Virusy prosim o pomoc

[Mio]

Je to zavirene + nachadza sa tam zvlastny program - Internet Security 2010, ktory sa tvari ako antivir a robi problemy. Skuste pomoct prosim...... dakujem



Logfile of random's system information tool 1.06 (written by random/random)
Run by xy at 2010-01-03 15:09:38
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (50%) free of 38 GB
Total RAM: 503 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:09:56, on 3.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\winupdate86.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\InternetSecurity2010\IS2010.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\xy\Plocha\HijackThis.exe
C:\Documents and Settings\xy\Plocha\RSIT.exe
C:\Documents and Settings\xy\Plocha\xy.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\winlogon86.exe
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate86.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Internet Security 2010] C:\Program Files\InternetSecurity2010\IS2010.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\winhelper86.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\winhelper86.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{C952D761-8ECF-4118-ABF8-EA20B8C7CCE3}: NameServer = 213.151.236.161,213.151.200.3
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 7298 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-06 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-12-02 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-06 263280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Smapp"=C:\Program Files\Analog Devices\SoundMAX\Smtray.exe [2002-06-26 90112]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-11-02 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-11-02 126976]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-06-29 286720]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2007-09-14 267064]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [2007-09-25 132496]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]
"winupdate86.exe"=C:\WINDOWS\system32\winupdate86.exe [2010-01-02 24064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-10-16 68856]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]
"Internet Security 2010"=C:\Program Files\InternetSecurity2010\IS2010.exe [2010-01-02 1380352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2004-11-02 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSetActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoSetActiveDesktop"=
"NoActiveDesktopChanges"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{56fbd53a-f7c5-11de-ab2b-00096bedf9fa}]
shell\AutoRun\command - E:\Install.exe


======List of files/folders created in the last 1 months======

2010-01-03 15:09:38 ----D---- C:\rsit
2010-01-02 18:54:29 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-01-02 18:40:28 ----D---- C:\Program Files\Rockstar Games
2010-01-02 12:10:52 ----A---- C:\WINDOWS\system32\41.exe
2010-01-02 12:10:11 ----A---- C:\WINDOWS\system32\winupdate86.exe
2010-01-02 12:10:11 ----A---- C:\WINDOWS\system32\winlogon86.exe
2009-12-31 19:18:03 ----A---- C:\WINDOWS\system32\23281.exe
2009-12-31 18:57:36 ----A---- C:\WINDOWS\system32\28145.exe
2009-12-31 18:37:25 ----A---- C:\WINDOWS\system32\5705.exe
2009-12-31 18:16:56 ----A---- C:\WINDOWS\system32\24464.exe
2009-12-31 17:56:45 ----A---- C:\WINDOWS\system32\26962.exe
2009-12-31 17:36:35 ----A---- C:\WINDOWS\system32\29358.exe
2009-12-31 17:16:30 ----A---- C:\WINDOWS\system32\11478.exe
2009-12-31 16:56:24 ----A---- C:\WINDOWS\system32\15724.exe
2009-12-31 16:36:13 ----A---- C:\WINDOWS\system32\19169.exe
2009-12-31 16:16:10 ----A---- C:\WINDOWS\system32\26500.exe
2009-12-31 15:40:01 ----D---- C:\WINDOWS\system32\appmgmt
2009-12-31 15:35:27 ----D---- C:\Program Files\ESET
2009-12-31 15:35:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2009-12-29 23:24:21 ----A---- C:\WINDOWS\system32\6334.exe
2009-12-28 20:22:31 ----A---- C:\WINDOWS\system32\18467.exe
2009-12-28 17:36:21 ----D---- C:\Program Files\InternetSecurity2010
2009-12-28 17:35:02 ----A---- C:\WINDOWS\system32\winhelper86.dll
2009-12-10 07:56:12 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-10 07:55:16 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 07:54:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 07:54:05 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 07:53:43 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-09 13:25:03 ----D---- C:\b8017d4229470314bd

======List of files/folders modified in the last 1 months======

2010-01-03 15:09:27 ----D---- C:\WINDOWS\Prefetch
2010-01-03 15:08:53 ----D---- C:\WINDOWS\Temp
2010-01-03 15:04:41 ----D---- C:\Program Files\Mozilla Firefox
2010-01-03 13:32:38 ----D---- C:\WINDOWS\system32
2010-01-03 11:02:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-02 19:26:22 ----D---- C:\WINDOWS
2010-01-02 18:40:28 ----RD---- C:\Program Files
2010-01-02 18:40:28 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-02 18:39:24 ----D---- C:\Program Files\Common Files\InstallShield
2010-01-02 18:36:09 ----HD---- C:\WINDOWS\inf
2010-01-02 18:36:08 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-31 15:40:50 ----D---- C:\WINDOWS\system32\drivers
2009-12-31 15:40:01 ----SHD---- C:\WINDOWS\Installer
2009-12-31 15:40:01 ----D---- C:\Program Files\Common Files
2009-12-25 10:27:27 ----D---- C:\Documents and Settings\xy\Data aplikací\Skype
2009-12-21 11:08:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\FarmFrenzy3
2009-12-21 11:02:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
2009-12-10 10:32:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-10 08:44:52 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-10 08:44:49 ----D---- C:\WINDOWS\system32\cs-cz
2009-12-10 08:44:49 ----D---- C:\Program Files\Internet Explorer
2009-12-10 08:44:39 ----D---- C:\WINDOWS\ie7updates
2009-12-10 07:56:20 ----A---- C:\WINDOWS\imsins.BAK
2009-12-10 07:54:27 ----HD---- C:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-08-22 98752]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2003-03-04 145408]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2004-11-02 773565]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-10-11 518720]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2007-09-06 110592]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-07-15 45056]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2007-09-14 503608]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-26 133104]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-27 182768]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Mio]

OTL LOG:


OTL logfile created on: 3.1.2010 15:35:31 - Run 1
OTL by OldTimer - Version 3.1.20.2 Folder = C:\Documents and Settings\xy\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

503,00 Mb Total Physical Memory | 184,00 Mb Available Physical Memory | 36,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,26 Gb Total Space | 18,69 Gb Free Space | 50,15% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
Drive E: | 983,72 Mb Total Space | 980,42 Mb Free Space | 99,66% Space Free | Partition Type: FAT
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: XY-E006C1DDA941
Current User Name: xy
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 7 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.01.03 15:32:53 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xy\Plocha\OTL.exe
PRC - [2010.01.02 12:10:10 | 00,024,064 | ---- | M] (gfdbV) -- C:\WINDOWS\system32\winupdate86.exe
PRC - [2009.12.17 16:04:21 | 00,307,672 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2009.11.16 09:04:30 | 00,735,960 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009.11.16 09:03:32 | 02,054,360 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008.06.10 18:26:28 | 00,222,456 | ---- | M] () -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe
PRC - [2008.04.14 04:22:22 | 01,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.10.16 16:04:58 | 00,068,856 | ---- | M] (Google Inc.) -- C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
PRC - [2007.09.25 01:11:35 | 00,132,496 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
PRC - [2007.09.14 10:00:06 | 00,267,064 | ---- | M] (Apple Inc.) -- C:\Program Files\iTunes\iTunesHelper.exe
PRC - [2007.09.14 09:59:56 | 00,503,608 | ---- | M] (Apple Inc.) -- C:\Program Files\iPod\bin\iPodService.exe
PRC - [2007.09.06 13:28:18 | 00,110,592 | ---- | M] (Apple, Inc.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
PRC - [2004.11.02 08:03:44 | 00,155,648 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\igfxtray.exe
PRC - [2004.11.02 07:59:42 | 00,126,976 | ---- | M] (Intel Corporation) -- C:\WINDOWS\system32\hkcmd.exe
PRC - [2002.07.15 14:36:54 | 00,045,056 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
PRC - [2002.06.26 15:36:58 | 00,090,112 | ---- | M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMTray.exe


========== Modules (SafeList) ==========

MOD - [2010.01.03 15:32:53 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xy\Plocha\OTL.exe


========== Win32 Services (SafeList) ==========

SRV - [2009.11.16 09:12:54 | 00,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009.11.16 09:04:30 | 00,735,960 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2009.08.26 17:36:40 | 00,133,104 | ---- | M] (Google Inc.) [Auto | Stopped] -- C:\Program Files\Google\Update\GoogleUpdate.exe -- (gupdate) Google Update Service (gupdate)
SRV - [2009.04.27 09:38:19 | 00,182,768 | ---- | M] (Google) [On_Demand | Stopped] -- C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe -- (gusvc)
SRV - [2008.07.29 18:16:38 | 00,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)
SRV - [2008.06.10 18:26:28 | 00,222,456 | ---- | M] () [Auto | Running] -- C:\Program Files\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2007.09.14 09:59:56 | 00,503,608 | ---- | M] (Apple Inc.) [On_Demand | Running] -- C:\Program Files\iPod\bin\iPodService.exe -- (iPod Service)
SRV - [2007.09.06 13:28:18 | 00,110,592 | ---- | M] (Apple, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2002.07.15 14:36:54 | 00,045,056 | ---- | M] (Analog Devices, Inc.) [Auto | Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default))


========== Driver Services (SafeList) ==========

DRV - [2009.11.16 09:06:50 | 00,096,408 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\epfwtdir.sys -- (epfwtdir)
DRV - [2009.11.16 09:03:36 | 00,108,792 | ---- | M] (ESET) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009.11.16 08:56:12 | 00,116,520 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eamon.sys -- (eamon)
DRV - [2007.11.13 11:25:52 | 00,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\secdrv.sys -- (Secdrv)
DRV - [2006.09.19 14:44:04 | 00,015,664 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV - [2004.11.02 08:27:20 | 00,773,565 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ialmnt5.sys -- (ialm)
DRV - [2003.03.04 10:56:26 | 00,145,408 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\e100b325.sys -- (E100B) Intel(R)
DRV - [2002.10.11 11:46:24 | 00,518,720 | ---- | M] (Analog Devices, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\smwdm.sys -- (smwdm)
DRV - [2002.08.22 16:57:02 | 00,098,752 | ---- | M] (Andrea Electronics Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\aeaudio.sys -- (aeaudio)
DRV - [2001.10.25 11:00:00 | 00,017,792 | ---- | M] (Parallel Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ptilink.sys -- (Ptilink)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie


IE - HKU\.DEFAULT\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchT ... f8&oe=utf8
IE - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
IE - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\S-1-5-21-1715567821-1303643608-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http://www.google.cz/"
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.4

FF - HKLM\software\mozilla\Mozilla Firefox 3.0.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2009.12.26 11:21:34 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2009.12.17 16:04:28 | 00,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2009.12.31 15:35:29 | 00,000,000 | ---D | M]

[2009.01.16 12:32:08 | 00,000,000 | ---D | M] -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Extensions
[2010.01.03 13:44:22 | 00,000,000 | ---D | M] -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\extensions
[2009.12.31 15:26:37 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-1.xml
[2009.04.25 22:51:56 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-2.xml
[2009.05.03 19:18:35 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-3.xml
[2009.06.14 18:35:00 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-4.xml
[2009.08.06 11:05:31 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-5.xml
[2009.08.13 17:56:28 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-6.xml
[2009.09.11 06:33:22 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-7.xml
[2009.10.29 09:27:33 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-8.xml
[2009.12.17 16:04:45 | 00,000,950 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin-9.xml
[2008.07.10 11:58:44 | 00,000,944 | ---- | M] () -- C:\Documents and Settings\xy\Data aplikací\Mozilla\Firefox\Profiles\0qedi9rd.default\searchplugins\icqplugin.xml
[2010.01.03 13:44:22 | 00,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox\extensions
[2009.06.28 19:10:53 | 00,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2008.03.24 19:21:00 | 02,889,088 | ---- | M] () -- C:\Program Files\Mozilla Firefox\plugins\NPSWF32.dll
[2009.08.06 11:05:08 | 00,001,583 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\atlas-sk.xml
[2009.08.06 11:05:08 | 00,001,380 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\azet-sk.xml
[2009.08.06 11:05:08 | 00,001,479 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\dunaj-sk.xml
[2009.08.06 11:05:08 | 00,001,104 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-sk.xml
[2009.08.06 11:05:08 | 00,000,830 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\zoznam-sk.xml

O1 HOSTS File: (737 bytes) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - - No CLSID value found.
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\..\Toolbar\ShellBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe (Intel Corporation)
O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe (Intel Corporation)
O4 - HKLM..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
O4 - HKLM..\Run: [QuickTime Task] C:\Program Files\QuickTime\qttask.exe (Apple Inc.)
O4 - HKLM..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [winupdate86.exe] C:\WINDOWS\system32\winupdate86.exe (gfdbV)
O4 - HKU\S-1-5-21-1715567821-1303643608-725345543-1003..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
O4 - HKU\S-1-5-21-1715567821-1303643608-725345543-1003..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetActiveDesktop = 1
O7 - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O7 - HKU\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll (Google Inc.)
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\npjpi160_03.dll (Sun Microsystems, Inc.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Skype Technologies S.A.)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe (ICQ, Inc.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe (ICQ, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\WINDOWS\System32\winhelper86.dll ()
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\WINDOWS\System32\winhelper86.dll ()
O15 - HKLM\..Trusted Domains: 1 domain(s) and sub-domain(s) not assigned to a zone.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\winlogon86.exe) - C:\WINDOWS\system32\winlogon86.exe (gfdbV)
O20 - Winlogon\Notify\igfxcui: DllName - igfxsrvc.dll - C:\WINDOWS\System32\igfxsrvc.dll (Intel Corporation)
O20 - Winlogon\Notify\WgaLogon: DllName - Reg Error: Value error. - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.10.10 17:12:43 | 00,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{56fbd53a-f7c5-11de-ab2b-00096bedf9fa}\Shell\AutoRun\command - "" = E:\Install.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - comfile [open] -- "%1" %*
O35 - exefile [open] -- "%1" %*

========== Files/Folders - Created Within 7 Days ==========

[2010.01.03 15:32:03 | 00,513,536 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\xy\Plocha\OTL.exe
[2010.01.03 15:09:39 | 00,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\xy\Plocha\xy.exe
[2010.01.03 15:09:38 | 00,000,000 | ---D | C] -- C:\rsit
[2010.01.03 15:02:47 | 00,401,720 | ---- | C] (Trend Micro Inc.) -- C:\Documents and Settings\xy\Plocha\HijackThis.exe
[2010.01.02 19:27:51 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xy\Plocha\setup
[2010.01.02 19:26:56 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xy\Plocha\texty pesniciek
[2010.01.02 19:25:39 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xy\Plocha\MGcontrol
[2010.01.02 19:24:42 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xy\Plocha\hry
[2010.01.02 18:55:17 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xy\Dokumenty\GTA San Andreas User Files
[2010.01.02 18:54:29 | 00,098,304 | ---- | C] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2010.01.02 18:40:28 | 00,000,000 | ---D | C] -- C:\Program Files\Rockstar Games
[2010.01.02 18:37:11 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xy\Plocha\Gta
[2010.01.02 12:10:11 | 00,024,064 | ---- | C] (gfdbV) -- C:\WINDOWS\System32\winupdate86.exe
[2010.01.02 12:10:11 | 00,024,064 | ---- | C] (gfdbV) -- C:\WINDOWS\System32\winlogon86.exe
[2009.12.31 18:54:35 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\ESET
[2009.12.31 17:49:13 | 00,000,000 | ---D | C] -- C:\Documents and Settings\xy\Local Settings\Data aplikací\ESET
[2009.12.31 15:40:01 | 00,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2009.12.31 15:35:27 | 00,000,000 | ---D | C] -- C:\Program Files\ESET
[2009.12.31 15:35:26 | 00,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2009.12.28 17:36:21 | 00,000,000 | ---D | C] -- C:\Program Files\InternetSecurity2010
[2009.09.12 08:38:55 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Microsoft
[2009.08.26 17:41:04 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Google
[2009.08.26 17:36:53 | 00,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Google
[2007.12.18 17:49:02 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Apple
[2007.10.10 17:16:36 | 00,000,000 | ---D | M] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Microsoft
[2007.10.10 17:12:34 | 00,000,000 | --SD | M] -- C:\Documents and Settings\NetworkService\Data aplikací\Microsoft
[2007.10.10 17:12:34 | 00,000,000 | --SD | M] -- C:\Documents and Settings\LocalService\Data aplikací\Microsoft
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 7 Days ==========

[2010.01.03 15:32:53 | 00,513,536 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\xy\Plocha\OTL.exe
[2010.01.03 15:31:57 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\11478.exe
[2010.01.03 15:11:55 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\15724.exe
[2010.01.03 15:09:09 | 00,781,909 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\RSIT.exe
[2010.01.03 15:03:03 | 00,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\xy\Plocha\xy.exe
[2010.01.03 15:03:03 | 00,401,720 | ---- | M] (Trend Micro Inc.) -- C:\Documents and Settings\xy\Plocha\HijackThis.exe
[2010.01.03 14:51:55 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\19169.exe
[2010.01.03 14:46:00 | 00,000,932 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.01.03 14:31:54 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\26500.exe
[2010.01.03 14:11:52 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\6334.exe
[2010.01.03 13:51:52 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\18467.exe
[2010.01.03 13:31:51 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\41.exe
[2010.01.03 13:31:46 | 00,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2010.01.03 13:30:18 | 00,000,928 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.01.03 13:30:15 | 00,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.01.03 13:30:11 | 00,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.01.03 11:02:21 | 03,145,728 | -H-- | M] () -- C:\Documents and Settings\xy\NTUSER.DAT
[2010.01.03 11:02:21 | 00,000,178 | -HS- | M] () -- C:\Documents and Settings\xy\ntuser.ini
[2010.01.03 01:04:40 | 04,802,162 | -H-- | M] () -- C:\Documents and Settings\xy\Local Settings\Data aplikací\IconCache.db
[2010.01.02 19:48:26 | 00,007,259 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\v_14740667.jpg
[2010.01.02 18:54:29 | 00,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2010.01.02 18:37:48 | 00,000,270 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce (2) - autorun.lnk
[2010.01.02 18:37:48 | 00,000,238 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce (2) - audio.lnk
[2010.01.02 18:37:34 | 00,000,291 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - MercedesBenzSL65.lnk
[2010.01.02 18:37:34 | 00,000,270 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce (2) - Install.lnk
[2010.01.02 18:37:34 | 00,000,270 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - Install.lnk
[2010.01.02 18:37:34 | 00,000,270 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - autorun.lnk
[2010.01.02 18:37:34 | 00,000,267 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - layout.lnk
[2010.01.02 18:37:34 | 00,000,267 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - engine32.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce (3) - setup.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce (2) - setup.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - setup.isn.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - setup.ibt.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - data1.hdr.lnk
[2010.01.02 18:37:34 | 00,000,254 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - data4.lnk
[2010.01.02 18:37:34 | 00,000,254 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - data3.lnk
[2010.01.02 18:37:34 | 00,000,254 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - data1.lnk
[2010.01.02 18:37:34 | 00,000,246 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - HOODLUM.lnk
[2010.01.02 18:37:34 | 00,000,246 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - DirectX.lnk
[2010.01.02 18:37:34 | 00,000,243 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - Readme.lnk
[2010.01.02 18:37:34 | 00,000,238 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - audio.lnk
[2010.01.02 18:37:34 | 00,000,230 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Zástupce - Bin.lnk
[2010.01.02 12:11:00 | 00,000,756 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\Internet Security 2010.lnk
[2010.01.02 12:10:10 | 00,024,064 | ---- | M] (gfdbV) -- C:\WINDOWS\System32\winupdate86.exe
[2010.01.02 12:10:10 | 00,024,064 | ---- | M] (gfdbV) -- C:\WINDOWS\System32\winlogon86.exe
[2010.01.02 11:03:58 | 00,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2009.12.31 19:18:04 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\23281.exe
[2009.12.31 18:57:38 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\28145.exe
[2009.12.31 18:37:26 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\5705.exe
[2009.12.31 18:16:56 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\24464.exe
[2009.12.31 17:56:46 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\26962.exe
[2009.12.31 17:36:35 | 00,002,360 | ---- | M] () -- C:\WINDOWS\System32\29358.exe
[2009.12.31 15:40:50 | 00,002,505 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2009.12.31 15:34:09 | 37,853,184 | ---- | M] () -- C:\Documents and Settings\xy\Plocha\eav_nt32_sky.msi
[2009.12.28 17:35:09 | 00,016,896 | ---- | M] () -- C:\WINDOWS\System32\winhelper86.dll
[7 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.01.03 15:08:53 | 00,781,909 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\RSIT.exe
[2010.01.02 19:48:19 | 00,007,259 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\v_14740667.jpg
[2010.01.02 18:37:48 | 00,000,270 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce (2) - autorun.lnk
[2010.01.02 18:37:48 | 00,000,238 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce (2) - audio.lnk
[2010.01.02 18:37:34 | 00,000,291 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - MercedesBenzSL65.lnk
[2010.01.02 18:37:34 | 00,000,270 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce (2) - Install.lnk
[2010.01.02 18:37:34 | 00,000,270 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - Install.lnk
[2010.01.02 18:37:34 | 00,000,270 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - autorun.lnk
[2010.01.02 18:37:34 | 00,000,267 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - layout.lnk
[2010.01.02 18:37:34 | 00,000,267 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - engine32.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce (3) - setup.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce (2) - setup.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - setup.isn.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - setup.ibt.lnk
[2010.01.02 18:37:34 | 00,000,262 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - data1.hdr.lnk
[2010.01.02 18:37:34 | 00,000,254 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - data4.lnk
[2010.01.02 18:37:34 | 00,000,254 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - data3.lnk
[2010.01.02 18:37:34 | 00,000,254 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - data1.lnk
[2010.01.02 18:37:34 | 00,000,246 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - HOODLUM.lnk
[2010.01.02 18:37:34 | 00,000,246 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - DirectX.lnk
[2010.01.02 18:37:34 | 00,000,243 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - Readme.lnk
[2010.01.02 18:37:34 | 00,000,238 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - audio.lnk
[2010.01.02 18:37:34 | 00,000,230 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Zástupce - Bin.lnk
[2010.01.02 12:10:52 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\41.exe
[2009.12.31 19:18:03 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\23281.exe
[2009.12.31 18:57:36 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\28145.exe
[2009.12.31 18:37:25 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\5705.exe
[2009.12.31 18:16:56 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\24464.exe
[2009.12.31 17:56:45 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\26962.exe
[2009.12.31 17:36:35 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\29358.exe
[2009.12.31 17:16:30 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\11478.exe
[2009.12.31 16:56:24 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\15724.exe
[2009.12.31 16:36:13 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\19169.exe
[2009.12.31 16:16:10 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\26500.exe
[2009.12.31 15:19:37 | 37,853,184 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\eav_nt32_sky.msi
[2009.12.29 23:24:21 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\6334.exe
[2009.12.28 20:22:31 | 00,002,360 | ---- | C] () -- C:\WINDOWS\System32\18467.exe
[2009.12.28 17:36:22 | 00,000,756 | ---- | C] () -- C:\Documents and Settings\xy\Plocha\Internet Security 2010.lnk
[2009.12.28 17:35:02 | 00,016,896 | ---- | C] () -- C:\WINDOWS\System32\winhelper86.dll
[2009.07.27 11:07:37 | 00,000,754 | ---- | C] () -- C:\WINDOWS\WORDPAD.INI
[2007.10.29 18:32:28 | 00,009,728 | ---- | C] () -- C:\Documents and Settings\xy\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007.10.10 18:23:17 | 00,000,044 | ---- | C] () -- C:\WINDOWS\System32\msssc.dll
[2003.02.03 04:26:18 | 00,012,288 | ---- | C] () -- C:\WINDOWS\System32\e100bmsg.dll

========== LOP Check ==========

[2009.12.21 11:02:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
[2009.12.31 15:35:26 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ESET
[2009.12.21 11:08:27 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\FarmFrenzy3
[2009.04.15 16:29:43 | 00,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ICQ
[2009.08.27 19:11:07 | 00,000,000 | ---D | M] -- C:\Documents and Settings\xy\Data aplikací\Alawar
[2009.06.28 19:11:46 | 00,000,000 | ---D | M] -- C:\Documents and Settings\xy\Data aplikací\ICQ

========== Purity Check ==========



========== Custom Scans ==========


< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"CTFMON.EXE" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 04:22:17 | 00,015,360 | ---- | M] (Microsoft Corporation)
"MSMSGS" = "C:\Program Files\Messenger\msmsgs.exe" /background -- [2008.04.14 04:22:36 | 01,695,232 | ---- | M] (Microsoft Corporation)
"swg" = "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" -- [2007.10.16 16:04:58 | 00,068,856 | ---- | M] (Google Inc.)
"Skype" = "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized -- [2009.10.09 13:11:12 | 25,623,336 | R--- | M] (Skype Technologies S.A.)

< c:\windows\*.* /U >
[4 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]


< MD5 for: AGP440.SYS >
[2008.04.13 19:36:38 | 00,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 19:36:38 | 00,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2008.04.13 19:40:30 | 00,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 00,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 21:59:44 | 00,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: EVENTLOG.DLL >
[2008.04.14 04:21:41 | 00,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 04:21:41 | 00,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 14:49:08 | 00,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: NDIS.SYS >
[2008.04.13 20:20:37 | 00,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 20:20:37 | 00,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.03 22:14:30 | 00,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.17 14:49:14 | 00,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 04:21:50 | 00,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 04:21:50 | 00,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 14:49:18 | 00,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 04:21:54 | 00,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 04:21:54 | 00,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll
< End of report >

[Mio]

SystemLook LOG:


ystemLook v1.0 by jpshortstuff (29.08.09)
Log created at 15:46 on 03/01/2010 by xy (Administrator - Elevation successful)

========== filefind ==========

Searching for "userinit.*"
C:\WINDOWS\$NtServicePackUninstall$\userinit.exe -----c 24576 bytes [05:46 11/09/2009] [13:49 17/08/2004] 836F7960362FF95C5D49E40B891F2CFC
C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf --a--- 18296 bytes [21:25 28/12/2009] [12:32 03/01/2010] 8248086DEF337A8DB65003C651D18CA0
C:\WINDOWS\ServicePackFiles\i386\userinit.exe ------ 26112 bytes [03:22 14/04/2008] [03:22 14/04/2008] 7DC1830F22E7D275B438127B68030239
C:\WINDOWS\system32\userinit.exe --a--- 26112 bytes [13:49 17/08/2004] [03:22 14/04/2008] 7DC1830F22E7D275B438127B68030239

-=End Of File=-

[Mio]

LOG po restarte:


All processes killed
========== PROCESSES ==========
No active process named IS2010.exe was found!
========== OTL ==========
No active process named winupdate86.exe was found!
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\winupdate86.exe deleted successfully.
C:\WINDOWS\system32\winupdate86.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1715567821-1303643608-725345543-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\DisableTaskMgr deleted successfully.
File C:\WINDOWS\System32\winupdate86.exe not found.
C:\WINDOWS\system32\winlogon86.exe moved successfully.
C:\Program Files\InternetSecurity2010 folder moved successfully.
C:\WINDOWS\system32\11478.exe moved successfully.
C:\WINDOWS\system32\15724.exe moved successfully.
C:\WINDOWS\system32\19169.exe moved successfully.
C:\WINDOWS\system32\26500.exe moved successfully.
C:\WINDOWS\system32\6334.exe moved successfully.
C:\WINDOWS\system32\18467.exe moved successfully.
C:\WINDOWS\system32\41.exe moved successfully.
C:\WINDOWS\system32\23281.exe moved successfully.
C:\WINDOWS\system32\28145.exe moved successfully.
C:\WINDOWS\system32\5705.exe moved successfully.
C:\WINDOWS\system32\24464.exe moved successfully.
C:\WINDOWS\system32\26962.exe moved successfully.
C:\WINDOWS\system32\29358.exe moved successfully.
C:\WINDOWS\system32\winhelper86.dll moved successfully.
C:\WINDOWS\System32\CONFIG.TMP deleted successfully.
C:\WINDOWS\System32\SET100.tmp deleted successfully.
C:\WINDOWS\System32\SET101.tmp deleted successfully.
C:\WINDOWS\System32\SET6C.tmp deleted successfully.
C:\WINDOWS\System32\SETFD.tmp deleted successfully.
C:\WINDOWS\System32\SETFE.tmp deleted successfully.
C:\WINDOWS\System32\SETFF.tmp deleted successfully.
C:\WINDOWS\003038_.tmp deleted successfully.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SET4.tmp deleted successfully.
C:\WINDOWS\SET8.tmp deleted successfully.
========== FILES ==========
File\Folder C:\WINDOWS\system32\kdisq.exe not found.
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\\DisableTaskMgr not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Internet Security 2010 not found.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\"UserInit"|"C:\\WINDOWS\\system32\\userinit.exe," /E : value set successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 65984 bytes
->Temporary Internet Files folder emptied: 13165158 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1740789 bytes

User: xy
->Temp folder emptied: 258153257 bytes
->Temporary Internet Files folder emptied: 47141212 bytes
->Java cache emptied: 1720463 bytes
->FireFox cache emptied: 91503045 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
Windows Temp folder emptied: 17811238 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 23943320 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 434,00 mb

Restore point Set: OTL Restore Point (64424509440)

OTL by OldTimer - Version 3.1.20.2 log created on 01032010_162048

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

[Mio]

Novy LOG z RSIT:


Logfile of random's system information tool 1.06 (written by random/random)
Run by xy at 2010-01-03 16:27:58
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 20 GB (51%) free of 38 GB
Total RAM: 503 MB (23% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:28:10, on 3.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\notepad.exe
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\xy\Plocha\RSIT.exe
C:\Documents and Settings\xy\Plocha\xy.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{C952D761-8ECF-4118-ABF8-EA20B8C7CCE3}: NameServer = 213.151.236.161,213.151.200.3
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

--
End of file - 6958 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-06 263280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll [2009-12-02 764912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2009-12-06 263280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Smapp"=C:\Program Files\Analog Devices\SoundMAX\Smtray.exe [2002-06-26 90112]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-11-02 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-11-02 126976]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-06-29 286720]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2007-09-14 267064]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [2007-09-25 132496]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2007-10-16 68856]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2004-11-02 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSetActiveDesktop"=1
"NoActiveDesktopChanges"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoSetActiveDesktop"=
"NoActiveDesktopChanges"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{56fbd53a-f7c5-11de-ab2b-00096bedf9fa}]
shell\AutoRun\command - E:\Install.exe


======List of files/folders created in the last 1 months======

2010-01-03 16:20:48 ----D---- C:\_OTL
2010-01-03 15:09:38 ----D---- C:\rsit
2010-01-02 18:54:29 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-01-02 18:40:28 ----D---- C:\Program Files\Rockstar Games
2009-12-31 15:40:01 ----D---- C:\WINDOWS\system32\appmgmt
2009-12-31 15:35:27 ----D---- C:\Program Files\ESET
2009-12-31 15:35:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2009-12-10 07:56:12 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-10 07:55:16 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-10 07:54:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-10 07:54:05 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-10 07:53:43 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-09 13:25:03 ----D---- C:\b8017d4229470314bd

======List of files/folders modified in the last 1 months======

2010-01-03 16:26:46 ----D---- C:\WINDOWS\Temp
2010-01-03 16:25:16 ----D---- C:\Program Files\Mozilla Firefox
2010-01-03 16:23:18 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-03 16:20:50 ----D---- C:\WINDOWS\system32
2010-01-03 16:20:50 ----D---- C:\WINDOWS
2010-01-03 15:09:56 ----D---- C:\WINDOWS\Prefetch
2010-01-02 18:40:28 ----RD---- C:\Program Files
2010-01-02 18:40:28 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-02 18:39:24 ----D---- C:\Program Files\Common Files\InstallShield
2010-01-02 18:36:09 ----HD---- C:\WINDOWS\inf
2010-01-02 18:36:08 ----D---- C:\WINDOWS\system32\CatRoot2
2009-12-31 15:40:50 ----D---- C:\WINDOWS\system32\drivers
2009-12-31 15:40:01 ----SHD---- C:\WINDOWS\Installer
2009-12-31 15:40:01 ----D---- C:\Program Files\Common Files
2009-12-25 10:27:27 ----D---- C:\Documents and Settings\xy\Data aplikací\Skype
2009-12-21 11:08:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\FarmFrenzy3
2009-12-21 11:02:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper
2009-12-10 10:32:19 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-12-10 08:44:52 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-10 08:44:49 ----D---- C:\WINDOWS\system32\cs-cz
2009-12-10 08:44:49 ----D---- C:\Program Files\Internet Explorer
2009-12-10 08:44:39 ----D---- C:\WINDOWS\ie7updates
2009-12-10 07:56:20 ----A---- C:\WINDOWS\imsins.BAK
2009-12-10 07:54:27 ----HD---- C:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-08-22 98752]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2003-03-04 145408]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2006-09-19 15664]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2004-11-02 773565]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2002-10-11 518720]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2007-09-06 110592]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-07-15 45056]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2007-09-14 503608]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-08-26 133104]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-27 182768]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------