Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#106 Příspěvek od chris.h »

Já děkuji, že se mi tak snažíš pomoct :) máš se mnou velkou trpělivost :)

tak po instalaci je stav pořád stejný... stále net nejede...

a já už budu asi pro dnešek končit... jsem děsně unavená... přeji dobrou noc :)

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#107 Příspěvek od chris.h »

Taky přeji pěkné odpoledne :)

tak vše je stáhnuto a nainstalováno... vypadá to už lépe???

Logfile of random's system information tool 1.09 (written by random/random)
Run by OEM at 2011-11-26 15:52:25
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (13%) free of 148 GB
Total RAM: 1014 MB (57% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\ASC4_PerformanceMonitor.job
C:\WINDOWS\tasks\PMTask.job
C:\WINDOWS\tasks\Připomenutí registrace 1.job
C:\WINDOWS\tasks\Připomenutí registrace 2.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\OEM\Data aplikací\Mozilla\Firefox\Profiles\6jts2rqn.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872, smartwebprinting@hp.com:4.5, {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, jqs@sun.com:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://websearch.ask.com/redirect?clien ... ^YY^CZ&&q="

"smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll
npqtplugin.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

C:\Documents and Settings\OEM\Data aplikací\Mozilla\Firefox\Profiles\6jts2rqn.default\extensions\
toolbar@ask.com

C:\Documents and Settings\OEM\Data aplikací\Mozilla\Firefox\Profiles\6jts2rqn.default\searchplugins\
askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
MHTBPos00 Class - C:\Program Files\Family Toolbar\tbcore3.dll [2009-05-07 2642432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2009-09-28 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GrooveShellExtensions.dll [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-08-23 1515688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-03-17 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} -
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2009-09-28 520192]
{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - Family Toolbar - C:\Program Files\Family Toolbar\tbcore3.dll [2009-05-07 2642432]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-08-23 1515688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []
"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog []
"TPFNF7"=C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe [2007-04-09 58416]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2007-03-09 66176]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2007-03-05 172032]
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2007-03-29 181808]
"EZEJMNAP"=C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe [2007-03-28 243248]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-02-26 131072]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-02-26 155648]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-02-26 131072]
"TVT Scheduler Proxy"=C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [2010-12-10 1093632]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"ISUSPM Startup"=C:\Program Files\Common Files\Installshield\UpdateService\isuspm.exe [2005-08-11 249856]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-08-11 81920]
"AwaySch"=C:\Program Files\Lenovo\AwayTask\AwaySch.EXE [2006-11-07 91688]
"LPManager"=C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe [2007-03-22 120368]
"AMSG"=C:\Program Files\ThinkVantage\AMSG\Amsg.exe [2007-02-01 419376]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2011-08-23 887976]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-08 3076144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"=cmd.exe /c start http://www.avg.com/ww.special-uninstall ... er=9.0.894 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-12-23 143360]
"Advanced SystemCare 4"=C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe [2011-08-09 417112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtTray]
C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe [2009-02-27 278016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2009-01-14 113680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDFPrint]
C:\Program Files\PDF24\pdf24.exe [2011-04-28 220552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\Digital Imaging\bin\hpqtra08.exe [2009-05-21 275768]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

C:\Documents and Settings\OEM\Nabídka Start\Programy\Po spuštění
AccuWeather.lnk - C:\Documents and Settings\OEM\Dokumenty\AccuWeather.com Stratus\AccuWeather.com Stratus.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-02-26 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\WINDOWS\system32\psqlpwd.dll [2007-03-14 89600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06 34344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
C:\Program Files\Lenovo\HOTKEY\tphklock.dll [2006-12-14 28672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GrooveShellExtensions.dll [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
psqlpwd

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe"="C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe"="C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe:*:Disabled:Adobe AIR Installer"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\IObit\Advanced SystemCare 4\ASC.exe"="C:\Program Files\IObit\Advanced SystemCare 4\ASC.exe:*:Enabled:Advanced SystemCare 4"
"C:\Program Files\IObit\Advanced SystemCare 4\AutoUpdate.exe"="C:\Program Files\IObit\Advanced SystemCare 4\AutoUpdate.exe:*:Enabled:Advanced SystemCare Updater"
"C:\Documents and Settings\OEM\Dokumenty\AccuWeather.com Stratus\AccuWeather.com Stratus.exe"="C:\Documents and Settings\OEM\Dokumenty\AccuWeather.com Stratus\AccuWeather.com Stratus.exe:*:Enabled:AccuWeather.com Stratus"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:Windows® installer"
"C:\Documents and Settings\All Users\Data aplikací\MFAData\SelfUpd\avgmfapx.exe"="C:\Documents and Settings\All Users\Data aplikací\MFAData\SelfUpd\avgmfapx.exe:*:Enabled:AVG Installer Application"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\Program Files\Ask.com\Updater\Updater.exe"="C:\Program Files\Ask.com\Updater\Updater.exe:*:Enabled:Ask Updater"
"C:\Program Files\AVI ReComp\AVIReComp.exe"="C:\Program Files\AVI ReComp\AVIReComp.exe:*:Enabled:The tool for re-encoding AVI clips"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe"="C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"D:\setup\hpznui01.exe"="D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll

======List of files/folders created in the last 1 month======

2011-11-26 15:23:43 ----D---- C:\Program Files\Common Files\Intel
2011-11-26 15:23:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Intel
2011-11-26 00:25:52 ----A---- C:\WINDOWS\system32\AegisI5Installer.exe
2011-11-25 23:32:13 ----SHD---- C:\RECYCLER
2011-11-25 23:28:18 ----A---- C:\ComboFix.txt
2011-11-25 12:15:57 ----D---- C:\Documents and Settings\OEM\Data aplikací\Intel
2011-11-24 23:45:49 ----D---- C:\rsit
2011-11-24 23:13:31 ----A---- C:\WINDOWS\system32\ibmpmsvc.exe
2011-11-24 23:13:31 ----A---- C:\WINDOWS\system32\drivers\btwusb.sys
2011-11-24 23:00:13 ----A---- C:\WINDOWS\zip.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\SWSC.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\SWREG.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\sed.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\PEV.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\NIRCMD.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\MBR.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\grep.exe
2011-11-24 22:59:55 ----D---- C:\WINDOWS\ERDNT
2011-11-24 22:59:49 ----D---- C:\Qoobox
2011-11-24 13:47:27 ----A---- C:\TPHKLOCK.TXT
2011-11-24 13:19:20 ----A---- C:\WINDOWS\system32\IPSSVC.EXE
2011-11-24 09:34:56 ----A---- C:\WINDOWS\OEWABLog.txt
2011-11-24 09:34:25 ----D---- C:\WINDOWS\Prefetch
2011-11-24 09:30:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-11-24 09:28:38 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2011-11-24 09:26:55 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2011-11-24 09:25:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-11-24 09:23:41 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-11-24 09:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2011-11-24 09:20:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2011-11-24 09:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-11-24 09:17:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-11-24 09:15:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-11-24 09:13:42 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2011-11-24 09:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-11-24 09:10:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2011-11-24 09:08:39 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-11-24 09:06:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-11-24 09:05:00 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-11-24 09:03:09 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2011-11-24 08:59:26 ----A---- C:\WINDOWS\setuplog.txt
2011-11-24 08:58:16 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2011-11-24 08:58:16 ----N---- C:\WINDOWS\system32\comsdupd.exe
2011-11-24 08:58:15 ----N---- C:\WINDOWS\system32\smtpapi.dll
2011-11-24 08:58:15 ----N---- C:\WINDOWS\system32\rwnh.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati3duag.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-11-24 08:58:09 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-11-24 08:58:09 ----N---- C:\WINDOWS\system32\azroles.dll
2011-11-24 08:58:09 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2011-11-24 08:58:09 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3svc.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3msm.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3api.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dimsroam.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\credssp.dll
2011-11-24 08:58:07 ----N---- C:\WINDOWS\system32\eapolqec.dll
2011-11-24 08:58:07 ----N---- C:\WINDOWS\system32\dot3ui.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eapsvc.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eapqec.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eappprxy.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eapphost.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eappgnui.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eappcfg.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2011-11-24 08:58:05 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2011-11-24 08:58:03 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2011-11-24 08:58:03 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2011-11-24 08:58:02 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2011-11-24 08:58:01 ----N---- C:\WINDOWS\system32\kmsvc.dll
2011-11-24 08:58:01 ----N---- C:\WINDOWS\system32\kbdpash.dll
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\mmcperf.exe
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\mmcex.dll
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2011-11-24 08:57:59 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2011-11-24 08:57:59 ----N---- C:\WINDOWS\system32\mssha.dll
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\onex.dll
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\napstat.exe
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\napmontr.dll
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\napipsec.dll
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\s3gnb.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\rasqec.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\qutil.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\qcliprov.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\qagentrt.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\qagent.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slserv.exe
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slrundll.exe
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slgen.dll
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slextspk.dll
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slcoinst.dll
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\setupn.exe
2011-11-24 08:57:55 ----N---- C:\WINDOWS\system32\tspkg.dll
2011-11-24 08:57:55 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-11-24 08:57:53 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2011-11-24 08:57:53 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2011-11-24 08:57:52 ----N---- C:\WINDOWS\system32\wmphoto.dll
2011-11-24 08:57:52 ----N---- C:\WINDOWS\system32\wlanapi.dll
2011-11-24 08:57:49 ----N---- C:\WINDOWS\slrundll.exe
2011-11-24 08:57:47 ----D---- C:\WINDOWS\l2schemas
2011-11-24 08:57:46 ----D---- C:\WINDOWS\system32\cs
2011-11-24 08:57:46 ----D---- C:\WINDOWS\system32\bits
2011-11-24 08:53:03 ----D---- C:\WINDOWS\ServicePackFiles
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2011-11-24 08:48:32 ----D---- C:\WINDOWS\network diagnostic
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2011-11-24 08:48:26 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2011-11-24 08:48:26 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2011-11-24 08:48:25 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2011-11-24 08:48:25 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2011-11-24 08:48:23 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2011-11-24 08:48:23 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2011-11-24 08:48:23 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2011-11-24 08:48:23 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2011-11-24 08:48:22 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2011-11-24 08:48:22 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2011-11-24 08:48:22 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2011-11-24 08:48:19 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2011-11-24 08:48:19 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2011-11-24 08:48:19 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2011-11-24 08:48:18 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2011-11-24 08:48:18 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2011-11-24 08:48:18 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2011-11-24 08:48:18 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2011-11-24 08:48:17 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2011-11-24 08:48:17 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2011-11-24 08:48:17 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2011-11-24 08:48:14 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2011-11-24 08:45:26 ----A---- C:\WINDOWS\002734_.tmp
2011-11-24 08:39:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-11-23 22:58:57 ----D---- C:\Documents and Settings\OEM\Data aplikací\Malwarebytes
2011-11-23 22:58:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-11-23 22:58:44 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-11-23 22:58:43 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-11-21 00:49:57 ----A---- C:\WINDOWS\system32\msiexec.exe
2011-11-21 00:49:32 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2011-11-20 11:31:31 ----A---- C:\WINDOWS\system32\drivers\BlackBox.sys
2011-11-20 11:21:23 ----D---- C:\WINDOWS\temp
2011-11-19 14:37:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-11-18 23:48:42 ----A---- C:\Boot.bak
2011-11-18 23:48:37 ----RASHD---- C:\cmdcons
2011-11-18 12:22:57 ----A---- C:\WINDOWS\system32\drivers\10418741.sys
2011-11-17 21:38:01 ----A---- C:\WINDOWS\system32\drivers\44042542.sys
2011-11-17 17:38:58 ----D---- C:\Program Files\trend micro
2011-11-17 15:59:01 ----D---- C:\Documents and Settings\OEM\Data aplikací\AVI ReComp
2011-11-17 15:58:41 ----D---- C:\Program Files\Gabest
2011-11-17 15:58:30 ----D---- C:\Program Files\Xvid
2011-11-17 15:57:49 ----D---- C:\Program Files\AviSynth 2.5
2011-11-17 15:54:44 ----D---- C:\Program Files\AVI ReComp
2011-11-17 12:48:20 ----D---- C:\Program Files\ESET
2011-11-17 10:09:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-11-08 09:54:37 ----D---- C:\Program Files\WAS
2011-10-30 19:14:12 ----D---- C:\Documents and Settings\OEM\Data aplikací\Search Settings
2011-10-30 19:13:53 ----D---- C:\Program Files\Application Updater
2011-10-30 19:13:52 ----D---- C:\Program Files\IObit Toolbar

======List of files/folders modified in the last 1 month======

2011-11-26 15:53:37 ----A---- C:\WINDOWS\system32\PROCDB.INI
2011-11-26 15:53:05 ----AD---- C:\WINDOWS\system32
2011-11-26 15:53:05 ----A---- C:\WINDOWS\system32\IPSCtrl.INI
2011-11-26 15:50:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-26 15:49:11 ----D---- C:\WINDOWS
2011-11-26 15:48:39 ----SHD---- C:\WINDOWS\Installer
2011-11-26 15:48:38 ----AD---- C:\Program Files\Common Files\Lenovo
2011-11-26 15:48:29 ----D---- C:\Program Files\Lenovo
2011-11-26 15:47:51 ----D---- C:\SWSHARE
2011-11-26 15:32:34 ----D---- C:\WINDOWS\Help
2011-11-26 15:31:52 ----D---- C:\WINDOWS\system32\drivers
2011-11-26 15:31:39 ----D---- C:\WINDOWS\system32\config
2011-11-26 15:31:10 ----D---- C:\drivers
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\PxWave.dll
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\PxMas.dll
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\pxafs.dll
2011-11-26 15:29:25 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2011-11-26 15:29:25 ----N---- C:\WINDOWS\system32\pxdrv.dll
2011-11-26 15:29:25 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2011-11-26 15:29:24 ----N---- C:\WINDOWS\system32\PxSFS.DLL
2011-11-26 15:29:24 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2011-11-26 15:29:23 ----N---- C:\WINDOWS\system32\Px.dll
2011-11-26 15:24:45 ----HD---- C:\WINDOWS\inf
2011-11-26 15:24:43 ----D---- C:\WINDOWS\system32\CatRoot
2011-11-26 15:24:24 ----D---- C:\WINDOWS\system32\CatRoot2
2011-11-26 15:24:22 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-11-26 15:23:43 ----AD---- C:\Program Files\Intel
2011-11-26 15:23:43 ----AD---- C:\Program Files\Common Files
2011-11-26 15:13:20 ----A---- C:\WINDOWS\system32\results.txt
2011-11-26 15:01:57 ----D---- C:\Program Files\ThinkPad
2011-11-25 23:24:37 ----A---- C:\WINDOWS\system.ini
2011-11-25 23:24:22 ----D---- C:\WINDOWS\system32\drivers\etc
2011-11-25 23:20:09 ----D---- C:\WINDOWS\AppPatch
2011-11-24 23:00:00 ----SHD---- C:\System Volume Information
2011-11-24 23:00:00 ----D---- C:\WINDOWS\system32\Restore
2011-11-24 10:19:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-11-24 09:37:05 ----D---- C:\WINDOWS\Debug
2011-11-24 09:33:49 ----D---- C:\WINDOWS\system32\Setup
2011-11-24 09:33:48 ----D---- C:\WINDOWS\system32\wbem
2011-11-24 09:33:46 ----RSD---- C:\WINDOWS\Fonts
2011-11-24 09:30:53 ----ASHD---- C:\WINDOWS\system32\dllcache
2011-11-24 09:08:07 ----D---- C:\WINDOWS\security
2011-11-24 09:05:39 ----D---- C:\Program Files\Messenger
2011-11-24 08:58:34 ----D---- C:\WINDOWS\WinSxS
2011-11-24 08:58:18 ----D---- C:\WINDOWS\ehome
2011-11-24 08:58:15 ----D---- C:\WINDOWS\system32\inetsrv
2011-11-24 08:58:13 ----D---- C:\WINDOWS\ime
2011-11-24 08:57:49 ----D---- C:\WINDOWS\system32\usmt
2011-11-24 08:57:49 ----D---- C:\WINDOWS\system32\cs-cz
2011-11-24 08:57:45 ----D---- C:\WINDOWS\PeerNet
2011-11-24 08:57:45 ----D---- C:\Program Files\Movie Maker
2011-11-24 08:52:33 ----D---- C:\WINDOWS\system32\npp
2011-11-24 08:52:31 ----D---- C:\WINDOWS\msagent
2011-11-24 08:52:28 ----D---- C:\WINDOWS\srchasst
2011-11-24 08:52:27 ----D---- C:\Program Files\NetMeeting
2011-11-24 08:52:25 ----D---- C:\WINDOWS\system32\Com
2011-11-24 08:52:19 ----D---- C:\Program Files\Windows Media Player
2011-11-24 08:52:18 ----D---- C:\Program Files\Windows NT
2011-11-24 08:52:18 ----D---- C:\Program Files\Outlook Express
2011-11-24 08:52:11 ----AD---- C:\Program Files\Common Files\System
2011-11-24 08:51:44 ----AD---- C:\WINDOWS\system32\oobe
2011-11-24 08:51:40 ----D---- C:\WINDOWS\system
2011-11-24 08:22:17 ----D---- C:\WINDOWS\SHELLNEW
2011-11-23 22:58:43 ----AD---- C:\Program Files
2011-11-23 08:49:16 ----AC---- C:\WINDOWS\NeroDigital.ini
2011-11-20 13:55:03 ----AC---- C:\WINDOWS\wincmd.ini
2011-11-20 07:34:22 ----AD---- C:\Documents and Settings\OEM\Data aplikací\Media Player Classic
2011-11-19 16:22:37 ----D---- C:\Program Files\DAEMON Tools Toolbar
2011-11-19 16:01:30 ----AC---- C:\WINDOWS\wcx_ftp.ini
2011-11-19 00:10:35 ----SD---- C:\WINDOWS\Tasks
2011-11-19 00:00:01 ----DC---- C:\WINDOWS\$NtUninstallKB28038$
2011-11-18 23:48:42 ----RASH---- C:\boot.ini
2011-11-17 07:03:02 ----A---- C:\WINDOWS\system32\bscs.ini
2011-11-17 07:02:52 ----A---- C:\WINDOWS\system32\LOCALSERVICE.INI
2011-11-17 07:02:49 ----A---- C:\WINDOWS\system32\LOCALDEVICE.INI
2011-11-11 23:09:20 ----AD---- C:\Program Files\Mozilla Firefox
2011-10-30 19:13:52 ----D---- C:\Program Files\Common Files\Spigot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2009-01-07 20744]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2007-02-12 277784]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-11-26 43528]
R0 risdptsk;risdptsk; C:\WINDOWS\system32\DRIVERS\risdptsk.sys [2005-07-14 27904]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx86.sys [2007-03-02 100656]
R0 TPDIGIMN;TPDIGIMN; C:\WINDOWS\System32\DRIVERS\ApsHM86.sys [2007-03-02 19760]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\system32\DRIVERS\TPHKDRV.sys [2006-10-23 17778]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwrif.sys [2007-04-12 4442]
R1 TSMAPIP;TSMAPIP; C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2007-04-09 12848]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 pmem;pmem; \??\C:\WINDOWS\System32\drivers\pmemnt.sys []
R2 PROCDD;IPS Helper Driver; C:\WINDOWS\system32\DRIVERS\PROCDD.SYS [2006-11-06 12080]
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2006-11-15 32256]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2006-11-15 43520]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2006-11-15 37376]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2010-05-19 13952]
R2 smihlp;SMI Helper Driver (smihlp); \??\C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys []
R2 tvtfilter;tvtfilter; C:\WINDOWS\system32\DRIVERS\tvtfilter.sys [2011-11-26 33536]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2007-03-04 146432]
R3 atmeltpm;atmeltpm; C:\WINDOWS\system32\DRIVERS\atmeltpm.sys [2005-05-17 15872]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2006-03-09 152064]
R3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2009-01-03 39304]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2008-12-07 30088]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAudN.sys [2007-04-27 666112]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2007-03-25 988032]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2007-03-25 210688]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-02-26 5700096]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2007-02-27 21040]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
R3 NETw4x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-03-28 2204672]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2006-09-13 28224]
R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2007-03-14 40848]
R3 TVTI2C;Lenovo SM bus driver; C:\WINDOWS\system32\DRIVERS\Tvti2c.sys [2006-09-13 35264]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2009-01-08 31880]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2007-03-25 731136]
S1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2011-08-04 103112]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2008-12-07 14088]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2007-01-24 67960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys []
S3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-10-24 117760]
S3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2008-10-28 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2008-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2008-10-28 21568]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2004-06-28 42752]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S3 TVTPktFilter;TVT Packet Filter Service; C:\WINDOWS\system32\DRIVERS\tvtpktfilter.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2008-01-21 14856]
S4 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-14 42368]
S4 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-14 44928]
S4 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-14 42752]
S4 amdagp;Ovladač filtru AMD portu AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-14 40960]
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S4 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe [2010-09-22 349528]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-08 974944]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-06-22 866576]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2007-02-27 36400]
R2 IPSSVC;IPS Core Service; C:\WINDOWS\system32\IPSSVC.EXE [2007-01-30 108080]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-06-22 481552]
R2 S24EventMonitor;Intel(R) PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2011-06-22 882960]
R2 SUService;System Update; c:\program files\lenovo\system update\suservice.exe [2011-07-25 28672]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2010-12-10 1029432]
R2 TVT Backup Protection Service;TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [2010-12-10 1118208]
R2 TVT Backup Service;TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [2010-12-10 1425408]
R2 TVT Scheduler;TVT Scheduler; c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [2010-12-10 1171456]
R2 tvtnetwk;tvtnetwk; C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe [2009-10-23 45056]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe []
S2 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe []
S2 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe []
S2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 98407]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMConnectCDS;Služba Windows Media Connect; C:\Program Files\Windows Media Connect 2\wmccds.exe [2005-10-06 855552]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#108 Příspěvek od chris.h »

MBAM odinstalováno... Vše ostatní nainstalováno ale internet stále nejede...

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#109 Příspěvek od chris.h »

přes to cmd mi to tam zase jen blikne v černém oknu...


Logfile of random's system information tool 1.09 (written by random/random)
Run by OEM at 2011-11-26 17:34:20
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 19 GB (13%) free of 148 GB
Total RAM: 1014 MB (40% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\ASC4_PerformanceMonitor.job
C:\WINDOWS\tasks\PMTask.job
C:\WINDOWS\tasks\Připomenutí registrace 1.job
C:\WINDOWS\tasks\Připomenutí registrace 2.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\OEM\Data aplikací\Mozilla\Firefox\Profiles\6jts2rqn.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872, smartwebprinting@hp.com:4.5, {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, jqs@sun.com:1.0, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"
prefs.js - "keyword.URL" - "http://websearch.ask.com/redirect?clien ... ^YY^CZ&&q="

"smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1]
"Description"=Yahoo! activeX Plug-in Bridge
"Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll
npqtplugin.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

C:\Documents and Settings\OEM\Data aplikací\Mozilla\Firefox\Profiles\6jts2rqn.default\extensions\
toolbar@ask.com

C:\Documents and Settings\OEM\Data aplikací\Mozilla\Firefox\Profiles\6jts2rqn.default\searchplugins\
askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
MHTBPos00 Class - C:\Program Files\Family Toolbar\tbcore3.dll [2009-05-07 2642432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2009-09-28 520192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GrooveShellExtensions.dll [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-08-23 1515688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-17 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-03-17 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21 509496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} -
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Documents and Settings\All Users\Data aplikací\LangSoft\WebIE.dll [2009-09-28 520192]
{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - Family Toolbar - C:\Program Files\Family Toolbar\tbcore3.dll [2009-05-07 2642432]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2011-08-23 1515688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PWRMGRTR"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor []
"BLOG"=rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog []
"TPFNF7"=C:\Program Files\Lenovo\NPDIRECT\TPFNF7SP.exe [2007-04-09 58416]
"TPHOTKEY"=C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe [2007-03-09 66176]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2007-03-05 172032]
"TpShocks"=C:\WINDOWS\system32\TpShocks.exe [2007-03-29 181808]
"EZEJMNAP"=C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe [2007-03-28 243248]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-02-26 131072]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-02-26 155648]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-02-26 131072]
"TVT Scheduler Proxy"=C:\Program Files\Common Files\Lenovo\Scheduler\scheduler_proxy.exe [2010-12-10 1093632]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"ISUSPM Startup"=C:\Program Files\Common Files\Installshield\UpdateService\isuspm.exe [2005-08-11 249856]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-08-11 81920]
"AwaySch"=C:\Program Files\Lenovo\AwayTask\AwaySch.EXE [2006-11-07 91688]
"LPManager"=C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe [2007-03-22 120368]
"AMSG"=C:\Program Files\ThinkVantage\AMSG\Amsg.exe [2007-02-01 419376]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"ApnUpdater"=C:\Program Files\Ask.com\Updater\Updater.exe [2011-08-23 887976]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-08 3076144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"=cmd.exe /c start http://www.avg.com/ww.special-uninstall ... er=9.0.894 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-12-23 143360]
"Advanced SystemCare 4"=C:\Program Files\IObit\Advanced SystemCare 4\ASCTray.exe [2011-08-09 417112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BtTray]
C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe [2009-02-27 278016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2009-01-14 113680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDFPrint]
C:\Program Files\PDF24\pdf24.exe [2011-04-28 220552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\Digital Imaging\bin\hpqtra08.exe [2009-05-21 275768]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe

C:\Documents and Settings\OEM\Nabídka Start\Programy\Po spuštění
AccuWeather.lnk - C:\Documents and Settings\OEM\Dokumenty\AccuWeather.com Stratus\AccuWeather.com Stratus.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-02-26 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\psfus]
C:\WINDOWS\system32\psqlpwd.dll [2007-03-14 89600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2]
C:\Program Files\Lenovo\HOTKEY\notifyf2.dll [2006-09-06 34344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tphotkey]
C:\Program Files\Lenovo\HOTKEY\tphklock.dll [2006-12-14 28672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GrooveShellExtensions.dll [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
psqlpwd

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoResolveSearch"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe"="C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe"="C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe:*:Disabled:Adobe AIR Installer"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\IObit\Advanced SystemCare 4\ASC.exe"="C:\Program Files\IObit\Advanced SystemCare 4\ASC.exe:*:Enabled:Advanced SystemCare 4"
"C:\Program Files\IObit\Advanced SystemCare 4\AutoUpdate.exe"="C:\Program Files\IObit\Advanced SystemCare 4\AutoUpdate.exe:*:Enabled:Advanced SystemCare Updater"
"C:\Documents and Settings\OEM\Dokumenty\AccuWeather.com Stratus\AccuWeather.com Stratus.exe"="C:\Documents and Settings\OEM\Dokumenty\AccuWeather.com Stratus\AccuWeather.com Stratus.exe:*:Enabled:AccuWeather.com Stratus"
"C:\WINDOWS\system32\msiexec.exe"="C:\WINDOWS\system32\msiexec.exe:*:Enabled:Windows® installer"
"C:\Documents and Settings\All Users\Data aplikací\MFAData\SelfUpd\avgmfapx.exe"="C:\Documents and Settings\All Users\Data aplikací\MFAData\SelfUpd\avgmfapx.exe:*:Enabled:AVG Installer Application"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:Windows Media Player"
"C:\Program Files\Ask.com\Updater\Updater.exe"="C:\Program Files\Ask.com\Updater\Updater.exe:*:Enabled:Ask Updater"
"C:\Program Files\AVI ReComp\AVIReComp.exe"="C:\Program Files\AVI ReComp\AVIReComp.exe:*:Enabled:The tool for re-encoding AVI clips"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe"="C:\Program Files\Common Files\HP\Digital Imaging\Bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe"
"C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe"
"D:\setup\hpznui01.exe"="D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll

======List of files/folders created in the last 1 month======

2011-11-26 16:23:12 ----RAHD---- C:\Documents and Settings\All Users\Data aplikací\Atheros
2011-11-26 16:23:12 ----A---- C:\WINDOWS\system32\IPTests.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\wgapi.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\wcapiU.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\wcapi.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\ssleay32.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\athcfg20U.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\athcfg20resU.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\athcfg20res.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\athcfg20.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\athcfg11res.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\athcfg11.dll
2011-11-26 16:23:11 ----A---- C:\WINDOWS\system32\acs.exe
2011-11-26 16:23:10 ----A---- C:\WINDOWS\system32\libeay32.dll
2011-11-26 16:22:55 ----N---- C:\WINDOWS\system32\drivers\wsimd.sys
2011-11-26 16:22:40 ----RA---- C:\WINDOWS\system32\dsaNac.dll
2011-11-26 16:22:40 ----A---- C:\WINDOWS\system32\wsimd.dll
2011-11-26 16:22:40 ----A---- C:\WINDOWS\system32\wsfwDS.dll
2011-11-26 16:22:39 ----RA---- C:\WINDOWS\system32\dsa.dll
2011-11-26 16:22:20 ----A---- C:\WINDOWS\system32\wsimd.sys
2011-11-26 16:22:20 ----A---- C:\WINDOWS\system32\athw.sys
2011-11-26 16:22:20 ----A---- C:\WINDOWS\system32\ATHCFG10.DLL
2011-11-26 15:23:43 ----D---- C:\Program Files\Common Files\Intel
2011-11-26 15:23:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Intel
2011-11-26 00:25:52 ----A---- C:\WINDOWS\system32\AegisI5Installer.exe
2011-11-25 23:32:13 ----SHD---- C:\RECYCLER
2011-11-25 23:28:18 ----A---- C:\ComboFix.txt
2011-11-25 12:15:57 ----D---- C:\Documents and Settings\OEM\Data aplikací\Intel
2011-11-24 23:45:49 ----D---- C:\rsit
2011-11-24 23:13:31 ----A---- C:\WINDOWS\system32\ibmpmsvc.exe
2011-11-24 23:13:31 ----A---- C:\WINDOWS\system32\drivers\btwusb.sys
2011-11-24 23:00:13 ----A---- C:\WINDOWS\zip.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\SWSC.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\SWREG.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\sed.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\PEV.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\NIRCMD.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\MBR.exe
2011-11-24 23:00:13 ----A---- C:\WINDOWS\grep.exe
2011-11-24 22:59:55 ----D---- C:\WINDOWS\ERDNT
2011-11-24 22:59:49 ----D---- C:\Qoobox
2011-11-24 13:47:27 ----A---- C:\TPHKLOCK.TXT
2011-11-24 13:19:20 ----A---- C:\WINDOWS\system32\IPSSVC.EXE
2011-11-24 09:34:56 ----A---- C:\WINDOWS\OEWABLog.txt
2011-11-24 09:34:25 ----D---- C:\WINDOWS\Prefetch
2011-11-24 09:30:21 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-11-24 09:28:38 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2011-11-24 09:26:55 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2011-11-24 09:25:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-11-24 09:23:41 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-11-24 09:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2011-11-24 09:20:26 ----HDC---- C:\WINDOWS\$NtUninstallKB954211$
2011-11-24 09:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-11-24 09:17:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-11-24 09:15:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-11-24 09:13:42 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2011-11-24 09:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-11-24 09:10:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2011-11-24 09:08:39 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-11-24 09:06:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-11-24 09:05:00 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-11-24 09:03:09 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2011-11-24 08:59:26 ----A---- C:\WINDOWS\setuplog.txt
2011-11-24 08:58:16 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2011-11-24 08:58:16 ----N---- C:\WINDOWS\system32\comsdupd.exe
2011-11-24 08:58:15 ----N---- C:\WINDOWS\system32\smtpapi.dll
2011-11-24 08:58:15 ----N---- C:\WINDOWS\system32\rwnh.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati3duag.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2011-11-24 08:58:10 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-11-24 08:58:09 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-11-24 08:58:09 ----N---- C:\WINDOWS\system32\azroles.dll
2011-11-24 08:58:09 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2011-11-24 08:58:09 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3svc.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3msm.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dot3api.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dimsroam.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2011-11-24 08:58:08 ----N---- C:\WINDOWS\system32\credssp.dll
2011-11-24 08:58:07 ----N---- C:\WINDOWS\system32\eapolqec.dll
2011-11-24 08:58:07 ----N---- C:\WINDOWS\system32\dot3ui.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eapsvc.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eapqec.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eappprxy.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eapphost.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eappgnui.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eappcfg.dll
2011-11-24 08:58:06 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2011-11-24 08:58:05 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2011-11-24 08:58:03 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2011-11-24 08:58:03 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2011-11-24 08:58:02 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2011-11-24 08:58:01 ----N---- C:\WINDOWS\system32\kmsvc.dll
2011-11-24 08:58:01 ----N---- C:\WINDOWS\system32\kbdpash.dll
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\mmcperf.exe
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\mmcex.dll
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-11-24 08:58:00 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2011-11-24 08:57:59 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2011-11-24 08:57:59 ----N---- C:\WINDOWS\system32\mssha.dll
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\onex.dll
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\napstat.exe
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\napmontr.dll
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\napipsec.dll
2011-11-24 08:57:58 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\s3gnb.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\rasqec.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\qutil.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\qcliprov.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\qagentrt.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\qagent.dll
2011-11-24 08:57:57 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slserv.exe
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slrundll.exe
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slgen.dll
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slextspk.dll
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\slcoinst.dll
2011-11-24 08:57:56 ----N---- C:\WINDOWS\system32\setupn.exe
2011-11-24 08:57:55 ----N---- C:\WINDOWS\system32\tspkg.dll
2011-11-24 08:57:55 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-11-24 08:57:53 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2011-11-24 08:57:53 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2011-11-24 08:57:52 ----N---- C:\WINDOWS\system32\wmphoto.dll
2011-11-24 08:57:52 ----N---- C:\WINDOWS\system32\wlanapi.dll
2011-11-24 08:57:49 ----N---- C:\WINDOWS\slrundll.exe
2011-11-24 08:57:47 ----D---- C:\WINDOWS\l2schemas
2011-11-24 08:57:46 ----D---- C:\WINDOWS\system32\cs
2011-11-24 08:57:46 ----D---- C:\WINDOWS\system32\bits
2011-11-24 08:53:03 ----D---- C:\WINDOWS\ServicePackFiles
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2011-11-24 08:48:32 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2011-11-24 08:48:32 ----D---- C:\WINDOWS\network diagnostic
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2011-11-24 08:48:30 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-11-24 08:48:29 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2011-11-24 08:48:28 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2011-11-24 08:48:27 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2011-11-24 08:48:26 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2011-11-24 08:48:26 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2011-11-24 08:48:25 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2011-11-24 08:48:25 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2011-11-24 08:48:23 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2011-11-24 08:48:23 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2011-11-24 08:48:23 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2011-11-24 08:48:23 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2011-11-24 08:48:22 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2011-11-24 08:48:22 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2011-11-24 08:48:22 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2011-11-24 08:48:21 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2011-11-24 08:48:19 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2011-11-24 08:48:19 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2011-11-24 08:48:19 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2011-11-24 08:48:18 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2011-11-24 08:48:18 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2011-11-24 08:48:18 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2011-11-24 08:48:18 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2011-11-24 08:48:17 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2011-11-24 08:48:17 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2011-11-24 08:48:17 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2011-11-24 08:48:16 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2011-11-24 08:48:14 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2011-11-24 08:45:26 ----A---- C:\WINDOWS\002734_.tmp
2011-11-24 08:39:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2011-11-23 22:58:57 ----D---- C:\Documents and Settings\OEM\Data aplikací\Malwarebytes
2011-11-23 22:58:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-11-21 00:49:57 ----A---- C:\WINDOWS\system32\msiexec.exe
2011-11-21 00:49:32 ----A---- C:\WINDOWS\system32\drivers\afd.sys
2011-11-20 11:31:31 ----A---- C:\WINDOWS\system32\drivers\BlackBox.sys
2011-11-20 11:21:23 ----D---- C:\WINDOWS\temp
2011-11-19 14:37:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-11-18 23:48:42 ----A---- C:\Boot.bak
2011-11-18 23:48:37 ----RASHD---- C:\cmdcons
2011-11-18 12:22:57 ----A---- C:\WINDOWS\system32\drivers\10418741.sys
2011-11-17 21:38:01 ----A---- C:\WINDOWS\system32\drivers\44042542.sys
2011-11-17 17:38:58 ----D---- C:\Program Files\trend micro
2011-11-17 15:59:01 ----D---- C:\Documents and Settings\OEM\Data aplikací\AVI ReComp
2011-11-17 15:58:41 ----D---- C:\Program Files\Gabest
2011-11-17 15:58:30 ----D---- C:\Program Files\Xvid
2011-11-17 15:57:49 ----D---- C:\Program Files\AviSynth 2.5
2011-11-17 15:54:44 ----D---- C:\Program Files\AVI ReComp
2011-11-17 12:48:20 ----D---- C:\Program Files\ESET
2011-11-17 10:09:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2011-11-08 09:54:37 ----D---- C:\Program Files\WAS
2011-10-30 19:14:12 ----D---- C:\Documents and Settings\OEM\Data aplikací\Search Settings
2011-10-30 19:13:53 ----D---- C:\Program Files\Application Updater
2011-10-30 19:13:52 ----D---- C:\Program Files\IObit Toolbar

======List of files/folders modified in the last 1 month======

2011-11-26 16:34:25 ----A---- C:\WINDOWS\system32\PROCDB.INI
2011-11-26 16:33:20 ----AD---- C:\WINDOWS\system32
2011-11-26 16:33:20 ----A---- C:\WINDOWS\system32\IPSCtrl.INI
2011-11-26 16:30:12 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-26 16:27:50 ----D---- C:\WINDOWS
2011-11-26 16:23:31 ----D---- C:\WINDOWS\system32\drivers
2011-11-26 16:23:16 ----D---- C:\WINDOWS\system32\config
2011-11-26 16:23:03 ----HD---- C:\WINDOWS\inf
2011-11-26 16:22:31 ----D---- C:\WINDOWS\system32\CatRoot
2011-11-26 16:22:27 ----D---- C:\WINDOWS\system32\CatRoot2
2011-11-26 16:22:20 ----D---- C:\Program Files\Lenovo
2011-11-26 16:22:19 ----HD---- C:\Program Files\InstallShield Installation Information
2011-11-26 16:18:38 ----AD---- C:\Program Files
2011-11-26 15:58:31 ----D---- C:\SWSHARE
2011-11-26 15:48:39 ----SHD---- C:\WINDOWS\Installer
2011-11-26 15:48:38 ----AD---- C:\Program Files\Common Files\Lenovo
2011-11-26 15:32:34 ----D---- C:\WINDOWS\Help
2011-11-26 15:31:16 ----D---- C:\drivers
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\PxWave.dll
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\PxMas.dll
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\pxinsi64.exe
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2011-11-26 15:29:26 ----N---- C:\WINDOWS\system32\pxafs.dll
2011-11-26 15:29:25 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2011-11-26 15:29:25 ----N---- C:\WINDOWS\system32\pxdrv.dll
2011-11-26 15:29:25 ----N---- C:\WINDOWS\system32\pxcpyi64.exe
2011-11-26 15:29:24 ----N---- C:\WINDOWS\system32\PxSFS.DLL
2011-11-26 15:29:24 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2011-11-26 15:29:23 ----N---- C:\WINDOWS\system32\Px.dll
2011-11-26 15:24:22 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-11-26 15:23:43 ----AD---- C:\Program Files\Intel
2011-11-26 15:23:43 ----AD---- C:\Program Files\Common Files
2011-11-26 15:13:20 ----A---- C:\WINDOWS\system32\results.txt
2011-11-26 15:01:57 ----D---- C:\Program Files\ThinkPad
2011-11-25 23:24:37 ----A---- C:\WINDOWS\system.ini
2011-11-25 23:24:22 ----D---- C:\WINDOWS\system32\drivers\etc
2011-11-25 23:20:09 ----D---- C:\WINDOWS\AppPatch
2011-11-24 23:00:00 ----SHD---- C:\System Volume Information
2011-11-24 23:00:00 ----D---- C:\WINDOWS\system32\Restore
2011-11-24 10:19:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-11-24 09:37:05 ----D---- C:\WINDOWS\Debug
2011-11-24 09:33:49 ----D---- C:\WINDOWS\system32\Setup
2011-11-24 09:33:48 ----D---- C:\WINDOWS\system32\wbem
2011-11-24 09:33:46 ----RSD---- C:\WINDOWS\Fonts
2011-11-24 09:30:53 ----ASHD---- C:\WINDOWS\system32\dllcache
2011-11-24 09:08:07 ----D---- C:\WINDOWS\security
2011-11-24 09:05:39 ----D---- C:\Program Files\Messenger
2011-11-24 08:58:34 ----D---- C:\WINDOWS\WinSxS
2011-11-24 08:58:18 ----D---- C:\WINDOWS\ehome
2011-11-24 08:58:15 ----D---- C:\WINDOWS\system32\inetsrv
2011-11-24 08:58:13 ----D---- C:\WINDOWS\ime
2011-11-24 08:57:49 ----D---- C:\WINDOWS\system32\usmt
2011-11-24 08:57:49 ----D---- C:\WINDOWS\system32\cs-cz
2011-11-24 08:57:45 ----D---- C:\WINDOWS\PeerNet
2011-11-24 08:57:45 ----D---- C:\Program Files\Movie Maker
2011-11-24 08:52:33 ----D---- C:\WINDOWS\system32\npp
2011-11-24 08:52:31 ----D---- C:\WINDOWS\msagent
2011-11-24 08:52:28 ----D---- C:\WINDOWS\srchasst
2011-11-24 08:52:27 ----D---- C:\Program Files\NetMeeting
2011-11-24 08:52:25 ----D---- C:\WINDOWS\system32\Com
2011-11-24 08:52:19 ----D---- C:\Program Files\Windows Media Player
2011-11-24 08:52:18 ----D---- C:\Program Files\Windows NT
2011-11-24 08:52:18 ----D---- C:\Program Files\Outlook Express
2011-11-24 08:52:11 ----AD---- C:\Program Files\Common Files\System
2011-11-24 08:51:44 ----AD---- C:\WINDOWS\system32\oobe
2011-11-24 08:51:40 ----D---- C:\WINDOWS\system
2011-11-24 08:22:17 ----D---- C:\WINDOWS\SHELLNEW
2011-11-23 08:49:16 ----AC---- C:\WINDOWS\NeroDigital.ini
2011-11-20 13:55:03 ----AC---- C:\WINDOWS\wincmd.ini
2011-11-20 07:34:22 ----AD---- C:\Documents and Settings\OEM\Data aplikací\Media Player Classic
2011-11-19 16:22:37 ----D---- C:\Program Files\DAEMON Tools Toolbar
2011-11-19 16:01:30 ----AC---- C:\WINDOWS\wcx_ftp.ini
2011-11-19 00:10:35 ----SD---- C:\WINDOWS\Tasks
2011-11-19 00:00:01 ----DC---- C:\WINDOWS\$NtUninstallKB28038$
2011-11-18 23:48:42 ----RASH---- C:\boot.ini
2011-11-17 07:03:02 ----A---- C:\WINDOWS\system32\bscs.ini
2011-11-17 07:02:52 ----A---- C:\WINDOWS\system32\LOCALSERVICE.INI
2011-11-17 07:02:49 ----A---- C:\WINDOWS\system32\LOCALDEVICE.INI
2011-11-11 23:09:20 ----AD---- C:\Program Files\Mozilla Firefox
2011-10-30 19:13:52 ----D---- C:\Program Files\Common Files\Spigot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2009-01-07 20744]
R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2007-02-12 277784]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-11-26 43528]
R0 risdptsk;risdptsk; C:\WINDOWS\system32\DRIVERS\risdptsk.sys [2005-07-14 27904]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 Shockprf;Shockprf; C:\WINDOWS\System32\DRIVERS\Apsx86.sys [2007-03-02 100656]
R0 TPDIGIMN;TPDIGIMN; C:\WINDOWS\System32\DRIVERS\ApsHM86.sys [2007-03-02 19760]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 TPHKDRV;TPHKDRV; C:\WINDOWS\system32\DRIVERS\TPHKDRV.sys [2006-10-23 17778]
R1 TPPWRIF;TPPWRIF; C:\WINDOWS\System32\drivers\Tppwrif.sys [2007-04-12 4442]
R1 TSMAPIP;TSMAPIP; C:\WINDOWS\System32\drivers\TSMAPIP.SYS [2007-04-09 12848]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 pmem;pmem; \??\C:\WINDOWS\System32\drivers\pmemnt.sys []
R2 PROCDD;IPS Helper Driver; C:\WINDOWS\system32\DRIVERS\PROCDD.SYS [2006-11-06 12080]
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2006-11-15 32256]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2006-11-15 43520]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2006-11-15 37376]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2010-05-19 13952]
R2 smihlp;SMI Helper Driver (smihlp); \??\C:\Program Files\Common Files\ThinkVantage Fingerprint Software\Drivers\smihlp.sys []
R2 tvtfilter;tvtfilter; C:\WINDOWS\system32\DRIVERS\tvtfilter.sys [2011-11-26 33536]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2007-03-04 146432]
R3 atmeltpm;atmeltpm; C:\WINDOWS\system32\DRIVERS\atmeltpm.sys [2005-05-17 15872]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2006-03-09 152064]
R3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2009-01-03 39304]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2008-12-07 30088]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDAudN.sys [2007-04-27 666112]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2007-03-25 988032]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2007-03-25 210688]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-02-26 5700096]
R3 IBMPMDRV;IBMPMDRV; C:\WINDOWS\system32\DRIVERS\ibmpmdrv.sys [2007-02-27 21040]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
R3 NETw4x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-03-28 2204672]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2006-09-13 28224]
R3 TcUsb;TC USB Kernel Driver; C:\WINDOWS\System32\Drivers\tcusb.sys [2007-03-14 40848]
R3 TVTI2C;Lenovo SM bus driver; C:\WINDOWS\system32\DRIVERS\Tvti2c.sys [2006-09-13 35264]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2009-01-08 31880]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2007-03-25 731136]
S1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2011-08-04 103112]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2008-12-07 14088]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2007-01-24 67960]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys []
S3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2001-10-24 117760]
S3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2008-10-28 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2008-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2008-10-28 21568]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-03 1897408]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 Ser2pl;Prolific Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2004-06-28 42752]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINDOWS\system32\DRIVERS\serscan.sys [2001-10-24 6784]
S3 TVTPktFilter;TVT Packet Filter Service; C:\WINDOWS\system32\DRIVERS\tvtpktfilter.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2008-01-21 14856]
S3 WSIMD;wsimd Service; C:\WINDOWS\system32\DRIVERS\wsimd.sys [2008-02-08 57408]
S4 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-14 42368]
S4 agpCPQ;Filtr Compaq sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys [2008-04-14 44928]
S4 alim1541;Filtr ALI sběrnice AGP; C:\WINDOWS\system32\DRIVERS\alim1541.sys [2008-04-14 42752]
S4 amdagp;Ovladač filtru AMD portu AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys [2008-04-14 43008]
S4 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\sisagp.sys [2008-04-14 40960]
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S4 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-14 42240]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 acs;Atheros Configuration Service; C:\WINDOWS\system32\acs.exe [2009-09-24 475220]
R2 btwdins;Bluetooth Service; C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe [2010-09-22 349528]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-08 974944]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2011-06-22 866576]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 IBMPMSVC;ThinkPad PM Service; C:\WINDOWS\system32\ibmpmsvc.exe [2007-02-27 36400]
R2 IPSSVC;IPS Core Service; C:\WINDOWS\system32\IPSSVC.EXE [2007-01-30 108080]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2011-06-22 481552]
R2 S24EventMonitor;Intel(R) PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2011-06-22 882960]
R2 SUService;System Update; c:\program files\lenovo\system update\suservice.exe [2011-07-25 28672]
R2 ThinkVantage Registry Monitor Service;ThinkVantage Registry Monitor Service; C:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe [2010-12-10 1029432]
R2 TVT Backup Protection Service;TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [2010-12-10 1118208]
R2 TVT Backup Service;TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [2010-12-10 1425408]
R2 TVT Scheduler;TVT Scheduler; c:\Program Files\Common Files\Lenovo\Scheduler\tvtsched.exe [2010-12-10 1171456]
R2 tvtnetwk;tvtnetwk; C:\Program Files\Lenovo\Rescue and Recovery\ADM\IUService.exe [2009-10-23 45056]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe []
S2 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe []
S2 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe []
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 TPHDEXLGSVC;ThinkPad HDD APS Logging Service; C:\WINDOWS\System32\TPHDEXLG.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 98407]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMConnectCDS;Služba Windows Media Connect; C:\Program Files\Windows Media Connect 2\wmccds.exe [2005-10-06 855552]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#110 Příspěvek od chris.h »

bat.rar
(67.27 KiB) Staženo 49 x

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#111 Příspěvek od chris.h »

Při instalaci mi to háže:
BS.rar
(298.7 KiB) Staženo 49 x

Enum: entriesRead = 0
Enum: entriesRead = 5

SERVICE_NAME: TlntSvr
DISPLAY_NAME: Telnet
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: RSVP
DISPLAY_NAME: QoS RSVP
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: PolicyAgent
DISPLAY_NAME: Slu
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Nla
DISPLAY_NAME: Sledování umíst
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: LmHosts
DISPLAY_NAME: Podpora rozhraní NetBIOS nad protokolem TCP/IP
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
Enum: more data, need 1336 bytes
Enum: entriesRead = 4

SERVICE_NAME: RSVP
DISPLAY_NAME: QoS RSVP
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Nla
DISPLAY_NAME: Sledování umíst
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: LmHosts
DISPLAY_NAME: Podpora rozhraní NetBIOS nad protokolem TCP/IP
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Dhcp
DISPLAY_NAME: Klient DHCP
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
Enum: entriesRead = 2

SERVICE_NAME: LmHosts
DISPLAY_NAME: Podpora rozhraní NetBIOS nad protokolem TCP/IP
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Dhcp
DISPLAY_NAME: Klient DHCP
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
Enum: entriesRead = 1

SERVICE_NAME: Messenger
DISPLAY_NAME: Kurýrní slu
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
Enum: entriesRead = 0
Enum: entriesRead = 0
Enum: entriesRead = 0
Enum: entriesRead = 0
Enum: entriesRead = 1

SERVICE_NAME: Browser
DISPLAY_NAME: Prohledávání po
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
Enum: entriesRead = 5

SERVICE_NAME: TlntSvr
DISPLAY_NAME: Telnet
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: RSVP
DISPLAY_NAME: QoS RSVP
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: PolicyAgent
DISPLAY_NAME: Slu
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: Nla
DISPLAY_NAME: Sledování umíst
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1068 (0x42c)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: LmHosts
DISPLAY_NAME: Podpora rozhraní NetBIOS nad protokolem TCP/IP
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
Enum: more data, need 1434 bytes
Enum: entriesRead = 4

SERVICE_NAME: ServiceLayer
DISPLAY_NAME: ServiceLayer
TYPE : 110 WIN32_OWN_PROCESS (interactive)
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: xmlprov
DISPLAY_NAME: Slu
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 1077 (0x435)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: WZCSVC
DISPLAY_NAME: Automatická konfigurace bezdrátových za
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

SERVICE_NAME: wscsvc
DISPLAY_NAME: Centrum zabezpe
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
Enum: more data, need 6434 bytes
Enum: entriesRead = 0

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#112 Příspěvek od chris.h »

Když to chci spustit, tak mi to vyhodí:
problém.rar
(182.22 KiB) Staženo 39 x

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#113 Příspěvek od chris.h »

Přeji krásné odpoledne :)

tak chybí mi chybí Tcpip a TVTPktFilter - když dám start, tak mi vyjedede, že systém nemůže nalést uvedený soubor

dále nejede dnscache, PolicyAgent, Nla - jsou podmíněni tím tcpip, který tam není - najede mi: nepodařilo se zahájit závislou službu nebo skupinu

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#114 Příspěvek od chris.h »

Tak hlásí mi to toto:
tcpip.rar
(322.17 KiB) Staženo 44 x

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#115 Příspěvek od chris.h »

ten soubor jsem tam našla... myslíš nainstalování té služby??? nebo jestli se nachází v systemu32???

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#116 Příspěvek od chris.h »

no já zkoušela tu službu instalovat ale je to pořád stejné...

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#117 Příspěvek od chris.h »

jj, jsou tam oba soubory...

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#118 Příspěvek od chris.h »

přes process hacker tam má: Running, tak by měla být... nebo to mám hledat jinde?

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#119 Příspěvek od chris.h »

Když vše zadám a dám start, tak mi tam vyletí hláška: Unable to start Tcpip: Nelze vytvořit soubor, který již existuje.

chris.h
Návštěvník
Návštěvník
Příspěvky: 121
Registrován: 17 Lis 2011 12:20

Re: Prosím o pomoc, vir Rootkit.Agent.NUS Trojský kůň

#120 Příspěvek od chris.h »

Teď mi to hlásí, že systém nemůže nalézt uvedený soubor.

Odpovědět