 2010-05-06 10:35 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2010-07-10 16:09 . 2010-05-06 10:35 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-07-10 16:09 . 2010-05-06 10:35 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2010-07-10 16:09 . 2010-05-06 10:35 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-07-10 16:09 . 2010-05-06 10:35 11076096 -c----w- c:\windows\system32\dllcache\ieframe.dll
2010-07-10 16:09 . 2010-05-06 10:35 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-07-10 16:08 . 2010-04-16 11:43 41984 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-07-10 15:44 . 2009-07-31 08:05 1372672 -c----w- c:\windows\system32\dllcache\msxml6.dll
2010-07-10 15:44 . 2008-04-14 06:41 89600 -c----w- c:\windows\system32\dllcache\msxml6r.dll
2010-07-10 15:44 . 2007-06-25 21:00 22060 -c----w- c:\windows\system32\dllcache\npds.zip
2010-07-10 15:44 . 2007-06-25 20:56 403 -c----w- c:\windows\system32\dllcache\npdrmv2.zip
2010-07-10 15:44 . 2008-04-14 07:01 102912 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2010-07-10 15:43 . 2008-04-14 07:02 294912 -c----w- c:\windows\system32\dllcache\dlimport.exe
2010-07-10 15:42 . 2002-02-07 18:01 40960 ------w- c:\windows\system32\CTHELPER.EXE
2010-07-10 15:42 . 2002-03-13 15:25 57344 ------w- c:\windows\system32\CTAGENT.DLL
2010-07-10 15:28 . 2010-07-10 15:28 -------- d-----w- c:\program files\AGEIA Technologies
2010-07-10 15:28 . 2010-07-10 15:28 -------- d-----w- c:\windows\system32\AGEIA
2010-07-10 15:26 . 2009-07-03 03:11 457248 ------w- c:\windows\system32\nvudisp.exe
2010-07-10 15:24 . 2008-07-30 04:20 238088 ------w- c:\windows\system32\xactengine3_2.dll
2010-07-10 15:24 . 2008-07-10 09:01 467984 ------w- c:\windows\system32\d3dx10_39.dll
2010-07-10 15:24 . 2008-07-10 09:00 1493528 ------w- c:\windows\system32\D3DCompiler_39.dll
2010-07-10 15:24 . 2008-07-10 09:00 3851784 ------w- c:\windows\system32\D3DX9_39.dll
2010-07-10 15:24 . 2008-05-30 12:19 507400 ------w- c:\windows\system32\XAudio2_1.dll
2010-07-10 15:24 . 2008-05-30 12:18 238088 ------w- c:\windows\system32\xactengine3_1.dll
2010-07-10 15:24 . 2008-05-30 12:17 65032 ------w- c:\windows\system32\XAPOFX1_0.dll
2010-07-10 15:24 . 2008-05-30 12:17 25608 ------w- c:\windows\system32\X3DAudio1_4.dll
2010-07-10 15:23 . 2010-07-10 15:23 -------- d-----w- c:\program files\EXPERTool
2010-07-10 15:23 . 2007-03-16 08:11 12256 ------w- c:\windows\system32\drivers\TBPanel.sys
2010-07-10 15:21 . 2010-07-10 15:21 -------- d-----r- c:\windows\AsDmiHtm
2010-07-10 15:21 . 2010-07-10 15:21 -------- d-----w- c:\windows\system32\drivers\system32
2010-07-10 15:21 . 2010-07-10 15:21 -------- d-----w- c:\windows\system32\drivers\INF
2010-07-10 15:20 . 2008-04-14 07:02 76288 ----a-w- c:\windows\system32\usbui.dll
2010-07-01 16:27 . 2010-07-01 16:27 -------- d-----w- c:\program files\Common Files\Autodesk
2010-07-01 16:26 . 2010-07-01 16:26 -------- d-----w- c:\program files\DWG TrueView 2007
2010-07-01 16:13 . 2010-07-01 16:28 -------- d-----w- c:\program files\Autodesk
2010-07-01 04:00 . 2010-07-01 04:00 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\RawTherapeeAlpha
2010-07-01 04:00 . 2010-07-01 04:00 -------- d-----w- c:\program files\Raw Therapee 3.0 A1
2010-06-29 17:30 . 2010-06-28 20:57 38848 ------w- c:\windows\avastSS.scr

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-28 18:35 . 2009-01-01 15:51 -------- d-----w- c:\program files\FlashGet
2010-07-28 03:56 . 2009-10-04 12:17 -------- d-----w- c:\program files\Microsoft Silverlight
2010-07-27 17:30 . 2009-01-02 17:01 138184 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-07-27 17:30 . 2009-01-02 17:00 183112 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-07-26 04:02 . 2010-05-28 16:59 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\vlc
2010-07-25 06:15 . 2010-05-28 17:41 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\dvdcss
2010-07-19 12:27 . 2009-01-01 13:14 82464 ----a-w- c:\documents and settings\P.J. Howard\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-07-18 07:19 . 2009-07-09 16:39 -------- d-----w- c:\program files\ArcSoft
2010-07-18 07:19 . 2009-07-09 16:39 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\ArcSoft
2010-07-18 07:17 . 2009-01-01 13:09 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-16 15:42 . 2010-06-02 16:56 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\iWin
2010-07-16 15:42 . 2010-06-02 16:56 -------- d-----w- c:\documents and settings\All Users\Application Data\iWin
2010-07-16 13:38 . 2009-07-03 04:17 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\PlayFirst
2010-07-16 13:38 . 2009-07-03 04:17 -------- d-----w- c:\documents and settings\All Users\Application Data\PlayFirst
2010-07-15 13:55 . 2010-07-14 17:43 86016 ------w- c:\windows\system32\OpenAL32.dll
2010-07-14 17:36 . 2009-01-01 13:07 -------- d-----w- c:\program files\Creative
2010-07-11 04:21 . 2009-03-16 10:17 1984 ------w- c:\windows\system32\d3d9caps.dat
2010-07-10 21:19 . 2010-06-21 12:32 -------- d-----w- c:\program files\ATI Technologies
2010-07-10 21:17 . 2001-10-26 12:00 467420 ----a-w- c:\windows\system32\perfh00E.dat
2010-07-10 21:17 . 2001-10-26 12:00 110664 ----a-w- c:\windows\system32\perfc00E.dat
2010-07-10 21:06 . 2010-01-03 04:43 23684 ------w- c:\windows\system32\emptyregdb.dat
2010-07-10 17:18 . 2009-01-01 15:44 691696 ------w- c:\windows\system32\drivers\sptd.sys
2010-07-10 17:17 . 2009-06-29 16:29 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2010-07-10 17:10 . 2009-01-01 17:14 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\DAEMON Tools
2010-07-10 15:28 . 2009-01-08 19:57 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-07-01 16:34 . 2009-01-02 12:03 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\Autodesk
2010-07-01 16:28 . 2009-01-02 12:01 -------- d-----w- c:\program files\Common Files\Autodesk Shared
2010-07-01 16:26 . 2009-01-02 12:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Autodesk
2010-06-28 20:57 . 2010-05-28 17:35 165032 ------w- c:\windows\system32\aswBoot.exe
2010-06-28 20:37 . 2010-05-28 17:35 46672 ------w- c:\windows\system32\drivers\aswTdi.sys
2010-06-28 20:37 . 2010-05-28 17:35 165456 ------w- c:\windows\system32\drivers\aswSP.sys
2010-06-28 20:33 . 2010-05-28 17:35 23376 ------w- c:\windows\system32\drivers\aswRdr.sys
2010-06-28 20:32 . 2010-05-28 17:35 100176 ------w- c:\windows\system32\drivers\aswmon2.sys
2010-06-28 20:32 . 2010-05-28 17:35 94544 ------w- c:\windows\system32\drivers\aswmon.sys
2010-06-28 20:32 . 2010-05-28 17:35 17744 ------w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-28 20:32 . 2010-05-28 17:35 28880 ------w- c:\windows\system32\drivers\aavmker4.sys
2010-06-28 10:05 . 2010-01-23 11:38 -------- d-----w- c:\program files\Hard Disk Sentinel
2010-06-23 04:44 . 2010-06-23 04:44 -------- d-----w- c:\program files\directx
2010-06-21 12:57 . 2009-01-02 09:13 -------- d-----w- c:\documents and settings\P.J. Howard\Application Data\ATI
2010-05-06 10:35 . 2004-08-17 14:47 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-02 08:09 . 2004-08-17 14:30 1851264 ----a-w- c:\windows\system32\win32k.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"="c:\program files\EXPERTool\TBPanel.exe" [2009-05-12 2181672]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-15 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-04 1603152]
"IntelliType"="c:\program files\Microsoft Hardware\Keyboard\type32.exe" [2002-03-22 94208]
"Jet Detection"="c:\program files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2001-10-03 28672]
"CTStartup"="c:\program files\Creative\Splash Screen\CTEaxSpl.EXE" [2001-12-20 28672]
"ArcSoft Connection Service"="c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-03-18 207360]
"EverioService"="c:\program files\CyberLink\PCM4Everio\EverioService.exe" [2006-11-22 151552]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-06-28 2837864]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"nwiz"="nwiz.exe" [2009-06-10 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-06-10 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-06-10 13758464]
"WINDVDPatch"="CTHELPER.EXE" [2002-02-07 40960]
"HDAudDeck"="c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2009-06-17 33628160]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Indˇt˘pult\
APC UPS Status.lnk - c:\program files\APC\APC PowerChute Personal Edition\Display.exe [2010-3-20 221247]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^AutoCAD indításgyorsító.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Indítópult\AutoCAD indításgyorsító.lnk
backup=c:\windows\pss\AutoCAD indításgyorsító.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^GammaTray.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Indítópult\GammaTray.lnk
backup=c:\windows\pss\GammaTray.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ------w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EverioService]
2006-11-22 20:10 151552 ------w- c:\program files\CyberLink\PCM4Everio\EverioService.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2006-01-12 13:40 155648 ------w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2008-12-03 11:47 1205760 ------w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
2000-05-11 00:00 90112 ------w- c:\windows\Updreg.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WINDVDPatch]
2002-02-07 18:01 40960 ------w- c:\windows\system32\CTHELPER.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"RichVideo"=2 (0x2)
"InCDsrv"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Research\\Microsoft WorldWide Telescope\\WWTExplorer.exe"=
"c:\\Program Files\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
"e:\\EA Games\\Need for Speed Most Wanted\\speed.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\FlashGet\\FlashGet.exe"=
"e:\\EA Games\\Need for Speed Undercover\\nfs.exe"=
"e:\\Microsoft Games\\Age of Empires\\Empires.exe"=
"e:\\Microsoft Games\\Age of Empires II\\EMPIRES2.EXE"=
"e:\\Microsoft Games\\Age of Empires II\\age2_x1\\age2_x1.exe"=

R1 archlp;archlp;c:\windows\system32\drivers\archlp.sys [x]
R2 SensorsVService;SensorsVService;c:\program files\SensorsViewPro41\svservice.exe [2010-06-17 923648]
R3 pccsmcfd;PCCS Mode Change Filter Driver;c:\windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
R3 SetupNTGLM7X;SetupNTGLM7X;I:\NTGLM7X.sys [x]
R3 TempLog;TempLog;c:\program files\Hard Disk Sentinel\HDSentinel.sys [2004-11-30 3897]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-07-10 691696]
S0 CLBStor;InstantBurn Storage Helper Driver; [x]
S1 aswSP;aswSP; [x]
S1 sensorsview;sensorsview;c:\program files\SensorsViewPro41\drv\sensorsview32.sys [2008-07-26 14416]
S2 aswFsBlk;aswFsBlk; [x]
S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2009-06-02 1374464]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-05-18 16:54 451872 ------w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uInternet Connection Wizard,ShellNext = iexplore
IE: &Letöltés a FlashGet-tel - c:\program files\FlashGet\jc_link.htm
IE: &Minden letöltése a FlashGet-tel - c:\program files\FlashGet\jc_all.htm
IE: E&xportálás Microsoft Excel formátumba - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://webcam1.sze.hu/activex/AMC.cab
.
.
------- File Associations -------
.
.scr=AutoCADScriptFile
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-POINTER - point32.exe
SafeBoot-Wdf01000.sys
MSConfigStartUp-DAEMON Tools Lite - c:\program files\DAEMON Tools Lite\daemon.exe
MSConfigStartUp-InCD - c:\program files\Nero\Nero 7\InCD\InCD.exe
MSConfigStartUp-iTunesHelper - c:\program files\iTunes\iTunesHelper.exe
MSConfigStartUp-MagicRotation - c:\program files\MagicRotation\MagicPvt.exe
MSConfigStartUp-Microsoft WinUpdate - c:\windows\system32\msupdte.exe
MSConfigStartUp-nk_nnvz - c:\documents and settings\P.J. Howard\Local Settings\Application Data\ulBWR.exe
MSConfigStartUp-QuickTime Task - c:\windows\system32\qttask.exe
MSConfigStartUp-UVS11 Preload - c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
AddRemove-Farm Frenzy 3: Ice Age - e:\alawar\Farm Frenzy 3 Ice Age\Uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-28 20:52
Windows 5.1.2600 Szervizcsomag 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
CTStartup = c:\program files\Creative\Splash Screen\CTEaxSpl.EXE /run???h??????s?????\?w? ?w???????w???w4???????.??w4???????4???TA?s4????????&8?????\??? ??? ???\???\???????????5?7~e?7~\???\?????????`??????C@?\???\??????s????\??????s\????&8?A??s?&8??C@?x???`|?w\?????@
HDAudDeck = c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-484763869-1229272821-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{37367481-141B-558B-D5CE-642C9E2D1F5E}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"iafngbgghjfacnnkgg"=hex:6a,61,61,64,67,6a,66,63,62,64,6d,6d,6a,6f,63,65,6f,61,
68,65,00,00
"halnailbpgnbcgne"=hex:6a,61,62,64,69,6a,66,6c,70,66,68,6f,6b,6f,6c,69,61,6a,
6f,6a,00,00

[HKEY_USERS\S-1-5-21-484763869-1229272821-682003330-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:72,2d,f5,df,48,db,df,34,11,ee,35,23,87,b2,49,99,a1,aa,ce,f2,d1,1f,81,
90,78,27,37,ce,bc,34,b8,9b,7c,c9,76,56,28,27,39,61,35,84,38,0f,2d,13,50,cd,\
"??"=hex:c4,02,86,ac,d5,7c,54,d7,da,1b,ad,67,97,e4,96,23

[HKEY_USERS\S-1-5-21-484763869-1229272821-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:1b,c7,63,c6,a8,c2,8c,0b,81,30,4d,c7,db,92,15,be,41,f5,6f,a3,87,
1b,39,1b,9a,97,b5,3f,a6,d6,9a,91,60,a5,78,58,cc,e1,1f,2c,c1,f4,69,e7,05,16,\
"rkeysecu"=hex:86,b2,aa,7c,45,df,24,48,71,e9,98,75,94,c4,7c,ae

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{0217BDF7-2550-39CC-5FEC-B22136BE52DE}\InProcServer32*]
"jadembjfeenohaonhfhd"=hex:6a,61,63,66,63,64,65,68,6f,61,69,6f,6a,68,68,67,67,
6a,62,65,00,fa
"iadegbphchnmefbeie"=hex:6a,61,63,66,70,64,62,68,68,6b,6f,67,6a,6b,64,6b,6d,6f,
62,6f,00,fa

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(700)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Completion time: 2010-07-28 20:53:46
ComboFix-quarantined-files.txt 2010-07-28 18:53

Pre-Run: 30 876 962 816 bájt szabad
Post-Run: 30 847 520 768 bájt szabad

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional - magyar" /noexecute=optin /fastdetect

Current=7 Default=7 Failed=0 LastKnownGood=10 Sets=1,2,3,4,5,6,7,8,9,10
- - End Of File - - FB0671004008B65B90B26168FAAF4242

De eztet Torolnod kellet a Malwarebytes programal,ugy ahogy le van irva,,mert most nincsen torolve.
No action taken.

meg van az első log

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Adatbázis verzió: 4052

Windows 5.1.2600 Szervizcsomag 3
Internet Explorer 8.0.6001.18702

2010.07.28. 20:30:10
mbam-log-2010-07-28 (20-30-10).txt

Vizsgálat típusa: Teljes vizsgálat (C:\|D:\|E:\|F:\|G:\|H:\|)
Átvizsgált objektumok: 399221
Eltelt idő: 1 óra, 3 perc, 52 másodperc

Fertőzött memóriafolyamatok: 0
Fertőzött memória modulok: 0
Fertőzött Rendszerleíró kulcsok: 0
Fertőzött Rendszerleíró értékek: 0
Fertőzött Rendszerleíró adatelemek: 0
Fertőzött mappák: 0
Fertőzött fájlok: 2

Fertőzött memóriafolyamatok:
(Nem találhatók rosszindulatú elemek)

Fertőzött memória modulok:
(Nem találhatók rosszindulatú elemek)

Fertőzött Rendszerleíró kulcsok:
(Nem találhatók rosszindulatú elemek)

Fertőzött Rendszerleíró értékek:
(Nem találhatók rosszindulatú elemek)

Fertőzött Rendszerleíró adatelemek:
(Nem találhatók rosszindulatú elemek)

Fertőzött mappák:
(Nem találhatók rosszindulatú elemek)

Fertőzött fájlok:
E:\Mystery Case Files - Dire Grove Collector's Edition\Uninstall.exe (Malware.Packer.Krunchy) -> No action taken.
C:\WINDOWS\system32\msupdte.exe (Backdoor.Bot) -> No action taken.

igen igazad volt a fertőzéssel kapcsolatban

es miert nem csinalod azt amit irok__Te esetetben pldaul ez a bejedzes is"
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft WinUpdate]
C:\WINDOWS\system32\msupdte.exe [2009-01-20 3702]
ez backdoor,,tehat van tobb iss,

mi mutatja, hogy vírus van a gépen? sok minden utal rá vagy egy bizonyos sor?

Sanyi46
Neked is le kell futtatni a combofixet,,,de a logjat mar ne ide tedd,mert ossze keveredik a masikall,es nem fogom tudni mejik log kie,,ok,Tehat tedd oda ahol nincsen mai hozzaszolas,,ok

Küldöm az RSIT logot:

Logfile of random's system information tool 1.07 (written by random/random)
Run by Tomi at 2010-07-28 09:07:54
Microsoft Windows XP Professional Szervizcsomag 3
System drive C: has 30 GB (59%) free of 50 GB
Total RAM: 1023 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:08:00, on 2010.07.28.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\vsnpstd.exe
C:\program files\borsosfisoft\névnap v.4.0\nevnap.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\CONCEPTRONIC Multimedia\PVR Plus\TVR\Scheduled.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Tomi\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Program Files\Total Commander 2008 Final Edition by K-ED\TOTALCMD.EXE
C:\Program Files\RSIT.exe
C:\Program Files\trend micro\Tomi.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com?o=14909&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 10\SnagitBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 10\SnagitIEAddin.dll
O3 - Toolbar: IsoBuster Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [Névnap] c:\program files\borsosfisoft\névnap v.4.0\nevnap.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [PVR Agent] C:\Program Files\CONCEPTRONIC Multimedia\PVR Plus\TVR\Scheduled.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Tomi\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Kutatás - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9B57EA-C414-495C-8917-27DB23F8C000}: NameServer = 81.93.193.4,81.93.193.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9B57EA-C414-495C-8917-27DB23F8C000}: NameServer = 81.93.193.4,81.93.193.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9B57EA-C414-495C-8917-27DB23F8C000}: NameServer = 81.93.193.4,81.93.193.2
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui előbetöltője - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Komponenskategóriák gyorsítótárazási szolgáltatása - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe
O23 - Service: Logikai lemezkezelő felügyeleti szolgáltatás (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Eseménynapló (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: IMAPI CD-égető COM-szolgáltatás (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NetMeeting távoli asztalmegosztás (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Távoli asztal súgó-munkamenetének kezelője (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Intelligens kártya (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Teljesítménynaplók és riasztások (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Kötet árnyékmásolata (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: WMI teljesítményadapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: A Windows Media Player hálózatmegosztási szolgáltatása (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

--
End of file - 10174 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-73586283-1606980848-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-682003330-73586283-1606980848-1003UA.job
C:\WINDOWS\tasks\NeroLiveEpgUpdate-P4_Tomi.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
C:\WINDOWS\tasks\SLOW-PCfighter-Tomi-Startup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00C6482D-C502-44C8-8409-FCE54AD9C208}]
SnagIt Toolbar Loader - C:\Program Files\TechSmith\Snagit 10\SnagitBHO.dll [2010-04-13 63304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - c:\program files\real\realplayer\rpbrowserrecordplugin.dll [2009-11-11 329312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
IsoBuster Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-12 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - Snagit - C:\Program Files\TechSmith\Snagit 10\SnagitIEAddin.dll [2010-04-13 206152]
{D4027C7F-154A-4066-A1AD-4243D8127440} - IsoBuster Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-02-26 65024]
"snpstd"=C:\WINDOWS\vsnpstd.exe [2004-06-10 286720]
"Névnap"=c:\program files\borsosfisoft\névnap v.4.0\nevnap.exe [2006-08-26 168968]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-02-22 339968]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"DAEMON Tools-1033"=C:\Program Files\D-Tools\daemon.exe [2004-03-12 81920]
""= []
"PinnacleDriverCheck"=C:\WINDOWS\system32\PSDrvCheck.exe [2004-03-10 406016]
"PVR Agent"=C:\Program Files\CONCEPTRONIC Multimedia\PVR Plus\TVR\Scheduled.exe [2005-04-13 751104]
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"POP Peeper"=C:\Program Files\POP Peeper\POPPeeper.exe [2010-01-12 1490944]
"Google Update"=C:\Documents and Settings\Tomi\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2010-05-07 136176]

C:\Documents and Settings\All Users\Start Menu\Programs\Indítópult
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-02-22 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox"
"C:\Program Files\Jdownloader\JDownloader_portable\CommonFiles\Java\bin\javaw.exe"="C:\Program Files\Jdownloader\JDownloader_portable\CommonFiles\Java\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\Documents and Settings\Tomi\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Tomi\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"C:\Program Files\Capcom\MotoGP 08\Launcher.exe"="C:\Program Files\Capcom\MotoGP 08\Launcher.exe:*:Enabled:MotoGP 08"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:DLL futtatása alkalmazásként"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Messenger\livecall.exe"="C:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

======List of files/folders created in the last 1 months======

2010-07-28 09:07:54 ----D---- C:\rsit
2010-07-28 09:06:37 ----A---- C:\Program Files\RSIT.exe
2010-07-28 08:38:39 ----D---- C:\WINDOWS\system32\appmgmt
2010-07-27 11:48:27 ----D---- C:\Program Files\Trend Micro
2010-07-26 09:26:49 ----D---- C:\Program Files\CONCEPTRONIC Multimedia
2010-07-20 18:02:00 ----HD---- C:\WINDOWS\system32\GroupPolicy
2010-07-14 07:41:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2010-07-03 10:08:10 ----D---- C:\Program Files\Microsoft Silverlight

======List of files/folders modified in the last 1 months======

2010-07-28 09:07:59 ----D---- C:\WINDOWS\Prefetch
2010-07-28 09:06:37 ----RD---- C:\Program Files
2010-07-28 08:57:23 ----D---- C:\Documents and Settings\Tomi\Application Data\Skype
2010-07-28 08:55:54 ----D---- C:\WINDOWS\Temp
2010-07-28 08:53:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-07-28 08:40:21 ----SHD---- C:\WINDOWS\Installer
2010-07-28 08:40:20 ----HD---- C:\Config.Msi
2010-07-28 08:38:39 ----D---- C:\WINDOWS\system32
2010-07-28 08:38:28 ----D---- C:\WINDOWS\WinSxS
2010-07-28 08:27:35 ----D---- C:\Documents and Settings\Tomi\Application Data\skypePM
2010-07-27 16:00:34 ----D---- C:\Documents and Settings\Tomi\Application Data\Adobe
2010-07-27 11:31:04 ----D---- C:\WINDOWS
2010-07-26 13:57:29 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-26 11:12:27 ----HD---- C:\WINDOWS\inf
2010-07-26 11:12:25 ----DC---- C:\WINDOWS\system32\dllcache
2010-07-26 11:12:20 ----D---- C:\WINDOWS\system32\drivers
2010-07-26 09:28:58 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-26 09:28:45 ----A---- C:\WINDOWS\win.ini
2010-07-26 09:18:26 ----A---- C:\WINDOWS\NeroDigital.ini
2010-07-25 13:42:13 ----D---- C:\Program Files\Mozilla Firefox
2010-07-25 12:09:05 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe
2010-07-24 13:05:05 ----D---- C:\Documents and Settings\Tomi\Application Data\POP Peeper
2010-07-22 09:44:59 ----D---- C:\Documents and Settings\Tomi\Application Data\uTorrent
2010-07-22 09:44:58 ----D---- C:\Documents and Settings\Tomi\Application Data\XnView
2010-07-21 15:21:18 ----A---- C:\ashampoo-acdw-log.txt
2010-07-20 18:10:35 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-07-17 08:27:20 ----D---- C:\Documents and Settings\Tomi\Application Data\Mozilla
2010-07-16 12:12:57 ----SHD---- C:\RECYCLER
2010-07-15 11:03:15 ----SD---- C:\WINDOWS\Tasks
2010-07-14 07:41:00 ----HD---- C:\WINDOWS\$hf_mig$
2010-07-14 07:40:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-07-13 09:08:23 ----D---- C:\WINDOWS\system32\config
2010-07-10 09:49:52 ----D---- C:\Documents and Settings\Tomi\Application Data\dvdcss
2010-07-09 11:42:35 ----D---- C:\Documents and Settings\Tomi\Application Data\Vso
2010-07-09 08:17:57 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-07-04 12:23:49 ----D---- C:\WINDOWS\Cursors
2010-07-03 10:08:26 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-07-03 09:31:57 ----D---- C:\WINDOWS\Minidump
2010-07-01 11:05:56 ----D---- C:\Documents and Settings\Tomi\Application Data\muvee Technologies
2010-06-29 14:29:20 ----RSD---- C:\WINDOWS\Fonts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-09-15 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 intelppm;Intel processzor illesztőprogramja; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 kbdhid;Billentyűzet HID-illesztőprogram; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R2 713xTVCard;SAA7131 TV Card; C:\WINDOWS\system32\DRIVERS\SAA713x.sys [2005-03-15 277504]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-09-15 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-09-15 94160]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2008-04-13 11868]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2004-02-24 400384]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-02-26 611820]
R3 Arp1394;1394 ARP ügyfélprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ASAPIW2k;ASAPIW2K; C:\WINDOWS\system32\drivers\ASAPIW2k.sys [2004-03-10 11264]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-02-22 986624]
R3 hidusb;Microsoft HID osztályú illesztőprogram; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys [2008-04-13 1041536]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys [2008-04-13 220032]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2004-06-21 78976]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 mouhid;Egér HID-illesztőprogram; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160]
R3 NIC1394;1394 hálózati illesztőprogram; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-11-01 47360]
R3 snpstd;VideoCAM Messenger; C:\WINDOWS\system32\DRIVERS\snpstd.sys [2004-06-25 331008]
R3 usbccgp;Microsoft USB általános szülő-illesztőprogram; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Microsoft USB 2.0 bővített állomásvezérlő miniport illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2-engedélyezett hub; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Microsoft USB PRINTER osztály; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbuhci;Microsoft USB univerzális állomásvezérlő miniport illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys [2008-04-13 685056]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2004-08-19 189568]
S3 61883;61883-as eszköz; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-13 48128]
S3 Avc;AVC eszköz; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-13 38912]
S3 CCDECODE;Feliratdekódoló; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Microsoft Streaming Tee/Sink - Sink átalakító; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI kodek; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV-/videokapcsolat; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USBSTOR;USB háttértár illesztőprogramja; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;World Standard Teletext kodek; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-02-22 352256]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 Capture Device Service;Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-04-29 304464]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2007-03-03 67056]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2005-02-22 516096]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-10-31 68096]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 DfSdkS;Defragmentation-Service; C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe [2009-01-09 410976]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 usnjsvc;Messenger megosztási mappák – USN-naplóolvasó szolgáltatás; C:\Program Files\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S3 WMPNetworkSvc;A Windows Media Player hálózatmegosztási szolgáltatása; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-10 919040]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Igen a geped Virussos.
1:Futtasd le a Malwarebytest-teljes vizsgalat-amit talal TOROLOD es a logot tedd ide:
http://virus-stell.blogspot.com/2010/04 ... lware.html

2:Kitisztitod a CCleaner programmal
http://virus-stell.blogspot.com/2010/04/ccleaner.html

3:Futtatod a combofixet
http://virus-stell.blogspot.com/2010/04/combofix.html
logjat tedd ide

itt is van a log

Logfile of random's system information tool 1.08 (written by random/random)
Run by P.J. Howard at 2010-07-28 18:18:10
Microsoft Windows XP Professional Szervizcsomag 3
System drive C: has 26 GB (43%) free of 60 GB
Total RAM: 3327 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:19:30, on 2010.07.28.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
C:\Program Files\Microsoft Hardware\Mouse\point32.exe
C:\Program Files\CyberLink\PCM4Everio\EverioService.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\EXPERTool\TBPanel.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\SensorsViewPro41\svservice.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\ups.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\FlashGet\flashget.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
G:\RSIT.exe
C:\Program Files\trend micro\P.J. Howard.exe
C:\Program Files\Internet Explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\Run: [Jet Detection] C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe
O4 - HKLM\..\Run: [CTStartup] C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [EverioService] "C:\Program Files\CyberLink\PCM4Everio\EverioService.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: APC UPS Status.lnk = ?
O8 - Extra context menu item: &Letöltés a FlashGet-tel - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: &Minden letöltése a FlashGet-tel - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Küldés blogba - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Küldés blogba a Windows Live Writer programmal - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resour ... se8942.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - http://wwwimages.adobe.com/www.adobe.co ... nos/gp.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://webcam1.sze.hu/activex/AMC.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O22 - SharedTaskScheduler: Browseui előbetöltője - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Komponenskategóriák gyorsítótárazási szolgáltatása - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Logikai lemezkezelő felügyeleti szolgáltatás (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Eseménynapló (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-égető COM-szolgáltatás (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NetMeeting távoli asztalmegosztás (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Távoli asztal súgó-munkamenetének kezelője (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Intelligens kártya (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: SensorsVService - Unknown owner - C:\Program Files\SensorsViewPro41\svservice.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Teljesítménynaplók és riasztások (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Kötet árnyékmásolata (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: WMI teljesítményadapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 11865 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
FGCatchUrl - C:\Program Files\FlashGet\jccatch.dll [2007-06-11 69632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live bejelentkezési segítség - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-12 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]
FlashGet GetFlash Class - C:\Program Files\FlashGet\getflash.dll [2007-05-16 163840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-15 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-04 1603152]
"IntelliType"=C:\Program Files\Microsoft Hardware\Keyboard\type32.exe [2002-03-22 94208]
"POINTER"=point32.exe []
"Jet Detection"=C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe [2001-10-04 28672]
"CTStartup"=C:\Program Files\Creative\Splash Screen\CTEaxSpl.EXE [2001-12-20 28672]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-03-18 207360]
"EverioService"=C:\Program Files\CyberLink\PCM4Everio\EverioService.exe [2006-11-22 151552]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-06-28 2837864]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-06-10 86016]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-06-10 13758464]
"WINDVDPatch"=C:\WINDOWS\system32\CTHELPER.EXE [2002-02-07 40960]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-06-17 33628160]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"GAINWARD"=C:\Program Files\EXPERTool\TBPanel.exe [2009-05-12 2181672]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe -autorun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EverioService]
C:\Program Files\CyberLink\PCM4Everio\EverioService.exe [2006-11-22 151552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD]
C:\Program Files\Nero\Nero 7\InCD\InCD.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MagicRotation]
C:\Program Files\MagicRotation\MagicPvt.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Microsoft WinUpdate]
C:\WINDOWS\system32\msupdte.exe [2009-01-20 3702]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nk_nnvz]
C:\Documents and Settings\P.J. Howard\Local Settings\Application Data\ulBWR.exe nk_00123500 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NWEReboot]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2008-12-03 1205760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\WINDOWS\system32\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdReg]
C:\WINDOWS\UpdReg.EXE [2000-05-11 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UVS11 Preload]
C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WINDVDPatch]
C:\WINDOWS\system32\CTHELPER.EXE [2002-02-07 40960]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^AutoCAD indításgyorsító.lnk]
C:\PROGRA~1\COMMON~1\AUTODE~1\ACSTAR~2.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^GammaTray.lnk]
C:\PROGRA~1\MAGICT~1\GAMMAT~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"RichVideo"=2
"InCDsrv"=2

C:\Documents and Settings\All Users\Start Menu\Programs\Indítópult
APC UPS Status.lnk - C:\Program Files\APC\APC PowerChute Personal Edition\Display.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-05-27 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2006-06-27 3584]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\aawservice]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0x5F000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=
"NoDriveTypeAutoRun"=0x5F000000
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Research\Microsoft WorldWide Telescope\WWTExplorer.exe"="C:\Program Files\Microsoft Research\Microsoft WorldWide Telescope\WWTExplorer.exe:*:Enabled:WorldWide Telescope"
"C:\Program Files\totalcmd\TOTALCMD.EXE"="C:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe"="C:\Program Files\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Enabled:Nero ShowTime"
"E:\EA Games\Need for Speed Most Wanted\speed.exe"="E:\EA Games\Need for Speed Most Wanted\speed.exe:*:Enabled:speed"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\MagicTune Premium\MagicTune.exe"="C:\Program Files\MagicTune Premium\MagicTune.exe:*:Enabled:MagicTune"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\FlashGet\FlashGet.exe"="C:\Program Files\FlashGet\FlashGet.exe:*:Enabled:Flashget"
"E:\EA Games\Need for Speed Undercover\nfs.exe"="E:\EA Games\Need for Speed Undercover\nfs.exe:*:Enabled:Need for Speed Undercover"
"E:\Microsoft Games\Age of Empires\Empires.exe"="E:\Microsoft Games\Age of Empires\Empires.exe:*:Enabled:Age of Empires"
"E:\Microsoft Games\Age of Empires II\EMPIRES2.EXE"="E:\Microsoft Games\Age of Empires II\EMPIRES2.EXE:*:Enabled:Age of Empires II"
"E:\Microsoft Games\Age of Empires II\age2_x1\age2_x1.exe"="E:\Microsoft Games\Age of Empires II\age2_x1\age2_x1.exe:*:Enabled:Age of Empires II Expansion"
"C:\Documents and Settings\P.J. Howard\Local Settings\Temp\7zS13FC.tmp\SymNRT.exe"="C:\Documents and Settings\P.J. Howard\Local Settings\Temp\7zS13FC.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.scr - open - "C:\WINDOWS\system32\notepad.exe" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-07-28 18:18:10 ----D---- C:\rsit
2010-07-28 18:18:10 ----D---- C:\Program Files\trend micro
2010-07-25 20:25:43 ----D---- C:\WINDOWS\LastGood
2010-07-25 12:25:39 ----D---- C:\Program Files\undelelte plus
2010-07-18 18:47:23 ----D---- C:\Program Files\1stbenison
2010-07-18 10:21:22 ----D---- C:\Program Files\Windows Easy Transfer 7
2010-07-18 08:58:20 ----D---- C:\Program Files\MSECache
2010-07-16 18:23:24 ----ASH---- C:\pagefile.sys
2010-07-16 17:43:24 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\Mariaglorum
2010-07-16 17:37:49 ----D---- C:\Program Files\CD to MP3 Freeware
2010-07-16 17:29:27 ----D---- C:\Program Files\AltoMP3 Gold
2010-07-16 15:40:19 ----D---- C:\Documents and Settings\All Users\Application Data\MumboJumbo
2010-07-16 15:36:41 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\HitPoint Studios
2010-07-16 15:36:41 ----D---- C:\Documents and Settings\All Users\Application Data\HitPoint Studios
2010-07-16 07:32:19 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\Paige Harper and the Tome of Mystery
2010-07-16 07:23:56 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\Floodlight Games
2010-07-16 07:23:56 ----D---- C:\Documents and Settings\All Users\Application Data\Floodlight Games
2010-07-16 07:22:11 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\FloodLightGames
2010-07-16 07:22:11 ----D---- C:\Documents and Settings\All Users\Application Data\FloodLightGames
2010-07-16 07:20:57 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\Flood Light Games
2010-07-16 07:20:57 ----D---- C:\Documents and Settings\All Users\Application Data\Flood Light Games
2010-07-15 15:55:52 -------- C:\WINDOWS\system32\wrap_oal.dll
2010-07-15 15:55:47 ----N---- C:\WINDOWS\system32\drivers\Entech64.sys
2010-07-15 15:43:03 ----D---- C:\Program Files\MadOnion.com
2010-07-14 20:07:19 ----R---- C:\WINDOWS\system32\drivers\monfilt.sys
2010-07-14 20:07:18 ----R---- C:\WINDOWS\system32\drivers\viahduaa.sys
2010-07-14 20:06:41 ----N---- C:\WINDOWS\system32\difxapi.dll
2010-07-14 20:06:40 ----D---- C:\Program Files\VIA
2010-07-14 19:43:41 -------- C:\WINDOWS\system32\drivers\ha10kx2k.sys
2010-07-14 19:43:40 -------- C:\WINDOWS\system32\drivers\EMUPIA2K.SYS
2010-07-14 19:43:40 -------- C:\WINDOWS\system32\drivers\CTSFM2K.SYS
2010-07-14 19:43:40 -------- C:\WINDOWS\system32\drivers\CTPRXY2K.SYS
2010-07-14 19:43:40 -------- C:\WINDOWS\system32\drivers\ctoss2k.sys
2010-07-14 19:43:39 -------- C:\WINDOWS\system32\drivers\ctaud2k.sys
2010-07-14 19:43:39 -------- C:\WINDOWS\system32\drivers\CTAC32K.SYS
2010-07-14 19:43:31 -------- C:\WINDOWS\system32\SFMS32.DLL
2010-07-14 19:43:31 -------- C:\WINDOWS\system32\REGPLIB.EXE
2010-07-14 19:43:31 -------- C:\WINDOWS\system32\PIAPROXY.DLL
2010-07-14 19:43:31 -------- C:\WINDOWS\system32\OpenAL32.dll
2010-07-14 19:43:31 -------- C:\WINDOWS\system32\KILLAPPS.EXE
2010-07-14 19:43:31 -------- C:\WINDOWS\system32\KILL.INI
2010-07-14 19:43:31 -------- C:\WINDOWS\system32\EAXAC3.DLL
2010-07-14 19:43:31 -------- C:\WINDOWS\system32\ct_oal.dll
2010-07-14 19:43:31 -------- C:\WINDOWS\READREG.EXE
2010-07-14 19:43:31 -------- C:\WINDOWS\PSCONV.EXE
2010-07-14 19:43:31 -------- C:\WINDOWS\MIDIDEF.EXE
2010-07-14 19:43:31 -------- C:\WINDOWS\DEVREG.DLL
2010-07-14 19:43:31 -------- C:\WINDOWS\CTDCRES.DLL
2010-07-14 19:43:30 -------- C:\WINDOWS\system32\CTSBLFX.DLL
2010-07-14 19:43:30 -------- C:\WINDOWS\system32\CTOSUSER.DLL
2010-07-14 19:43:30 -------- C:\WINDOWS\system32\CTEMUPIA.DLL
2010-07-14 19:43:27 -------- C:\WINDOWS\system32\CTDPROXY.DLL
2010-07-14 19:43:26 ----A---- C:\WINDOWS\system32\a3d.dll
2010-07-14 19:43:26 -------- C:\WINDOWS\system32\CTDEVCON.DLL
2010-07-14 19:43:26 -------- C:\WINDOWS\system32\CTASIO.DLL
2010-07-14 19:43:26 -------- C:\WINDOWS\system32\COMMONFX.DLL
2010-07-14 19:43:26 -------- C:\WINDOWS\system32\AC3API.DLL
2010-07-12 05:18:34 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\STV Software
2010-07-12 05:18:30 ----D---- C:\Program Files\SensorsViewPro41
2010-07-11 06:12:29 ----N---- C:\WINDOWS\system32\drivers\PciBus.sys
2010-07-11 06:12:29 ----N---- C:\WINDOWS\system32\drivers\Entech.sys
2010-07-11 06:12:29 ----D---- C:\WINDOWS\system32\Futuremark
2010-07-11 06:12:02 ----D---- C:\Program Files\Futuremark
2010-07-10 23:23:12 ----R---- C:\WINDOWS\system32\RtNicProp32.dll
2010-07-10 23:23:12 ----R---- C:\WINDOWS\system32\drivers\Rtenicxp.sys
2010-07-10 23:22:52 ----D---- C:\Program Files\Realtek
2010-07-10 23:22:40 ----R---- C:\WINDOWS\system32\CSVer.dll
2010-07-10 23:22:40 ----D---- C:\Program Files\Intel
2010-07-10 23:22:18 ----D---- C:\Intel
2010-07-10 23:21:09 ----R---- C:\WINDOWS\system32\drivers\ASACPI.sys
2010-07-10 23:21:04 -------- C:\WINDOWS\Language_trs.ini
2010-07-10 23:20:58 -------- C:\WINDOWS\Ascd_tmp.ini
2010-07-10 23:20:57 ----N---- C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2010-07-10 23:07:52 ----RH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-07-10 22:57:06 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-07-10 22:57:06 ----A---- C:\WINDOWS\system32\irclass.dll
2010-07-10 22:55:55 -------- C:\WINDOWS\setuplog.txt
2010-07-10 19:18:14 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-07-10 19:06:34 ----D---- C:\Program Files\DAEMON Tools Lite
2010-07-10 17:48:32 ----D---- C:\WINDOWS\Prefetch
2010-07-10 17:47:54 ----ASH---- C:\hiberfil.sys
2010-07-10 17:42:15 -------- C:\WINDOWS\system32\CTHELPER.EXE
2010-07-10 17:42:12 -------- C:\WINDOWS\system32\CTAGENT.DLL
2010-07-10 17:28:07 ----D---- C:\WINDOWS\system32\AGEIA
2010-07-10 17:28:07 ----D---- C:\Program Files\AGEIA Technologies
2010-07-10 17:26:18 -------- C:\WINDOWS\system32\nvudisp.exe
2010-07-10 17:25:45 -------- C:\WINDOWS\system32\NVUNINST.EXE
2010-07-10 17:25:04 -------- C:\WINDOWS\system32\d3dx10_41.dll
2010-07-10 17:25:04 -------- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-07-10 17:25:03 -------- C:\WINDOWS\system32\XAudio2_4.dll
2010-07-10 17:25:03 -------- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-07-10 17:25:03 -------- C:\WINDOWS\system32\D3DX9_41.dll
2010-07-10 17:25:02 -------- C:\WINDOWS\system32\xactengine3_4.dll
2010-07-10 17:25:02 -------- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-07-10 17:25:01 -------- C:\WINDOWS\system32\XAudio2_3.dll
2010-07-10 17:25:01 -------- C:\WINDOWS\system32\XAPOFX1_2.dll
2010-07-10 17:25:00 -------- C:\WINDOWS\system32\XAudio2_2.dll
2010-07-10 17:25:00 -------- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-07-10 17:25:00 -------- C:\WINDOWS\system32\xactengine3_3.dll
2010-07-10 17:25:00 -------- C:\WINDOWS\system32\X3DAudio1_5.dll
2010-07-10 17:24:59 -------- C:\WINDOWS\system32\xactengine3_2.dll
2010-07-10 17:24:59 -------- C:\WINDOWS\system32\d3dx10_39.dll
2010-07-10 17:24:59 -------- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-07-10 17:24:58 -------- C:\WINDOWS\system32\XAudio2_1.dll
2010-07-10 17:24:58 -------- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-07-10 17:24:58 -------- C:\WINDOWS\system32\xactengine3_1.dll
2010-07-10 17:24:58 -------- C:\WINDOWS\system32\D3DX9_39.dll
2010-07-10 17:24:57 -------- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-07-10 17:23:39 ----D---- C:\Program Files\EXPERTool
2010-07-10 17:23:39 -------- C:\WINDOWS\system32\drivers\TBPanel.sys
2010-07-10 17:21:36 ----RD---- C:\WINDOWS\AsDmiHtm
2010-07-10 17:21:26 ----D---- C:\WINDOWS\system32\drivers\system32
2010-07-10 17:21:26 ----D---- C:\WINDOWS\system32\drivers\INF
2010-07-10 17:20:57 ----A---- C:\WINDOWS\system32\usbui.dll
2010-07-01 18:27:59 ----D---- C:\Program Files\Common Files\Autodesk
2010-07-01 18:26:42 ----D---- C:\Program Files\DWG TrueView 2007
2010-07-01 18:13:50 ----D---- C:\Program Files\Autodesk
2010-07-01 06:00:42 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\RawTherapeeAlpha
2010-07-01 06:00:24 ----D---- C:\Program Files\Raw Therapee 3.0 A1

======List of files/folders modified in the last 1 months======

2010-07-28 18:19:12 ----D---- C:\Program Files\FlashGet
2010-07-28 18:18:10 ----RD---- C:\Program Files
2010-07-28 18:17:56 ----A---- C:\WINDOWS\wincmd.ini
2010-07-28 15:15:07 ----D---- C:\WINDOWS\Temp
2010-07-28 05:56:58 ----SHD---- C:\WINDOWS\Installer
2010-07-28 05:56:57 ----D---- C:\Program Files\Microsoft Silverlight
2010-07-27 19:30:51 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-07-27 07:08:46 ----D---- C:\Program Files\Common Files
2010-07-26 15:36:35 ----D---- C:\WINDOWS\system32
2010-07-26 06:03:12 ----D---- C:\WINDOWS
2010-07-26 06:02:51 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\vlc
2010-07-25 20:25:42 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-25 15:03:27 ----D---- C:\WINDOWS\Minidump
2010-07-25 08:15:57 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\dvdcss
2010-07-24 09:09:00 ----HD---- C:\WINDOWS\inf
2010-07-21 22:14:04 ----A---- C:\WINDOWS\NeroDigital.ini
2010-07-19 14:20:13 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-07-18 12:15:48 ----D---- C:\WINDOWS\system32\NtmsData
2010-07-18 11:10:06 ----D---- C:\WINDOWS\repair
2010-07-18 10:59:09 ----D---- C:\Documents and Settings
2010-07-18 10:50:23 ----D---- C:\WINDOWS\Registration
2010-07-18 10:21:45 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-07-18 09:19:03 ----D---- C:\Program Files\ArcSoft
2010-07-18 09:19:03 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\ArcSoft
2010-07-18 09:17:23 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-18 09:16:06 ----D---- C:\WINDOWS\system32\drivers
2010-07-18 09:12:15 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-07-18 09:05:45 ----D---- C:\WINDOWS\ehome
2010-07-18 08:58:46 ----SD---- C:\Documents and Settings\P.J. Howard\Application Data\Microsoft
2010-07-18 08:58:31 ----RSD---- C:\WINDOWS\Fonts
2010-07-18 08:58:30 ----D---- C:\Program Files\Microsoft Office
2010-07-18 08:58:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-07-16 17:42:15 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\iWin
2010-07-16 17:42:15 ----D---- C:\Documents and Settings\All Users\Application Data\iWin
2010-07-16 15:38:33 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\PlayFirst
2010-07-16 15:38:33 ----D---- C:\Documents and Settings\All Users\Application Data\PlayFirst
2010-07-14 20:07:39 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-07-14 20:07:32 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-07-14 20:00:12 -------- C:\WINDOWS\SBWIN.INI
2010-07-14 19:44:11 ----D---- C:\WINDOWS\system32\Defaults
2010-07-14 19:40:07 ----D---- C:\WINDOWS\system32\CatRoot
2010-07-14 19:39:39 ----D---- C:\WINDOWS\Media
2010-07-14 19:36:26 ----D---- C:\Program Files\Creative
2010-07-14 19:32:47 ----D---- C:\WINDOWS\security
2010-07-11 06:21:32 ----D---- C:\WINDOWS\system32\wbem
2010-07-11 06:21:32 ----D---- C:\WINDOWS\AppPatch
2010-07-11 05:56:54 ----D---- C:\Program Files\Messenger
2010-07-11 05:54:58 ----D---- C:\Program Files\Movie Maker
2010-07-11 05:53:04 ----D---- C:\Program Files\Outlook Express
2010-07-11 00:49:42 ----D---- C:\WINDOWS\system32\1038
2010-07-11 00:49:34 ----D---- C:\WINDOWS\twain_32
2010-07-11 00:49:21 ----D---- C:\WINDOWS\system32\icsxml
2010-07-11 00:48:54 ----D---- C:\WINDOWS\system32\ias
2010-07-11 00:48:48 ----D---- C:\WINDOWS\system32\1033
2010-07-11 00:47:31 ----D---- C:\WINDOWS\Driver Cache
2010-07-10 23:38:26 ----SD---- C:\WINDOWS\Tasks
2010-07-10 23:19:23 ----D---- C:\Program Files\ATI Technologies
2010-07-10 23:17:26 -------- C:\WINDOWS\system32\PerfStringBackup.INI
2010-07-10 23:15:46 ----SHD---- C:\System Volume Information
2010-07-10 23:14:13 ----D---- C:\WINDOWS\system32\config
2010-07-10 23:08:34 -------- C:\WINDOWS\OEWABLog.txt
2010-07-10 23:08:28 -------- C:\WINDOWS\ODBCINST.INI
2010-07-10 23:08:18 ----SH---- C:\WINDOWS\fonts\desktop.ini
2010-07-10 23:07:54 ----RD---- C:\WINDOWS\Web
2010-07-10 23:07:47 ----RH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-07-10 23:07:37 ----N---- C:\WINDOWS\win.ini
2010-07-10 23:05:01 ----SH---- C:\boot.ini
2010-07-10 22:57:10 ----N---- C:\WINDOWS\system.ini
2010-07-10 22:56:57 ----SH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-07-10 19:17:58 ----D---- C:\Documents and Settings\All Users\Application Data\DAEMON Tools Lite
2010-07-10 19:10:14 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\DAEMON Tools
2010-07-10 18:15:47 ----D---- C:\WINDOWS\Help
2010-07-10 18:15:47 ----D---- C:\Program Files\Internet Explorer
2010-07-10 18:11:59 ----D---- C:\WINDOWS\ie8updates
2010-07-10 18:11:51 ----HDC---- C:\WINDOWS\ie8
2010-07-10 18:10:38 ----D---- C:\WINDOWS\system32\hu-HU
2010-07-10 17:47:47 ----D---- C:\WINDOWS\system32\Setup
2010-07-10 17:44:39 ----D---- C:\Program Files\Windows Media Player
2010-07-10 17:44:34 ----D---- C:\WINDOWS\ime
2010-07-10 17:44:30 ----D---- C:\WINDOWS\PeerNet
2010-07-10 17:43:22 ----D---- C:\WINDOWS\system32\Restore
2010-07-10 17:43:22 ----D---- C:\WINDOWS\system32\npp
2010-07-10 17:43:21 ----D---- C:\WINDOWS\msagent
2010-07-10 17:43:20 ----D---- C:\WINDOWS\srchasst
2010-07-10 17:43:20 ----D---- C:\Program Files\NetMeeting
2010-07-10 17:43:19 ----D---- C:\WINDOWS\system32\Com
2010-07-10 17:43:17 ----D---- C:\Program Files\Windows NT
2010-07-10 17:43:15 ----D---- C:\Program Files\Common Files\System
2010-07-10 17:43:02 ----D---- C:\WINDOWS\system32\usmt
2010-07-10 17:43:02 ----D---- C:\WINDOWS\system32\oobe
2010-07-10 17:43:01 ----D---- C:\WINDOWS\system
2010-07-10 17:28:03 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-07-10 17:25:05 ----D---- C:\WINDOWS\system32\DirectX
2010-07-10 17:24:46 ----RSD---- C:\WINDOWS\assembly
2010-07-10 17:21:15 ----D---- C:\WINDOWS\SoftwareDistribution
2010-07-02 21:39:05 ----N---- C:\WINDOWS\system32\MRT.exe
2010-07-01 18:34:53 ----D---- C:\Documents and Settings\P.J. Howard\Application Data\Autodesk
2010-07-01 18:28:34 ----D---- C:\Program Files\Common Files\Autodesk Shared
2010-07-01 18:26:27 ----D---- C:\Documents and Settings\All Users\Application Data\Autodesk
2010-07-01 18:26:06 ----D---- C:\WINDOWS\Microsoft.NET
2010-07-01 18:16:51 ----D---- C:\WINDOWS\WinSxS
2010-07-01 18:13:36 ----HD---- C:\Program Files\Uninstall Information
2010-07-01 18:10:23 ----D---- C:\Program Files\Common Files\Designer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Intel AGP buszszűrő; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 CLBStor;InstantBurn Storage Helper Driver; C:\WINDOWS\system32\drivers\CLBStor.sys [2006-12-21 10368]
R0 ohci1394;Texas Instruments OHCI szabványnak megfelelő IEEE 1394 állomásvezérlő; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-09-03 115680]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-07-10 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-06-28 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-06-28 165456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-06-28 46672]
R1 intelppm;Intel processzor illesztőprogramja; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40576]
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-09-03 54368]
R1 sensorsview;sensorsview; \??\C:\Program Files\SensorsViewPro41\drv\sensorsview32.sys []
R1 WS2IFSL;Windows Socket 2.0 - nem IFS-t szolgáltató támogatási környezet; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-26 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-06-28 17744]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-06-28 100176]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]
R2 TBPanel;TBPanel; C:\WINDOWS\system32\drivers\TBPanel.sys [2007-03-16 12256]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-06-28 23376]
R3 HDAudBus;Microsoft UAA busz-illesztőprogram - High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID osztályú illesztőprogram; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IPFilter;Microsoft IntelliPoint Features driver; C:\WINDOWS\system32\DRIVERS\IPFilter.sys [2002-04-11 11136]
R3 monfilt;monfilt; C:\WINDOWS\system32\drivers\monfilt.sys [2008-02-14 1389056]
R3 mouhid;Egér HID-illesztőprogram; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-26 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-07-03 8087712]
R3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-05-25 142336]
R3 usbuhci;Microsoft USB univerzális állomásvezérlő miniport illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-06-02 1374464]
S1 archlp;archlp; C:\WINDOWS\system32\drivers\archlp.sys []
S3 Ad-Watch Connect Filter;Ad-Watch Connect Kernel Filter; \??\C:\WINDOWS\system32\drivers\NSDriver.sys []
S3 Ad-Watch Real-Time Scanner;AW Real-Time Scanner; \??\C:\WINDOWS\system32\drivers\AWRTPD.sys []
S3 aeozo83w;aeozo83w; C:\WINDOWS\system32\drivers\aeozo83w.sys []
S3 Arp1394;1394 ARP ügyfélprotokoll; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-08-17 701440]
S3 Cardex;Cardex; \??\C:\WINDOWS\system32\drivers\TBPANEL.SYS []
S3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\System32\drivers\ctac32k.sys [2002-03-22 114944]
S3 ctaud2k;Creative Audio Driver (WDM); C:\WINDOWS\system32\drivers\ctaud2k.sys [2002-03-22 835636]
S3 ctljystk;Creative SBLive! Játékport; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
S3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\System32\drivers\ctprxy2k.sys [2002-03-22 11068]
S3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\System32\drivers\ctsfm2k.sys [2002-03-22 211724]
S3 emu10k;Creative SB Live! (WDM); C:\WINDOWS\system32\drivers\emu10k1m.sys [2001-08-17 283904]
S3 emu10k1;Creative Interface Manager illesztőprogram (WDM); C:\WINDOWS\system32\drivers\ctlfacem.sys [2001-08-17 6912]
S3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\System32\drivers\emupia2k.sys [2002-03-22 156604]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 GMSIPCI;GMSIPCI; \??\I:\INSTALL\GMSIPCI.SYS []
S3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\WINDOWS\system32\drivers\ha10kx2k.sys [2002-03-22 991656]
S3 HidBatt;HID UPS telep illesztőprogramja; C:\WINDOWS\system32\DRIVERS\HidBatt.sys [2008-04-13 20352]
S3 MagicTune;MagicTune; C:\WINDOWS\system32\drivers\MTiCtwl.sys []
S3 MSICPL;MSICPL; \??\I:\install4\MSICPL.sys []
S3 NIC1394;1394 hálózati illesztőprogram; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 NTACCESS;NTACCESS; \??\I:\NTACCESS.sys []
S3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2002-03-22 195432]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2003-05-16 19072]
S3 rtl8139;Realtek RTL8139(A/B/C) alapú PCI gyors Ethernet-adapter NT illesztőprogramja; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\I:\NTGLM7X.sys []
S3 sfman;Creative SoundFont Manager illesztőprogram (WDM); C:\WINDOWS\system32\drivers\sfmanm.sys [2001-08-17 36480]
S3 slabbus;Wireless Comuniction Devices driver (WDM); C:\WINDOWS\system32\DRIVERS\slabbus.sys [2004-12-21 51040]
S3 slabser;Nokia CA-42 USB Drivers; C:\WINDOWS\system32\DRIVERS\slabser.sys [2004-12-21 82768]
S3 TempLog;TempLog; \??\C:\Program Files\Hard Disk Sentinel\HDSentinel.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbprint;Microsoft USB PRINTER osztály; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB-képolvasó illesztőprogramja; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 USBSTOR;USB háttértár illesztőprogramja; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2005-01-28 18944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aawservice;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe [2009-01-08 611664]
R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 APC UPS Service;APC UPS Service; C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe [2005-12-12 176193]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-05-18 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-06-10 168004]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-01-23 66872]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-07-27 183112]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 SensorsVService;SensorsVService; C:\Program Files\SensorsViewPro41\svservice.exe [2010-06-17 923648]
R2 WMDM PMSP Service;WMDM PMSP Service; C:\WINDOWS\system32\MsPMSPSv.exe [2000-06-26 53520]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-06-28 40384]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-05-27 602112]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2010-04-14 72704]
S3 aspnet_state;ASP.NET-állapotszolgáltatás; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-07-01 85096]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 fsssvc;Windows Live Családbiztonság szolgáltatás; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]
S3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-11-11 620544]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files\CyberLink\Shared files\RichVideo.exe [2006-09-29 266343]

-----------------EOF-----------------
Neked biztosan többet mond

Az nekem nem problem,,csak latnom kell.

Köszi stell egy kis türelmet kérek,mert mint írtam közvetítek,mert nem az én gépem, a log.fájl-t emailben kapom meg és továbbítom Neked, ha ez így nem próbléma
Üdv.

Szia.
Szed le a gépről,a vezérlő pulton kérésztüll.]
C:\Program Files\Search Settings\
C:\Program Files\Dealio Toolbar'
C:\Program Files\Ask.com

Fixeld le a HiJackal:
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

és tedd ide az RSIT logjat:
http://virus-stell.blogspot.com/2010/04/rsit.html

Szia stell!

Bocs, megint jeletkezem, de ez most nem az én gépem,úgy látom jó néhány dolgot lehet fixálni ill. eltávolítani
Megnéznéd:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:53:07, on 2010.07.27.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\vsnpstd.exe
C:\program files\borsosfisoft\névnap v.4.0\nevnap.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\CONCEPTRONIC Multimedia\PVR Plus\TVR\Scheduled.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\POP Peeper\POPPeeper.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Tomi\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Total Commander 2008 Final Edition by K-ED\TOTALCMD.EXE
D:\Programok\Ashampoo Photo Commander 3\Ashampoo Photo Commander 3\apc.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eu.ask.com?o=14909&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 10\SnagitBHO.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\IE\4.0.2\dealioToolbarIE.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 10\SnagitIEAddin.dll
O3 - Toolbar: IsoBuster Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [Névnap] c:\program files\borsosfisoft\névnap v.4.0\nevnap.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [PVR Agent] C:\Program Files\CONCEPTRONIC Multimedia\PVR Plus\TVR\Scheduled.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [POP Peeper] "C:\Program Files\POP Peeper\POPPeeper.exe" -min
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Tomi\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Kutatás - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{2B9B57EA-C414-495C-8917-27DB23F8C000}: NameServer = 81.93.193.4,81.93.193.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{2B9B57EA-C414-495C-8917-27DB23F8C000}: NameServer = 81.93.193.4,81.93.193.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{2B9B57EA-C414-495C-8917-27DB23F8C000}: NameServer = 81.93.193.4,81.93.193.2
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui előbetöltője - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Komponenskategóriák gyorsítótárazási szolgáltatása - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo WinOptimizer 6\Dfsdks.exe
O23 - Service: Logikai lemezkezelő felügyeleti szolgáltatás (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Eseménynapló (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: IMAPI CD-égető COM-szolgáltatás (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NetMeeting távoli asztalmegosztás (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Távoli asztal súgó-munkamenetének kezelője (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Intelligens kártya (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Teljesítménynaplók és riasztások (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: Kötet árnyékmásolata (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: WMI teljesítményadapter (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: A Windows Media Player hálózatmegosztási szolgáltatása (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

--
End of file - 12435 bytes
Köszi

Nincsen mit:
A kerdesed egyszeru de a valasz mar nem lesz ilyen.
Virusirtok,,legyen az AVAST,NOD,AVIRA,NORTON,Kaspersky-mind megbizhato,termeszetesen ha nincsen crackolva,,mert igy mar nem az.
Sokat latom itt a blogogban,kerdeseket..melyik a legjobb virusirto,,ez nem jo az nem jo,ez jobb az jobb,
Ilyen nincsen ,,,Minden markas virusirto kituno,az hogy igy is bejut a gepbe a JOL megirt virus ,ez nem a virus irtok hibaja,,
Olvasd a blogomban Miert virusos a gepem:
http://virus-stell.blogspot.com/2010/04 ... gepem.html

A mai virusok,mar majd mind jol vanank megirva,ez azert van mert ez oriasi biznis,,a jol megirt virus kijatsza a Virus irtot,tuzfalat,,vedelmet,mindent,,Tegyuk fel hogy kinyitsz a neten egy artalmatlanak nezet .PDF-docomentumot,a kinyitas utan rogton bejut a gepbe az Exploit,,,a virus irto nem fog reagalni mivel nem jon letre semilyen folyamat,pldaul.exe..Ez az exploit beirja magat a MBR-sectorba,,es a testet valahova a lemezre.[ez nem folyamat hanem KOD.]Na most mi tortenik-minden startnal beolvasodik a kod a szamitogep=memoriajaba,termeszetesen,ez a kod bebiztositsa,hogy a virusvedelem nereagaljon,es se a Tuzfall[igy van megirva] es letolti a netrol a baratait,es kesz.-es jonek az adat lopasok,vagy penz csalas atveres,,;Kemprogramok] A legujab KOD-Rootkit az ugy nevezet whistler bootkitet,nemis tudja kimutatni csak egy [par specialis program.bootkitremover,es aMBRCHEK,,]
http://www.virus-stell.com/2010/06/boot ... troja.html

Tehat ojant hogy hogyan talalod meg a rendszerben,ilyen nem letezik a specialis programok nelkul,
Mint.OTL,RSIT.GMER.Bootkitremover, Malwarebytes,Combofix,..de ezekhez a programokhoz erteni is kell,es ezt nem tanitsak sehol,,hanem sok,sok,tapasztalat kell,-en pldaul itt szereztem meg.
http://www.viry.cz/forum/index.php
Sokat latom,a blogogban mikor virusproblema van a geppel,akkor jon a tuti tanacs ,Futtasd,kasperskyt,Avastot,,,ezt azt amazt,,,kozben a virus irtas helyet tonkre teszik a rendszert,mivel minden Virusirto ott hagy a rendszerben ,renszerleiroban,,,valami drivert,bejedzest,,aztan jon a kek halal.Igen lehet lefuttatni a virusirtot,,de csak a sajatot,,vagy skennert ami nem telepitodig,,de ahogy irtam az eredmeny ,0,semmi,,mivel tobbnyire megvannak fertozve a rendszer fajlok is,,vagy nemtudja eltavolitani ezert ahogy leirtam,,bevan irva a MBR-sectorba,es mindig vissza jon,,vagy hasznalja az ugy nevezet stealth alcazast,,es igy vedve van a rootkitekel,,
Tehat az emlitet Whistlerbootkit mar epidemia,,tobbek kozot,,a hangot rontsa el,es hangos reklamokat add,
Tehat 88%-problema a szamitogepel a virusok muve.Ha at akarod vizsgalni a gepedet tedd ide a Blogombol az RSIT-skenner logjat.

Köszönöm az infót a win 7-el kapcsoltban sokat tudtak segíteni ott.

Lenne egy vírusírtással kapcsoltban kérdésem. Az én gépemen egy free avast van fenn 5.0.594 ez mennyire megbízható program?
A másik kérésem az lenne, hogy kb egy hete itt a fórumon barangolva valahol olvastam, hogy vannak olyan vírusok amik rejtve maradnak a vírusírtó elöl, mert a windows által elzárt területeken vannak, vagy valami ilyesmi volt, hogyen lehetne felderíteni, hogy van e a vinyómon valami ilyesmi rejtözködő virus? segítségedet előre is köszönöm.

Köszönöm az információt.

Üdv
mr.bmsco
Ezt a kérdést kérlek tedd fel ide,itt vannak a win-7-specialisták.
viewtopic.php?f=20&t=36785

Mr stell egy kérdésem lenne, hogy egy win xp pro hu x86 van fenn a gépen és ezt szeretném lecserélni win 7 hu x64-re úgy hogy a win 7 átvegye az xp-ben feltelepített programokat és játékokat. Persze tudom, hogy van olyan programom ami nem kompatibilis a win 7-l, de sok van ami igen. Van e erre valami megoldás?
Elvileg, ha jól tudom a xp x86-t fel tuom frissíteni win 7 x86-a, de a win 7 x86-ot fel lehet frissíteni win 7 x64-re?
Vagy esetleg az xp-t frissíteni x64-re és utána azt frissíteni win 7 x64-re?

Az a baj, hogy a gép folyamatos használatban van és nincs időm hetekig kisérletezni a dologgal, ha esetleg lenne valami javaslata, vagy tapasztalata amivel le lehetne rövidíteni az erre fordított időt mielött nekiállok a átbuherálásnak és hetekig vacakolnát és a végén kiderülne hogy nem is lehetséges a dolog.

Előre is köszönöm a segítségét.

Ha a GK-problémát okoz akkor ki kell cserélni és kész.

Igen meg amint láthatod maga a GPU Temperature meg -1 C. Viszont az ilyen programok gondolom magából a videokártyából olvassák ki az adatokat, mivel a program nem tart oda egy hőmérőt a videokártyához. Na ennyit erről mielőtt szét offolom a topicot.

a az valami bug ennek a programnak,olyan melegség nincsen,szét olvadna a GK,

Megint produkálta a videokártyám azt amit írtam és most sikerült naplóznom is a GPU-Z-vel.
Tudom kicsit offtopic téma, de ide írtam az előzményeket azért raktam ezt is ide.

Date , GPU Core Clock [MHz] , GPU Memory Clock [MHz] , GPU Temperature [°C] , Fan Speed [%] , GPU Load [%] , Fan Speed [RPM] , GPU Temp.(DISPIO) [°C] , GPU Temp.(MEMIO) [°C] , GPU Temp.(SHADERCORE) [°C] ,
2010-07-04 19:17:42 , 650.0 , 998.3 , 43.0 , 0 , 0 , 822 , 44.0 , 42.5 , 46.0 ,

2010-07-04 19:17:43 , 650.0 , 998.3 , 44.0 , 0 , 0 , 820 , 43.5 , 43.0 , 46.5 ,

2010-07-04 19:17:44 , 650.0 , 998.3 , 44.0 , 0 , 0 , 821 , 44.0 , 43.0 , 46.5 ,

2010-07-04 19:17:45 , 132.0 , 4219.9 , -1.0 , 100 , 100 , 0 , 32767.5 , 32767.5 , 32767.5 ,


Bocsánat, hogy csak ilyen hülyén tudtam beszúrni, de két részben kellett bemásolnom csak az elejét meg a végét mivel a log fájl már 7,5Mb-os így csak a lényeget raktam ide. Ott van a 32k C amit írtam anno. Nekem a GPU Memory Clock tűnik egyedül reálisnak csak gőzöm sincs mitől megy/mehet fel. Nagyobb feszültséget kap? Az elmúlt pár napban gyakran produkálta ezt és szinte mindig olyankor mikor nem volt megterhelve a gép.

nincsen mit.
üdv

Köszönöm
Üdv

Ne keres problemat ahol nincsen,,a geped nincsen megfertozve es az USBFIX megcsinalta a vedo oltasokat.

Sikerült lefuttatnom az avast letiltása után az UsbFix-et, de meglepően gyorsan végzett és a meghajtókon létrejött autorun.inf mappa tartalma: NUL.UsbFix 3 bájt. Az autorun nincs letiltva. Az asztalra töltöttem le és a menüből a "deletion" katt, az OPTIONS kártyához nem nyúltam. Mi lehet a probléma?

log:
############################## | UsbFix 7.015 | [Deletion]

User: Sanyi (Administrator) # SANYI-PC [ ]
Updated 01/07/10 by El Desaparecido / C_XX
Started at 07:25:28 | 02/07/2010
Website: http://pagesperso-orange.fr/NosTools/index.html
Contact: FindyKill.Contact@gmail.com

CPU: Intel(R) Pentium(R) 4 CPU 3.00GHz
CPU 2: Intel(R) Pentium(R) 4 CPU 3.00GHz
Microsoft Windows 7 Professional (6.1.7600 32-Bit) #
Internet Explorer 8.0.7600.16385

Firewall: Outpost Firewall Pro 6.7 [(!) Disabled]
RAM -> 2048 Mb
C:\ (%systemdrive%) -> Fixed drive # 29 Gb (19 Mb free - 64%) [] # NTFS
D:\ -> Fixed drive # 39 Gb (13 Mb free - 32%) [] # NTFS
E:\ -> Fixed drive # 45 Gb (44 Mb free - 98%) [] # NTFS
F:\ -> Fixed drive # 110 Gb (42 Mb free - 38%) [] # NTFS
G:\ -> CD-ROM
H:\ -> CD-ROM
I:\ -> CD-ROM
J:\ -> Removable drive # 7 Gb (7 Mb free - 90%) [] # FAT32
K:\ -> Removable drive # 4 Gb (3 Mb free - 87%) [USB_XP_710] # FAT32

################## | Files # Infected Folders |


################## | Registry |


################## | Mountpoints2 |


################## | Listing |

[02/07/2010 - 07:27:33 | SHD ] C:\$Recycle.Bin
[23/05/2010 - 17:57:05 | D ] C:\ATI
[29/06/2010 - 07:51:02 | A | 3475] C:\audiodvd_burn.log
[10/06/2009 - 23:42:20 | A | 24] C:\autoexec.bat
[25/05/2010 - 19:33:29 | RASHD ] C:\autorun.inf
[24/05/2010 - 03:44:25 | SHD ] C:\Boot
[14/07/2009 - 03:38:58 | RASH | 383562] C:\bootmgr
[10/06/2009 - 23:42:20 | A | 10] C:\config.sys
[14/07/2009 - 06:53:55 | SHD ] C:\Documents and Settings
[23/05/2010 - 19:29:09 | RSH | 383592] C:\gdrop
[02/07/2010 - 06:55:35 | ASH | 3219128320] C:\pagefile.sys
[14/07/2009 - 04:37:05 | D ] C:\PerfLogs
[29/06/2010 - 06:46:42 | RD ] C:\Program Files
[29/06/2010 - 06:53:25 | HD ] C:\ProgramData
[23/05/2010 - 17:51:39 | SHD ] C:\Recovery
[20/06/2010 - 09:36:40 | SHD ] C:\System Volume Information
[24/05/2010 - 21:54:01 | D ] C:\totalcmd
[02/07/2010 - 07:27:33 | D ] C:\UsbFix
[02/07/2010 - 07:25:30 | A | 2000] C:\UsbFix.txt
[23/05/2010 - 17:51:56 | RD ] C:\Users
[29/06/2010 - 06:47:02 | D ] C:\Windows
[23/05/2010 - 19:29:09 | RSH | 171136] C:\xeldr
[02/07/2010 - 07:27:33 | SHD ] D:\$RECYCLE.BIN
[25/05/2010 - 19:33:29 | RASHD ] D:\autorun.inf
[17/06/2010 - 03:49:01 | D ] D:\Levelek dokumentumok
[25/05/2010 - 19:30:43 | SHD ] D:\RECYCLER
[18/06/2010 - 07:59:28 | SHD ] D:\System Volume Information
[18/06/2010 - 07:55:01 | RHD ] D:\VProRecovery
[27/06/2010 - 07:32:31 | D ] D:\Win 7 mentés
[17/06/2010 - 03:51:53 | D ] D:\XP mentések
[02/07/2010 - 07:27:33 | SHD ] E:\$RECYCLE.BIN
[29/06/2010 - 07:30:13 | D ] E:\AudioDVDCreator_Temp
[25/05/2010 - 19:33:29 | RASHD ] E:\autorun.inf
[05/05/2010 - 04:57:57 | SHD ] E:\Config.Msi
[23/05/2010 - 17:02:26 | D ] E:\Monitor beállítások
[23/05/2010 - 20:11:16 | RHD ] E:\MSOCache
[25/05/2010 - 19:30:53 | SHD ] E:\RECYCLER
[29/05/2010 - 21:43:49 | A | 253] E:\Rendszer-helyreállító lemez

készítés Windows-7 hez.txt
[23/05/2010 - 17:02:25 | SHD ] E:\System Volume Information
[24/05/2010 - 21:43:40 | D ] E:\Windows 7 anyagok
[02/07/2010 - 07:27:33 | SHD ] F:\$RECYCLE.BIN
[31/01/2010 - 19:09:08 | D ] F:\3b14b93b57af2a59c89d8d0a
[01/07/2010 - 21:11:57 | D ] F:\Aktuális témák
[25/05/2010 - 19:33:29 | RASHD ] F:\autorun.inf
[20/04/2010 - 05:09:48 | D ] F:\Feltöltések
[31/05/2010 - 20:26:57 | D ] F:\Film
[20/06/2010 - 16:17:36 | D ] F:\Fényképek
[12/05/2010 - 07:00:47 | D ] F:\Háttérképek
[01/07/2010 - 21:00:36 | D ] F:\Letöltések
[08/06/2010 - 20:52:24 | D ] F:\Operációs rendszerek
[02/06/2010 - 06:01:00 | D ] F:\PowerPoint
[25/05/2010 - 19:31:05 | SHD ] F:\RECYCLER
[04/06/2010 - 12:05:23 | SHD ] F:\System Volume Information
[02/06/2010 - 06:09:46 | D ] F:\Zene
[01/07/2010 - 21:10:37 | D ] F:\Általános progik és leírások
[01/07/2010 - 21:33:56 | D ] J:\Laptopra kipróbálni
[01/07/2010 - 22:12:24 | D ] J:\Általános progik

################## | Vaccin |

C:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
D:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
E:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
F:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)
J:\Autorun.inf -> Folder created by UsbFix (El Desaparecido & C_XX)

################## | E.O.F |

Szia
kapcsold ki az AVAST-vedo pajzait-es aztan tolds le es futtasd--ez Hamis Riasztas,,az USBFIX-renben van.

Szia stell!

Szerettem volna használni az UsbFix.exe.t, de az avast5 vírúst jelzett,/Win32:VB-JI[Trj] amikor az asztalon futtatni akartam.Felküldtem a Vírús Total-ra, eredmény:6/41. Korábban használtam, most a Windows újra telepítése után letöltöttem, hogy csináljak egy oltást, de nem mertem futtatni.
Segítenél?
Köszi

Nézd a focit, ott nincs vírus.

OK
Befejeztem!
Menjen a francba az AVG. Végigjátszottam mindent amit tanácsoltak, sőt annál is többet
Hibák minden szinten, a pendrájvon átrakott AVG is hibázik a másik gépen
Letöltöttem más szerverröl is, hiba,más változatot, hiba
Egyszer egy angol változat hibázott, de mégis felment, dehát a kliens nyelvtudás hiánya

Lecsekkeltem a hd-t, a memoriát másik progival is amit ott tanácsoltak, minden rendben, a gép teljesitménye tulságosan is jó

Kész, vége

by horex

OK
Amit fölötted irtam, az nem sérülés, igy települ
Most már csakazértis AVG magyar
Nyomom a "szakértőnek" az AVG forumon is
Ami linket adtam, az nem kereste az én gépemen a "file csomagot"
legalább is nem emlékszem

by horex

Hajjaj, bizony van ilyen. Pont erre való az MD5. Megoldás: újra le kell szedni (még az sem mindegy, mindegy melyik programmal töltöd le). Ha meg vírusos a géped, az is tud ilyet. De ez már stell témája.

Ha meg a gépen való másolásnál sérül a fájl, akkor a RAM-al lesz gond.