Mírně zpomalené PC

[Bajtys]

Hezký večer.
Občas se mi zdá, že PC nejede tak, jak by měl, nejčastěji při hraních her. Přijde mi to tak, jakože ho něco zpomaluje, ovšem nevím co Možná je to asi i dáno tím, že na tomto PC je nově nainstalovaný Windows XP a tím pádem by zde mohlo být nainstalováno něco navíc a nebo by naopak mohlo něco chybět. Netuším. Takže kdyby jste mi poradili, jaké zbytečnosti bych měl například odmazat a tak podobně, byl bych moc rád Zde log z RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by XXX at 2010-01-16 22:51:16
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 53 GB (21%) free of 250 GB
Total RAM: 2046 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:51:26, on 16.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16945)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\GIGABYTE\ET6\GUI.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Documents and Settings\XXX\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\XXX.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ask.com/?o=101731&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [EasyTuneVI] C:\Program Files\GIGABYTE\ET6\ETcall.exe
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I "C:\Program Files\Common Files\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MSI" TRANSFORMS="C:\Program Files\Common Files\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MST" WISE_SETUP_EXE_PATH="d:\nvidia\win2k-xp\PhysX_9[1].09.0408_SystemSoftware.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout Free Download Managerem - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video Free Download Managerem - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané Free Download Managerem - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše Free Download Managerem - file://C:\Program Files\Free Download Manager\dlall.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4BFD075D-C36E-4F28-BB0A-5D472795197A} (PowerLoader Class) - http://download09.managerzone.com/socce ... Loader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{55983BC5-5B87-438D-917C-08D5D30220F9}: NameServer = 10.128.137.145,213.168.176.3
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2F6BAD6-2E49-46A2-AC9A-02FFF2DF1E20}: NameServer = 10.128.137.145,213.168.176.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{55983BC5-5B87-438D-917C-08D5D30220F9}: NameServer = 10.128.137.145,213.168.176.3
O17 - HKLM\System\CS2\Services\Tcpip\..\{55983BC5-5B87-438D-917C-08D5D30220F9}: NameServer = 10.128.137.145,213.168.176.3
O17 - HKLM\System\CS3\Services\Tcpip\..\{55983BC5-5B87-438D-917C-08D5D30220F9}: NameServer = 10.128.137.145,213.168.176.3
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 10283 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\Úklid 1 kliknutím.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CC59E0F9-7E43-44FA-9FAA-8377850BF205}]
FDMIECookiesBHO Class - C:\Program Files\Free Download Manager\iefdm2.dll [2008-12-30 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-07 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-07 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2008-09-29 325000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-01-13 18084864]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"EasyTuneVI"=C:\Program Files\GIGABYTE\ET6\ETcall.exe [2007-07-26 20480]
"WinSys2"=C:\WINDOWS\system32\winsys2.exe [2009-05-18 208896]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-05-01 86016]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-05-01 13750272]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-09 153136]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2007-08-24 33648]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-07 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-03-12 153136]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"RGSC"=C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [2009-12-25 306088]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"=MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I C:\Program Files\Common Files\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MSI TRANSFORMS=C:\Program Files\Common Files\Wise Installation Wizard\WIS1C4551A64743409391E41477CD655043_9_09_0203.MST WISE_SETUP_EXE_PATH=d:\nvidia\win2k-xp\PhysX_9[1].09.0408_SystemSoftware.exe []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2007-08-24 2212224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe"="C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe"="C:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Codemasters\DiRT2\dirt2_game.exe"="C:\Program Files\Codemasters\DiRT2\dirt2_game.exe:*:Enabled:DiRT2"
"C:\Program Files\SEGA\Vancouver 2010\Vancouver.exe"="C:\Program Files\SEGA\Vancouver 2010\Vancouver.exe:*:Enabled:Vancouver 2010™"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{708248ec-e053-11de-8f6d-00241dda00f3}]
shell\AutoRun\command - config/USB.exe
shell\explore\command - config/USB.exe
shell\open\command - config/USB.exe


======File associations======

.ini - open - "C:\Program Files\GetDiz\GetDiz.exe" "%1"
.txt - open - "C:\Program Files\GetDiz\GetDiz.exe" "%1"

======List of files/folders created in the last 1 months======

2010-01-16 22:51:17 ----D---- C:\Program Files\trend micro
2010-01-16 22:51:16 ----D---- C:\rsit
2010-01-13 07:18:01 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-13 07:17:55 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-10 21:05:21 ----D---- C:\Program Files\SEGA
2010-01-09 13:01:07 ----D---- C:\WINDOWS\Sun
2010-01-07 13:34:55 ----D---- C:\Documents and Settings\XXX\Data aplikací\PowerChallenge
2010-01-07 13:29:59 ----A---- C:\WINDOWS\system32\javaws.exe
2010-01-07 13:29:59 ----A---- C:\WINDOWS\system32\javaw.exe
2010-01-07 13:29:59 ----A---- C:\WINDOWS\system32\java.exe
2010-01-07 13:29:59 ----A---- C:\WINDOWS\system32\deploytk.dll
2010-01-07 13:29:47 ----D---- C:\Program Files\Java
2010-01-07 13:29:26 ----D---- C:\Documents and Settings\XXX\Data aplikací\Sun
2010-01-04 22:38:57 ----D---- C:\Program Files\Activision
2010-01-03 22:28:48 ----D---- C:\Program Files\QuickTime
2010-01-03 22:28:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2010-01-03 22:28:34 ----D---- C:\Program Files\Common Files\Apple
2010-01-03 22:28:27 ----D---- C:\Program Files\Apple Software Update
2010-01-03 22:28:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple
2010-01-03 13:52:16 ----D---- C:\Program Files\MzMgr by isvicare
2009-12-30 16:09:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Codemasters
2009-12-30 16:07:24 ----A---- C:\WINDOWS\system32\mkl_vml_p4.dll
2009-12-30 16:07:24 ----A---- C:\WINDOWS\system32\mkl_vml_p3.dll
2009-12-30 16:07:24 ----A---- C:\WINDOWS\system32\mkl_vml_def.dll
2009-12-30 16:07:24 ----A---- C:\WINDOWS\system32\mkl_p4.dll
2009-12-30 16:07:24 ----A---- C:\WINDOWS\system32\mkl_p3.dll
2009-12-30 16:07:24 ----A---- C:\WINDOWS\system32\mkl_lapack64.dll
2009-12-30 16:07:24 ----A---- C:\WINDOWS\system32\mkl_lapack32.dll
2009-12-30 16:07:23 ----D---- C:\Program Files\BRS
2009-12-30 16:07:23 ----A---- C:\WINDOWS\system32\rapture3d_oal.dll
2009-12-30 16:07:23 ----A---- C:\WINDOWS\system32\mkl_def.dll
2009-12-30 16:07:23 ----A---- C:\WINDOWS\system32\libguide40.dll
2009-12-30 16:06:57 ----D---- C:\Program Files\OpenAL
2009-12-30 16:06:56 ----RA---- C:\WINDOWS\system32\tmp14C.tmp
2009-12-30 16:06:56 ----RA---- C:\WINDOWS\system32\tmp14B.tmp
2009-12-30 15:56:26 ----D---- C:\Program Files\Codemasters
2009-12-29 16:07:44 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2009-12-29 16:07:43 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2009-12-29 16:07:43 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2009-12-29 16:07:43 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2009-12-29 16:07:42 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2009-12-29 15:47:30 ----D---- C:\Documents and Settings\XXX\Data aplikací\Outertech
2009-12-29 15:47:17 ----D---- C:\Program Files\AskBarDis
2009-12-29 15:47:12 ----D---- C:\Program Files\GetDiz
2009-12-29 15:24:29 ----D---- C:\Program Files\Auran
2009-12-29 12:15:24 ----D---- C:\Downloads
2009-12-29 09:56:51 ----D---- C:\Program Files\Software Informer
2009-12-29 09:56:50 ----D---- C:\Documents and Settings\XXX\Data aplikací\Free Download Manager
2009-12-29 09:56:47 ----D---- C:\Program Files\Free Download Manager
2009-12-29 09:56:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\FreeDownloadManager.ORG
2009-12-28 19:15:55 ----D---- C:\Program Files\PhotoFiltre
2009-12-28 12:09:39 ----A---- C:\WINDOWS\system32\muweb.dll
2009-12-28 12:09:39 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2009-12-28 12:09:39 ----A---- C:\WINDOWS\system32\mucltui.dll
2009-12-28 11:55:42 ----D---- C:\Program Files\Microsoft Visual Studio
2009-12-28 11:55:41 ----D---- C:\Program Files\Common Files\DESIGNER
2009-12-28 11:42:57 ----A---- C:\WINDOWS\system32\msonpmon.dll
2009-12-28 11:41:45 ----D---- C:\Program Files\Microsoft Works
2009-12-28 11:40:34 ----D---- C:\Program Files\Microsoft.NET
2009-12-28 11:37:17 ----D---- C:\Program Files\Microsoft Visual Studio 8
2009-12-28 11:36:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2009-12-28 11:24:24 ----D---- C:\Program Files\Western Digital Corporation
2009-12-28 11:24:22 ----A---- C:\WINDOWS\jestertb.dll
2009-12-27 16:42:29 ----D---- C:\Program Files\freebird
2009-12-27 14:45:11 ----D---- C:\Documents and Settings\XXX\Data aplikací\Cool Record Edit Pro
2009-12-27 14:35:36 ----A---- C:\WINDOWS\system32\msvcr70.dll
2009-12-27 10:41:53 ----D---- C:\Documents and Settings\XXX\Data aplikací\AdobeUM
2009-12-27 09:01:43 ----SHD---- C:\WINDOWS\CSC
2009-12-26 16:15:58 ----D---- C:\Documents and Settings\XXX\Data aplikací\2K Sports
2009-12-26 16:00:00 ----D---- C:\Program Files\2K Sports
2009-12-26 15:58:34 ----D---- C:\WINDOWS\system32\URTTEMP
2009-12-25 22:51:45 ----RHD---- C:\Documents and Settings\XXX\Data aplikací\SecuROM
2009-12-25 21:37:02 ----D---- C:\Program Files\KONAMI
2009-12-25 21:37:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\KONAMI
2009-12-25 18:52:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2009-12-25 17:13:32 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2009-12-25 17:13:27 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-12-25 17:13:03 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2009-12-25 17:12:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2009-12-25 17:10:23 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2009-12-25 16:46:04 ----N---- C:\WINDOWS\system32\spmsg.dll
2009-12-25 16:41:26 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2009-12-25 16:41:25 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2009-12-25 16:34:09 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2009-12-25 16:30:42 ----D---- C:\WINDOWS\system32\xlive
2009-12-25 16:30:41 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2009-12-25 15:58:34 ----D---- C:\Program Files\MSBuild
2009-12-25 15:56:48 ----D---- C:\WINDOWS\system32\XPSViewer
2009-12-25 15:56:47 ----D---- C:\WINDOWS\system32\en-us
2009-12-25 15:56:29 ----D---- C:\Program Files\Reference Assemblies
2009-12-25 15:56:15 ----N---- C:\WINDOWS\system32\spmsg2.dll
2009-12-25 15:55:12 ----RSD---- C:\WINDOWS\assembly
2009-12-25 15:54:54 ----D---- C:\WINDOWS\Microsoft.NET
2009-12-25 15:54:23 ----D---- C:\Program Files\Rockstar Games
2009-12-25 08:23:23 ----D---- C:\WINDOWS\down
2009-12-25 00:18:16 ----D---- C:\Program Files\Electronic Arts
2009-12-25 00:15:53 ----D---- C:\WINDOWS\system32\AGEIA
2009-12-25 00:15:53 ----D---- C:\Program Files\AGEIA Technologies
2009-12-25 00:05:34 ----D---- C:\Documents and Settings\XXX\Data aplikací\Leadertech
2009-12-25 00:00:04 ----D---- C:\Program Files\EA Sports
2009-12-24 22:39:03 ----D---- C:\Documents and Settings\XXX\Data aplikací\Summer Athletics 2009
2009-12-24 22:38:07 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2009-12-24 22:38:07 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2009-12-24 22:38:07 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2009-12-24 22:38:06 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2009-12-24 22:38:06 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2009-12-24 22:38:06 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2009-12-24 22:38:06 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2009-12-24 22:38:05 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2009-12-24 22:38:05 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2009-12-24 22:38:05 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2009-12-24 22:38:04 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2009-12-24 22:38:04 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2009-12-24 22:38:04 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2009-12-24 22:38:04 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2009-12-24 22:38:04 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2009-12-24 22:38:03 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2009-12-24 22:38:03 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2009-12-24 22:38:03 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2009-12-24 22:38:03 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2009-12-24 22:38:03 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2009-12-24 22:38:02 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2009-12-24 22:38:02 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2009-12-24 22:38:02 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2009-12-24 22:38:02 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2009-12-24 22:38:01 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2009-12-24 22:38:01 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2009-12-24 22:38:01 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2009-12-24 22:38:01 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2009-12-24 22:38:00 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2009-12-24 22:38:00 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2009-12-24 22:38:00 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2009-12-24 22:38:00 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2009-12-24 22:37:59 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2009-12-24 22:37:59 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2009-12-24 22:37:58 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2009-12-24 22:37:58 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2009-12-24 22:37:58 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2009-12-24 22:37:33 ----D---- C:\WINDOWS\Logs
2009-12-24 22:35:41 ----A---- C:\WINDOWS\NeroDigital.ini
2009-12-24 22:30:12 ----D---- C:\Program Files\Summer Athletics 2009
2009-12-24 22:14:12 ----D---- C:\Program Files\DAEMON Tools Lite
2009-12-24 22:13:58 ----D---- C:\Documents and Settings\XXX\Data aplikací\DAEMON Tools Lite
2009-12-24 22:13:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2009-12-24 21:53:00 ----D---- C:\Program Files\Elaborate Bytes
2009-12-24 20:39:33 ----D---- C:\WINDOWS\Prefetch
2009-12-24 20:38:14 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2009-12-24 20:38:10 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2009-12-24 20:38:06 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2009-12-24 20:38:02 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2009-12-24 20:37:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2009-12-24 20:37:54 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2009-12-24 20:37:49 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2009-12-24 20:37:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2009-12-24 20:37:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2009-12-24 20:37:36 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2009-12-24 20:37:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2009-12-24 20:37:27 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2009-12-24 20:37:23 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-12-24 20:37:19 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2009-12-24 20:37:14 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2009-12-24 20:37:10 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-12-24 20:37:06 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2009-12-24 20:37:01 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2009-12-24 20:36:57 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2009-12-24 20:36:52 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-12-24 20:36:48 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-12-24 20:36:44 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2$
2009-12-24 20:36:40 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2009-12-24 20:36:36 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-12-24 20:36:32 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-12-24 20:36:28 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-12-24 20:36:24 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-12-24 20:36:20 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-12-24 20:36:16 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-12-24 20:36:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2009-12-24 20:36:08 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-12-24 20:36:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-12-24 20:35:58 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-12-24 20:35:53 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2009-12-24 20:35:49 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-12-24 20:35:45 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-12-24 20:35:41 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-12-24 20:35:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-12-24 20:35:32 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-12-24 20:35:28 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-12-24 20:35:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-12-24 20:35:20 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-12-24 20:35:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-12-24 20:35:12 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-12-24 20:35:07 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-12-24 20:32:59 ----D---- C:\WINDOWS\system32\cs
2009-12-24 20:32:59 ----D---- C:\WINDOWS\system32\bits
2009-12-24 20:32:59 ----D---- C:\WINDOWS\l2schemas
2009-12-24 20:30:54 ----D---- C:\WINDOWS\network diagnostic
2009-12-24 20:28:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-12-24 20:16:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2009-12-24 20:16:01 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2009-12-24 20:15:57 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2009-12-24 20:15:53 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-12-24 20:15:49 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2009-12-24 20:15:45 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2009-12-24 20:15:41 ----HDC---- C:\WINDOWS\$NtUninstallKB935448$
2009-12-24 20:15:37 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2009-12-24 20:15:33 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2009-12-24 20:15:30 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2009-12-24 20:15:21 ----HDC---- C:\WINDOWS\$NtUninstallKB974318_0$
2009-12-24 20:15:16 ----HDC---- C:\WINDOWS\$NtUninstallKB969059_0$
2009-12-24 20:15:12 ----HDC---- C:\WINDOWS\$NtUninstallKB961371-v2_0$
2009-12-24 20:14:56 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2009-12-24 20:14:48 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2009-12-24 20:14:44 ----HDC---- C:\WINDOWS\$NtUninstallKB971557_0$
2009-12-24 20:14:41 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2009-12-24 20:14:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2009-12-24 20:14:29 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2009-12-24 20:14:24 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2009-12-24 20:14:20 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2009-12-24 20:14:14 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2009-12-24 20:14:09 ----D---- C:\Program Files\ICQ6Toolbar
2009-12-24 20:14:06 ----HDC---- C:\WINDOWS\$NtUninstallKB971633_0$
2009-12-24 20:14:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\ICQ
2009-12-24 20:14:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-12-24 20:13:58 ----HDC---- C:\WINDOWS\$NtUninstallKB973869_0$
2009-12-24 20:13:54 ----HDC---- C:\WINDOWS\$NtUninstallKB975025_0$
2009-12-24 20:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2009-12-24 20:13:43 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2009-12-24 20:13:38 ----HDC---- C:\WINDOWS\$NtUninstallKB974571_0$
2009-12-24 20:13:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973507_0$
2009-12-24 20:13:29 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-12-24 20:13:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_0$
2009-12-24 20:13:13 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2009-12-24 20:13:09 ----D---- C:\Documents and Settings\XXX\Data aplikací\ICQ
2009-12-24 20:13:06 ----HDC---- C:\WINDOWS\$NtUninstallKB957097_0$
2009-12-24 20:13:02 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
2009-12-24 20:12:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2009-12-24 20:12:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973354_0$
2009-12-24 20:12:48 ----D---- C:\Program Files\ICQ6.5
2009-12-24 20:12:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2009-12-24 20:12:31 ----D---- C:\WINDOWS\ie7updates
2009-12-24 20:12:22 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2009-12-24 20:12:17 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2009-12-24 20:12:10 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2009-12-24 20:12:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2009-12-24 20:11:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974392_0$
2009-12-24 20:11:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2009-12-24 20:11:44 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2009-12-24 20:11:39 ----HDC---- C:\WINDOWS\$NtUninstallKB971486_0$
2009-12-24 20:11:34 ----D---- C:\WINDOWS\ServicePackFiles
2009-12-24 20:11:33 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2009-12-24 20:11:29 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2009-12-24 20:11:25 ----HDC---- C:\WINDOWS\$NtUninstallKB973815_0$
2009-12-24 20:11:21 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2009-12-24 20:10:47 ----A---- C:\WINDOWS\system32\MRT.exe
2009-12-24 20:10:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2009-12-24 20:10:36 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2009-12-24 20:10:32 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2009-12-24 20:10:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2009-12-24 20:09:49 ----D---- C:\Program Files\MSXML 4.0
2009-12-24 20:09:43 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2009-12-24 20:09:39 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2009-12-24 20:09:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2009-12-24 20:09:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$
2009-12-24 20:09:26 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$
2009-12-24 20:09:20 ----HDC---- C:\WINDOWS\$NtUninstallKB969947_0$
2009-12-24 19:59:27 ----D---- C:\Documents and Settings\XXX\Data aplikací\Macromedia
2009-12-24 19:59:27 ----D---- C:\Documents and Settings\XXX\Data aplikací\Adobe
2009-12-24 19:50:14 ----N---- C:\WINDOWS\system32\tzchange.exe
2009-12-24 19:38:55 ----D---- C:\WINDOWS\system32\PreInstall
2009-12-24 19:38:53 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-12-24 19:18:42 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-12-24 19:16:19 ----D---- C:\Program Files\Sunbelt Software
2009-12-24 19:14:04 ----D---- C:\Documents and Settings\XXX\Data aplikací\Mozilla
2009-12-24 19:13:59 ----D---- C:\Program Files\Mozilla Firefox
2009-12-24 19:07:49 ----A---- C:\WINDOWS\system32\hidserv.dll

======List of files/folders modified in the last 1 months======

2010-01-16 22:51:17 ----RD---- C:\Program Files
2010-01-16 22:38:21 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-16 20:57:22 ----D---- C:\WINDOWS\Temp
2010-01-16 15:00:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-16 12:54:12 ----D---- C:\WINDOWS\system32
2010-01-13 13:16:20 ----D---- C:\WINDOWS
2010-01-13 13:16:01 ----D---- C:\WINDOWS\AppPatch
2010-01-13 07:18:27 ----SHD---- C:\WINDOWS\Installer
2010-01-13 07:18:04 ----HD---- C:\WINDOWS\inf
2010-01-13 07:18:03 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-01-13 07:18:01 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-13 07:18:00 ----A---- C:\WINDOWS\imsins.BAK
2010-01-10 21:08:35 ----D---- C:\WINDOWS\system32\DirectX
2010-01-10 21:05:21 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-07 13:34:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-07 13:19:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-03 22:28:36 ----D---- C:\WINDOWS\WinSxS
2010-01-03 22:28:34 ----D---- C:\Program Files\Common Files
2010-01-03 22:28:29 ----SD---- C:\WINDOWS\Tasks
2010-01-03 13:48:48 ----SD---- C:\Documents and Settings\XXX\Data aplikací\Microsoft
2009-12-30 16:06:57 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-12-30 16:06:57 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-12-29 15:47:12 ----RSD---- C:\WINDOWS\Fonts
2009-12-29 09:40:49 ----A---- C:\WINDOWS\win.ini
2009-12-29 09:39:12 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-12-28 19:11:48 ----D---- C:\Documents and Settings\XXX\Data aplikací\Identities
2009-12-28 11:55:32 ----D---- C:\WINDOWS\SHELLNEW
2009-12-28 11:42:51 ----D---- C:\WINDOWS\system32\config
2009-12-28 11:41:29 ----D---- C:\Program Files\Microsoft Office
2009-12-28 11:40:34 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2009-12-27 19:19:04 ----D---- C:\Program Files\Combined Community Codec Pack
2009-12-27 09:29:03 ----D---- C:\WINDOWS\system32\drivers
2009-12-27 09:17:51 ----D---- C:\WINDOWS\Registration
2009-12-25 17:13:24 ----D---- C:\WINDOWS\system32\CatRoot
2009-12-25 16:44:57 ----D---- C:\Program Files\Internet Explorer
2009-12-25 15:56:17 ----D---- C:\WINDOWS\system32\spool
2009-12-25 15:54:58 ----D---- C:\WINDOWS\system32\mui
2009-12-24 20:40:03 ----A---- C:\WINDOWS\OEWABLog.txt
2009-12-24 20:39:31 ----A---- C:\WINDOWS\setuplog.txt
2009-12-24 20:39:12 ----D---- C:\WINDOWS\system32\wbem
2009-12-24 20:39:12 ----D---- C:\WINDOWS\system32\Setup
2009-12-24 20:39:12 ----D---- C:\Program Files\Outlook Express
2009-12-24 20:39:12 ----D---- C:\Program Files\Common Files\System
2009-12-24 20:38:43 ----D---- C:\WINDOWS\security
2009-12-24 20:35:13 ----D---- C:\Program Files\Messenger
2009-12-24 20:33:06 ----D---- C:\WINDOWS\ehome
2009-12-24 20:33:05 ----D---- C:\WINDOWS\system32\inetsrv
2009-12-24 20:33:05 ----D---- C:\WINDOWS\ime
2009-12-24 20:33:05 ----D---- C:\WINDOWS\Help
2009-12-24 20:33:00 ----D---- C:\WINDOWS\system32\usmt
2009-12-24 20:33:00 ----D---- C:\WINDOWS\system32\cs-cz
2009-12-24 20:32:59 ----D---- C:\WINDOWS\PeerNet
2009-12-24 20:32:59 ----D---- C:\Program Files\Movie Maker
2009-12-24 20:32:01 ----D---- C:\WINDOWS\system32\Restore
2009-12-24 20:32:01 ----D---- C:\WINDOWS\system32\npp
2009-12-24 20:32:00 ----D---- C:\WINDOWS\srchasst
2009-12-24 20:32:00 ----D---- C:\WINDOWS\msagent
2009-12-24 20:32:00 ----D---- C:\Program Files\NetMeeting
2009-12-24 20:31:59 ----D---- C:\WINDOWS\system32\Com
2009-12-24 20:31:58 ----D---- C:\Program Files\Windows NT
2009-12-24 20:31:58 ----D---- C:\Program Files\Windows Media Player
2009-12-24 20:31:46 ----D---- C:\WINDOWS\system32\oobe
2009-12-24 20:31:45 ----D---- C:\WINDOWS\system
2009-12-24 20:30:06 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-12-24 20:10:49 ----D---- C:\WINDOWS\Debug
2009-12-24 19:18:51 ----D---- C:\WINDOWS\SoftwareDistribution

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-12-04 278984]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-12-04 25416]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 GVTDrv;GVTDrv; \??\C:\WINDOWS\system32\Drivers\GVTDrv.sys []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-01-20 5027840]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-04-30 8055584]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
S3 aobbs27g;aobbs27g; C:\WINDOWS\system32\drivers\aobbs27g.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 MSICPL;MSICPL; \??\D:\install4\MSICPL.sys []
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-05-23 29696]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 ES lite Service;ES lite Service for program management.; C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE [2009-02-05 68136]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-07 153376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-05-01 168004]
R2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service; C:\WINDOWS\System32\TUProgSt.exe [2009-12-03 603904]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-12 271920]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2007-08-24 68464]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2007-08-24 443776]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-12-03 360192]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Především tam vidím AdWare. Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[Bajtys]

Tak tady to je:

ComboFix 10-01-16.02 - XXX 16.01.2010 23:18:12.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2046.1569 [GMT 1:00]
Spuštěný z: c:\documents and settings\XXX\Dokumenty\Stažené soubory\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100116-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\XXX\Cookies\xxx@managerzone[2].txt
c:\program files\ICQ6.5\ICQLRun.exe
c:\windows\jestertb.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-16 do 2010-01-16 )))))))))))))))))))))))))))))))
.

2010-01-16 21:51 . 2010-01-16 21:51 -------- d-----w- c:\program files\trend micro
2010-01-16 21:51 . 2010-01-16 21:51 -------- d-----w- C:\rsit
2010-01-13 05:43 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-10 20:05 . 2010-01-10 20:05 -------- d-----w- c:\program files\SEGA
2010-01-09 12:01 . 2010-01-09 12:01 -------- d-----w- c:\windows\Sun
2010-01-07 12:29 . 2010-01-07 12:29 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-07 12:29 . 2010-01-07 12:29 -------- d-----w- c:\program files\Java
2010-01-04 21:38 . 2010-01-04 21:38 -------- d-----w- c:\program files\Activision
2010-01-03 21:28 . 2010-01-03 21:29 -------- d-----w- c:\program files\QuickTime
2010-01-03 21:28 . 2010-01-03 21:28 -------- d-----w- c:\program files\Common Files\Apple
2010-01-03 21:28 . 2010-01-03 21:28 -------- d-----w- c:\program files\Apple Software Update
2010-01-03 12:52 . 2010-01-16 19:08 -------- d-----w- c:\program files\MzMgr by isvicare
2009-12-30 15:07 . 2009-07-13 18:04 839680 ----a-w- c:\windows\system32\mkl_vml_p4.dll
2009-12-30 15:07 . 2009-07-13 18:04 532480 ----a-w- c:\windows\system32\mkl_vml_p3.dll
2009-12-30 15:07 . 2009-07-13 18:04 512000 ----a-w- c:\windows\system32\mkl_vml_def.dll
2009-12-30 15:07 . 2009-07-13 18:04 3485696 ----a-w- c:\windows\system32\mkl_p4.dll
2009-12-30 15:07 . 2009-07-13 18:04 2793472 ----a-w- c:\windows\system32\mkl_p3.dll
2009-12-30 15:07 . 2009-07-13 18:04 2174976 ----a-w- c:\windows\system32\mkl_lapack32.dll
2009-12-30 15:07 . 2009-07-13 18:04 2125824 ----a-w- c:\windows\system32\mkl_lapack64.dll
2009-12-30 15:07 . 2009-12-30 15:07 -------- d-----w- c:\program files\BRS
2009-12-30 15:07 . 2009-10-16 10:19 872448 ----a-w- c:\windows\system32\rapture3d_oal.dll
2009-12-30 15:07 . 2009-07-13 18:04 2441216 ----a-w- c:\windows\system32\mkl_def.dll
2009-12-30 15:07 . 2009-07-13 18:04 184320 ----a-w- c:\windows\system32\libguide40.dll
2009-12-30 15:06 . 2009-12-30 15:06 -------- d-----w- c:\program files\OpenAL
2009-12-30 14:56 . 2009-12-30 14:56 -------- d-----w- c:\program files\Codemasters
2009-12-29 15:07 . 2009-09-04 16:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2009-12-29 15:07 . 2009-09-04 16:44 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2009-12-29 15:07 . 2009-09-04 16:29 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2009-12-29 15:07 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2009-12-29 15:07 . 2009-09-04 16:29 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2009-12-29 14:47 . 2009-12-29 14:47 -------- d-----w- c:\program files\AskBarDis
2009-12-29 14:47 . 2009-12-29 14:47 -------- d-----w- c:\program files\GetDiz
2009-12-29 14:24 . 2009-12-29 14:24 -------- d-----w- c:\program files\Auran
2009-12-29 11:15 . 2010-01-09 12:52 -------- d-----w- C:\Downloads
2009-12-29 08:56 . 2009-12-29 08:56 -------- d-----w- c:\program files\Software Informer
2009-12-29 08:56 . 2009-12-29 08:56 -------- d-----w- c:\program files\Free Download Manager
2009-12-28 18:15 . 2009-12-28 18:15 -------- d-----w- c:\program files\PhotoFiltre
2009-12-28 11:09 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2009-12-28 11:09 . 2009-08-06 18:23 215920 ----a-w- c:\windows\system32\muweb.dll
2009-12-28 10:42 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2009-12-28 10:42 . 2006-10-26 18:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2009-12-28 10:41 . 2009-12-28 10:56 -------- d-----w- c:\program files\Microsoft Works
2009-12-28 10:40 . 2009-12-28 10:40 -------- d-----w- c:\program files\Microsoft.NET
2009-12-28 10:37 . 2009-12-28 10:37 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-12-28 10:24 . 2009-12-28 10:24 -------- d-----w- c:\program files\Western Digital Corporation
2009-12-27 15:42 . 2009-12-28 07:36 -------- d-----w- c:\program files\freebird
2009-12-27 13:35 . 2002-01-05 15:37 344064 ----a-w- c:\windows\system32\msvcr70.dll
2009-12-27 00:06 . 2009-12-27 00:06 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-26 15:00 . 2009-12-26 15:00 -------- d-----w- c:\program files\2K Sports
2009-12-26 14:58 . 2009-12-26 14:58 -------- d-----w- c:\windows\system32\URTTEMP
2009-12-25 23:30 . 2009-11-30 11:41 -------- d-----w- c:\documents and settings\XXX\Kitserver2010
2009-12-25 20:37 . 2009-12-25 20:37 -------- d-----w- c:\program files\KONAMI
2009-12-25 15:41 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2009-12-25 15:41 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2009-12-25 15:34 . 2009-12-25 15:34 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-12-25 15:30 . 2009-12-25 15:30 -------- d-----w- c:\windows\system32\xlive
2009-12-25 15:30 . 2009-12-25 15:41 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2009-12-25 14:58 . 2009-12-28 10:56 -------- d-----w- c:\program files\MSBuild
2009-12-25 14:56 . 2009-12-25 15:46 -------- d-----w- c:\windows\system32\XPSViewer
2009-12-25 14:56 . 2009-12-25 14:56 -------- d-----w- c:\program files\Reference Assemblies
2009-12-25 14:56 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2009-12-25 14:56 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-12-25 14:54 . 2009-12-25 15:14 -------- d-----w- c:\program files\Rockstar Games
2009-12-25 07:23 . 2009-12-25 07:23 -------- d-----w- c:\windows\down
2009-12-24 23:18 . 2009-12-24 23:18 -------- d-----w- c:\program files\Electronic Arts
2009-12-24 23:15 . 2009-12-24 23:15 -------- d-----w- c:\program files\AGEIA Technologies
2009-12-24 23:15 . 2009-12-24 23:15 -------- d-----w- c:\windows\system32\AGEIA
2009-12-24 23:00 . 2009-12-27 16:45 -------- d-----w- c:\program files\EA Sports
2009-12-24 21:37 . 2008-03-05 14:56 3786760 ----a-w- c:\windows\system32\D3DX9_37.dll
2009-12-24 21:37 . 2007-10-22 02:39 267272 ----a-w- c:\windows\system32\xactengine2_10.dll
2009-12-24 21:37 . 2007-10-12 14:14 3734536 ----a-w- c:\windows\system32\d3dx9_36.dll
2009-12-24 21:37 . 2007-10-12 14:14 1374232 ----a-w- c:\windows\system32\D3DCompiler_36.dll
2009-12-24 21:37 . 2007-10-02 08:56 444776 ----a-w- c:\windows\system32\d3dx10_36.dll
2009-12-24 21:37 . 2009-12-24 21:37 -------- d-----w- c:\windows\Logs
2009-12-24 21:30 . 2009-12-24 21:43 -------- d-----w- c:\program files\Summer Athletics 2009
2009-12-24 21:14 . 2009-12-24 21:14 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-12-24 21:14 . 2009-12-24 21:16 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-12-24 20:53 . 2009-12-24 20:53 -------- d-----w- c:\program files\Elaborate Bytes
2009-12-24 19:32 . 2009-12-24 19:32 -------- d-----w- c:\windows\system32\cs
2009-12-24 19:32 . 2009-12-24 19:32 -------- d-----w- c:\windows\system32\bits
2009-12-24 19:32 . 2009-12-24 19:32 -------- d-----w- c:\windows\l2schemas
2009-12-24 19:14 . 2009-12-24 19:14 -------- d-----w- c:\program files\ICQ6Toolbar
2009-12-24 19:12 . 2010-01-16 22:22 -------- d-----w- c:\program files\ICQ6.5
2009-12-24 19:11 . 2009-12-24 19:32 -------- d-----w- c:\windows\ServicePackFiles
2009-12-24 19:09 . 2009-12-24 19:09 -------- d-----w- c:\program files\MSXML 4.0
2009-12-24 18:50 . 2008-06-14 17:35 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2009-12-24 18:50 . 2008-06-14 17:35 272128 ------w- c:\windows\system32\drivers\bthport.sys
2009-12-24 18:49 . 2009-08-04 21:59 2191360 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-12-24 18:49 . 2009-03-06 14:23 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-12-24 18:49 . 2009-02-09 11:25 111104 -c----w- c:\windows\system32\dllcache\services.exe
2009-12-24 18:49 . 2009-02-09 10:56 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-12-24 18:49 . 2009-02-09 10:56 684032 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-12-24 18:49 . 2009-02-09 10:56 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-12-24 18:49 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-12-24 18:49 . 2009-08-04 17:29 2147328 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-12-24 18:49 . 2009-08-04 17:29 2025984 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-12-24 18:49 . 2009-06-25 08:27 729088 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-12-24 18:49 . 2009-02-09 10:56 709632 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-12-24 18:49 . 2009-02-09 10:56 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-12-24 18:48 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2009-12-24 18:48 . 2008-10-24 11:21 455296 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-12-24 18:48 . 2008-12-11 10:57 333952 -c----w- c:\windows\system32\dllcache\srv.sys
2009-12-24 18:48 . 2009-07-10 13:28 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-12-24 18:48 . 2008-04-11 19:06 691712 -c----w- c:\windows\system32\dllcache\inetcomm.dll
2009-12-24 18:48 . 2008-10-15 16:38 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2009-12-24 18:47 . 2008-04-21 21:15 216576 -c----w- c:\windows\system32\dllcache\wordpad.exe
2009-12-24 18:16 . 2008-10-31 06:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2009-12-24 18:16 . 2008-06-21 03:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2009-12-24 18:16 . 2009-12-24 18:16 -------- d-----w- c:\program files\Sunbelt Software
2009-12-24 18:14 . 2009-12-24 18:14 0 ----a-w- c:\windows\nsreg.dat
2009-12-24 18:07 . 2008-04-14 03:21 21504 ----a-w- c:\windows\system32\hidserv.dll
2009-12-24 18:07 . 2001-10-24 10:54 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2009-12-24 18:07 . 2001-10-24 10:54 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2009-12-24 18:07 . 2008-04-14 02:29 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2009-12-24 18:07 . 2008-04-13 18:45 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2009-12-24 18:07 . 2008-04-13 18:45 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-16 22:14 . 2009-12-03 21:05 16608 ----a-w- c:\windows\gdrv.sys
2010-01-16 11:54 . 2009-12-03 21:29 24944 ----a-w- c:\windows\system32\drivers\GVTDrv.sys
2010-01-10 20:05 . 2009-12-03 21:06 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-07 12:19 . 2001-10-25 14:00 82666 ----a-w- c:\windows\system32\perfc005.dat
2010-01-07 12:19 . 2001-10-25 14:00 437392 ----a-w- c:\windows\system32\perfh005.dat
2009-12-30 15:06 . 2009-12-03 21:56 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-30 15:06 . 2009-12-03 21:56 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2009-12-27 18:19 . 2009-12-03 21:44 -------- d-----w- c:\program files\Combined Community Codec Pack
2009-12-24 19:34 . 2009-12-03 20:55 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-12-24 19:34 . 2009-12-03 20:55 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-24 19:33 . 2009-12-03 20:55 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-12-04 13:16 . 2009-12-04 13:08 -------- d-----w- c:\program files\The Witcher
2009-12-04 13:16 . 2009-12-04 13:16 278984 ----a-w- c:\windows\system32\drivers\atksgt.sys
2009-12-04 13:16 . 2009-12-04 13:16 25416 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2009-12-04 13:06 . 2009-12-04 13:06 -------- d-----w- c:\program files\MSECache
2009-12-03 21:55 . 2009-12-03 21:54 -------- d-----w- c:\program files\Futuremark
2009-12-03 21:52 . 2009-12-03 21:52 -------- d-----w- c:\program files\Windows Media Connect 2
2009-12-03 21:49 . 2009-12-03 21:49 -------- d-----w- c:\program files\Zoner
2009-12-03 21:43 . 2009-12-03 21:43 -------- d-----w- c:\program files\CyberLink
2009-12-03 21:43 . 2009-12-03 21:06 -------- d-----w- c:\program files\Common Files\InstallShield
2009-12-03 21:39 . 2009-12-03 21:39 -------- d-----w- c:\program files\Common Files\Ahead
2009-12-03 21:39 . 2009-12-03 21:39 -------- d-----w- c:\program files\Nero
2009-12-03 21:36 . 2009-12-03 21:35 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-12-03 21:35 . 2009-12-03 21:35 603904 ----a-w- c:\windows\system32\TUProgSt.exe
2009-12-03 21:35 . 2009-12-03 21:35 360192 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-11-21 16:03 . 2004-08-17 13:49 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-06 09:59 . 2009-11-06 09:59 15406728 ----a-w- c:\windows\system32\xlive.dll
2009-11-06 09:59 . 2009-11-06 09:59 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-10-29 07:45 . 2004-08-17 13:49 832512 ----a-w- c:\windows\system32\wininet.dll
2009-10-29 07:45 . 2004-08-17 13:49 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-10-29 07:45 . 2004-08-17 13:49 17408 ----a-w- c:\windows\system32\corpol.dll
2009-10-21 05:40 . 2004-08-17 13:49 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:40 . 2004-08-17 13:49 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2004-08-03 21:00 265728 ----a-w- c:\windows\system32\drivers\http.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
2008-09-29 16:24 325000 ----a-w- c:\program files\AskBarDis\bar\bin\askBar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 325000]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"= "c:\program files\AskBarDis\bar\bin\askBar.dll" [2008-09-29 325000]

[HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CLASSES_ROOT\TypeLib\{4b1c1e16-6b34-430e-b074-5928eca4c150}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]
"RGSC"="c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" [2009-12-25 306088]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"="MSIEXEC" [X]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"EasyTuneVI"="c:\program files\GIGABYTE\ET6\ETcall.exe" [2007-07-26 20480]
"WinSys2"="c:\windows\system32\winsys2.exe" [2009-05-18 208896]
"nwiz"="nwiz.exe" [2009-04-30 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-04-30 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13750272]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-07 149280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2010\\pes2010.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Codemasters\\DiRT2\\dirt2_game.exe"=
"c:\\Program Files\\SEGA\\Vancouver 2010\\Vancouver.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [3.12.2009 22:34 114768]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [24.12.2009 19:16 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [3.12.2009 22:34 20560]
R2 ES lite Service;ES lite Service for program management.;c:\program files\Gigabyte\EasySaver\essvr.exe [3.12.2009 22:06 68136]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [24.12.2009 19:16 65576]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [24.12.2009 22:14 691696]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2010-01-16 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 20:36]

2010-01-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-01-16 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 20:36]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.ask.com/?o=101731&l=dis
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout Free Download Managerem - file://c:\program files\Free Download Manager\dllink.htm
IE: Stáhnout video Free Download Managerem - file://c:\program files\Free Download Manager\dlfvideo.htm
IE: Stáhnout vybrané Free Download Managerem - file://c:\program files\Free Download Manager\dlselected.htm
IE: Stáhnout vše Free Download Managerem - file://c:\program files\Free Download Manager\dlall.htm
TCP: {55983BC5-5B87-438D-917C-08D5D30220F9} = 10.128.137.145,213.168.176.3
TCP: {D2F6BAD6-2E49-46A2-AC9A-02FFF2DF1E20} = 10.128.137.145,213.168.176.3
DPF: {4BFD075D-C36E-4F28-BB0A-5D472795197A} - hxxp://download09.managerzone.com/soccer-3d/PowerLoader.cab
FF - ProfilePath - c:\documents and settings\XXX\Data aplikací\Mozilla\Firefox\Profiles\pfva3iw3.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\program files\Free Download Manager\Firefox\Extension\components\vmsfdmff.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-16 23:23
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-448539723-1647877149-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:a5,97,a7,8b,10,3a,91,85,03,0f,e4,f8,d0,aa,ad,9a,05,7a,ed,2e,28,
ca,a9,92,92,8a,c1,fd,e1,ad,4a,94,f2,a5,d6,37,f4,69,ca,28,bf,90,ee,c3,6e,41,\
"rkeysecu"=hex:b9,e6,d4,1c,ba,70,cc,b1,c5,30,30,dc,86,6b,3e,ae
.
Celkový čas: 2010-01-16 23:26:09
ComboFix-quarantined-files.txt 2010-01-16 22:26

Před spuštěním: Volných bajtů: 55 971 291 136
Po spuštění: Volných bajtů: 56 012 079 104

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer

- - End Of File - - 2D01158360E5406763948754B43CA0E6

[Rudy]

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

Folder::
c:\program files\AskBarDis

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{3041d03e-fd4b-44e0-b742-2d9b88305f98}"=-
[-HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{3041D03E-FD4B-44E0-B742-2D9B88305F98}"=-
[-HKEY_CLASSES_ROOT\clsid\{3041d03e-fd4b-44e0-b742-2d9b88305f98}]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

[Bajtys]

ComboFix 10-01-16.03 - XXX 17.01.2010 15:59:01.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2046.1557 [GMT 1:00]
Spuštěný z: c:\documents and settings\XXX\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\XXX\Plocha\CFScript.txt
AV: avast! antivirus 4.8.1368 [VPS 100117-1] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\AskBarDis
c:\program files\AskBarDis\bar\bin\askBar.dll
c:\program files\AskBarDis\bar\bin\askPopStp.dll
c:\program files\AskBarDis\bar\bin\psvince.dll
c:\program files\AskBarDis\bar\Cache\01F88960
c:\program files\AskBarDis\bar\Cache\01F88B93
c:\program files\AskBarDis\bar\Cache\01F88CFA.bin
c:\program files\AskBarDis\bar\Cache\01F88F5B.bin
c:\program files\AskBarDis\bar\Cache\01F89075.bin
c:\program files\AskBarDis\bar\Cache\01F8918E.bin
c:\program files\AskBarDis\bar\Cache\01F892A7.bin
c:\program files\AskBarDis\bar\Cache\01F893EF.bin
c:\program files\AskBarDis\bar\Cache\files.ini
c:\program files\AskBarDis\bar\History\search
c:\program files\AskBarDis\bar\Settings\config.dat
c:\program files\AskBarDis\bar\Settings\config.dat.bak
c:\program files\AskBarDis\bar\Settings\prevcfg.htm
c:\program files\AskBarDis\unins000.dat
c:\program files\AskBarDis\unins000.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2009-12-17 do 2010-01-17 )))))))))))))))))))))))))))))))
.

2010-01-17 09:12 . 2010-01-17 09:12 -------- d-----w- c:\program files\Microsoft Windows 7 Upgrade Advisor
2010-01-16 21:51 . 2010-01-16 21:51 -------- d-----w- c:\program files\trend micro
2010-01-16 21:51 . 2010-01-16 21:51 -------- d-----w- C:\rsit
2010-01-13 05:43 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-01-10 20:05 . 2010-01-10 20:05 -------- d-----w- c:\program files\SEGA
2010-01-09 12:01 . 2010-01-09 12:01 -------- d-----w- c:\windows\Sun
2010-01-07 12:29 . 2010-01-07 12:29 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-01-07 12:29 . 2010-01-07 12:29 -------- d-----w- c:\program files\Java
2010-01-04 21:38 . 2010-01-04 21:38 -------- d-----w- c:\program files\Activision
2010-01-03 21:28 . 2010-01-03 21:29 -------- d-----w- c:\program files\QuickTime
2010-01-03 21:28 . 2010-01-03 21:28 -------- d-----w- c:\program files\Common Files\Apple
2010-01-03 21:28 . 2010-01-03 21:28 -------- d-----w- c:\program files\Apple Software Update
2010-01-03 12:52 . 2010-01-17 07:26 -------- d-----w- c:\program files\MzMgr by isvicare
2009-12-30 15:07 . 2009-07-13 18:04 839680 ----a-w- c:\windows\system32\mkl_vml_p4.dll
2009-12-30 15:07 . 2009-07-13 18:04 532480 ----a-w- c:\windows\system32\mkl_vml_p3.dll
2009-12-30 15:07 . 2009-07-13 18:04 512000 ----a-w- c:\windows\system32\mkl_vml_def.dll
2009-12-30 15:07 . 2009-07-13 18:04 3485696 ----a-w- c:\windows\system32\mkl_p4.dll
2009-12-30 15:07 . 2009-07-13 18:04 2793472 ----a-w- c:\windows\system32\mkl_p3.dll
2009-12-30 15:07 . 2009-07-13 18:04 2174976 ----a-w- c:\windows\system32\mkl_lapack32.dll
2009-12-30 15:07 . 2009-07-13 18:04 2125824 ----a-w- c:\windows\system32\mkl_lapack64.dll
2009-12-30 15:07 . 2009-12-30 15:07 -------- d-----w- c:\program files\BRS
2009-12-30 15:07 . 2009-10-16 10:19 872448 ----a-w- c:\windows\system32\rapture3d_oal.dll
2009-12-30 15:07 . 2009-07-13 18:04 2441216 ----a-w- c:\windows\system32\mkl_def.dll
2009-12-30 15:07 . 2009-07-13 18:04 184320 ----a-w- c:\windows\system32\libguide40.dll
2009-12-30 15:06 . 2009-12-30 15:06 -------- d-----w- c:\program files\OpenAL
2009-12-30 14:56 . 2009-12-30 14:56 -------- d-----w- c:\program files\Codemasters
2009-12-29 15:07 . 2009-09-04 16:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll
2009-12-29 15:07 . 2009-09-04 16:44 238936 ----a-w- c:\windows\system32\xactengine3_5.dll
2009-12-29 15:07 . 2009-09-04 16:29 5501792 ----a-w- c:\windows\system32\d3dcsx_42.dll
2009-12-29 15:07 . 2009-09-04 16:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2009-12-29 15:07 . 2009-09-04 16:29 235344 ----a-w- c:\windows\system32\d3dx11_42.dll
2009-12-29 14:47 . 2009-12-29 14:47 -------- d-----w- c:\program files\GetDiz
2009-12-29 14:24 . 2009-12-29 14:24 -------- d-----w- c:\program files\Auran
2009-12-29 11:15 . 2010-01-09 12:52 -------- d-----w- C:\Downloads
2009-12-29 08:56 . 2009-12-29 08:56 -------- d-----w- c:\program files\Software Informer
2009-12-29 08:56 . 2009-12-29 08:56 -------- d-----w- c:\program files\Free Download Manager
2009-12-28 18:15 . 2009-12-28 18:15 -------- d-----w- c:\program files\PhotoFiltre
2009-12-28 11:09 . 2009-08-06 18:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2009-12-28 11:09 . 2009-08-06 18:23 215920 ----a-w- c:\windows\system32\muweb.dll
2009-12-28 10:42 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2009-12-28 10:42 . 2006-10-26 18:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2009-12-28 10:41 . 2009-12-28 10:56 -------- d-----w- c:\program files\Microsoft Works
2009-12-28 10:40 . 2009-12-28 10:40 -------- d-----w- c:\program files\Microsoft.NET
2009-12-28 10:37 . 2009-12-28 10:37 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2009-12-28 10:24 . 2009-12-28 10:24 -------- d-----w- c:\program files\Western Digital Corporation
2009-12-27 15:42 . 2009-12-28 07:36 -------- d-----w- c:\program files\freebird
2009-12-27 13:35 . 2002-01-05 15:37 344064 ----a-w- c:\windows\system32\msvcr70.dll
2009-12-27 00:06 . 2009-12-27 00:06 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-12-26 15:00 . 2009-12-26 15:00 -------- d-----w- c:\program files\2K Sports
2009-12-26 14:58 . 2009-12-26 14:58 -------- d-----w- c:\windows\system32\URTTEMP
2009-12-25 23:30 . 2009-11-30 11:41 -------- d-----w- c:\documents and settings\XXX\Kitserver2010
2009-12-25 20:37 . 2009-12-25 20:37 -------- d-----w- c:\program files\KONAMI
2009-12-25 15:41 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll
2009-12-25 15:41 . 2009-09-04 16:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2009-12-25 15:34 . 2009-12-25 15:34 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-12-25 15:30 . 2009-12-25 15:30 -------- d-----w- c:\windows\system32\xlive
2009-12-25 15:30 . 2009-12-25 15:41 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2009-12-25 14:58 . 2009-12-28 10:56 -------- d-----w- c:\program files\MSBuild
2009-12-25 14:56 . 2009-12-25 15:46 -------- d-----w- c:\windows\system32\XPSViewer
2009-12-25 14:56 . 2009-12-25 14:56 -------- d-----w- c:\program files\Reference Assemblies
2009-12-25 14:56 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2009-12-25 14:56 . 2006-06-29 12:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-12-25 14:54 . 2009-12-25 15:14 -------- d-----w- c:\program files\Rockstar Games
2009-12-25 07:23 . 2009-12-25 07:23 -------- d-----w- c:\windows\down
2009-12-24 23:18 . 2009-12-24 23:18 -------- d-----w- c:\program files\Electronic Arts
2009-12-24 23:15 . 2009-12-24 23:15 -------- d-----w- c:\program files\AGEIA Technologies
2009-12-24 23:15 . 2009-12-24 23:15 -------- d-----w- c:\windows\system32\AGEIA
2009-12-24 23:00 . 2009-12-27 16:45 -------- d-----w- c:\program files\EA Sports
2009-12-24 21:37 . 2008-03-05 14:56 3786760 ----a-w- c:\windows\system32\D3DX9_37.dll
2009-12-24 21:37 . 2007-10-22 02:39 267272 ----a-w- c:\windows\system32\xactengine2_10.dll
2009-12-24 21:37 . 2007-10-12 14:14 3734536 ----a-w- c:\windows\system32\d3dx9_36.dll
2009-12-24 21:37 . 2007-10-12 14:14 1374232 ----a-w- c:\windows\system32\D3DCompiler_36.dll
2009-12-24 21:37 . 2007-10-02 08:56 444776 ----a-w- c:\windows\system32\d3dx10_36.dll
2009-12-24 21:37 . 2009-12-24 21:37 -------- d-----w- c:\windows\Logs
2009-12-24 21:30 . 2009-12-24 21:43 -------- d-----w- c:\program files\Summer Athletics 2009
2009-12-24 21:14 . 2009-12-24 21:14 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-12-24 21:14 . 2009-12-24 21:16 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-12-24 20:53 . 2009-12-24 20:53 -------- d-----w- c:\program files\Elaborate Bytes
2009-12-24 19:32 . 2009-12-24 19:32 -------- d-----w- c:\windows\system32\cs
2009-12-24 19:32 . 2009-12-24 19:32 -------- d-----w- c:\windows\system32\bits
2009-12-24 19:32 . 2009-12-24 19:32 -------- d-----w- c:\windows\l2schemas
2009-12-24 19:14 . 2009-12-24 19:14 -------- d-----w- c:\program files\ICQ6Toolbar
2009-12-24 19:12 . 2010-01-16 22:22 -------- d-----w- c:\program files\ICQ6.5
2009-12-24 19:11 . 2009-12-24 19:32 -------- d-----w- c:\windows\ServicePackFiles
2009-12-24 19:09 . 2009-12-24 19:09 -------- d-----w- c:\program files\MSXML 4.0
2009-12-24 18:50 . 2008-06-14 17:35 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2009-12-24 18:50 . 2008-06-14 17:35 272128 ------w- c:\windows\system32\drivers\bthport.sys
2009-12-24 18:49 . 2009-08-04 21:59 2191360 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-12-24 18:49 . 2009-03-06 14:23 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-12-24 18:49 . 2009-02-09 11:25 111104 -c----w- c:\windows\system32\dllcache\services.exe
2009-12-24 18:49 . 2009-02-09 10:56 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-12-24 18:49 . 2009-02-09 10:56 684032 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-12-24 18:49 . 2009-02-09 10:56 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-12-24 18:49 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-12-24 18:49 . 2009-08-04 17:29 2147328 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-12-24 18:49 . 2009-08-04 17:29 2025984 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-12-24 18:49 . 2009-06-25 08:27 729088 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-12-24 18:49 . 2009-02-09 10:56 709632 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-12-24 18:49 . 2009-02-09 10:56 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-12-24 18:48 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2009-12-24 18:48 . 2008-10-24 11:21 455296 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-12-24 18:48 . 2008-12-11 10:57 333952 -c----w- c:\windows\system32\dllcache\srv.sys
2009-12-24 18:48 . 2009-07-10 13:28 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-12-24 18:48 . 2008-04-11 19:06 691712 -c----w- c:\windows\system32\dllcache\inetcomm.dll
2009-12-24 18:48 . 2008-10-15 16:38 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2009-12-24 18:47 . 2008-04-21 21:15 216576 -c----w- c:\windows\system32\dllcache\wordpad.exe
2009-12-24 18:16 . 2008-10-31 06:09 270888 ----a-r- c:\windows\system32\drivers\SbFw.sys
2009-12-24 18:16 . 2008-06-21 03:54 65576 ----a-w- c:\windows\system32\drivers\SbFwIm.sys
2009-12-24 18:16 . 2009-12-24 18:16 -------- d-----w- c:\program files\Sunbelt Software
2009-12-24 18:14 . 2009-12-24 18:14 0 ----a-w- c:\windows\nsreg.dat
2009-12-24 18:07 . 2008-04-14 03:21 21504 ----a-w- c:\windows\system32\hidserv.dll
2009-12-24 18:07 . 2001-10-24 10:54 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2009-12-24 18:07 . 2001-10-24 10:54 12160 ----a-w- c:\windows\system32\drivers\mouhid.sys
2009-12-24 18:07 . 2008-04-14 02:29 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2009-12-24 18:07 . 2008-04-13 18:45 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2009-12-24 18:07 . 2008-04-13 18:45 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-17 14:55 . 2009-12-03 21:29 24944 ----a-w- c:\windows\system32\drivers\GVTDrv.sys
2010-01-17 14:55 . 2009-12-03 21:05 16608 ----a-w- c:\windows\gdrv.sys
2010-01-10 20:05 . 2009-12-03 21:06 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-01-07 12:19 . 2001-10-25 14:00 82666 ----a-w- c:\windows\system32\perfc005.dat
2010-01-07 12:19 . 2001-10-25 14:00 437392 ----a-w- c:\windows\system32\perfh005.dat
2009-12-30 15:06 . 2009-12-03 21:56 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2009-12-30 15:06 . 2009-12-03 21:56 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2009-12-27 18:19 . 2009-12-03 21:44 -------- d-----w- c:\program files\Combined Community Codec Pack
2009-12-24 19:34 . 2009-12-03 20:55 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-12-24 19:34 . 2009-12-03 20:55 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2009-12-24 19:33 . 2009-12-03 20:55 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2009-12-04 13:16 . 2009-12-04 13:08 -------- d-----w- c:\program files\The Witcher
2009-12-04 13:16 . 2009-12-04 13:16 278984 ----a-w- c:\windows\system32\drivers\atksgt.sys
2009-12-04 13:16 . 2009-12-04 13:16 25416 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2009-12-04 13:06 . 2009-12-04 13:06 -------- d-----w- c:\program files\MSECache
2009-12-03 21:55 . 2009-12-03 21:54 -------- d-----w- c:\program files\Futuremark
2009-12-03 21:52 . 2009-12-03 21:52 -------- d-----w- c:\program files\Windows Media Connect 2
2009-12-03 21:49 . 2009-12-03 21:49 -------- d-----w- c:\program files\Zoner
2009-12-03 21:43 . 2009-12-03 21:43 -------- d-----w- c:\program files\CyberLink
2009-12-03 21:43 . 2009-12-03 21:06 -------- d-----w- c:\program files\Common Files\InstallShield
2009-12-03 21:39 . 2009-12-03 21:39 -------- d-----w- c:\program files\Common Files\Ahead
2009-12-03 21:39 . 2009-12-03 21:39 -------- d-----w- c:\program files\Nero
2009-12-03 21:36 . 2009-12-03 21:35 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-12-03 21:35 . 2009-12-03 21:35 603904 ----a-w- c:\windows\system32\TUProgSt.exe
2009-12-03 21:35 . 2009-12-03 21:35 360192 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-11-21 16:03 . 2004-08-17 13:49 471552 ----a-w- c:\windows\AppPatch\aclayers.dll
2009-11-06 09:59 . 2009-11-06 09:59 15406728 ----a-w- c:\windows\system32\xlive.dll
2009-11-06 09:59 . 2009-11-06 09:59 13642888 ----a-w- c:\windows\system32\xlivefnt.dll
2009-10-29 07:45 . 2004-08-17 13:49 832512 ------w- c:\windows\system32\wininet.dll
2009-10-29 07:45 . 2004-08-17 13:49 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-10-29 07:45 . 2004-08-17 13:49 17408 ----a-w- c:\windows\system32\corpol.dll
2009-10-21 05:40 . 2004-08-17 13:49 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 05:40 . 2004-08-17 13:49 25088 ----a-w- c:\windows\system32\httpapi.dll
2009-10-20 16:20 . 2004-08-03 21:00 265728 ----a-w- c:\windows\system32\drivers\http.sys
.

((((((((((((((((((((((((((((( SnapShot@2010-01-16_22.23.55 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-01-17 14:54 . 2010-01-17 14:54 16384 c:\windows\Temp\Perflib_Perfdata_4ac.dat
+ 2010-01-17 14:54 . 2010-01-17 14:54 16384 c:\windows\Temp\Perflib_Perfdata_480.dat
+ 2010-01-17 14:54 . 2010-01-17 14:54 16384 c:\windows\Temp\Perflib_Perfdata_150.dat
+ 2010-01-17 09:12 . 2010-01-17 09:12 602624 c:\windows\Installer\6bbc07.msi
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-03-12 153136]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2009-10-30 369200]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"="MSIEXEC" [X]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"EasyTuneVI"="c:\program files\GIGABYTE\ET6\ETcall.exe" [2007-07-26 20480]
"WinSys2"="c:\windows\system32\winsys2.exe" [2009-05-18 208896]
"nwiz"="nwiz.exe" [2009-04-30 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-04-30 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13750272]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 153136]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-11-10 417792]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-07 149280]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2010\\pes2010.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Codemasters\\DiRT2\\dirt2_game.exe"=
"c:\\Program Files\\SEGA\\Vancouver 2010\\Vancouver.exe"=

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [3.12.2009 22:34 114768]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [24.12.2009 19:16 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [3.12.2009 22:34 20560]
R2 ES lite Service;ES lite Service for program management.;c:\program files\Gigabyte\EasySaver\essvr.exe [3.12.2009 22:06 68136]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport;c:\windows\system32\drivers\SbFwIm.sys [24.12.2009 19:16 65576]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [24.12.2009 22:14 691696]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\d:\ntglm7x.sys --> d:\NTGLM7X.sys [?]
SUnknown GVTDrv;GVTDrv; [x]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'

2010-01-17 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 20:36]

2010-01-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]

2010-01-17 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-11 20:36]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.ask.com/?o=101731&l=dis
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout Free Download Managerem - file://c:\program files\Free Download Manager\dllink.htm
IE: Stáhnout video Free Download Managerem - file://c:\program files\Free Download Manager\dlfvideo.htm
IE: Stáhnout vybrané Free Download Managerem - file://c:\program files\Free Download Manager\dlselected.htm
IE: Stáhnout vše Free Download Managerem - file://c:\program files\Free Download Manager\dlall.htm
TCP: {55983BC5-5B87-438D-917C-08D5D30220F9} = 10.128.137.145,213.168.176.3
TCP: {D2F6BAD6-2E49-46A2-AC9A-02FFF2DF1E20} = 10.128.137.145,213.168.176.3
DPF: {4BFD075D-C36E-4F28-BB0A-5D472795197A} - hxxp://download09.managerzone.com/soccer-3d/PowerLoader.cab
FF - ProfilePath - c:\documents and settings\XXX\Data aplikací\Mozilla\Firefox\Profiles\pfva3iw3.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\program files\Free Download Manager\Firefox\Extension\components\vmsfdmff.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-Ask Toolbar_is1 - c:\program files\AskBarDis\unins000.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-17 16:05
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-448539723-1647877149-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:a5,97,a7,8b,10,3a,91,85,03,0f,e4,f8,d0,aa,ad,9a,05,7a,ed,2e,28,
ca,a9,92,92,8a,c1,fd,e1,ad,4a,94,f2,a5,d6,37,f4,69,ca,28,bf,90,ee,c3,6e,41,\
"rkeysecu"=hex:b9,e6,d4,1c,ba,70,cc,b1,c5,30,30,dc,86,6b,3e,ae
.
Celkový čas: 2010-01-17 16:07:25
ComboFix-quarantined-files.txt 2010-01-17 15:07
ComboFix2.txt 2010-01-16 22:26

Před spuštěním: Volných bajtů: 44 272 644 096
Po spuštění: Volných bajtů: 48 222 150 656

- - End Of File - - DAB6BE8A0E0512BF9E53A10B5FC5D36D

[Rudy]

Spusťte CF ještě jednou tímto skriptem:

Collect::
c:\windows\system32\winsys2.exe

Driver::
GVTDrv

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinSys2"=-