extrémně pomalé pc

[michal1223]

Dobrý den Vám všem, můj notebook zničeho nic zpomalil, načítá snad pět minut a cokoliv na něm dělám trvá opravdu moc dlouho...můžete zkontrolovat log? Děkuji, Michal

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-01-04 16:59:59
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 118 GB (77%) free of 153 GB
Total RAM: 1789 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:00:19, on 4.1.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
c:\Program Files\Fingerprint Sensor\AtService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Steam\steam.exe
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\mmc.exe
C:\WINDOWS\system32\DfrgNtfs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\Dokumenty\soft\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\listicka.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files\Seznam.cz\toolbar\toolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKCU\..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe /s
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send To Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\listicka.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AuthenTec Fingerprint Service (ATService) - AuthenTec, Inc. - c:\Program Files\Fingerprint Sensor\AtService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 8470 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2011-11-10 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-11-28 809040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-11-10 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-11-10 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\listicka.dll [2010-10-07 1961240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files\Seznam.cz\toolbar\toolbar.dll [2010-10-07 187672]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-11-28 809040]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-08-10 98304]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2008-12-11 1044480]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2008-03-24 884736]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-11-11 287800]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-03 1791272]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-11-28 3744552]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2011-11-29 3508624]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Steam"=C:\Program Files\Steam\steam.exe [2011-12-24 1242448]
"KiesPDLR"=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2011-11-29 21392]
"KiesHelper"=C:\Program Files\Samsung\Kies\KiesHelper.exe [2011-11-29 935312]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-08-10 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableCAD"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"ForceClassicControlPanel"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\Goiceasoft Studios\Counter Strike 1.8 Goiceasoft\cstrike.exe"="C:\Program Files\Goiceasoft Studios\Counter Strike 1.8 Goiceasoft\cstrike.exe:*:Enabled:CS 1.8 Goiceasoft"
"C:\Program Files\Steam\SteamApps\sairus278\counter-strike source\hl2.exe"="C:\Program Files\Steam\SteamApps\sairus278\counter-strike source\hl2.exe:*:Enabled:Counter-Strike: Source"
"C:\Program Files\Steam\SteamApps\sairus278\day of defeat source\hl2.exe"="C:\Program Files\Steam\SteamApps\sairus278\day of defeat source\hl2.exe:*:Enabled:Day of Defeat: Source"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-01-04 17:00:00 ----D---- C:\Program Files\trend micro
2012-01-04 16:59:59 ----D---- C:\rsit
2011-12-24 22:36:15 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2011-12-24 22:36:10 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2011-12-24 19:46:43 ----D---- C:\Program Files\Steam
2011-12-19 19:55:20 ----D---- C:\Documents and Settings\Administrator\Data aplikací\WinRAR
2011-12-18 10:23:24 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-12-18 01:16:05 ----D---- C:\Program Files\The KMPlayer
2011-12-17 23:19:32 ----D---- C:\WINDOWS\system32\XPSViewer
2011-12-17 23:19:15 ----D---- C:\Program Files\Reference Assemblies
2011-12-17 21:48:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-12-17 21:47:58 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-12-17 21:37:25 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-12-17 20:24:21 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-12-17 20:24:21 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-12-17 20:24:21 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-12-17 20:24:21 ----D---- C:\524d55394f71a90857d308
2011-12-17 20:19:40 ----D---- C:\6f5dc4a715f5cb42566584aa6160cdef
2011-12-17 20:19:35 ----D---- C:\f8454443fa229fd1e5
2011-12-17 18:39:32 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-12-17 18:39:23 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-12-17 18:39:15 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-12-17 18:39:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2011-12-17 18:38:57 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-12-17 18:38:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-12-17 18:38:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-12-17 18:38:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2011-12-17 18:38:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-12-17 18:38:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2011-12-17 18:38:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-12-17 18:38:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2011-12-17 18:37:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2011-12-17 18:37:47 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2011-12-17 18:37:39 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-12-17 18:37:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-12-17 18:37:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-12-17 18:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2011-12-17 18:36:54 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-12-17 18:36:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2011-12-17 18:36:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-12-17 18:36:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2011-12-17 18:36:22 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-12-17 18:36:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2011-12-17 18:36:05 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-12-17 18:35:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2011-12-17 18:35:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2011-12-17 18:35:43 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-12-17 18:35:36 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-12-17 18:35:28 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-12-17 18:35:21 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-12-17 18:35:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-12-17 18:35:07 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-12-17 18:34:52 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2011-12-17 18:34:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2011-12-17 18:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-12-17 18:34:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-12-17 18:34:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2011-12-17 18:34:05 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-12-17 18:33:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2641690$
2011-12-17 18:33:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-12-17 18:33:35 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-12-17 18:33:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2011-12-17 18:33:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2011-12-17 18:32:35 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2011-12-17 18:32:27 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-12-17 18:32:20 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-12-17 18:32:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-12-17 18:32:02 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-12-17 18:31:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2011-12-17 18:31:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-12-17 18:31:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-12-17 18:31:32 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-12-17 18:31:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-12-17 18:30:22 ----D---- C:\Temp
2011-12-17 18:29:35 ----A---- C:\WINDOWS\system32\MRT.exe
2011-12-17 18:29:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2011-12-17 18:29:08 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-12-17 18:28:57 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-12-17 18:28:50 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-12-17 18:28:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-12-17 18:28:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-12-17 18:28:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2011-12-17 18:28:24 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-12-17 18:28:17 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-12-17 18:28:10 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-12-17 18:28:01 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-12-17 18:27:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-12-17 18:27:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-12-17 18:27:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2011-12-17 18:27:17 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Samsung
2011-12-17 18:27:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2011-12-17 18:26:59 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2011-12-17 18:26:39 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2011-12-17 18:25:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-12-17 18:25:54 ----A---- C:\WINDOWS\system32\drivers\ssadserd.sys
2011-12-17 18:25:52 ----A---- C:\WINDOWS\system32\drivers\ssadmdm.sys
2011-12-17 18:25:52 ----A---- C:\WINDOWS\system32\drivers\ssadmdfl.sys
2011-12-17 18:25:52 ----A---- C:\WINDOWS\system32\drivers\ssadcmnt.sys
2011-12-17 18:25:52 ----A---- C:\WINDOWS\system32\drivers\ssadcm.sys
2011-12-17 18:25:51 ----A---- C:\WINDOWS\system32\drivers\WdfCoInstaller01005.dll
2011-12-17 18:25:51 ----A---- C:\WINDOWS\system32\drivers\ssadadb.sys
2011-12-17 18:25:50 ----A---- C:\WINDOWS\system32\drivers\ssadwhnt.sys
2011-12-17 18:25:50 ----A---- C:\WINDOWS\system32\drivers\ssadwh.sys
2011-12-17 18:25:50 ----A---- C:\WINDOWS\system32\drivers\ssadbus.sys
2011-12-17 18:25:46 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-12-17 18:25:22 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-12-17 18:25:09 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2011-12-17 18:24:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-12-17 18:24:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2011-12-17 18:24:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2011-12-17 18:24:29 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-12-17 18:24:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2011-12-17 18:24:02 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-12-17 18:23:54 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-12-17 18:23:48 ----A---- C:\WINDOWS\system32\Redemption.dll
2011-12-17 18:23:44 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-12-17 18:23:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-12-17 18:23:25 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2011-12-17 18:23:16 ----D---- C:\Program Files\MarkAny
2011-12-17 18:23:16 ----A---- C:\WINDOWS\system32\drivers\dgderdrv.sys
2011-12-17 18:23:16 ----A---- C:\WINDOWS\system32\DIFxAPI.dll
2011-12-17 18:23:16 ----A---- C:\WINDOWS\system32\dgderapi.dll
2011-12-17 18:23:13 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-12-17 18:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-12-17 18:22:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2011-12-17 18:22:41 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-12-17 18:22:30 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-12-17 18:22:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-12-17 18:21:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2011-12-17 18:21:28 ----D---- C:\Program Files\Samsung
2011-12-17 18:21:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Samsung
2011-12-17 18:21:25 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2011-12-17 18:21:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2011-12-17 18:21:07 ----D---- C:\WINDOWS\ie8updates
2011-12-17 18:20:59 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2011-12-17 18:20:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-12-17 18:20:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-12-17 18:20:29 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-12-17 18:20:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2011-12-17 18:20:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-12-17 18:19:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2011-12-17 18:19:45 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-12-17 18:19:27 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-12-17 18:19:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-12-17 18:19:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2011-12-17 18:14:08 ----D---- C:\WINDOWS\system32\en-US
2011-12-17 18:13:45 ----SHD---- C:\Config.Msi
2011-12-17 17:59:31 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2011-12-17 13:04:23 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2011-12-17 12:58:18 ----N---- C:\WINDOWS\system32\browserchoice.exe
2011-12-17 12:57:09 ----A---- C:\WINDOWS\system32\SET384.tmp
2011-12-17 12:56:45 ----A---- C:\WINDOWS\system32\SET3A3.tmp
2011-12-17 12:52:50 ----A---- C:\WINDOWS\system32\SET26C.tmp
2011-12-17 12:52:26 ----D---- C:\WINDOWS\system32\PreInstall
2011-12-17 12:52:24 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-12-17 12:52:24 ----HD---- C:\WINDOWS\$hf_mig$
2011-12-17 12:48:43 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2011-12-17 12:47:00 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Macromedia
2011-12-17 12:47:00 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Adobe
2011-12-17 01:37:22 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Media Player Classic
2011-12-17 01:33:18 ----D---- C:\WINDOWS\pss
2011-12-16 23:31:43 ----SHD---- C:\RECYCLER
2011-12-16 10:09:05 ----D---- C:\Program Files\Seznam.cz
2011-12-16 10:09:04 ----HD---- C:\WINDOWS\msdownld.tmp
2011-12-16 10:08:50 ----D---- C:\WINDOWS\WBEM
2011-12-16 10:07:32 ----HDC---- C:\WINDOWS\ie8
2011-12-16 10:05:38 ----D---- C:\Program Files\Common Files\Java
2011-12-16 09:50:57 ----A---- C:\WINDOWS\system32\javaws.exe
2011-12-16 09:50:57 ----A---- C:\WINDOWS\system32\javaw.exe
2011-12-16 09:50:57 ----A---- C:\WINDOWS\system32\java.exe
2011-12-16 09:48:32 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-12-16 09:48:31 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-12-16 09:48:29 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-12-16 09:48:29 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-12-16 09:48:28 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-12-16 09:48:28 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-12-16 09:48:28 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-12-16 09:48:27 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-12-16 09:48:14 ----A---- C:\WINDOWS\avastSS.scr
2011-12-16 09:48:13 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-12-16 09:48:00 ----D---- C:\Program Files\AVAST Software
2011-12-16 09:48:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-12-16 09:45:52 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Sun
2011-12-16 09:41:52 ----D---- C:\Documents and Settings\Administrator\Data aplikací\ATI
2011-12-16 09:40:39 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Identities
2011-12-16 09:40:33 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2011-12-16 09:40:33 ----ASH---- C:\Documents and Settings\Administrator\Data aplikací\desktop.ini
2011-12-14 14:11:37 ----D---- C:\Program Files\MSECache
2011-12-14 14:09:03 ----D---- C:\Program Files\Microsoft Works
2011-12-14 14:08:55 ----D---- C:\Program Files\MSBuild
2011-12-14 14:08:43 ----D---- C:\Program Files\Microsoft Visual Studio
2011-12-14 14:08:43 ----D---- C:\Program Files\Common Files\DESIGNER
2011-12-14 14:08:11 ----D---- C:\Program Files\Microsoft.NET
2011-12-14 14:06:29 ----D---- C:\Program Files\Microsoft Visual Studio 8
2011-12-14 14:05:57 ----D---- C:\WINDOWS\SHELLNEW
2011-12-14 14:05:33 ----D---- C:\Program Files\Microsoft Office
2011-12-14 14:05:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-12-14 14:05:13 ----RHD---- C:\MSOCache
2011-12-14 14:03:53 ----D---- C:\Program Files\Common Files\Adobe
2011-12-14 14:03:53 ----D---- C:\Program Files\Adobe
2011-12-14 13:59:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-12-14 13:56:21 ----A---- C:\WINDOWS\system32\unrar.dll
2011-12-14 13:56:20 ----A---- C:\WINDOWS\avisplitter.ini
2011-12-14 13:56:19 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2011-12-14 13:56:19 ----A---- C:\WINDOWS\system32\xvidcore.dll
2011-12-14 13:56:18 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2011-12-14 13:56:15 ----D---- C:\Program Files\K-Lite Codec Pack
2011-12-14 13:52:07 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-12-14 13:52:03 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2011-12-14 13:51:54 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-12-14 13:51:50 ----D---- C:\Program Files\Windows Media Connect 2
2011-12-14 13:51:42 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2011-12-14 13:51:12 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-12-14 13:50:54 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-12-14 13:50:46 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-12-14 13:50:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-12-14 13:50:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2011-12-14 13:47:18 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-12-14 13:47:06 ----D---- C:\Program Files\Java
2011-12-14 13:43:13 ----A---- C:\WINDOWS\system32\pdfcmnnt.dll
2011-12-14 13:43:11 ----D---- C:\Program Files\PDFCreator
2011-12-14 13:43:11 ----A---- C:\WINDOWS\system32\MSMPIDE.DLL
2011-12-14 13:42:40 ----D---- C:\Program Files\WinRAR
2011-12-14 13:24:45 ----D---- C:\Program Files\XnView
2011-12-14 08:55:59 ----D---- C:\WINDOWS\system32\LogFiles
2011-12-14 08:54:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2011-12-14 08:38:21 ----A---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-12-14 08:38:18 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2011-12-14 08:38:13 ----D---- C:\Program Files\Synaptics
2011-12-14 08:38:07 ----A---- C:\WINDOWS\system32\SynTPCo4.dll
2011-12-14 08:38:07 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2011-12-14 08:38:07 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2011-12-14 08:38:07 ----A---- C:\WINDOWS\system32\drivers\SynTP.sys
2011-12-14 08:38:06 ----A---- C:\WINDOWS\system32\WdfCoInstaller01009.dll
2011-12-14 08:38:06 ----A---- C:\WINDOWS\system32\SynCOM.dll
2011-12-14 08:34:35 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2011-12-14 08:34:28 ----A---- C:\WINDOWS\system32\drivers\HpqKbFiltr.sys
2011-12-14 08:34:28 ----A---- C:\WINDOWS\system32\drivers\CPQBttn.sys
2011-12-14 08:33:46 ----RA---- C:\WINDOWS\system32\BttnCmn.dll
2011-12-14 08:33:46 ----A---- C:\WINDOWS\system32\BttnCmns.dll
2011-12-14 08:32:51 ----D---- C:\WINDOWS\HPQ
2011-12-14 08:32:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Hewlett-Packard
2011-12-14 08:31:44 ----A---- C:\WINDOWS\HBCIKRNL.INI
2011-12-14 08:31:39 ----D---- C:\Program Files\SCM Microsystems
2011-12-14 08:31:31 ----D---- C:\WINDOWS\Downloaded Installations
2011-12-14 08:30:19 ----A---- C:\WINDOWS\system32\drivers\btwusb.sys
2011-12-14 08:30:19 ----A---- C:\WINDOWS\system32\drivers\btport.sys
2011-12-14 08:30:19 ----A---- C:\WINDOWS\system32\drivers\btkrnl.sys
2011-12-14 08:30:19 ----A---- C:\WINDOWS\system32\drivers\btaudio.sys
2011-12-14 08:30:19 ----A---- C:\WINDOWS\system32\btw_ci.dll
2011-12-14 08:30:13 ----D---- C:\Program Files\WIDCOMM
2011-12-14 08:29:19 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-12-14 08:28:43 ----A---- C:\WINDOWS\system32\drivers\BCMWL5.SYS
2011-12-14 08:28:43 ----A---- C:\WINDOWS\system32\bcmwlcoi.dll
2011-12-14 08:27:42 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2011-12-14 08:27:41 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2011-12-14 08:27:30 ----D---- C:\Program Files\Fingerprint Sensor
2011-12-14 08:26:11 ----A---- C:\WINDOWS\system32\agrsmdel.exe
2011-12-14 08:26:05 ----D---- C:\WINDOWS\Options
2011-12-14 08:26:02 ----A---- C:\WINDOWS\system32\drivers\AGRSM.sys
2011-12-14 08:26:02 ----A---- C:\WINDOWS\system32\agrsmsvc.exe
2011-12-14 08:26:02 ----A---- C:\WINDOWS\system32\agrscoin.dll
2011-12-14 08:26:02 ----A---- C:\WINDOWS\HPModemVersion.dll
2011-12-14 08:26:02 ----A---- C:\WINDOWS\agrsmdel.exe
2011-12-14 08:25:30 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2011-12-14 08:25:28 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2011-12-14 08:25:27 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2011-12-14 08:25:25 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2011-12-14 08:25:23 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2011-12-14 08:25:22 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2011-12-14 08:25:21 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2011-12-14 08:25:19 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2011-12-14 08:25:10 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2011-12-14 08:25:10 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2011-12-14 08:25:08 ----A---- C:\WINDOWS\system32\wdmioctl.dll
2011-12-14 08:25:07 ----D---- C:\Program Files\Analog Devices
2011-12-14 08:25:07 ----A---- C:\WINDOWS\system32\SMMedia.dll
2011-12-14 08:25:07 ----A---- C:\WINDOWS\system32\DSndUp.exe
2011-12-14 08:21:54 ----RSD---- C:\WINDOWS\assembly
2011-12-14 08:21:34 ----D---- C:\WINDOWS\Microsoft.NET
2011-12-14 08:20:34 ----HD---- C:\Program Files\InstallShield Installation Information
2011-12-14 08:20:34 ----D---- C:\Program Files\ATI Technologies
2011-12-14 08:19:59 ----D---- C:\Program Files\Common Files\InstallShield
2011-12-14 08:15:51 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-12-14 08:15:51 ----A---- C:\WINDOWS\system32\drivers\b57xp32.sys
2011-12-14 08:15:50 ----D---- C:\Program Files\Broadcom
2011-12-14 08:15:36 ----A---- C:\WINDOWS\HPWWANVersion.dll
2011-12-14 08:15:02 ----D---- C:\Program Files\Hewlett-Packard
2011-12-14 08:14:42 ----D---- C:\swsetup
2011-12-14 08:13:15 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2011-12-13 14:32:49 ----A---- C:\WINDOWS\system32\h323log.txt
2011-12-13 14:26:04 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys
2011-12-13 14:25:59 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys
2011-12-13 14:25:58 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys
2011-12-13 14:25:56 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys
2011-12-13 14:25:55 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys
2011-12-13 14:25:54 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2011-12-13 14:25:52 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011-12-13 14:25:50 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011-12-13 14:25:49 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys
2011-12-13 14:25:47 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2011-12-13 14:25:43 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2011-12-13 14:25:14 ----A---- C:\WINDOWS\system32\vfwwdm32.dll
2011-12-13 14:25:14 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-12-13 14:25:14 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys
2011-12-13 14:24:58 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2011-12-13 14:24:30 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2011-12-13 14:24:08 ----A---- C:\WINDOWS\system32\usbui.dll
2011-12-13 14:23:56 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys
2011-12-13 14:23:47 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys
2011-12-13 14:23:46 ----A---- C:\WINDOWS\system32\drivers\CmBatt.sys
2011-12-13 14:23:46 ----A---- C:\WINDOWS\system32\drivers\battc.sys
2011-12-13 14:22:49 ----A---- C:\WINDOWS\imsins.BAK
2011-12-13 14:22:45 ----SHD---- C:\WINDOWS\Installer
2011-12-13 14:22:45 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-12-13 14:22:44 ----D---- C:\Program Files\Common Files\ODBC
2011-12-13 14:22:44 ----A---- C:\WINDOWS\ODBCINST.INI
2011-12-13 14:22:40 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-12-13 14:22:40 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-12-13 14:22:39 ----RD---- C:\Program Files
2011-12-13 14:22:39 ----D---- C:\Program Files\Common Files
2011-12-13 14:22:35 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2011-12-13 14:22:35 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2011-12-13 14:22:35 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2011-12-13 14:22:33 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2011-12-13 14:22:33 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2011-12-13 14:22:33 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2011-12-13 14:22:33 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2011-12-13 14:22:32 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2011-12-13 14:22:32 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2011-12-13 14:22:32 ----RA---- C:\WINDOWS\system32\kbdur.dll
2011-12-13 14:22:32 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2011-12-13 14:22:32 ----RA---- C:\WINDOWS\system32\kbdru.dll
2011-12-13 14:22:32 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2011-12-13 14:22:32 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2011-12-13 14:22:32 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2011-12-13 14:22:30 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2011-12-13 14:22:30 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2011-12-13 14:22:30 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2011-12-13 14:22:30 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2011-12-13 14:22:30 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2011-12-13 14:22:30 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2011-12-13 14:22:30 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2011-12-13 14:22:28 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2011-12-13 14:22:28 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2011-12-13 14:22:28 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2011-12-13 14:22:28 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2011-12-13 14:22:28 ----RA---- C:\WINDOWS\system32\kbdest.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\kbdro.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2011-12-13 14:22:21 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2011-12-13 14:22:20 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2011-12-13 14:22:18 ----A---- C:\WINDOWS\system32\irclass.dll
2011-12-13 14:22:18 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2011-12-13 14:22:17 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-12-13 14:22:17 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2011-12-13 14:22:17 ----A---- C:\WINDOWS\system32\dgsetup.dll
2011-12-13 14:22:15 ----A---- C:\WINDOWS\TASKMAN.EXE
2011-12-13 14:22:14 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2011-12-13 14:22:14 ----A---- C:\WINDOWS\system32\CONFIG.TMP
2011-12-13 14:22:14 ----A---- C:\WINDOWS\system32\batt.dll
2011-12-13 14:22:13 ----A---- C:\WINDOWS\NOTEPAD.EXE
2011-12-13 14:22:12 ----A---- C:\WINDOWS\system32\storprop.dll
2011-12-13 14:22:03 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-12-13 14:21:59 ----RA---- C:\WINDOWS\SET8.tmp
2011-12-13 14:21:57 ----RA---- C:\WINDOWS\SET4.tmp
2011-12-13 14:21:55 ----RA---- C:\WINDOWS\SET3.tmp
2011-12-13 14:21:51 ----D---- C:\WINDOWS\system32\CatRoot2
2011-12-13 14:21:51 ----D---- C:\WINDOWS\system32\CatRoot
2011-12-13 14:21:45 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-12-13 14:21:20 ----A---- C:\WINDOWS\setuplog.txt
2011-12-13 14:21:15 ----SHD---- C:\System Volume Information
2011-12-13 14:21:15 ----D---- C:\Documents and Settings
2011-12-13 14:21:14 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2011-12-13 14:20:22 ----ASH---- C:\boot.ini
2011-12-13 14:13:04 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-12-13 14:13:04 ----RSD---- C:\WINDOWS\Fonts
2011-12-13 14:13:04 ----RD---- C:\WINDOWS\Web
2011-12-13 14:13:04 ----HD---- C:\WINDOWS\inf
2011-12-13 14:13:04 ----D---- C:\WINDOWS\WinSxS
2011-12-13 14:13:04 ----D---- C:\WINDOWS\twain_32
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Temp
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\wins
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\wbem
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\usmt
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\spool
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\ShellExt
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\Setup
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\ras
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\oobe
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\npp
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\mui
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\inetsrv
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\IME
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\icsxml
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\ias
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\export
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\drivers\etc
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\drivers
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\dhcp
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\cs-cz
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\cs
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\config
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\3com_dmi
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\3076
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\2052
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1054
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1042
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1041
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1037
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1033
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1031
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1029
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1028
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32\1025
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system32
2011-12-13 14:13:04 ----D---- C:\WINDOWS\system
2011-12-13 14:13:04 ----D---- C:\WINDOWS\security
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Resources
2011-12-13 14:13:04 ----D---- C:\WINDOWS\repair
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Provisioning
2011-12-13 14:13:04 ----D---- C:\WINDOWS\pchealth
2011-12-13 14:13:04 ----D---- C:\WINDOWS\PeerNet
2011-12-13 14:13:04 ----D---- C:\WINDOWS\NLDRV
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Network Diagnostic
2011-12-13 14:13:04 ----D---- C:\WINDOWS\mui
2011-12-13 14:13:04 ----D---- C:\WINDOWS\msapps
2011-12-13 14:13:04 ----D---- C:\WINDOWS\msagent
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Media
2011-12-13 14:13:04 ----D---- C:\WINDOWS\L2Schemas
2011-12-13 14:13:04 ----D---- C:\WINDOWS\java
2011-12-13 14:13:04 ----D---- C:\WINDOWS\ime
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Help
2011-12-13 14:13:04 ----D---- C:\WINDOWS\ehome
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Driver Cache
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Debug
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Cursors
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Connection Wizard
2011-12-13 14:13:04 ----D---- C:\WINDOWS\Config
2011-12-13 14:13:04 ----D---- C:\WINDOWS\AppPatch
2011-12-13 14:13:04 ----D---- C:\WINDOWS\addins
2011-12-13 14:13:04 ----D---- C:\WINDOWS
2011-12-13 14:13:04 ----ASH---- C:\pagefile.sys
2011-12-13 13:56:02 ----HD---- C:\Program Files\Uninstall Information
2011-12-13 13:55:43 ----SHD---- C:\WINDOWS\CSC
2011-12-13 13:54:49 ----D---- C:\WINDOWS\SoftwareDistribution
2011-12-13 13:54:46 ----D---- C:\WINDOWS\Prefetch
2011-12-13 13:54:45 ----SD---- C:\WINDOWS\system32\Microsoft
2011-12-13 13:54:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-12-13 13:41:26 ----AS---- C:\WINDOWS\bootstat.dat
2011-12-13 13:39:15 ----D---- C:\WINDOWS\system32\xircom
2011-12-13 13:39:15 ----D---- C:\Program Files\xerox
2011-12-13 13:39:15 ----D---- C:\Program Files\microsoft frontpage
2011-12-13 13:38:57 ----RASH---- C:\MSDOS.SYS
2011-12-13 13:38:57 ----RASH---- C:\IO.SYS
2011-12-13 13:38:57 ----A---- C:\WINDOWS\control.ini
2011-12-13 13:38:57 ----A---- C:\CONFIG.SYS
2011-12-13 13:38:57 ----A---- C:\AUTOEXEC.BAT
2011-12-13 13:38:47 ----A---- C:\WINDOWS\OEWABLog.txt
2011-12-13 13:38:43 ----A---- C:\WINDOWS\system32\mapi32.dll
2011-12-13 13:37:51 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-12-13 13:37:51 ----RD---- C:\WINDOWS\Offline Web Pages
2011-12-13 13:37:40 ----HD---- C:\Program Files\WindowsUpdate
2011-12-13 13:37:36 ----D---- C:\Program Files\Online Services
2011-12-13 13:37:17 ----D---- C:\WINDOWS\system32\DirectX
2011-12-13 13:37:06 ----A---- C:\WINDOWS\system32\atrace.dll
2011-12-13 13:37:03 ----A---- C:\WINDOWS\system32\desktop.ini
2011-12-13 13:37:03 ----A---- C:\WINDOWS\desktop.ini
2011-12-13 13:36:55 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2011-12-13 13:36:53 ----D---- C:\Program Files\Common Files\Services
2011-12-13 13:36:53 ----A---- C:\WINDOWS\system32\acctres.dll
2011-12-13 13:36:50 ----SD---- C:\WINDOWS\Tasks
2011-12-13 13:36:50 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2011-12-13 13:36:48 ----D---- C:\Program Files\Common Files\MSSoap
2011-12-13 13:36:44 ----D---- C:\WINDOWS\srchasst
2011-12-13 13:36:43 ----D---- C:\WINDOWS\system32\Macromed
2011-12-13 13:36:39 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-12-13 13:36:39 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-12-13 13:36:39 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-12-13 13:36:38 ----A---- C:\WINDOWS\system32\wups.dll
2011-12-13 13:36:38 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-12-13 13:36:38 ----A---- C:\WINDOWS\system32\wuaueng.dll.wusetup.402890.bak
2011-12-13 13:36:38 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-12-13 13:36:38 ----A---- C:\WINDOWS\system32\wuaucpl.cpl.wusetup.402312.bak
2011-12-13 13:36:38 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-12-13 13:36:38 ----A---- C:\WINDOWS\system32\wuauclt.exe.wusetup.401781.bak
2011-12-13 13:36:38 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-12-13 13:36:37 ----A---- C:\WINDOWS\system32\wuapi.dll.wusetup.401421.bak
2011-12-13 13:36:37 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-12-13 13:36:37 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2011-12-13 13:36:37 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-12-13 13:36:37 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2011-12-13 13:36:37 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2011-12-13 13:36:37 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2011-12-13 13:36:32 ----D---- C:\Program Files\Movie Maker
2011-12-13 13:36:10 ----A---- C:\WINDOWS\system32\safrslv.dll
2011-12-13 13:36:10 ----A---- C:\WINDOWS\system32\safrdm.dll
2011-12-13 13:36:10 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2011-12-13 13:36:10 ----A---- C:\WINDOWS\system32\racpldlg.dll
2011-12-13 13:36:05 ----A---- C:\WINDOWS\system32\fltMc.exe
2011-12-13 13:36:05 ----A---- C:\WINDOWS\system32\fltlib.dll
2011-12-13 13:36:05 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2011-12-13 13:36:04 ----D---- C:\WINDOWS\system32\Restore
2011-12-13 13:36:04 ----A---- C:\WINDOWS\system32\srsvc.dll
2011-12-13 13:36:04 ----A---- C:\WINDOWS\system32\srrstr.dll
2011-12-13 13:36:04 ----A---- C:\WINDOWS\system32\srclient.dll
2011-12-13 13:36:04 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2011-12-13 13:36:03 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2011-12-13 13:36:03 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2011-12-13 13:36:03 ----A---- C:\WINDOWS\system32\mnmdd.dll
2011-12-13 13:36:03 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2011-12-13 13:36:03 ----A---- C:\WINDOWS\system32\ils.dll
2011-12-13 13:36:02 ----A---- C:\WINDOWS\system32\msconf.dll
2011-12-13 13:35:59 ----D---- C:\Program Files\NetMeeting
2011-12-13 13:35:58 ----A---- C:\WINDOWS\system32\msoert2.dll
2011-12-13 13:35:58 ----A---- C:\WINDOWS\system32\msoeacct.dll
2011-12-13 13:35:57 ----A---- C:\WINDOWS\system32\inetres.dll
2011-12-13 13:35:57 ----A---- C:\WINDOWS\system32\inetcomm.dll
2011-12-13 13:35:55 ----D---- C:\Program Files\Outlook Express
2011-12-13 13:35:54 ----A---- C:\WINDOWS\system32\schedsvc.dll
2011-12-13 13:35:54 ----A---- C:\WINDOWS\system32\mstinit.exe
2011-12-13 13:35:54 ----A---- C:\WINDOWS\system32\mstask.dll
2011-12-13 13:35:54 ----A---- C:\WINDOWS\system32\icwphbk.dll
2011-12-13 13:35:53 ----A---- C:\WINDOWS\system32\isign32.dll
2011-12-13 13:35:53 ----A---- C:\WINDOWS\system32\inetcfg.dll
2011-12-13 13:35:53 ----A---- C:\WINDOWS\system32\icwdial.dll
2011-12-13 13:35:46 ----D---- C:\Program Files\Common Files\System
2011-12-13 13:35:41 ----D---- C:\Program Files\Internet Explorer
2011-12-13 13:35:13 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2011-12-13 13:35:03 ----D---- C:\Program Files\ComPlus Applications
2011-12-13 13:35:01 ----A---- C:\WINDOWS\vbaddin.ini
2011-12-13 13:35:01 ----A---- C:\WINDOWS\vb.ini
2011-12-13 13:34:56 ----D---- C:\WINDOWS\Registration
2011-12-13 13:34:48 ----D---- C:\Program Files\Windows Media Player
2011-12-13 13:34:38 ----D---- C:\Program Files\MSN Gaming Zone
2011-12-13 13:34:38 ----A---- C:\WINDOWS\system32\write.exe
2011-12-13 13:34:27 ----A---- C:\WINDOWS\system32\sndvol32.exe
2011-12-13 13:34:27 ----A---- C:\WINDOWS\system32\hticons.dll
2011-12-13 13:34:26 ----A---- C:\WINDOWS\system32\winchat.exe
2011-12-13 13:34:26 ----A---- C:\WINDOWS\system32\avwav.dll
2011-12-13 13:34:26 ----A---- C:\WINDOWS\system32\avtapi.dll
2011-12-13 13:34:26 ----A---- C:\WINDOWS\system32\avmeter.dll
2011-12-13 13:34:18 ----A---- C:\WINDOWS\system32\getuname.dll
2011-12-13 13:34:17 ----A---- C:\WINDOWS\system32\sol.exe
2011-12-13 13:34:17 ----A---- C:\WINDOWS\system32\charmap.exe
2011-12-13 13:34:17 ----A---- C:\WINDOWS\system32\calc.exe
2011-12-13 13:34:16 ----A---- C:\WINDOWS\system32\winmine.exe
2011-12-13 13:34:16 ----A---- C:\WINDOWS\system32\reset.exe
2011-12-13 13:34:16 ----A---- C:\WINDOWS\system32\mshearts.exe
2011-12-13 13:34:16 ----A---- C:\WINDOWS\system32\freecell.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\tslabels.ini
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\tskill.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\tscon.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\shadow.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\rwinsta.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\regini.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\qwinsta.exe
2011-12-13 13:34:15 ----A---- C:\WINDOWS\system32\qappsrv.exe
2011-12-13 13:34:14 ----A---- C:\WINDOWS\system32\msg.exe
2011-12-13 13:34:14 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2011-12-13 13:34:14 ----A---- C:\WINDOWS\system32\logoff.exe
2011-12-13 13:34:14 ----A---- C:\WINDOWS\system32\cdmodem.dll
2011-12-13 13:34:07 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2011-12-13 13:34:06 ----A---- C:\WINDOWS\system32\sndrec32.exe
2011-12-13 13:34:06 ----A---- C:\WINDOWS\system32\accwiz.exe
2011-12-13 13:34:05 ----D---- C:\Program Files\Windows NT
2011-12-13 13:34:05 ----A---- C:\WINDOWS\system32\mplay32.exe
2011-12-13 13:34:05 ----A---- C:\WINDOWS\system32\hypertrm.dll
2011-12-13 13:34:04 ----A---- C:\WINDOWS\system32\spider.exe
2011-12-13 13:34:04 ----A---- C:\WINDOWS\system32\mspaint.exe
2011-12-13 13:34:04 ----A---- C:\WINDOWS\system32\clipbrd.exe
2011-12-13 13:34:03 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-12-13 13:34:03 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-12-13 13:34:03 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-12-13 13:34:02 ----A---- C:\WINDOWS\system32\tsgqec.dll
2011-12-13 13:34:02 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2011-12-13 13:34:02 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2011-12-13 13:34:02 ----A---- C:\WINDOWS\system32\aaclient.dll
2011-12-13 13:34:01 ----A---- C:\WINDOWS\system32\remotepg.dll
2011-12-13 13:34:01 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2011-12-13 13:34:01 ----A---- C:\WINDOWS\system32\mstscax.dll
2011-12-13 13:34:01 ----A---- C:\WINDOWS\system32\mstsc.exe
2011-12-13 13:34:00 ----A---- C:\WINDOWS\system32\termsrv.dll
2011-12-13 13:34:00 ----A---- C:\WINDOWS\system32\sessmgr.exe
2011-12-13 13:34:00 ----A---- C:\WINDOWS\system32\rdshost.exe
2011-12-13 13:34:00 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2011-12-13 13:34:00 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2011-12-13 13:34:00 ----A---- C:\WINDOWS\system32\rdpclip.exe
2011-12-13 13:34:00 ----A---- C:\WINDOWS\system32\rdchost.dll
2011-12-13 13:34:00 ----A---- C:\WINDOWS\system32\qprocess.exe
2011-12-13 13:33:59 ----D---- C:\WINDOWS\system32\MsDtc
2011-12-13 13:33:59 ----A---- C:\WINDOWS\system32\mtxoci.dll
2011-12-13 13:33:59 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2011-12-13 13:33:59 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2011-12-13 13:33:59 ----A---- C:\WINDOWS\system32\icaapi.dll
2011-12-13 13:33:59 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2011-12-13 13:33:58 ----A---- C:\WINDOWS\system32\xolehlp.dll
2011-12-13 13:33:58 ----A---- C:\WINDOWS\system32\msdtctm.dll
2011-12-13 13:33:58 ----A---- C:\WINDOWS\system32\msdtclog.dll
2011-12-13 13:33:58 ----A---- C:\WINDOWS\system32\msdtc.exe
2011-12-13 13:33:57 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2011-12-13 13:33:57 ----A---- C:\WINDOWS\system32\mtxex.dll
2011-12-13 13:33:57 ----A---- C:\WINDOWS\system32\mtxdm.dll
2011-12-13 13:33:57 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2011-12-13 13:33:56 ----D---- C:\WINDOWS\system32\Com
2011-12-13 13:33:56 ----A---- C:\WINDOWS\system32\stclient.dll
2011-12-13 13:33:56 ----A---- C:\WINDOWS\system32\comrepl.dll
2011-12-13 13:33:56 ----A---- C:\WINDOWS\system32\comaddin.dll
2011-12-13 13:33:56 ----A---- C:\WINDOWS\system32\colbact.dll
2011-12-13 13:33:56 ----A---- C:\WINDOWS\system32\catsrvps.dll
2011-12-13 13:33:55 ----A---- C:\WINDOWS\system32\comsvcs.dll
2011-12-13 13:33:55 ----A---- C:\WINDOWS\system32\clbcatex.dll
2011-12-13 13:33:55 ----A---- C:\WINDOWS\system32\catsrvut.dll
2011-12-13 13:33:55 ----A---- C:\WINDOWS\system32\catsrv.dll
2011-12-13 13:33:54 ----A---- C:\WINDOWS\system32\comuid.dll
2011-12-13 13:33:54 ----A---- C:\WINDOWS\system32\comsnap.dll
2011-12-13 13:33:54 ----A---- C:\WINDOWS\system32\clbcatq.dll
2011-12-13 13:33:46 ----A---- C:\WINDOWS\system32\servdeps.dll
2011-12-13 13:33:46 ----A---- C:\WINDOWS\system32\mmfutil.dll
2011-12-13 13:33:46 ----A---- C:\WINDOWS\system32\licwmi.dll
2011-12-13 13:33:46 ----A---- C:\WINDOWS\system32\cmprops.dll
2011-12-13 13:33:41 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2011-12-13 13:33:41 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 month======

2012-01-04 16:30:54 ----A---- C:\WINDOWS\win.ini
2012-01-04 16:30:54 ----A---- C:\WINDOWS\system.ini
2011-12-13 13:38:30 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 SFAUDIO;Sonic Focus DSP Driver; C:\WINDOWS\system32\drivers\sfaudio.sys [2008-03-28 24064]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-11-28 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-11-28 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-11-28 435032]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-11-28 314456]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-11-28 52952]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-11-28 20568]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-11-28 111320]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2008-12-11 338944]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-03-21 1203776]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-08-10 4125184]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver; C:\WINDOWS\System32\Drivers\ATSwpWDF.sys [2008-06-12 477696]
R3 b57w2k;Broadcom NetLink (TM) Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2007-11-29 163328]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2011-12-14 2649216]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2008-05-14 539512]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2008-05-14 37424]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2008-05-14 879624]
R3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2008-05-14 74688]
R3 HBtnKey;HBtnKey; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2009-03-19 9216]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\WINDOWS\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2008-07-23 44800]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2010-06-03 1303728]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\WINDOWS\System32\Drivers\ssadadb.sys [2011-10-27 30312]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\ssadbus.sys [2011-10-27 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\WINDOWS\system32\DRIVERS\ssadmdfl.sys [2011-10-27 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\WINDOWS\system32\DRIVERS\ssadmdm.sys [2011-10-27 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\WINDOWS\system32\DRIVERS\ssadserd.sys [2011-10-27 114280]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\WINDOWS\system32\agrsmsvc.exe [2008-03-18 13312]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-08-10 602112]
R2 ATService;AuthenTec Fingerprint Service; c:\Program Files\Fingerprint Sensor\AtService.exe [2008-06-12 1164536]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-11-28 44768]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-05-12 264800]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-11-10 153376]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-01-12 227896]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Zdravím!
Log vypadá OK. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

[michal1223]

tady to je...mě to připadá jak kdyby se snad zpomalil HD nebo co..všechno trvá strašně dlouho, např defragmentace dřív byla během pěti minut, teď je to skoro hodinu..


Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.60.0.1800
www.malwarebytes.org

Verze databáze: v2012.01.04.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Administrator :: C01-TYN-KAUCA [administrátor]

Ochrana: Povolena

4.1.2012 20:21:21
mbam-log-2012-01-04 (21-00-04).txt

Typ: Rychlá kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 192202
Uplynulý čas: 37 minut, 53 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer|ForceClassicControlPanel (Hijack.ControlPanelStyle) -> Data: 1 -> Žádná instrukce nebyla provedena.

Nalezené datové položky v registru: 2
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Žádná instrukce nebyla provedena.
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Špatný: (1) Dobrý: (0) -> Žádná instrukce nebyla provedena.

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

[Rudy]

Vše nalezené smažte a ještě dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[michal1223]

ComboFix jsem stahnul, spustil, proběhla jeho auktualizace, ale pak už nic. Spustil jsem program znovu, naběhl, ale pak zmizel... štíty jsou vypnuté.

[Rudy]

Zkuste spustit v nouz. režimu, příp. soubor přejmenujte třeba na cokoli.com

[michal1223]

tady je log..trvalo to od rána až do ted..

ComboFix 12-01-05.01 - Administrator 05.01.2012 7:52.1.2 - x86
Spuštěný z: c:\documents and settings\Administrator\Dokumenty\soft\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\docume~1\ADMINI~1\LOCALS~1\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll
c:\documents and settings\Administrator\Local Settings\Temp\8aefdf3f-82dc-462e-be91-2ca1c43911cf\CliSecureRT.dll
c:\windows\msmqinst.log
c:\windows\regopt.log
c:\windows\system32\_000005_.tmp.dll
c:\windows\system32\_000006_.tmp.dll
c:\windows\system32\_000012_.tmp.dll
c:\windows\system32\muzapp.exe
c:\windows\system32\oem7.inf
c:\windows\system32\SET26C.tmp
c:\windows\system32\SET29E.tmp
c:\windows\system32\SET2A0.tmp
c:\windows\system32\SET2A5.tmp
c:\windows\system32\SET2C9.tmp
c:\windows\system32\SET37A.tmp
c:\windows\system32\SET384.tmp
c:\windows\system32\SET38D.tmp
c:\windows\system32\SET38E.tmp
c:\windows\system32\SET38F.tmp
c:\windows\system32\SET39F.tmp
c:\windows\system32\SET3A3.tmp
c:\windows\system32\SET3B6.tmp
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-05 do 2012-01-05 )))))))))))))))))))))))))))))))
.
.
2012-01-04 15:59 . 2012-01-04 16:00 -------- d-----w- C:\rsit
2011-12-17 19:24 . 2011-12-17 19:24 -------- d-----w- C:\524d55394f71a90857d308
2011-12-17 19:19 . 2011-12-17 19:19 -------- d-----w- C:\6f5dc4a715f5cb42566584aa6160cdef
2011-12-17 19:19 . 2011-12-17 20:08 -------- d-----w- C:\f8454443fa229fd1e5
2011-12-17 17:30 . 2011-12-17 17:30 -------- d-----w- C:\Temp
2011-12-14 13:05 . 2011-12-14 13:05 -------- d-----r- C:\MSOCache
2011-12-14 07:14 . 2011-12-14 07:35 -------- d-----w- C:\swsetup
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-29 15:38 . 2011-11-29 15:38 90112 ----a-w- c:\windows\MAMCityDownload.ocx
2011-11-29 15:38 . 2011-11-29 15:38 325552 ----a-w- c:\windows\MASetupCaller.dll
2011-11-29 15:38 . 2011-11-29 15:38 30568 ----a-w- c:\windows\MusiccityDownload.exe
2011-11-29 15:38 . 2011-11-29 15:38 974848 ----a-w- c:\windows\system32\cis-2.4.dll
2011-11-29 15:38 . 2011-11-29 15:38 81920 ----a-w- c:\windows\system32\issacapi_bs-2.3.dll
2011-11-29 15:38 . 2011-11-29 15:38 65536 ----a-w- c:\windows\system32\issacapi_pe-2.3.dll
2011-11-29 15:38 . 2011-11-29 15:38 57344 ----a-w- c:\windows\system32\MTXSYNCICON.dll
2011-11-29 15:38 . 2011-11-29 15:38 57344 ----a-w- c:\windows\system32\MK_Lyric.dll
2011-11-29 15:38 . 2011-11-29 15:38 57344 ----a-w- c:\windows\system32\issacapi_se-2.3.dll
2011-11-29 15:38 . 2011-11-29 15:38 569344 ----a-w- c:\windows\system32\muzdecode.ax
2011-11-29 15:38 . 2011-11-29 15:38 491520 ----a-w- c:\windows\system32\muzapp.dll
2011-11-29 15:38 . 2011-11-29 15:38 49152 ----a-w- c:\windows\system32\MaJGUILib.dll
2011-11-29 15:38 . 2011-11-29 15:38 45056 ----a-w- c:\windows\system32\MaXMLProto.dll
2011-11-29 15:38 . 2011-11-29 15:38 45056 ----a-w- c:\windows\system32\MACXMLProto.dll
2011-11-29 15:38 . 2011-11-29 15:38 40960 ----a-w- c:\windows\system32\MTTELECHIP.dll
2011-11-29 15:38 . 2011-11-29 15:38 40960 ----a-w- c:\windows\system32\MAMACExtract.dll
2011-11-29 15:38 . 2011-11-29 15:38 352256 ----a-w- c:\windows\system32\MSLUR71.dll
2011-11-29 15:38 . 2011-11-29 15:38 258048 ----a-w- c:\windows\system32\muzoggsp.ax
2011-11-29 15:38 . 2011-11-29 15:38 245760 ----a-w- c:\windows\system32\MSCLib.dll
2011-11-29 15:38 . 2011-11-29 15:38 24576 ----a-w- c:\windows\system32\MASetupCleaner.exe
2011-11-29 15:38 . 2011-11-29 15:38 200704 ----a-w- c:\windows\system32\muzwmts.dll
2011-11-29 15:38 . 2011-11-29 15:38 155648 ----a-w- c:\windows\system32\MSFLib.dll
2011-11-29 15:38 . 2011-11-29 15:38 143360 ----a-w- c:\windows\system32\3DAudio.ax
2011-11-29 15:38 . 2011-11-29 15:38 14336 ----a-w- c:\windows\system32\avrt.dll
2011-11-29 15:38 . 2011-11-29 15:38 135168 ----a-w- c:\windows\system32\muzaf1.dll
2011-11-29 15:38 . 2011-11-29 15:38 131072 ----a-w- c:\windows\system32\muzmpgsp.ax
2011-11-29 15:38 . 2011-11-29 15:38 122880 ----a-w- c:\windows\system32\muzeffect.ax
2011-11-29 15:38 . 2011-11-29 15:38 118784 ----a-w- c:\windows\system32\MaDRM.dll
2011-11-29 15:38 . 2011-11-29 15:38 110592 ----a-w- c:\windows\system32\muzmp4sp.ax
2011-11-23 14:40 . 2008-04-14 05:45 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-04 19:13 . 2008-04-14 06:52 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 19:13 . 2008-04-14 06:52 916992 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 19:13 . 2008-04-14 06:51 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-11-04 11:23 . 2008-04-14 05:50 385024 ----a-w- c:\windows\system32\html.iec
2011-11-01 16:07 . 2008-04-14 06:51 1288192 ----a-w- c:\windows\system32\ole32.dll
2011-10-28 05:32 . 2008-04-14 06:51 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-26 10:49 . 2008-04-14 08:06 2029056 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-26 10:49 . 2008-04-14 06:06 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-18 11:13 . 2008-04-14 06:51 186880 ----a-w- c:\windows\system32\encdec.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-12-15 . 0BCC503569B6579A74449A58679D8A5D . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{1EA00BE1-6E54-4E2A-8099-680300BF23E1}"= "c:\program files\Seznam.cz\toolbar\toolbar.dll" [2010-10-07 187672]
.
[HKEY_CLASSES_ROOT\clsid\{1ea00be1-6e54-4e2a-8099-680300bf23e1}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{34AB3C4C-DA1A-4067-96F4-31452C7CFE65}"= "c:\program files\Seznam.cz\listicka.dll" [2010-10-07 1961240]
.
[HKEY_CLASSES_ROOT\clsid\{34ab3c4c-da1a-4067-96f4-31452c7cfe65}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\steam.exe" [2011-12-24 1242448]
"KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-11-29 21392]
"KiesHelper"="c:\program files\Samsung\Kies\KiesHelper.exe" [2011-11-29 935312]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-10 98304]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-12-11 1044480]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-11 287800]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-03 1791272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2011-11-29 3508624]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2009-03-08 128512]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-5-12 576104]
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Steam\\SteamApps\\sairus278\\counter-strike source\\hl2.exe"=
"c:\\Program Files\\Steam\\SteamApps\\sairus278\\day of defeat source\\hl2.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
.
R0 SFAUDIO;Sonic Focus DSP Driver;c:\windows\system32\drivers\sfaudio.sys [28.3.2008 10:14 24064]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [16.12.2011 9:48 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [16.12.2011 9:48 314456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [16.12.2011 9:48 20568]
R2 ATService;AuthenTec Fingerprint Service;c:\program files\Fingerprint Sensor\AtService.exe [12.6.2008 12:21 1164536]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [4.1.2012 20:19 652872]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver;c:\windows\system32\drivers\ATSwpWDF.sys [12.6.2008 14:40 477696]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [14.12.2011 8:33 227896]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [23.7.2008 11:31 44800]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [4.1.2012 20:19 20464]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [17.12.2011 18:25 30312]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [17.12.2011 18:25 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [17.12.2011 18:25 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [17.12.2011 18:25 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [17.12.2011 18:25 114280]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - c:\program files\Seznam.cz\listicka.dll
TCP: DhcpNameServer = 88.83.169.2 195.113.144.194
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe
AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe
AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe
AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe
AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe
AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe
AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe
AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe
AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe
AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe
AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe
AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe
AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe
AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe
AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe
AddRemove-21_Searsburg - c:\program files\Samsung\USB Drivers\21_Searsburg\Uninstall.exe
AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe
AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe
AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-05 10:27
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-299502267-261903793-1801674531-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,4b,6d,bb,92,e1,d4,37,44,93,35,d5,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,4b,6d,bb,92,e1,d4,37,44,93,35,d5,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,4b,6d,bb,92,e1,d4,37,44,93,35,d5,\
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1068)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(3944)
c:\windows\system32\btmmhook.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\btncopy.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\System32\SCardSvr.exe
c:\windows\system32\agrsmsvc.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\Hewlett-Packard\Shared\hpqwmiex.exe
c:\progra~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
.
**************************************************************************
.
Celkový čas: 2012-01-05 10:45:48 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-01-05 09:45
.
Před spuštěním: Volných bajtů: 125 252 632 576
Po spuštění: Volných bajtů: 127 066 492 928
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 18DC1E2DC9999C8515A7614758574A27

[Rudy]

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

Folder::
c:\program files\Seznam.cz\toolbar

Registry::
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[michal1223]

tak jsem to udělal, tady je log.. ale je to pořád stejné systém nabíhá asi pět minut a vše je zpomalené...

ComboFix 12-01-05.01 - Administrator 05.01.2012 19:10:56.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1789.1040 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Dokumenty\soft\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Administrator\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Seznam.cz\toolbar
c:\program files\Seznam.cz\toolbar\toolbar.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-05 do 2012-01-05 )))))))))))))))))))))))))))))))
.
.
2012-01-05 18:03 . 2012-01-05 18:05 -------- d-----w- C:\32788R22FWJFW
2012-01-04 15:59 . 2012-01-04 16:00 -------- d-----w- C:\rsit
2011-12-17 19:24 . 2011-12-17 19:24 -------- d-----w- C:\524d55394f71a90857d308
2011-12-17 19:19 . 2011-12-17 19:19 -------- d-----w- C:\6f5dc4a715f5cb42566584aa6160cdef
2011-12-17 19:19 . 2011-12-17 20:08 -------- d-----w- C:\f8454443fa229fd1e5
2011-12-17 17:30 . 2011-12-17 17:30 -------- d-----w- C:\Temp
2011-12-14 13:05 . 2011-12-14 13:05 -------- d-----r- C:\MSOCache
2011-12-14 07:14 . 2011-12-14 07:35 -------- d-----w- C:\swsetup
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-29 15:38 . 2011-11-29 15:38 90112 ----a-w- c:\windows\MAMCityDownload.ocx
2011-11-29 15:38 . 2011-11-29 15:38 325552 ----a-w- c:\windows\MASetupCaller.dll
2011-11-29 15:38 . 2011-11-29 15:38 30568 ----a-w- c:\windows\MusiccityDownload.exe
2011-11-29 15:38 . 2011-11-29 15:38 974848 ----a-w- c:\windows\system32\cis-2.4.dll
2011-11-29 15:38 . 2011-11-29 15:38 81920 ----a-w- c:\windows\system32\issacapi_bs-2.3.dll
2011-11-29 15:38 . 2011-11-29 15:38 65536 ----a-w- c:\windows\system32\issacapi_pe-2.3.dll
2011-11-29 15:38 . 2011-11-29 15:38 57344 ----a-w- c:\windows\system32\MTXSYNCICON.dll
2011-11-29 15:38 . 2011-11-29 15:38 57344 ----a-w- c:\windows\system32\MK_Lyric.dll
2011-11-29 15:38 . 2011-11-29 15:38 57344 ----a-w- c:\windows\system32\issacapi_se-2.3.dll
2011-11-29 15:38 . 2011-11-29 15:38 569344 ----a-w- c:\windows\system32\muzdecode.ax
2011-11-29 15:38 . 2011-11-29 15:38 491520 ----a-w- c:\windows\system32\muzapp.dll
2011-11-29 15:38 . 2011-11-29 15:38 49152 ----a-w- c:\windows\system32\MaJGUILib.dll
2011-11-29 15:38 . 2011-11-29 15:38 45056 ----a-w- c:\windows\system32\MaXMLProto.dll
2011-11-29 15:38 . 2011-11-29 15:38 45056 ----a-w- c:\windows\system32\MACXMLProto.dll
2011-11-29 15:38 . 2011-11-29 15:38 40960 ----a-w- c:\windows\system32\MTTELECHIP.dll
2011-11-29 15:38 . 2011-11-29 15:38 40960 ----a-w- c:\windows\system32\MAMACExtract.dll
2011-11-29 15:38 . 2011-11-29 15:38 352256 ----a-w- c:\windows\system32\MSLUR71.dll
2011-11-29 15:38 . 2011-11-29 15:38 258048 ----a-w- c:\windows\system32\muzoggsp.ax
2011-11-29 15:38 . 2011-11-29 15:38 245760 ----a-w- c:\windows\system32\MSCLib.dll
2011-11-29 15:38 . 2011-11-29 15:38 24576 ----a-w- c:\windows\system32\MASetupCleaner.exe
2011-11-29 15:38 . 2011-11-29 15:38 200704 ----a-w- c:\windows\system32\muzwmts.dll
2011-11-29 15:38 . 2011-11-29 15:38 155648 ----a-w- c:\windows\system32\MSFLib.dll
2011-11-29 15:38 . 2011-11-29 15:38 143360 ----a-w- c:\windows\system32\3DAudio.ax
2011-11-29 15:38 . 2011-11-29 15:38 14336 ----a-w- c:\windows\system32\avrt.dll
2011-11-29 15:38 . 2011-11-29 15:38 135168 ----a-w- c:\windows\system32\muzaf1.dll
2011-11-29 15:38 . 2011-11-29 15:38 131072 ----a-w- c:\windows\system32\muzmpgsp.ax
2011-11-29 15:38 . 2011-11-29 15:38 122880 ----a-w- c:\windows\system32\muzeffect.ax
2011-11-29 15:38 . 2011-11-29 15:38 118784 ----a-w- c:\windows\system32\MaDRM.dll
2011-11-29 15:38 . 2011-11-29 15:38 110592 ----a-w- c:\windows\system32\muzmp4sp.ax
2011-11-23 14:40 . 2008-04-14 05:45 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-04 19:13 . 2008-04-14 06:52 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 19:13 . 2008-04-14 06:52 916992 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 19:13 . 2008-04-14 06:51 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-11-04 11:23 . 2008-04-14 05:50 385024 ----a-w- c:\windows\system32\html.iec
2011-11-01 16:07 . 2008-04-14 06:51 1288192 ----a-w- c:\windows\system32\ole32.dll
2011-10-28 05:32 . 2008-04-14 06:51 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-26 10:49 . 2008-04-14 08:06 2029056 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-26 10:49 . 2008-04-14 06:06 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-18 11:13 . 2008-04-14 06:51 186880 ----a-w- c:\windows\system32\encdec.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-12-15 . 0BCC503569B6579A74449A58679D8A5D . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2012-01-05_09.30.28 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-01-05 11:23 . 2012-01-05 11:23 16384 c:\windows\Temp\Perflib_Perfdata_214.dat
+ 2004-08-18 11:00 . 2012-01-05 11:18 76298 c:\windows\system32\perfc009.dat
+ 2004-08-18 11:00 . 2012-01-05 11:18 88426 c:\windows\system32\perfc005.dat
+ 2004-08-18 11:00 . 2012-01-05 11:18 475264 c:\windows\system32\perfh009.dat
+ 2004-08-18 11:00 . 2012-01-05 11:18 470774 c:\windows\system32\perfh005.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Steam"="c:\program files\Steam\steam.exe" [2011-12-24 1242448]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-08-10 98304]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2008-12-11 1044480]
"QlbCtrl.exe"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2009-11-11 287800]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-06-03 1791272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2009-03-08 128512]
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Bluetooth.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesHelper]
2011-11-29 19:58 935312 ----a-w- c:\program files\Samsung\Kies\KiesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR]
2011-11-29 19:58 21392 ----a-w- c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
2011-11-29 19:58 3508624 ----a-w- c:\program files\Samsung\Kies\KiesTrayAgent.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Steam\\SteamApps\\sairus278\\counter-strike source\\hl2.exe"=
"c:\\Program Files\\Steam\\SteamApps\\sairus278\\day of defeat source\\hl2.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
.
R0 SFAUDIO;Sonic Focus DSP Driver;c:\windows\system32\drivers\sfaudio.sys [28.3.2008 10:14 24064]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [16.12.2011 9:48 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [16.12.2011 9:48 314456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [16.12.2011 9:48 20568]
R2 ATService;AuthenTec Fingerprint Service;c:\program files\Fingerprint Sensor\AtService.exe [12.6.2008 12:21 1164536]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [4.1.2012 20:19 652872]
R3 ATSwpWDF;AuthenTec TruePrint USB WDF Driver;c:\windows\system32\drivers\ATSwpWDF.sys [12.6.2008 14:40 477696]
R3 Com4QLBEx;Com4QLBEx;c:\program files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [14.12.2011 8:33 227896]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [23.7.2008 11:31 44800]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [4.1.2012 20:19 20464]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\drivers\ssadadb.sys [17.12.2011 18:25 30312]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\drivers\ssadbus.sys [17.12.2011 18:25 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\drivers\ssadmdfl.sys [17.12.2011 18:25 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\drivers\ssadmdm.sys [17.12.2011 18:25 136808]
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\drivers\ssadserd.sys [17.12.2011 18:25 114280]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send To Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 88.83.169.2 195.113.144.194
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - (no file)
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-01-05 19:30
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-299502267-261903793-1801674531-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,4b,6d,bb,92,e1,d4,37,44,93,35,d5,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,4b,6d,bb,92,e1,d4,37,44,93,35,d5,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,4b,6d,bb,92,e1,d4,37,44,93,35,d5,\
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1128)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2012-01-05 19:39:13
ComboFix-quarantined-files.txt 2012-01-05 18:39
ComboFix2.txt 2012-01-05 09:45
.
Před spuštěním: Volných bajtů: 126 828 867 584
Po spuštění: Volných bajtů: 126 889 676 800
.
- - End Of File - - ABEE10F288128C0779A6AEB15E79F443

[Rudy]

Log vypadá OK. PC vyčistěte CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 , příp. defragmentujte disk.

[michal1223]

ok, udělám to a každopádně moc děkuji za Váš čas a ochotu

[Rudy]

Nemáte zač!