prosim o prev.kontrolu

[antivirak]

Logfile of random's system information tool 1.09 (written by random/random)
Run by xxx at 2012-02-26 00:28:26
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 17 GB (22%) free of 76 GB
Total RAM: 3327 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:28:32, on 26.2.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\PROGRA~1\AVG\AVG2012\avgrsx.exe
C:\Program Files\AVG\AVG2012\avgcsrvx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe
C:\Program Files\AVG\AVG2012\avgfws.exe
C:\Program Files\AVG\AVG2012\avgwdsvc.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe
C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
C:\Program Files\AVG\AVG2012\avgnsx.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\MSTMON_Q.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\AVG\AVG2012\avgtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ICQ7.2\ICQ.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MICROSTAR\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\MICROS~2\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Documents and Settings\xxx\Plocha\RSIT.exe
C:\Program Files\trend micro\xxx.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll
O2 - BHO: GamePlayLabsBHO - {984A9162-8891-4D19-8CFE-17648BB4E1EC} - (no file)
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: SweetIM Toolbar Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1350WStatusDisplay] C:\WINDOWS\system32\MSTMON_Q.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ICQ] ~"C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1123561945-1343024091-725345543-500\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Administrator')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {45830FF9-D9E6-4F41-86ED-B266933D8E90} (RtspVaPgCtrlNew Class) - http://93.91.146.254:8080/RtspVaPgDec.cab
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Aladdin SQL Server - Unknown owner - C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: vToolbarUpdater - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe

--
End of file - 9843 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\iMeshNAG.job
C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG2012\avgssie.dll [2011-11-11 1378144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll [2012-02-16 1811296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2010-06-13 1438520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-09-06 1048888]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2010-06-13 1438520]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2005-08-04 343112]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll [2012-02-16 1811296]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-10-10 39792]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2007-06-28 8466432]
"nwiz"=nwiz.exe /install []
"WinSys2"=C:\WINDOWS\system32\winsys2.exe [2006-04-29 208896]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2007-06-28 81920]
"KONICA MINOLTA PagePro 1350WStatusDisplay"=C:\WINDOWS\system32\MSTMON_Q.EXE [2004-11-26 167936]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2010-06-07 111928]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-09-08 421888]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"AVG_TRAY"=C:\Program Files\AVG\AVG2012\avgtray.exe [2012-01-24 2416480]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-06-13 16871936]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2012-02-16 939872]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"ICQ"=~C:\Program Files\ICQ7.2\ICQ.exe silent loginmode=4 []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
BTTray.lnk - C:\Program Files\MICROSTAR\Bluetooth Software\BTTray.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
scecli
scecli

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\BitLord\BitLord.exe"="C:\Program Files\BitLord\BitLord.exe:*:Enabled:BitLord"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Documents and Settings\xxx\Local Settings\Temporary Internet Files\Content.IE5\EO7UX86Z\SweetImSetup[1].exe"="C:\Documents and Settings\xxx\Local Settings\Temporary Internet Files\Content.IE5\EO7UX86Z\SweetImSetup[1].exe:*:Enabled:SweetIM Installer"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\facebook-pic000934519.exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Documents and Settings\xxx\Local Settings\Temporary Internet Files\Content.IE5\U1XTB5HX\facebook-pic000934519[1].exe"="c:\windows\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Program Files\AVG\AVG10\avgmfapx.exe"="C:\Program Files\AVG\AVG10\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe"="C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe:*:Enabled:Far Cry"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\AVG\AVG2012\avgnsx.exe"="C:\Program Files\AVG\AVG2012\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG2012\avgdiagex.exe"="C:\Program Files\AVG\AVG2012\avgdiagex.exe:*:Enabled:AVG Diagnostika 2012"
"C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Program Files\AVG\AVG2012\avgemcx.exe"="C:\Program Files\AVG\AVG2012\avgemcx.exe:*:Enabled:Obecná kontrola pošty"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"VIDC.VP31"=vp31vfw.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-02-25 23:44:20 ----D---- C:\Program Files\CCleaner
2012-02-25 22:41:22 ----D---- C:\WINDOWS\Prefetch
2012-02-25 22:37:36 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2012-02-25 22:37:32 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2012-02-25 22:37:25 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2012-02-25 22:37:21 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2012-02-25 22:37:18 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2012-02-25 22:37:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2012-02-25 22:37:11 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2012-02-25 22:37:07 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2012-02-25 22:37:03 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2012-02-25 22:36:59 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2012-02-25 22:36:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2012-02-25 22:36:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2012-02-25 22:36:46 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2012-02-25 22:36:40 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2012-02-25 22:36:35 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2012-02-25 22:36:32 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2012-02-25 22:36:28 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2012-02-25 22:36:25 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2012-02-25 22:36:21 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2012-02-25 22:36:18 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2012-02-25 22:36:14 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2012-02-25 22:36:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2012-02-25 22:36:07 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2012-02-25 22:36:03 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2012-02-25 22:35:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2012-02-25 22:35:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2012-02-25 22:35:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2012-02-25 22:35:48 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2012-02-25 22:35:45 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2012-02-25 22:35:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2012-02-25 22:35:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2012-02-25 22:35:34 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2012-02-25 22:35:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2012-02-25 22:35:25 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2012-02-25 22:35:21 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2012-02-25 22:35:17 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2012-02-25 22:35:13 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2012-02-25 22:35:10 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2012-02-25 22:35:06 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2012-02-25 22:35:01 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2012-02-25 22:34:57 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2012-02-25 22:34:53 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2012-02-25 22:34:50 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2012-02-25 22:34:46 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2012-02-25 22:34:42 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2012-02-25 22:34:39 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2012-02-25 22:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2012-02-25 22:34:32 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2012-02-25 22:34:29 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2012-02-25 22:34:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2012-02-25 22:34:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2012-02-25 22:34:19 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2012-02-25 22:34:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2012-02-25 22:34:05 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2012-02-25 22:34:00 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2012-02-25 22:33:57 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2012-02-25 22:33:53 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2012-02-25 22:33:50 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2012-02-25 22:33:46 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2012-02-25 22:33:42 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2012-02-25 22:33:39 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2012-02-25 22:33:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2012-02-25 22:33:32 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2012-02-25 22:33:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2012-02-25 22:33:25 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2012-02-25 22:33:21 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2012-02-25 22:33:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2012-02-25 22:31:23 ----N---- C:\WINDOWS\system32\msxml6r.dll
2012-02-25 22:31:23 ----N---- C:\WINDOWS\system32\msxml6.dll
2012-02-25 22:31:15 ----N---- C:\WINDOWS\system32\smtpapi.dll
2012-02-25 22:31:15 ----N---- C:\WINDOWS\system32\rwnh.dll
2012-02-25 22:31:15 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2012-02-25 22:31:15 ----N---- C:\WINDOWS\system32\comsdupd.exe
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\dot3msm.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\dot3api.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\dimsroam.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\credssp.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\azroles.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\ati3duag.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2012-02-25 22:31:12 ----N---- C:\WINDOWS\system32\aaclient.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\ieencode.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\eapsvc.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\eapqec.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\eappprxy.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\eapphost.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\eappgnui.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\eappcfg.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\eapolqec.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\dot3ui.dll
2012-02-25 22:31:11 ----N---- C:\WINDOWS\system32\dot3svc.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\mmcperf.exe
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\mmcex.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\kmsvc.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\kbdpash.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2012-02-25 22:31:10 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\slserv.exe
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\slrundll.exe
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\slgen.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\slextspk.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\slcoinst.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\setupn.exe
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\s3gnb.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\rasqec.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\qutil.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\qcliprov.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\qagentrt.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\qagent.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\onex.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\napstat.exe
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\napmontr.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\napipsec.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2012-02-25 22:31:09 ----N---- C:\WINDOWS\system32\mssha.dll
2012-02-25 22:31:08 ----N---- C:\WINDOWS\system32\wmphoto.dll
2012-02-25 22:31:08 ----N---- C:\WINDOWS\system32\wlanapi.dll
2012-02-25 22:31:08 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2012-02-25 22:31:08 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2012-02-25 22:31:08 ----N---- C:\WINDOWS\system32\verclsid.exe
2012-02-25 22:31:08 ----N---- C:\WINDOWS\system32\tspkg.dll
2012-02-25 22:31:08 ----N---- C:\WINDOWS\system32\tsgqec.dll
2012-02-25 22:31:07 ----N---- C:\WINDOWS\slrundll.exe
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2012-02-25 22:26:58 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2012-02-25 22:26:57 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2012-02-25 22:26:56 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2012-02-25 22:26:55 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2012-02-25 22:25:56 ----A---- C:\WINDOWS\002728_.tmp
2012-02-25 22:23:41 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2012-02-25 20:29:01 ----D---- C:\Program Files\trend micro
2012-02-25 20:28:58 ----D---- C:\rsit
2012-02-16 15:36:43 ----D---- C:\Documents and Settings\xxx\Data aplikací\AVG2012
2012-02-16 15:35:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG2012
2012-02-12 19:28:23 ----SHD---- C:\WINDOWS\CSC
2012-02-10 17:22:22 ----A---- C:\WINDOWS\system32\SET7D6.tmp
2012-02-03 19:43:35 ----D---- C:\nirvana

======List of files/folders modified in the last 1 month======

2012-02-25 23:52:14 ----D---- C:\Documents and Settings\xxx\Data aplikací\Skype
2012-02-25 23:52:11 ----D---- C:\WINDOWS\SoftwareDistribution
2012-02-25 23:52:11 ----D---- C:\WINDOWS\Minidump
2012-02-25 23:52:11 ----D---- C:\WINDOWS\Debug
2012-02-25 23:52:11 ----D---- C:\WINDOWS
2012-02-25 23:52:04 ----D---- C:\WINDOWS\Temp
2012-02-25 23:44:20 ----RD---- C:\Program Files
2012-02-25 23:39:45 ----A---- C:\WINDOWS\wincmd.ini
2012-02-25 23:39:20 ----D---- C:\Documents and Settings
2012-02-25 23:03:37 ----D---- C:\WINDOWS\system32
2012-02-25 23:03:37 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-02-25 23:00:24 ----D---- C:\WINDOWS\system32\CatRoot2
2012-02-25 22:56:13 ----SHD---- C:\WINDOWS\Installer
2012-02-25 22:56:13 ----HD---- C:\Config.Msi
2012-02-25 22:43:00 ----HD---- C:\WINDOWS\inf
2012-02-25 22:40:42 ----D---- C:\WINDOWS\system32\wbem
2012-02-25 22:40:42 ----D---- C:\WINDOWS\system32\Setup
2012-02-25 22:40:42 ----D---- C:\WINDOWS\AppPatch
2012-02-25 22:40:41 ----RSD---- C:\WINDOWS\Fonts
2012-02-25 22:40:40 ----D---- C:\WINDOWS\system32\drivers
2012-02-25 22:39:38 ----D---- C:\WINDOWS\security
2012-02-25 22:37:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-02-25 22:37:38 ----D---- C:\WINDOWS\system32\CatRoot
2012-02-25 22:37:05 ----D---- C:\Program Files\Outlook Express
2012-02-25 22:36:33 ----D---- C:\Program Files\Movie Maker
2012-02-25 22:33:26 ----D---- C:\Program Files\Messenger
2012-02-25 22:31:26 ----D---- C:\WINDOWS\WinSxS
2012-02-25 22:31:21 ----D---- C:\Program Files\Windows Media Player
2012-02-25 22:31:20 ----D---- C:\WINDOWS\Help
2012-02-25 22:31:16 ----D---- C:\WINDOWS\ehome
2012-02-25 22:31:14 ----D---- C:\WINDOWS\system32\inetsrv
2012-02-25 22:31:14 ----D---- C:\WINDOWS\network diagnostic
2012-02-25 22:31:14 ----D---- C:\WINDOWS\ime
2012-02-25 22:31:07 ----D---- C:\WINDOWS\system32\usmt
2012-02-25 22:31:07 ----D---- C:\WINDOWS\system32\cs-CZ
2012-02-25 22:31:06 ----D---- C:\WINDOWS\system32\cs
2012-02-25 22:31:06 ----D---- C:\WINDOWS\system32\bits
2012-02-25 22:31:06 ----D---- C:\WINDOWS\PeerNet
2012-02-25 22:31:06 ----D---- C:\WINDOWS\l2schemas
2012-02-25 22:31:06 ----D---- C:\Program Files\Internet Explorer
2012-02-25 22:28:45 ----D---- C:\WINDOWS\system32\Restore
2012-02-25 22:28:45 ----D---- C:\WINDOWS\system32\npp
2012-02-25 22:28:44 ----D---- C:\WINDOWS\msagent
2012-02-25 22:28:43 ----D---- C:\WINDOWS\srchasst
2012-02-25 22:28:43 ----D---- C:\Program Files\NetMeeting
2012-02-25 22:28:42 ----D---- C:\WINDOWS\system32\Com
2012-02-25 22:28:39 ----D---- C:\Program Files\Windows NT
2012-02-25 22:28:36 ----D---- C:\Program Files\Common Files\System
2012-02-25 22:28:14 ----D---- C:\WINDOWS\system32\oobe
2012-02-25 22:28:13 ----D---- C:\WINDOWS\system
2012-02-25 21:51:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\MFAData
2012-02-25 21:39:41 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-02-25 20:36:03 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-02-25 18:12:18 ----D---- C:\WINDOWS\system32\drivers\AVG
2012-02-21 17:17:55 ----D---- C:\blootooth
2012-02-16 15:38:25 ----D---- C:\Program Files\AVG Secure Search
2012-02-16 15:22:09 ----D---- C:\Program Files\AVG
2012-02-06 17:56:13 ----D---- C:\Documents and Settings\xxx\Data aplikací\ICQ
2012-02-05 18:27:44 ----D---- C:\Documents and Settings\xxx\Data aplikací\Image Zone Express

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-07-11 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-09-13 32592]
R0 BTKRNL;Bluetooth Protocol Stack; C:\WINDOWS\system32\drivers\btkrnl.sys [2003-01-16 1149978]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-07-23 43528]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-10-07 230608]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-08-08 40016]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-07-11 295248]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 BTSERIAL;Bluetooth Serial Driver; \??\C:\WINDOWS\system32\drivers\btserial.sys []
R2 BTSLBCSP;Bluetooth Port Client Driver; \??\C:\WINDOWS\system32\drivers\btslbcsp.sys []
R3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-11 134608]
R3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-11 24272]
R3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-10-04 16720]
R3 BtAudio;Bluetooth Audio; C:\WINDOWS\system32\DRIVERS\btaudio.sys [2003-01-16 21701]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2003-01-16 30043]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
R3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidBth;Miniport Bluetooth HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidbth.sys [2008-04-14 25600]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-06-13 4754944]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1e51x86.sys [2008-06-25 36864]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2007-06-28 6807328]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-03 20480]
S1 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2008-04-14 31744]
S2 MLPTDR_Q;MLPTDR_Q; \??\C:\WINDOWS\system32\MLPTDR_Q.SYS []
S3 Avgfwfd;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2003-01-16 65076]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 MSICPL;MSICPL; \??\D:\install4\MSICPL.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Aladdin SQL Server;Aladdin SQL Server; C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe [2011-11-08 136192]
R2 avgfws;AVG Firewall; C:\Program Files\AVG\AVG2012\avgfws.exe [2011-11-23 2391832]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2007-06-28 155716]
R2 vToolbarUpdater;vToolbarUpdater; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe [2012-01-16 909152]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-22 135664]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [2011-11-10 167264]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-22 135664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

[krater]

Asi Tě nějak přehlídli co? Obávám se, aby se mi to nestalo taky:D ale nemůžem si stěžovat, je to tady (jak koukám u ostatních) rychlé a kvalitní

[Pavuk29]

Asi Tě nějak přehlídli co? Obávám se, aby se mi to nestalo taky:D ale nemůžem si stěžovat, je to tady (jak koukám u ostatních) rychlé a kvalitní

Mohol by si byt taky laskavy a neliezt do cudzich topicov?

[Márty84]

Zdravim

Ja si to tedy s dovolenim prevezmu, OK?

Najdete tento soubor C:\Program Files\trend micro\xxx.exe a spustte ho
Kliknete na Main menu a na Do a system scan only
U techto radku dejte vlevo zatrzitko

Kód: Vybrat vše

R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll

Kliknete na nápis Fix checked a potvrdte



Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe , ulozte nejlepe na plochu a spustte
Do leveho okna zkopirujte tento skript

Kód: Vybrat vše

:files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\iMeshNAG.job
C:\WINDOWS\tasks\WGASetup.job
C:\WINDOWS\system32\winsys2.exe

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
"{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=-
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"WinSys2"=-
"NvMediaCenter"=-
"HP Software Update"=-
"SweetIM"=-
"QuickTime Task"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ICQ"=-

:services
gupdate
gupdatem
ICQ Service

:commands
[RESETHOSTS]
[Purity]
[EMPTYTEMP]
[EMPTYFLASH]

Kliknete na MoveIt a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu sem dejte log, ktery bude zde C:\_OTM\MovedFiles\



Udelejte uplnou kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte jeho log. Predem nic nemazte, miva obcas falesne detekce