Prosím o kontrolu logu z RSIT.

[wellis]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Karel at 2010-03-11 17:46:07
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 129 GB (88%) free of 148 GB
Total RAM: 1790 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:46:11, on 11.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\PLFSetI.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\DOCUME~1\Karel\LOCALS~1\Temp\RtkBtMnt.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\Karel\Plocha\RSIT.exe
C:\Program Files\trend micro\Karel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.facebook.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACA ... tensa_5430
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACA ... tensa_5430
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [preload] "C:\Windows\RUNXMLPL.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] "C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe" /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [PLFSetI] "C:\WINDOWS\PLFSetI.exe"
O4 - HKLM\..\Run: [Apoint] "C:\Program Files\Apoint2K\Apoint.exe"
O4 - HKLM\..\Run: [RTHDCPL] "RTHDCPL.EXE"
O4 - HKLM\..\Run: [Alcmtr] "ALCMTR.EXE"
O4 - HKLM\..\Run: [AzMixerSel] "C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpyEmergency] "C:\Program Files\NETGATE\Spy Emergency\SpyEmergency.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: AutorunsDisabled
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files\SmarThru 4\WebCapture.dll2.htm
O8 - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files\SmarThru 4\WebCapture.dll1.htm
O8 - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files\SmarThru 4\WebCapture.dll.htm
O8 - Extra context menu item: SmarThru4 Web Capture - C:\Program Files\SmarThru 4\WebCapture.dll
O9 - Extra button: Eurotran XP - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra 'Tools' menuitem: Eurotran XP... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: SmarThru4 Web Capture - {5941A0E4-56C1-4a49-9B18-05762CAC5F9B} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: SmarThru4 Web Capture - {5941A0E4-56C1-4a49-9B18-05762CAC5F9B} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra button: SmarThru4 Capture Selection - {A07BFEF7-DD11-4937-B23B-E70C11D2EDF4} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: SmarThru4 Capture Selection - {A07BFEF7-DD11-4937-B23B-E70C11D2EDF4} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra button: SmarThru4 Save as HTML - {E753A93F-2367-4978-BFA0-83048C1E61CB} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: SmarThru4 Save as HTML - {E753A93F-2367-4978-BFA0-83048C1E61CB} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra button: SmarThru4 Save Selected Text - {F1F53366-3E11-47ab-BF84-580C94F9C9AD} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O9 - Extra 'Tools' menuitem: SmarThru4 Save Selected Text - {F1F53366-3E11-47ab-BF84-580C94F9C9AD} - C:\Program Files\SmarThru 4\WebCapture.dll (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: Partner Service - Google Inc. - C:\Documents and Settings\All Users\Data aplikací\Partner\partner.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Spy Emergency Engine Service (SpyEmrgSrv) - NETGATE Technologies s.r.o. - C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe

--
End of file - 10435 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"preload"=C:\Windows\RUNXMLPL.exe [2007-04-21 20480]
"IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [2008-04-14 208952]
"MSPY2002"=C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe [2008-04-14 59392]
"PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
"PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [2008-04-14 455168]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"PLFSetI"=C:\WINDOWS\PLFSetI.exe [2007-10-23 200704]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2008-01-25 159744]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-07-29 16805888]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-20 57344]
"AzMixerSel"=C:\Program Files\Realtek\Audio\InstallShield\AzMixerSel.exe [2006-07-18 53248]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"ePower_DMC"=C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-07-08 466944]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SpyEmergency"=C:\Program Files\NETGATE\Spy Emergency\SpyEmergency.exe [2010-02-23 1948216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
bthprops.cpl,,BluetoothAuthenticationAgent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Boot]
C:\Program Files\Acer\Empowering Technology\ePower\Boot.exe [2007-12-25 579584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePower_DMC]
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-07-08 466944]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\PROGRA~1\LAUNCH~1\LManager.exe [2008-05-08 864576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetL]
C:\WINDOWS\PLFSetL.exe [2007-07-05 94208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Samsung PanelMgr]
C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe [2009-08-27 614400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2007-04-01 568176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
C:\PROGRA~1\WINDOW~4\WINDOW~1.EXE [2008-05-26 123904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"mnmsrvc"=3
"gusvc"=3
"gupdate"=2
"ERSvc"=2
"wuauserv"=2
"wscsvc"=2
"TapiSrv"=3
"NTISchedulerSvc"=2
"NTIBackupSvc"=2
"Schedule"=2
"Microsoft Office Groove Audit Service"=3
"Fax"=2

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
AutorunsDisabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-04-30 126976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"="C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe:*:Enabled:SchedulerSvc.exe"
"C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe"="C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe:*:Enabled:BackupSvc.exe"
"C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe"="C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe:*:Enabled:AgentSvc.exe"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-03-11 17:34:13 ----D---- C:\Program Files\trend micro
2010-03-11 17:31:40 ----D---- C:\rsit
2010-03-11 16:30:13 ----D---- C:\Documents and Settings\Karel\Data aplikací\Windows Search
2010-03-10 19:12:42 ----SHD---- C:\Config.Msi
2010-03-10 18:46:24 ----D---- C:\Program Files\MSSOAP
2010-03-10 18:00:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-03-08 15:55:54 ----D---- C:\WINDOWS\system32\DRM
2010-03-07 21:10:19 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-03-07 21:09:48 ----RA---- C:\WINDOWS\system32\AdobePDFUI.dll
2010-03-07 21:09:47 ----RA---- C:\WINDOWS\system32\AdobePDF.dll
2010-03-07 19:19:30 ----D---- C:\Documents and Settings\Karel\Data aplikací\Samsung
2010-03-07 19:15:35 ----A---- C:\WINDOWS\system32\framedyn.dll
2010-03-07 19:14:08 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2010-03-07 09:42:37 ----D---- C:\Documents and Settings\Karel\Data aplikací\Skype
2010-03-07 09:42:28 ----D---- C:\Program Files\Common Files\Skype
2010-03-07 09:42:22 ----RD---- C:\Program Files\Skype
2010-03-07 09:42:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-03-07 08:55:15 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-03-07 08:24:49 ----D---- C:\Documents and Settings\Karel\Data aplikací\Windows Desktop Search
2010-03-07 08:23:46 ----D---- C:\WINDOWS\system32\GroupPolicy
2010-03-07 08:23:46 ----D---- C:\Program Files\Windows Desktop Search
2010-03-07 08:23:12 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2010-03-07 08:22:58 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2010-03-07 07:33:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-03-07 07:33:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2010-03-07 07:33:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2010-03-07 07:32:03 ----D---- C:\WINDOWS\system32\Adobe
2010-03-05 18:24:06 ----D---- C:\WINDOWS\system32\LogFiles
2010-03-05 18:07:33 ----D---- C:\WINDOWS\system32\appmgmt
2010-03-05 18:04:22 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-03-05 18:02:35 ----D---- C:\Program Files\MSBuild
2010-03-05 17:58:57 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-03-05 10:53:48 ----D---- C:\Program Files\Adobe
2010-03-05 10:49:29 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-03-05 10:48:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2010-03-01 19:25:12 ----A---- C:\WINDOWS\ssndii.exe
2010-03-01 19:25:09 ----D---- C:\Program Files\SamsungPrinterLiveUpdate
2010-03-01 19:25:09 ----A---- C:\WINDOWS\system32\msxml4a.dll
2010-03-01 19:25:09 ----A---- C:\WINDOWS\system32\msxml2a.dll
2010-03-01 19:25:06 ----D---- C:\WINDOWS\Samsung
2010-03-01 19:22:22 ----A---- C:\WINDOWS\system32\sse1ml3.dll
2010-03-01 19:22:16 ----RA---- C:\WINDOWS\system32\sse1mci.exe
2010-03-01 19:22:16 ----RA---- C:\WINDOWS\system32\sse1mci.dll
2010-03-01 19:22:07 ----D---- C:\Program Files\Samsung
2010-03-01 08:37:39 ----D---- C:\WINDOWS\SxsCaPendDel
2010-03-01 07:29:27 ----D---- C:\Program Files\CCleaner
2010-03-01 06:02:40 ----D---- C:\Program Files\Eurotran XP
2010-02-28 10:45:40 ----A---- C:\WINDOWS\WTRAN32.INI
2010-02-28 10:44:54 ----D---- C:\Documents and Settings\Karel\Data aplikací\SmarThru4
2010-02-28 10:44:28 ----N---- C:\WINDOWS\system32\SecSNMP.dll
2010-02-28 10:44:28 ----A---- C:\WINDOWS\system32\LTRPR13n.DLL
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lttwn13n.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\LTRIO13N.DLL
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\LTR13N.DLL
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\LTCLR13n.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lftif13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfpsd13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\LFPNM13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\Lfpng13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfpcx13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfpcx13n.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfpcd13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfmsp13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfjbg13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\LFJ2K13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfitg13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfitg13n.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfimg13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfimg13n.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfiff13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfiff13n.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lffax13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lffax13n.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfeps13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\LFCMP13s.DLL
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfclp13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfbmp13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfavi13s.dll
2010-02-28 10:44:27 ----A---- C:\WINDOWS\system32\lfani13s.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\PCDLIB32.DLL
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\Mfcoleui.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\Ltwvc13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lttmb13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\LTTLB13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\Ltpnt13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\ltpdg13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\LTOCR13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\ltlst13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\ltkrn13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\ltimg13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\ltfil13n.DLL
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\ltefx13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\ltdlg13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\LTDIS13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\ltbar13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lftif13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfpsd13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\LFPNM13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\Lfpng13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfpcd13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfmsp13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfjbg13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\LFJ2K13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfeps13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\LFCMP13n.DLL
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfclp13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfbmp13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfavi13n.dll
2010-02-28 10:44:26 ----A---- C:\WINDOWS\system32\lfani13n.dll
2010-02-28 10:44:25 ----D---- C:\Program Files\Common Files\SRC Shared
2010-02-28 10:44:21 ----A---- C:\WINDOWS\Readiris.ini
2010-02-28 10:44:20 ----A---- C:\WINDOWS\system32\irisco32.dll
2010-02-28 10:44:05 ----D---- C:\Program Files\Readiris10
2010-02-28 10:43:48 ----D---- C:\Program Files\SmarThru 4
2010-02-28 10:41:52 ----RA---- C:\WINDOWS\WiaInst.exe
2010-02-28 10:41:29 ----D---- C:\Temp
2010-02-28 08:52:38 ----D---- C:\WINDOWS\pss
2010-02-27 05:33:19 ----D---- C:\Program Files\Ask.com
2010-02-27 05:32:47 ----D---- C:\Program Files\The KMPlayer
2010-02-27 05:02:35 ----A---- C:\WINDOWS\GVUni.exe
2010-02-27 05:02:34 ----A---- C:\WINDOWS\UNINST32.EXE
2010-02-27 05:02:33 ----A---- C:\WINDOWS\system32\FILTRCOI.DLL
2010-02-27 05:02:03 ----A---- C:\WINDOWS\Interop.IWshRuntimeLibrary.dll
2010-02-27 05:02:03 ----A---- C:\WINDOWS\AcerStore.exe
2010-02-27 05:01:40 ----D---- C:\WINDOWS\WLAN
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\atitvo32.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\atioglxx.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\atioglx2.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\atikvmag.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2010-02-27 05:01:22 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2010-02-27 05:01:21 ----A---- C:\WINDOWS\system32\ati3duag.dll
2010-02-27 05:01:21 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2010-02-27 05:01:21 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2010-02-27 05:01:21 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2010-02-27 05:01:21 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2010-02-27 05:01:21 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2010-02-27 05:01:21 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2010-02-27 05:01:21 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2010-02-27 05:01:20 ----D---- C:\WINDOWS\VGA
2010-02-27 05:00:50 ----A---- C:\WINDOWS\PLAUNCH.EXE
2010-02-27 05:00:48 ----D---- C:\WINDOWS\Lan
2010-02-27 05:00:47 ----A---- C:\WINDOWS\PreLaunch.ini
2010-02-26 22:14:07 ----D---- C:\Program Files\Microsoft Silverlight
2010-02-26 21:58:27 ----D---- C:\totalcmd
2010-02-26 21:58:27 ----D---- C:\Documents and Settings\Karel\Data aplikací\GHISLER
2010-02-26 21:09:05 ----D---- C:\Documents and Settings\Karel\Data aplikací\Spy Emergency
2010-02-26 21:08:44 ----D---- C:\Documents and Settings\All Users\Data aplikací\NETGATE
2010-02-26 21:08:42 ----D---- C:\Program Files\NETGATE
2010-02-26 21:02:59 ----D---- C:\Documents and Settings\Karel\Data aplikací\Adobe
2010-02-26 21:02:52 ----SHD---- C:\RECYCLER
2010-02-26 20:59:34 ----D---- C:\Documents and Settings\Karel\Data aplikací\Opera
2010-02-26 20:59:25 ----D---- C:\Program Files\Opera
2010-02-26 20:52:42 ----D---- C:\Program Files\ESET
2010-02-26 20:52:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2010-02-26 20:46:46 ----D---- C:\Program Files\VS Revo Group
2010-02-26 20:41:58 ----D---- C:\Documents and Settings\Karel\Data aplikací\Google
2010-02-26 20:40:19 ----D---- C:\Documents and Settings\Karel\Data aplikací\ATI
2010-02-26 20:40:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2010-02-26 20:39:58 ----D---- C:\Program Files\Acer Inc
2010-02-26 20:37:13 ----D---- C:\Program Files\Launch Manager
2010-02-26 20:36:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\Corel
2010-02-26 20:36:03 ----D---- C:\Program Files\Common Files\Protexis
2010-02-26 20:36:03 ----D---- C:\Program Files\Common Files\InterVideo
2010-02-26 20:35:27 ----D---- C:\Program Files\InterVideo
2010-02-26 20:35:02 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-02-26 20:35:01 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-02-26 20:35:00 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-02-26 20:34:59 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-02-26 20:34:59 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-02-26 20:34:59 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-02-26 20:34:58 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-02-26 20:34:58 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-02-26 20:34:57 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-02-26 20:34:57 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-02-26 20:34:56 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-02-26 20:34:56 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-02-26 20:34:48 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-02-26 20:34:47 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-02-26 20:34:47 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-02-26 20:34:46 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-02-26 20:34:46 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-02-26 20:34:45 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-02-26 20:34:44 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-02-26 20:34:43 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-02-26 20:34:43 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-02-26 20:34:42 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-02-26 20:34:27 ----D---- C:\Program Files\COREL
2010-02-26 20:34:00 ----A---- C:\WINDOWS\system32\Uninstall_eRecovery.exe
2010-02-26 20:34:00 ----A---- C:\WINDOWS\system32\CheckD2DSystem.exe
2010-02-26 20:34:00 ----A---- C:\WINDOWS\system32\ERUpdateHidden.EXE
2010-02-26 20:34:00 ----A---- C:\WINDOWS\system32\CloseProcessWindow.dll
2010-02-26 20:34:00 ----A---- C:\WINDOWS\system32\ClearEvent.exe
2010-02-26 20:34:00 ----A---- C:\WINDOWS\system32\Acer EULA.txt
2010-02-26 20:33:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\eSobi
2010-02-26 20:33:33 ----D---- C:\Program Files\eSobi
2010-02-26 20:32:56 ----A---- C:\WINDOWS\system32\Epm-Po.dll
2010-02-26 20:32:56 ----A---- C:\WINDOWS\system32\acpimof.dll
2010-02-26 20:32:16 ----A---- C:\WINDOWS\system32\SysMonitor.exe
2010-02-26 20:32:16 ----A---- C:\WINDOWS\system32\eRecUtil.dll
2010-02-26 20:32:14 ----D---- C:\Program Files\Acer
2010-02-26 20:32:14 ----A---- C:\WINDOWS\system32\mfc71u.dll
2010-02-26 20:31:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-02-26 20:31:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Partner
2010-02-26 20:31:08 ----D---- C:\Program Files\Google
2010-02-26 20:30:14 ----A---- C:\WINDOWS\system32\acer.exe
2010-02-26 20:30:13 ----D---- C:\Documents and Settings\Karel\Data aplikací\Macromedia
2010-02-26 20:30:09 ----D---- C:\Program Files\Acer Incorporated
2010-02-26 20:30:07 ----D---- C:\WINDOWS\ACER
2010-02-26 20:29:47 ----A---- C:\WINDOWS\system32\ChCfg.exe
2010-02-26 20:29:10 ----A---- C:\WINDOWS\RtkUpd.exe
2010-02-26 20:29:00 ----D---- C:\Program Files\Realtek
2010-02-26 20:28:56 ----A---- C:\WINDOWS\RtlExUpd.dll
2010-02-26 20:28:56 ----A---- C:\WINDOWS\HideWin.exe
2010-02-26 20:28:13 ----D---- C:\Program Files\Apoint2K
2010-02-26 20:28:02 ----A---- C:\WINDOWS\system32\Vxdif.dll
2010-02-26 20:27:54 ----D---- C:\WINDOWS\Acer Crystal Eye Webcam
2010-02-26 20:27:52 ----D---- C:\WINDOWS\system32\x64
2010-02-26 20:27:52 ----A---- C:\WINDOWS\system32\vsnp2uvc.dll
2010-02-26 20:27:52 ----A---- C:\WINDOWS\system32\rsnp2uvc.dll
2010-02-26 20:27:51 ----D---- C:\Program Files\Common Files\snp2uvc
2010-02-26 20:27:51 ----A---- C:\WINDOWS\system32\PLFSetL.exe
2010-02-26 20:27:51 ----A---- C:\WINDOWS\system32\PidList.ini
2010-02-26 20:27:51 ----A---- C:\WINDOWS\system32\csnp2uvc.dll
2010-02-26 20:27:51 ----A---- C:\WINDOWS\PLFSetL.exe
2010-02-26 20:27:38 ----A---- C:\WINDOWS\PLFSetI.exe
2010-02-26 20:27:38 ----A---- C:\WINDOWS\PidList.ini
2010-02-26 20:27:37 ----A---- C:\WINDOWS\Image.dll
2010-02-26 20:27:37 ----A---- C:\WINDOWS\Acer Crystal Eye webcam.EXE
2010-02-26 20:27:31 ----D---- C:\Documents and Settings\Karel\Data aplikací\InstallShield
2010-02-26 20:27:12 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-02-26 20:25:15 ----A---- C:\WINDOWS\system32\btw_ci.dll
2010-02-26 20:25:04 ----D---- C:\Program Files\WIDCOMM
2010-02-26 20:25:03 ----A---- C:\WINDOWS\system32\irmon.dll
2010-02-26 20:25:03 ----A---- C:\WINDOWS\system32\irftp.exe
2010-02-26 20:25:02 ----A---- C:\WINDOWS\system32\wshirda.dll
2010-02-26 20:15:30 ----D---- C:\Program Files\ATI Technologies
2010-02-26 20:15:15 ----D---- C:\WINDOWS\system32\Lang
2010-02-26 20:14:04 ----ASH---- C:\Documents and Settings\Karel\Data aplikací\desktop.ini
2010-02-26 20:14:03 ----SD---- C:\Documents and Settings\Karel\Data aplikací\Microsoft
2010-02-26 20:14:03 ----D---- C:\Documents and Settings\Karel\Data aplikací\Identities
2010-02-26 20:07:46 ----A---- C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt
2010-02-26 20:04:50 ----D---- C:\Program Files\CONEXANT
2010-02-26 20:04:38 ----D---- C:\WINDOWS\system32\RTCOM

======List of files/folders modified in the last 1 months======

2010-03-11 17:44:34 ----D---- C:\WINDOWS\Temp
2010-03-11 17:34:13 ----RD---- C:\Program Files
2010-03-11 17:14:37 ----D---- C:\WINDOWS
2010-03-11 14:10:33 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-11 14:10:30 ----HD---- C:\WINDOWS\inf
2010-03-10 20:27:24 ----D---- C:\WINDOWS\system32
2010-03-10 19:13:17 ----D---- C:\Documents and Settings
2010-03-10 19:12:53 ----SHD---- C:\WINDOWS\Installer
2010-03-10 19:12:48 ----D---- C:\WINDOWS\system32\drivers
2010-03-10 18:47:15 ----A---- C:\WINDOWS\win.ini
2010-03-10 18:35:33 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-03-10 18:10:40 ----SD---- C:\WINDOWS\Tasks
2010-03-10 18:01:18 ----D---- C:\WINDOWS\WinSxS
2010-03-09 06:02:10 ----RSH---- C:\boot.ini
2010-03-09 06:02:10 ----A---- C:\WINDOWS\system.ini
2010-03-08 15:55:44 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-03-08 06:52:38 ----D---- C:\WINDOWS\Prefetch
2010-03-07 21:10:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-03-07 21:10:23 ----D---- C:\Program Files\Common Files\Adobe
2010-03-07 21:10:19 ----D---- C:\Program Files\Common Files
2010-03-07 21:10:13 ----D---- C:\WINDOWS\system32\FxsTmp
2010-03-07 21:02:48 ----RSD---- C:\WINDOWS\Fonts
2010-03-07 19:16:39 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-07 19:09:26 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-03-07 11:40:07 ----D---- C:\WINDOWS\system32\Macromed
2010-03-07 08:23:54 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-07 08:23:49 ----D---- C:\WINDOWS\system32\cs-cz
2010-03-07 08:23:46 ----D---- C:\WINDOWS\system32\wbem
2010-03-07 08:23:05 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-03-05 18:08:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-03-05 18:07:31 ----D---- C:\Program Files\Microsoft Office
2010-03-05 18:07:31 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-03-05 18:04:31 ----RSD---- C:\WINDOWS\assembly
2010-03-05 10:49:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2010-03-05 08:37:42 ----D---- C:\WINDOWS\twain_32
2010-03-02 05:33:09 ----D---- C:\WINDOWS\Debug
2010-02-27 05:01:56 ----D---- C:\BOOK
2010-02-27 04:59:24 ----RD---- C:\WINDOWS\Web
2010-02-27 04:59:23 ----D---- C:\WINDOWS\WBEM
2010-02-27 04:58:57 ----D---- C:\WINDOWS\system32\usmt
2010-02-27 04:58:57 ----D---- C:\WINDOWS\system32\URTTemp
2010-02-27 04:58:57 ----D---- C:\WINDOWS\system32\spool
2010-02-27 04:58:57 ----D---- C:\WINDOWS\system32\Setup
2010-02-27 04:58:56 ----D---- C:\WINDOWS\system32\Restore
2010-02-27 04:58:56 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-02-27 04:58:56 ----D---- C:\WINDOWS\system32\ras
2010-02-27 04:58:56 ----D---- C:\WINDOWS\system32\oobe
2010-02-27 04:58:55 ----D---- C:\WINDOWS\system32\oem
2010-02-27 04:58:48 ----D---- C:\WINDOWS\system32\npp
2010-02-27 04:58:48 ----D---- C:\WINDOWS\system32\mui
2010-02-27 04:58:48 ----D---- C:\WINDOWS\system32\MsDtc
2010-02-27 04:58:45 ----D---- C:\WINDOWS\system32\IME
2010-02-27 04:58:45 ----D---- C:\WINDOWS\system32\icsxml
2010-02-27 04:58:45 ----D---- C:\WINDOWS\system32\ias
2010-02-27 04:58:03 ----D---- C:\WINDOWS\system32\cs
2010-02-27 04:58:01 ----D---- C:\WINDOWS\system32\Com
2010-02-27 04:58:01 ----D---- C:\WINDOWS\system32\1033
2010-02-27 04:58:01 ----D---- C:\WINDOWS\system32\1029
2010-02-27 04:58:01 ----D---- C:\WINDOWS\system
2010-02-27 04:58:00 ----D---- C:\WINDOWS\srchasst
2010-02-27 04:57:59 ----D---- C:\WINDOWS\SoftwareDistribution
2010-02-27 04:57:59 ----D---- C:\WINDOWS\SHELLNEW
2010-02-27 04:57:59 ----D---- C:\WINDOWS\Resources
2010-02-27 04:57:58 ----D---- C:\WINDOWS\repair
2010-02-27 04:57:57 ----D---- C:\WINDOWS\PeerNet
2010-02-27 04:57:52 ----RD---- C:\WINDOWS\Offline Web Pages
2010-02-27 04:57:52 ----D---- C:\WINDOWS\pchealth
2010-02-27 04:57:51 ----D---- C:\WINDOWS\Network Diagnostic
2010-02-27 04:57:51 ----D---- C:\WINDOWS\msapps
2010-02-27 04:57:51 ----D---- C:\WINDOWS\msagent
2010-02-27 04:57:51 ----D---- C:\WINDOWS\modem
2010-02-27 04:57:42 ----D---- C:\WINDOWS\Media
2010-02-27 04:57:42 ----D---- C:\WINDOWS\L2Schemas
2010-02-27 04:57:41 ----D---- C:\WINDOWS\java
2010-02-27 04:57:21 ----D---- C:\WINDOWS\ime
2010-02-27 04:57:11 ----HDC---- C:\WINDOWS\ie7
2010-02-27 04:57:07 ----D---- C:\WINDOWS\Help
2010-02-27 04:56:50 ----D---- C:\WINDOWS\ehome
2010-02-27 04:56:41 ----D---- C:\WINDOWS\Driver Cache
2010-02-27 04:56:41 ----D---- C:\WINDOWS\Cursors
2010-02-27 04:56:26 ----D---- C:\WINDOWS\AppPatch
2010-02-27 04:56:25 ----HDC---- C:\WINDOWS\$NtUninstallWdf01005$
2010-02-27 04:56:25 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2010-02-27 04:56:25 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-02-27 04:56:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-02-27 04:56:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-02-27 04:56:25 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-02-27 04:56:25 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2010-02-27 04:56:25 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-27 04:56:25 ----D---- C:\WINDOWS\addins
2010-02-27 04:56:23 ----AD---- C:\VALUEADD
2010-02-27 04:56:22 ----D---- C:\sysinfo
2010-02-27 04:56:20 ----D---- C:\Program Files\xerox
2010-02-27 04:56:20 ----D---- C:\Program Files\Windows NT
2010-02-27 04:56:20 ----D---- C:\Program Files\Windows Media Player
2010-02-27 04:56:20 ----AD---- C:\SUPPORT
2010-02-27 04:56:18 ----D---- C:\Program Files\Outlook Express
2010-02-27 04:56:18 ----D---- C:\Program Files\Online Services
2010-02-27 04:56:18 ----D---- C:\Program Files\O2Micro Flash Memory Card Driver
2010-02-27 04:56:01 ----D---- C:\Program Files\NewTech Infosystems
2010-02-27 04:55:59 ----D---- C:\Program Files\NetMeeting
2010-02-27 04:55:59 ----D---- C:\Program Files\MSN Gaming Zone
2010-02-27 04:55:59 ----D---- C:\Program Files\Movie Maker
2010-02-27 04:55:58 ----D---- C:\Program Files\Microsoft.NET
2010-02-27 04:55:58 ----D---- C:\Program Files\Microsoft Works
2010-02-27 04:55:58 ----D---- C:\Program Files\Microsoft Visual Studio
2010-02-27 04:55:49 ----D---- C:\Program Files\Microsoft SQL Server
2010-02-27 04:55:45 ----D---- C:\Program Files\Microsoft Small Business
2010-02-27 04:54:55 ----D---- C:\Program Files\microsoft frontpage
2010-02-27 04:54:55 ----D---- C:\Program Files\Messenger
2010-02-27 04:54:48 ----D---- C:\Program Files\Internet Explorer
2010-02-27 04:54:44 ----D---- C:\Program Files\DIFX
2010-02-27 04:54:44 ----D---- C:\Program Files\Common Files\System
2010-02-27 04:54:40 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-02-27 04:54:40 ----D---- C:\Program Files\Common Files\Services
2010-02-27 04:54:40 ----D---- C:\Program Files\Common Files\ODBC
2010-02-27 04:54:40 ----D---- C:\Program Files\Common Files\MSSoap
2010-02-27 04:54:23 ----D---- C:\Program Files\Common Files\LightScribe
2010-02-27 04:54:23 ----D---- C:\Program Files\Common Files\DESIGNER
2010-02-27 04:54:21 ----D---- C:\Program Files\Broadcom
2010-02-27 04:53:04 ----RHD---- C:\MSOCache
2010-02-27 04:53:04 ----AD---- C:\I386
2010-02-27 04:50:00 ----AD---- C:\DOTNETFX
2010-02-27 04:49:29 ----AD---- C:\DOCS
2010-02-26 20:50:00 ----D---- C:\WINDOWS\security
2010-02-26 20:48:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\SiteAdvisor
2010-02-26 20:41:07 ----AD---- C:\Elements
2010-02-26 20:40:23 ----D---- C:\WINDOWS\system32\config
2010-02-26 20:34:36 ----D---- C:\WINDOWS\system32\DirectX
2010-02-26 20:30:58 ----D---- C:\Acer
2010-02-26 20:28:36 ----D---- C:\Program Files\AMD
2010-02-26 20:15:18 ----D---- C:\Program Files\Common Files\InstallShield
2010-02-26 20:10:05 ----SHD---- C:\System Volume Information
2010-02-26 20:08:43 ----D---- C:\WINDOWS\Registration
2010-02-26 20:06:06 ----D---- C:\WINDOWS\system32\CatRoot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 SpyEmrg;Spy Emergency Driver; C:\WINDOWS\System32\Drivers\spyemrg.sys [2009-09-17 12344]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-14 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2008-04-14 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2008-04-14 55936]
R2 regi;regi; C:\WINDOWS\system32\drivers\regi.sys [2007-04-17 11032]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\WINDOWS\system32\DRIVERS\Apfiltr.sys [2008-02-01 166448]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2008-04-09 1309504]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-04-30 2880000]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-03-19 175104]
R3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys [2007-03-23 539072]
R3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys [2007-03-23 37424]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2007-03-31 876384]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-14 13952]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2006-01-20 17408]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2006-12-22 988800]
R3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2006-12-22 209664]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-08-01 4751872]
R3 Iviaspi;IVI ASPI Shell; C:\WINDOWS\system32\drivers\iviaspi.sys [2005-09-21 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NTIDrvr;Upper Class Filter Driver; C:\WINDOWS\system32\DRIVERS\NTIDrvr.sys [2008-01-31 13952]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-14 163584]
R3 O2MDRDR;O2MDRDR; C:\WINDOWS\system32\DRIVERS\o2media.sys [2008-05-13 51288]
R3 O2SDRDR;O2SDRDR; C:\WINDOWS\system32\DRIVERS\o2sd.sys [2008-06-12 43608]
R3 RTHDMIAzAudService;Service for HDMI; C:\WINDOWS\system32\drivers\RtHDMI.sys [2008-07-19 3682240]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\WINDOWS\system32\DRIVERS\snp2uvc.sys [2007-10-01 1769984]
R3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver; C:\WINDOWS\System32\Drivers\spyemrg_guard.sys [2009-09-17 14392]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbfilter;AMD USB Filter Driver; C:\WINDOWS\system32\DRIVERS\usbfilter.sys [2008-05-28 22072]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2006-12-22 730112]
S2 DgiVecp;DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys []
S2 SSPORT;SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys [2007-03-23 149123]
S3 btwhid;btwhid; C:\WINDOWS\system32\DRIVERS\btwhid.sys [2007-03-31 55352]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2007-03-23 67960]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-14 79232]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SpyEmrgAccess;Spy Emergency OnAccess Driver; C:\WINDOWS\System32\Drivers\spyemrg_access.sys [2009-09-17 18232]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys [2007-07-03 80552]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys [2007-07-03 11944]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys [2007-07-03 106792]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TpChoice;Touch Pad Detection Filter driver; C:\WINDOWS\system32\DRIVERS\TpChoice.sys [2007-12-26 17968]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-04-30 536576]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2007-04-01 273256]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2006-04-14 28933976]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 o2flash;O2Micro Flash Memory Card Service; C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [2007-02-13 65536]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 SpyEmrgSrv;Spy Emergency Engine Service; C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [2010-02-02 1821240]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-03-07 651720]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Partner Service;Partner Service; C:\Documents and Settings\All Users\Data aplikací\Partner\partner.exe [2010-02-26 110576]
S3 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2006-04-14 87840]
S4 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]
S4 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2010-02-26 24064]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-26 135664]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-02-26 182768]
S4 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2005-10-14 45272]
S4 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-25 45056]
S4 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-25 131072]
S4 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2006-04-14 240416]

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[wellis]

Děkuji za ochotu a tady je ten log z Combofix.
ComboFix 10-03-11.02 - Karel 11.03.2010 18:48:40.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1790.1024 [GMT 1:00]
Spuštěný z: c:\documents and settings\Karel\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: Spy Emergency *disabled* (Updated) {82117492-906E-4b02-A33A-84D42A2DD907}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Suyin.reg

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-11 do 2010-03-11 )))))))))))))))))))))))))))))))
.

2010-03-11 17:43 . 2010-03-11 17:43 390144 ----a-w- c:\windows\system32\CF20616.exe
2010-03-11 16:34 . 2010-03-11 16:46 -------- d-----w- c:\program files\trend micro
2010-03-11 16:31 . 2010-03-11 16:31 -------- d-----w- C:\rsit
2010-03-10 17:46 . 2010-03-10 17:46 -------- d-----w- c:\program files\MSSOAP
2010-03-10 17:45 . 2010-03-10 17:45 164 ----a-w- c:\windows\install.dat
2010-03-10 17:02 . 2010-03-10 17:02 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-03-08 14:55 . 2010-03-08 14:55 -------- d-----w- c:\windows\system32\DRM
2010-03-07 20:10 . 2010-03-07 20:10 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-03-07 20:09 . 2008-04-07 04:38 22872 ----a-r- c:\windows\system32\AdobePDFUI.dll
2010-03-07 20:09 . 2008-04-07 04:38 45392 ----a-r- c:\windows\system32\AdobePDF.dll
2010-03-07 18:15 . 2006-05-03 21:53 174592 ----a-w- c:\windows\system32\framedyn.dll
2010-03-07 18:14 . 2007-07-03 15:58 106792 ----a-w- c:\windows\system32\drivers\sscdmdm.sys
2010-03-07 18:14 . 2007-07-03 15:57 11944 ----a-w- c:\windows\system32\drivers\sscdmdfl.sys
2010-03-07 18:14 . 2007-07-03 15:56 9256 ----a-w- c:\windows\system32\drivers\sscdcmnt.sys
2010-03-07 18:14 . 2007-07-03 15:56 9256 ----a-w- c:\windows\system32\drivers\sscdcm.sys
2010-03-07 18:14 . 2007-07-03 16:00 9256 ----a-w- c:\windows\system32\drivers\sscdwhnt.sys
2010-03-07 18:14 . 2007-07-03 16:00 9256 ----a-w- c:\windows\system32\drivers\sscdwh.sys
2010-03-07 18:14 . 2007-07-03 15:54 80552 ----a-w- c:\windows\system32\drivers\sscdbus.sys
2010-03-07 18:14 . 2010-03-07 18:14 -------- d-----w- c:\windows\system32\Samsung_USB_Drivers
2010-03-07 18:12 . 2006-07-24 15:05 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2010-03-07 08:42 . 2010-03-07 08:42 -------- d-----w- c:\program files\Common Files\Skype
2010-03-07 08:42 . 2010-03-07 08:42 -------- d-----r- c:\program files\Skype
2010-03-07 08:29 . 2009-12-30 10:20 27064 ----a-w- c:\windows\system32\drivers\revoflt.sys
2010-03-07 07:55 . 2010-03-07 08:31 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-03-07 07:23 . 2010-03-07 07:23 -------- d-----w- c:\program files\Windows Desktop Search
2010-03-07 07:23 . 2010-03-07 07:23 -------- d-----w- c:\windows\system32\GroupPolicy
2010-03-07 06:32 . 2010-03-07 06:32 -------- d-----w- c:\windows\system32\Adobe
2010-03-05 17:24 . 2010-03-05 17:24 -------- d-----w- c:\windows\system32\LogFiles
2010-03-05 17:04 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2010-03-05 17:04 . 2006-10-26 18:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2010-03-05 17:02 . 2010-03-05 17:02 -------- d-----w- c:\program files\MSBuild
2010-03-05 16:58 . 2010-03-05 16:58 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-03-05 09:49 . 2010-03-05 09:49 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-03-01 18:25 . 2009-09-07 11:48 482408 ----a-w- c:\windows\ssndii.exe
2010-03-01 18:25 . 2010-03-08 05:31 -------- d-----w- c:\program files\SamsungPrinterLiveUpdate
2010-03-01 18:25 . 2009-07-30 12:00 44544 ----a-w- c:\windows\system32\msxml4a.dll
2010-03-01 18:25 . 2009-07-30 12:00 21776 ----a-w- c:\windows\system32\msxml2a.dll
2010-03-01 18:25 . 2010-03-01 18:25 -------- d-----w- c:\windows\Samsung
2010-03-01 18:22 . 2008-02-05 07:53 22723 ----a-w- c:\windows\system32\sse1ml3.dll
2010-03-01 18:22 . 2008-01-04 06:57 19968 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\sse1mpc.dll
2010-03-01 18:22 . 2010-03-01 18:22 -------- d-----w- c:\windows\system32\drivers\Samsung
2010-03-01 18:22 . 2008-01-04 06:54 151552 ----a-r- c:\windows\system32\sse1mci.exe
2010-03-01 18:22 . 2008-01-04 06:54 65536 ----a-r- c:\windows\system32\sse1mci.dll
2010-03-01 18:22 . 2010-03-07 18:12 -------- d-----w- c:\program files\Samsung
2010-03-01 18:09 . 2009-02-04 12:20 38400 ------w- c:\windows\system32\drivers\DgivEcpXP.sys
2010-03-01 18:03 . 2008-04-13 23:17 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2010-03-01 18:03 . 2008-04-13 23:17 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2010-03-01 18:03 . 2008-04-13 23:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-03-01 18:03 . 2008-04-13 23:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-03-01 10:03 . 2010-03-01 10:03 -------- d-----w- c:\documents and settings\Karel\TmpInstall
2010-03-01 07:37 . 2010-03-10 17:50 -------- d-----w- c:\windows\SxsCaPendDel
2010-03-01 06:29 . 2010-03-01 06:29 -------- d-----w- c:\program files\CCleaner
2010-03-01 05:02 . 2010-03-01 05:02 -------- d-----w- c:\program files\Eurotran XP
2010-02-28 15:43 . 2008-04-13 23:15 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2010-02-28 09:43 . 2010-03-01 18:27 -------- d-----w- c:\program files\SmarThru 4
2010-02-28 09:41 . 2009-09-07 11:48 113768 ----a-r- c:\windows\WiaInst.exe
2010-02-28 09:41 . 2010-02-28 09:42 -------- d-----w- c:\temp\SCX-4300
2010-02-28 09:41 . 2010-02-28 09:41 -------- d-----w- C:\Temp
2010-02-27 04:33 . 2010-03-11 15:09 -------- d-----w- c:\program files\Ask.com
2010-02-27 04:32 . 2010-03-01 05:32 -------- d-----w- c:\program files\The KMPlayer
2010-02-27 04:02 . 2008-01-10 18:44 199176 ----a-w- c:\windows\GVUni.exe
2010-02-27 04:02 . 2007-12-03 22:11 207368 ----a-w- c:\windows\UNINST32.EXE
2010-02-27 04:02 . 2006-01-20 21:42 17408 ----a-w- c:\windows\system32\drivers\DKbFltr.SYS
2010-02-27 04:02 . 2004-12-09 19:04 5120 ----a-w- c:\windows\system32\FILTRCOI.DLL
2010-02-27 04:02 . 2008-07-17 19:27 380928 ----a-w- c:\windows\AcerStore.exe
2010-02-27 04:02 . 2008-05-09 12:58 49152 ----a-w- c:\windows\Interop.IWshRuntimeLibrary.dll
2010-02-27 04:00 . 2008-04-15 17:46 147456 ----a-w- c:\windows\PLAUNCH.EXE
2010-02-27 04:00 . 2010-02-26 19:04 -------- d-----w- c:\windows\Lan
2010-02-26 21:14 . 2010-02-26 21:14 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-26 20:58 . 2010-02-26 20:58 -------- d-----w- C:\totalcmd
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\UC.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\RAR.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\LHA.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\ARJ.PIF
2010-02-26 20:08 . 2009-09-17 06:58 18232 ----a-w- c:\windows\system32\drivers\spyemrg_access.sys
2010-02-26 20:08 . 2009-09-17 06:58 14392 ----a-w- c:\windows\system32\drivers\spyemrg_guard.sys
2010-02-26 20:08 . 2009-09-17 06:58 12344 ----a-w- c:\windows\system32\drivers\spyemrg.sys
2010-02-26 20:08 . 2010-02-26 20:08 -------- d-----w- c:\program files\NETGATE
2010-02-26 19:59 . 2010-02-26 19:59 -------- d-----w- c:\program files\Opera
2010-02-26 19:52 . 2010-02-26 19:52 -------- d-----w- c:\program files\ESET
2010-02-26 19:46 . 2010-03-07 08:29 -------- d-----w- c:\program files\VS Revo Group
2010-02-26 19:39 . 2010-02-26 19:39 -------- d-----w- c:\program files\Acer Inc
2010-02-26 19:37 . 2010-03-11 17:52 12 ----a-w- c:\windows\bthservsdp.dat
2010-02-26 19:37 . 2010-02-26 19:37 -------- d-----w- c:\program files\Launch Manager
2010-02-26 19:36 . 2005-09-21 00:27 10368 ----a-w- c:\windows\system32\drivers\iviaspi.sys
2010-02-26 19:36 . 2010-02-26 19:36 -------- d-----w- c:\program files\Common Files\Protexis
2010-02-26 19:36 . 2010-02-26 19:36 -------- d-----w- c:\program files\Common Files\InterVideo
2010-02-26 19:35 . 2010-02-26 19:36 -------- d-----w- c:\program files\InterVideo
2010-02-26 19:35 . 2007-01-24 14:27 255848 ----a-w- c:\windows\system32\xactengine2_6.dll
2010-02-26 19:35 . 2006-12-08 11:02 251672 ----a-w- c:\windows\system32\xactengine2_5.dll
2010-02-26 19:35 . 2006-11-29 12:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2010-02-26 19:33 . 2010-02-26 19:33 -------- d-----w- c:\program files\eSobi
2010-02-26 19:32 . 2007-11-30 12:00 53248 ----a-w- c:\windows\system32\acpimof.dll
2010-02-26 19:32 . 2006-02-16 14:39 45056 ----a-w- c:\windows\system32\Epm-Po.dll
2010-02-26 19:32 . 2005-04-07 17:08 78208 ----a-w- c:\windows\system32\drivers\epm-shd.sys
2010-02-26 19:32 . 2004-07-19 12:10 4096 ----a-w- c:\windows\system32\drivers\epm-psd.sys
2010-02-26 19:32 . 2008-06-06 10:09 69632 ----a-w- c:\windows\system32\eRecUtil.dll
2010-02-26 19:32 . 2007-12-25 13:21 24576 ----a-w- c:\windows\system32\SysMonitor.exe
2010-02-26 19:32 . 2010-02-26 19:32 -------- d-----w- c:\program files\Acer
2010-02-26 19:32 . 2008-06-06 10:09 1047552 ----a-w- c:\windows\system32\mfc71u.dll
2010-02-26 19:31 . 2010-02-26 19:58 -------- d-----w- c:\program files\Google
2010-02-26 19:30 . 2008-05-30 13:45 7059403 ----a-w- c:\windows\system32\acer.exe
2010-02-26 19:30 . 2007-04-18 21:02 36909056 ----a-w- c:\windows\system32\acer.scr
2010-02-26 19:30 . 2010-02-26 19:30 -------- d-----w- c:\program files\Acer Incorporated
2010-02-26 19:30 . 2010-02-26 19:30 -------- d-----w- c:\windows\ACER
2010-02-26 19:29 . 2008-07-15 22:20 69632 ----a-w- c:\windows\system32\ChCfg.exe
2010-02-26 19:29 . 2008-07-16 11:47 1196032 ----a-w- c:\windows\RtkUpd.exe
2010-02-26 19:29 . 2007-07-13 21:11 8 ----a-w- c:\windows\system32\drivers\rtkhdaud.dat
2010-02-26 19:29 . 2005-06-27 12:29 520 ----a-w- c:\windows\system32\drivers\RTEQEX0.dat
2010-02-26 19:29 . 2005-06-27 12:29 520 ----a-w- c:\windows\system32\drivers\RTEQEX1.dat
2010-02-26 19:29 . 2008-07-19 07:12 3682240 ----a-w- c:\windows\system32\drivers\RtHDMI.sys
2010-02-26 19:29 . 2010-02-26 19:29 -------- d-----w- c:\program files\Realtek
2010-02-26 19:28 . 2010-02-26 19:28 319488 ----a-w- c:\windows\HideWin.exe
2010-02-26 19:28 . 2008-07-29 22:42 528384 ----a-w- c:\windows\RtlExUpd.dll
2010-02-26 19:28 . 2007-04-16 15:46 33792 ----a-w- c:\windows\system32\drivers\AmdPPM.sys
2010-02-26 19:28 . 2010-02-26 19:28 -------- d-----w- c:\program files\Apoint2K
2010-02-26 19:28 . 2008-02-01 06:14 166448 ----a-w- c:\windows\system32\drivers\Apfiltr.sys
2010-02-26 19:28 . 2008-01-19 23:53 100546 ----a-w- c:\windows\system32\Vxdif.dll
2010-02-26 19:25 . 2008-04-13 23:21 101120 -c--a-w- c:\windows\system32\dllcache\bthpan.sys
2010-02-26 19:24 . 2008-04-13 23:16 18944 -c--a-w- c:\windows\system32\dllcache\bthusb.sys
2010-02-26 19:24 . 2008-04-13 23:16 18944 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2010-02-26 19:15 . 2010-02-26 19:23 -------- d-----w- c:\program files\ATI Technologies

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-07 20:10 . 2008-09-15 14:42 -------- d-----w- c:\program files\Common Files\Adobe
2010-03-07 18:16 . 2008-09-15 14:53 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-07 07:23 . 2008-09-15 15:35 471078 ----a-w- c:\windows\system32\perfh005.dat
2010-03-07 07:23 . 2008-09-15 15:35 101336 ----a-w- c:\windows\system32\perfc005.dat
2010-03-01 18:26 . 2010-02-28 09:44 -------- d-----w- c:\program files\Readiris10
2010-02-28 09:44 . 2010-02-28 09:44 -------- d-----w- c:\program files\Common Files\SRC Shared
2010-02-27 03:56 . 2008-09-15 14:40 -------- d-----w- c:\program files\O2Micro Flash Memory Card Driver
2010-02-27 03:56 . 2008-09-15 14:53 -------- d-----w- c:\program files\NewTech Infosystems
2010-02-27 03:55 . 2008-09-15 14:55 -------- d-----w- c:\program files\Microsoft Works
2010-02-27 03:55 . 2008-09-15 14:55 -------- d-----w- c:\program files\Microsoft.NET
2010-02-27 03:55 . 2008-09-15 15:00 -------- d-----w- c:\program files\Microsoft SQL Server
2010-02-27 03:55 . 2008-09-15 15:01 -------- d-----w- c:\program files\Microsoft Small Business
2010-02-27 03:54 . 2008-07-02 19:16 -------- d-----w- c:\program files\microsoft frontpage
2010-02-27 03:54 . 2008-09-15 14:39 -------- d-----w- c:\program files\DIFX
2010-02-27 03:54 . 2008-09-15 14:51 -------- d-----w- c:\program files\Common Files\LightScribe
2010-02-27 03:54 . 2008-09-15 14:40 -------- d-----w- c:\program files\Broadcom
2010-02-26 19:34 . 2010-02-26 19:34 -------- d-----w- c:\program files\COREL
2010-02-26 19:28 . 2008-09-15 14:44 -------- d-----w- c:\program files\AMD
2010-02-26 19:28 . 2010-02-26 19:28 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_Apfiltr_01005.Wdf
2010-02-26 19:27 . 2010-02-26 19:27 -------- d-----w- c:\program files\Common Files\snp2uvc
2010-02-26 19:25 . 2010-02-26 19:25 -------- d-----w- c:\program files\WIDCOMM
2010-02-26 19:15 . 2008-09-15 14:38 -------- d-----w- c:\program files\Common Files\InstallShield
2010-01-18 06:30 . 2010-01-18 06:30 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-01-18 06:30 . 2010-01-18 06:30 499712 ----a-w- c:\windows\system32\msvcp71.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpyEmergency"="c:\program files\NETGATE\Spy Emergency\SpyEmergency.exe" [2010-02-23 1948216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2008-01-24 159744]
"RTHDCPL"="RTHDCPL.EXE" [2008-07-29 16805888]
"AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2006-07-18 53248]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-07-08 466944]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\AutorunsDisabled
Acer Empowering Technology.lnk - c:\program files\Acer\Empowering Technology\Framework.Launcher.exe [2010-2-26 45056]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Bluetooth.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
backup=c:\windows\pss\Windows Search.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-22 00:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BluetoothAuthenticationAgent]
2008-04-14 05:00 110592 ----a-w- c:\windows\system32\bthprops.cpl

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Boot]
2007-12-25 02:17 579584 ----a-w- c:\program files\Acer\Empowering Technology\ePower\Boot.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePower_DMC]
2008-07-08 17:18 466944 ----a-w- c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2006-10-26 23:47 31016 ----a-w- c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
2008-05-08 21:28 864576 ----a-w- c:\progra~1\LAUNCH~1\LManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetL]
2007-07-05 11:35 94208 ----a-w- c:\windows\PLFSetL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Samsung PanelMgr]
2009-08-27 10:58 614400 ----a-w- c:\windows\Samsung\PanelMgr\SSMMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"mnmsrvc"=3 (0x3)
"gusvc"=3 (0x3)
"gupdate"=2 (0x2)
"ERSvc"=2 (0x2)
"wuauserv"=2 (0x2)
"wscsvc"=2 (0x2)
"TapiSrv"=3 (0x3)
"NTISchedulerSvc"=2 (0x2)
"NTIBackupSvc"=2 (0x2)
"Schedule"=2 (0x2)
"Microsoft Office Groove Audit Service"=3 (0x3)
"Fax"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Backup Now 5\\SchedulerSvc.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Backup Now 5\\BackupSvc.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Backup Now 5\\Client\\Agentsvc.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 ahcix86;ahcix86;c:\windows\system32\drivers\ahcix86.sys [8.3.2008 5:24 176136]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 9:03 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [16.11.2009 9:06 96408]
R1 SpyEmrg;Spy Emergency Driver;c:\windows\system32\drivers\spyemrg.sys [26.2.2010 21:08 12344]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [3.3.2008 12:11 16384]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 9:04 735960]
R2 regi;regi;c:\windows\system32\drivers\regi.sys [17.4.2007 20:09 11032]
R2 SpyEmrgSrv;Spy Emergency Engine Service;c:\program files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [26.2.2010 21:08 1821240]
R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [13.5.2008 20:49 51288]
R3 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [12.6.2008 17:30 43608]
R3 usbfilter;AMD USB Filter Driver;c:\windows\system32\drivers\usbfilter.sys [28.5.2008 16:54 22072]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys --> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 Partner Service;Partner Service;c:\documents and settings\All Users\Data aplikací\Partner\partner.exe [26.2.2010 20:31 110576]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [7.3.2010 9:29 27064]
S3 SpyEmrgAccess;Spy Emergency OnAccess Driver;c:\windows\system32\drivers\spyemrg_access.sys [26.2.2010 21:08 18232]
S3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver;c:\windows\system32\drivers\spyemrg_guard.sys [26.2.2010 21:08 14392]
S3 TpChoice;Touch Pad Detection Filter driver;c:\windows\system32\drivers\TpChoice.sys [26.12.2007 6:23 17968]
S4 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [26.2.2010 20:31 24064]
S4 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [26.2.2010 20:58 135664]
S4 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [25.4.2008 20:36 45056]
S4 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [25.4.2008 20:36 131072]
.
Obsah adresáře 'Naplánované úlohy'

2010-03-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-26 19:58]

2010-03-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-26 19:58]

2010-03-07 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2009-07-10 16:29]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.facebook.cz/
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0405&s=0&o=xpp&d=0210&m=extensa_5430
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: SmarThru4 Capture Selection - c:\program files\SmarThru 4\WebCapture.dll2.htm
IE: SmarThru4 Save as HTML - c:\program files\SmarThru 4\WebCapture.dll1.htm
IE: SmarThru4 Save Selected Text - c:\program files\SmarThru 4\WebCapture.dll.htm
IE: SmarThru4 Web Capture - c:\program files\SmarThru 4\WebCapture.dll
IE: {{230D1201-7607-4CF6-A11F-9E4BF0A333E0} - {0DB13731-CEFD-43CF-A8FD-B61DCBC4D5B8} - c:\program files\Eurotran XP\etnxp.dll
IE: {{2C73F784-D2DE-4422-B070-2E3332FE5744} - {0320AC26-52C8-4316-B2C4-24BB6FA73C9A} - c:\program files\Eurotran XP\etnxp.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-11 18:58
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(792)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(6540)
c:\program files\Acer\Empowering Technology\ePower\SysHook.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\windows\RTHDCPL.EXE
c:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
c:\program files\O2Micro Flash Memory Card Driver\o2flash.exe
c:\program files\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\program files\Apoint2K\ApMsgFwd.exe
c:\program files\Apoint2K\Apntex.exe
c:\program files\Apoint2K\HidFind.exe
c:\windows\system32\SearchIndexer.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2010-03-11 19:01:15 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-03-11 18:01

Před spuštěním: Volných bajtů: 135 666 749 440
Po spuštění: Volných bajtů: 135 563 829 248

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /usepmtimer

- - End Of File - - EEF2BE1D679E08B29232C9009AC330F9

[Rudy]

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

Folder::
C:\Program Files\Ask.com

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkaz ze skriptu.

[wellis]

Vše jsem provedl, akorát jsem nevypnul Spy Emergency.
ComboFix psal, že nemůže najít soubor "hidec.exe".
Pořád se točí disk a hodně se zahřívá.
Mám NTB Acer Extensa 5430.
Tady je výsledný log.

Jinak moc děkuji za ochotu pomoct.

ComboFix 10-03-11.02 - Karel 11.03.2010 20:57:37.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1790.1034 [GMT 1:00]
Spuštěný z: c:\documents and settings\Karel\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Karel\Plocha\CFScript.txt..txt
AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: Spy Emergency *disabled* (Updated) {82117492-906E-4b02-A33A-84D42A2DD907}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Ask.com
c:\program files\Ask.com\cobrand.ico
c:\program files\Ask.com\config.xml
c:\program files\Ask.com\favicon.ico
c:\program files\Ask.com\mupcfg.xml
c:\program files\Ask.com\SaUpdate.exe
c:\program files\Ask.com\UpdateTask.exe
c:\windows\EventSystem.log

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-02-11 do 2010-03-11 )))))))))))))))))))))))))))))))
.

2010-03-11 17:43 . 2010-03-11 17:43 390144 ----a-w- c:\windows\system32\CF20616.exe
2010-03-11 16:34 . 2010-03-11 16:46 -------- d-----w- c:\program files\trend micro
2010-03-11 16:31 . 2010-03-11 16:31 -------- d-----w- C:\rsit
2010-03-10 17:46 . 2010-03-10 17:46 -------- d-----w- c:\program files\MSSOAP
2010-03-10 17:45 . 2010-03-10 17:45 164 ----a-w- c:\windows\install.dat
2010-03-10 17:02 . 2010-03-10 17:02 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-03-08 14:55 . 2010-03-08 14:55 -------- d-----w- c:\windows\system32\DRM
2010-03-07 20:10 . 2010-03-07 20:10 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-03-07 20:09 . 2008-04-07 04:38 22872 ----a-r- c:\windows\system32\AdobePDFUI.dll
2010-03-07 20:09 . 2008-04-07 04:38 45392 ----a-r- c:\windows\system32\AdobePDF.dll
2010-03-07 18:15 . 2006-05-03 21:53 174592 ----a-w- c:\windows\system32\framedyn.dll
2010-03-07 18:14 . 2007-07-03 15:58 106792 ----a-w- c:\windows\system32\drivers\sscdmdm.sys
2010-03-07 18:14 . 2007-07-03 15:57 11944 ----a-w- c:\windows\system32\drivers\sscdmdfl.sys
2010-03-07 18:14 . 2007-07-03 15:56 9256 ----a-w- c:\windows\system32\drivers\sscdcmnt.sys
2010-03-07 18:14 . 2007-07-03 15:56 9256 ----a-w- c:\windows\system32\drivers\sscdcm.sys
2010-03-07 18:14 . 2007-07-03 16:00 9256 ----a-w- c:\windows\system32\drivers\sscdwhnt.sys
2010-03-07 18:14 . 2007-07-03 16:00 9256 ----a-w- c:\windows\system32\drivers\sscdwh.sys
2010-03-07 18:14 . 2007-07-03 15:54 80552 ----a-w- c:\windows\system32\drivers\sscdbus.sys
2010-03-07 18:14 . 2010-03-07 18:14 -------- d-----w- c:\windows\system32\Samsung_USB_Drivers
2010-03-07 18:12 . 2006-07-24 15:05 5632 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2010-03-07 08:42 . 2010-03-07 08:42 -------- d-----w- c:\program files\Common Files\Skype
2010-03-07 08:42 . 2010-03-07 08:42 -------- d-----r- c:\program files\Skype
2010-03-07 08:29 . 2009-12-30 10:20 27064 ----a-w- c:\windows\system32\drivers\revoflt.sys
2010-03-07 07:55 . 2010-03-07 08:31 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-03-07 07:23 . 2010-03-07 07:23 -------- d-----w- c:\program files\Windows Desktop Search
2010-03-07 07:23 . 2010-03-07 07:23 -------- d-----w- c:\windows\system32\GroupPolicy
2010-03-07 06:32 . 2010-03-07 06:32 -------- d-----w- c:\windows\system32\Adobe
2010-03-05 17:24 . 2010-03-05 17:24 -------- d-----w- c:\windows\system32\LogFiles
2010-03-05 17:04 . 2006-10-26 18:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2010-03-05 17:04 . 2006-10-26 18:56 32592 ----a-w- c:\windows\system32\msonpmon.dll
2010-03-05 17:02 . 2010-03-05 17:02 -------- d-----w- c:\program files\MSBuild
2010-03-05 16:58 . 2010-03-05 16:58 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-03-05 09:49 . 2010-03-05 09:49 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-03-01 18:25 . 2009-09-07 11:48 482408 ----a-w- c:\windows\ssndii.exe
2010-03-01 18:25 . 2010-03-08 05:31 -------- d-----w- c:\program files\SamsungPrinterLiveUpdate
2010-03-01 18:25 . 2009-07-30 12:00 44544 ----a-w- c:\windows\system32\msxml4a.dll
2010-03-01 18:25 . 2009-07-30 12:00 21776 ----a-w- c:\windows\system32\msxml2a.dll
2010-03-01 18:25 . 2010-03-01 18:25 -------- d-----w- c:\windows\Samsung
2010-03-01 18:22 . 2008-02-05 07:53 22723 ----a-w- c:\windows\system32\sse1ml3.dll
2010-03-01 18:22 . 2008-01-04 06:57 19968 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\sse1mpc.dll
2010-03-01 18:22 . 2010-03-01 18:22 -------- d-----w- c:\windows\system32\drivers\Samsung
2010-03-01 18:22 . 2008-01-04 06:54 151552 ----a-r- c:\windows\system32\sse1mci.exe
2010-03-01 18:22 . 2008-01-04 06:54 65536 ----a-r- c:\windows\system32\sse1mci.dll
2010-03-01 18:22 . 2010-03-07 18:12 -------- d-----w- c:\program files\Samsung
2010-03-01 18:09 . 2009-02-04 12:20 38400 ------w- c:\windows\system32\drivers\DgivEcpXP.sys
2010-03-01 18:03 . 2008-04-13 23:17 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2010-03-01 18:03 . 2008-04-13 23:17 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2010-03-01 18:03 . 2008-04-13 23:15 15104 -c--a-w- c:\windows\system32\dllcache\usbscan.sys
2010-03-01 18:03 . 2008-04-13 23:15 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2010-03-01 10:03 . 2010-03-01 10:03 -------- d-----w- c:\documents and settings\Karel\TmpInstall
2010-03-01 07:37 . 2010-03-10 17:50 -------- d-----w- c:\windows\SxsCaPendDel
2010-03-01 06:29 . 2010-03-01 06:29 -------- d-----w- c:\program files\CCleaner
2010-03-01 05:02 . 2010-03-01 05:02 -------- d-----w- c:\program files\Eurotran XP
2010-02-28 15:43 . 2008-04-13 23:15 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2010-02-28 09:43 . 2010-03-01 18:27 -------- d-----w- c:\program files\SmarThru 4
2010-02-28 09:41 . 2009-09-07 11:48 113768 ----a-r- c:\windows\WiaInst.exe
2010-02-28 09:41 . 2010-02-28 09:42 -------- d-----w- c:\temp\SCX-4300
2010-02-28 09:41 . 2010-02-28 09:41 -------- d-----w- C:\Temp
2010-02-27 04:32 . 2010-03-01 05:32 -------- d-----w- c:\program files\The KMPlayer
2010-02-27 04:02 . 2008-01-10 18:44 199176 ----a-w- c:\windows\GVUni.exe
2010-02-27 04:02 . 2007-12-03 22:11 207368 ----a-w- c:\windows\UNINST32.EXE
2010-02-27 04:02 . 2006-01-20 21:42 17408 ----a-w- c:\windows\system32\drivers\DKbFltr.SYS
2010-02-27 04:02 . 2004-12-09 19:04 5120 ----a-w- c:\windows\system32\FILTRCOI.DLL
2010-02-27 04:02 . 2008-07-17 19:27 380928 ----a-w- c:\windows\AcerStore.exe
2010-02-27 04:02 . 2008-05-09 12:58 49152 ----a-w- c:\windows\Interop.IWshRuntimeLibrary.dll
2010-02-27 04:00 . 2008-04-15 17:46 147456 ----a-w- c:\windows\PLAUNCH.EXE
2010-02-27 04:00 . 2010-02-26 19:04 -------- d-----w- c:\windows\Lan
2010-02-26 21:14 . 2010-02-26 21:14 -------- d-----w- c:\program files\Microsoft Silverlight
2010-02-26 20:58 . 2010-02-26 20:58 -------- d-----w- C:\totalcmd
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\UC.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\RAR.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKZIP.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\LHA.PIF
2010-02-26 20:58 . 2009-09-24 06:50 545 ----a-w- c:\windows\ARJ.PIF
2010-02-26 20:08 . 2009-09-17 06:58 18232 ----a-w- c:\windows\system32\drivers\spyemrg_access.sys
2010-02-26 20:08 . 2009-09-17 06:58 14392 ----a-w- c:\windows\system32\drivers\spyemrg_guard.sys
2010-02-26 20:08 . 2009-09-17 06:58 12344 ----a-w- c:\windows\system32\drivers\spyemrg.sys
2010-02-26 20:08 . 2010-02-26 20:08 -------- d-----w- c:\program files\NETGATE
2010-02-26 19:59 . 2010-02-26 19:59 -------- d-----w- c:\program files\Opera
2010-02-26 19:52 . 2010-02-26 19:52 -------- d-----w- c:\program files\ESET
2010-02-26 19:46 . 2010-03-07 08:29 -------- d-----w- c:\program files\VS Revo Group
2010-02-26 19:39 . 2010-02-26 19:39 -------- d-----w- c:\program files\Acer Inc
2010-02-26 19:37 . 2010-03-11 19:25 12 ----a-w- c:\windows\bthservsdp.dat
2010-02-26 19:37 . 2010-02-26 19:37 -------- d-----w- c:\program files\Launch Manager
2010-02-26 19:36 . 2005-09-21 00:27 10368 ----a-w- c:\windows\system32\drivers\iviaspi.sys
2010-02-26 19:36 . 2010-02-26 19:36 -------- d-----w- c:\program files\Common Files\Protexis
2010-02-26 19:36 . 2010-02-26 19:36 -------- d-----w- c:\program files\Common Files\InterVideo
2010-02-26 19:35 . 2010-02-26 19:36 -------- d-----w- c:\program files\InterVideo
2010-02-26 19:35 . 2007-01-24 14:27 255848 ----a-w- c:\windows\system32\xactengine2_6.dll
2010-02-26 19:35 . 2006-12-08 11:02 251672 ----a-w- c:\windows\system32\xactengine2_5.dll
2010-02-26 19:35 . 2006-11-29 12:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2010-02-26 19:33 . 2010-02-26 19:33 -------- d-----w- c:\program files\eSobi
2010-02-26 19:32 . 2007-11-30 12:00 53248 ----a-w- c:\windows\system32\acpimof.dll
2010-02-26 19:32 . 2006-02-16 14:39 45056 ----a-w- c:\windows\system32\Epm-Po.dll
2010-02-26 19:32 . 2005-04-07 17:08 78208 ----a-w- c:\windows\system32\drivers\epm-shd.sys
2010-02-26 19:32 . 2004-07-19 12:10 4096 ----a-w- c:\windows\system32\drivers\epm-psd.sys
2010-02-26 19:32 . 2008-06-06 10:09 69632 ----a-w- c:\windows\system32\eRecUtil.dll
2010-02-26 19:32 . 2007-12-25 13:21 24576 ----a-w- c:\windows\system32\SysMonitor.exe
2010-02-26 19:32 . 2010-02-26 19:32 -------- d-----w- c:\program files\Acer
2010-02-26 19:32 . 2008-06-06 10:09 1047552 ----a-w- c:\windows\system32\mfc71u.dll
2010-02-26 19:31 . 2010-02-26 19:58 -------- d-----w- c:\program files\Google
2010-02-26 19:30 . 2008-05-30 13:45 7059403 ----a-w- c:\windows\system32\acer.exe
2010-02-26 19:30 . 2007-04-18 21:02 36909056 ----a-w- c:\windows\system32\acer.scr
2010-02-26 19:30 . 2010-02-26 19:30 -------- d-----w- c:\program files\Acer Incorporated
2010-02-26 19:30 . 2010-02-26 19:30 -------- d-----w- c:\windows\ACER
2010-02-26 19:29 . 2008-07-15 22:20 69632 ----a-w- c:\windows\system32\ChCfg.exe
2010-02-26 19:29 . 2008-07-16 11:47 1196032 ----a-w- c:\windows\RtkUpd.exe
2010-02-26 19:29 . 2007-07-13 21:11 8 ----a-w- c:\windows\system32\drivers\rtkhdaud.dat
2010-02-26 19:29 . 2005-06-27 12:29 520 ----a-w- c:\windows\system32\drivers\RTEQEX0.dat
2010-02-26 19:29 . 2005-06-27 12:29 520 ----a-w- c:\windows\system32\drivers\RTEQEX1.dat
2010-02-26 19:29 . 2008-07-19 07:12 3682240 ----a-w- c:\windows\system32\drivers\RtHDMI.sys
2010-02-26 19:29 . 2010-02-26 19:29 -------- d-----w- c:\program files\Realtek
2010-02-26 19:28 . 2010-02-26 19:28 319488 ----a-w- c:\windows\HideWin.exe
2010-02-26 19:28 . 2008-07-29 22:42 528384 ----a-w- c:\windows\RtlExUpd.dll
2010-02-26 19:28 . 2007-04-16 15:46 33792 ----a-w- c:\windows\system32\drivers\AmdPPM.sys
2010-02-26 19:28 . 2010-02-26 19:28 -------- d-----w- c:\program files\Apoint2K
2010-02-26 19:28 . 2008-02-01 06:14 166448 ----a-w- c:\windows\system32\drivers\Apfiltr.sys
2010-02-26 19:28 . 2008-01-19 23:53 100546 ----a-w- c:\windows\system32\Vxdif.dll
2010-02-26 19:25 . 2008-04-13 23:21 101120 -c--a-w- c:\windows\system32\dllcache\bthpan.sys
2010-02-26 19:24 . 2008-04-13 23:16 18944 -c--a-w- c:\windows\system32\dllcache\bthusb.sys
2010-02-26 19:24 . 2008-04-13 23:16 18944 ----a-w- c:\windows\system32\drivers\BTHUSB.SYS
2010-02-26 19:15 . 2010-02-26 19:23 -------- d-----w- c:\program files\ATI Technologies
2010-02-26 19:15 . 2010-02-26 19:15 -------- d-----w- c:\windows\system32\Lang

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-07 20:10 . 2008-09-15 14:42 -------- d-----w- c:\program files\Common Files\Adobe
2010-03-07 18:16 . 2008-09-15 14:53 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-07 07:23 . 2008-09-15 15:35 471078 ----a-w- c:\windows\system32\perfh005.dat
2010-03-07 07:23 . 2008-09-15 15:35 101336 ----a-w- c:\windows\system32\perfc005.dat
2010-03-01 18:26 . 2010-02-28 09:44 -------- d-----w- c:\program files\Readiris10
2010-02-28 09:44 . 2010-02-28 09:44 -------- d-----w- c:\program files\Common Files\SRC Shared
2010-02-27 03:56 . 2008-09-15 14:40 -------- d-----w- c:\program files\O2Micro Flash Memory Card Driver
2010-02-27 03:56 . 2008-09-15 14:53 -------- d-----w- c:\program files\NewTech Infosystems
2010-02-27 03:55 . 2008-09-15 14:55 -------- d-----w- c:\program files\Microsoft Works
2010-02-27 03:55 . 2008-09-15 14:55 -------- d-----w- c:\program files\Microsoft.NET
2010-02-27 03:55 . 2008-09-15 15:00 -------- d-----w- c:\program files\Microsoft SQL Server
2010-02-27 03:55 . 2008-09-15 15:01 -------- d-----w- c:\program files\Microsoft Small Business
2010-02-27 03:54 . 2008-07-02 19:16 -------- d-----w- c:\program files\microsoft frontpage
2010-02-27 03:54 . 2008-09-15 14:39 -------- d-----w- c:\program files\DIFX
2010-02-27 03:54 . 2008-09-15 14:51 -------- d-----w- c:\program files\Common Files\LightScribe
2010-02-27 03:54 . 2008-09-15 14:40 -------- d-----w- c:\program files\Broadcom
2010-02-26 19:34 . 2010-02-26 19:34 -------- d-----w- c:\program files\COREL
2010-02-26 19:28 . 2008-09-15 14:44 -------- d-----w- c:\program files\AMD
2010-02-26 19:28 . 2010-02-26 19:28 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_Apfiltr_01005.Wdf
2010-02-26 19:27 . 2010-02-26 19:27 -------- d-----w- c:\program files\Common Files\snp2uvc
2010-02-26 19:25 . 2010-02-26 19:25 -------- d-----w- c:\program files\WIDCOMM
2010-02-26 19:15 . 2008-09-15 14:38 -------- d-----w- c:\program files\Common Files\InstallShield
2010-01-18 06:30 . 2010-01-18 06:30 348160 ----a-w- c:\windows\system32\msvcr71.dll
2010-01-18 06:30 . 2010-01-18 06:30 499712 ----a-w- c:\windows\system32\msvcp71.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpyEmergency"="c:\program files\NETGATE\Spy Emergency\SpyEmergency.exe" [2010-02-23 1948216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\ssmmgr.exe" [2009-08-27 614400]
"RTHDCPL"="RTHDCPL.EXE" [2008-07-29 16805888]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"PLFSetL"="c:\windows\PLFSetL.exe" [2007-07-05 94208]
"PLFSetI"="c:\windows\PLFSetI.exe" [2007-10-23 200704]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2008-05-08 864576]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-07-08 466944]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-11-16 2054360]
"Boot"="c:\program files\Acer\Empowering Technology\ePower\Boot.exe" [2007-12-25 579584]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"AzMixerSel"="c:\program files\Realtek\Audio\InstallShield\AzMixerSel.exe" [2006-07-18 53248]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2008-01-24 159744]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-4-1 568176]
Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\AutorunsDisabled
Acer Empowering Technology.lnk - c:\program files\Acer\Empowering Technology\Framework.Launcher.exe [2010-2-26 45056]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2008-05-26 304128]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Backup Now 5\\SchedulerSvc.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Backup Now 5\\BackupSvc.exe"=
"c:\\Program Files\\NewTech Infosystems\\NTI Backup Now 5\\Client\\Agentsvc.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 ahcix86;ahcix86;c:\windows\system32\drivers\ahcix86.sys [8.3.2008 5:24 176136]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [16.11.2009 9:03 108792]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [16.11.2009 9:06 96408]
R1 SpyEmrg;Spy Emergency Driver;c:\windows\system32\drivers\spyemrg.sys [26.2.2010 21:08 12344]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [3.3.2008 12:11 16384]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [16.11.2009 9:04 735960]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [25.4.2008 20:36 45056]
R2 regi;regi;c:\windows\system32\drivers\regi.sys [17.4.2007 20:09 11032]
R2 SpyEmrgSrv;Spy Emergency Engine Service;c:\program files\NETGATE\Spy Emergency\SpyEmergencySrv.exe [26.2.2010 21:08 1821240]
R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [13.5.2008 20:49 51288]
R3 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [12.6.2008 17:30 43608]
R3 SpyEmrgGuard;Spy Emergency Real-Time Shield Driver;c:\windows\system32\drivers\spyemrg_guard.sys [26.2.2010 21:08 14392]
R3 usbfilter;AMD USB Filter Driver;c:\windows\system32\drivers\usbfilter.sys [28.5.2008 16:54 22072]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [26.2.2010 20:58 135664]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [25.4.2008 20:36 131072]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys --> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 Partner Service;Partner Service;c:\documents and settings\All Users\Data aplikací\Partner\partner.exe [26.2.2010 20:31 110576]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [7.3.2010 9:29 27064]
S3 SpyEmrgAccess;Spy Emergency OnAccess Driver;c:\windows\system32\drivers\spyemrg_access.sys [26.2.2010 21:08 18232]
S3 TpChoice;Touch Pad Detection Filter driver;c:\windows\system32\drivers\TpChoice.sys [26.12.2007 6:23 17968]
S4 GoogleDesktopManager-080708-050100;Google Desktop Manager 5.7.808.7150;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [26.2.2010 20:31 24064]
.
Obsah adresáře 'Naplánované úlohy'

2010-03-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-26 19:58]

2010-03-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-26 19:58]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.facebook.cz/
mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0405&s=0&o=xpp&d=0210&m=extensa_5430
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: SmarThru4 Capture Selection - c:\program files\SmarThru 4\WebCapture.dll2.htm
IE: SmarThru4 Save as HTML - c:\program files\SmarThru 4\WebCapture.dll1.htm
IE: SmarThru4 Save Selected Text - c:\program files\SmarThru 4\WebCapture.dll.htm
IE: SmarThru4 Web Capture - c:\program files\SmarThru 4\WebCapture.dll
IE: {{230D1201-7607-4CF6-A11F-9E4BF0A333E0} - {0DB13731-CEFD-43CF-A8FD-B61DCBC4D5B8} - c:\program files\Eurotran XP\etnxp.dll
IE: {{2C73F784-D2DE-4422-B070-2E3332FE5744} - {0320AC26-52C8-4316-B2C4-24BB6FA73C9A} - c:\program files\Eurotran XP\etnxp.dll
.

**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(796)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-03-11 21:03:54
ComboFix-quarantined-files.txt 2010-03-11 20:03
ComboFix2.txt 2010-03-11 18:01

Před spuštěním: Volných bajtů: 137 984 389 120
Po spuštění: Volných bajtů: 137 947 717 632

- - End Of File - - 027707EFD8057D92308D8EF9318B1201

[Rudy]

Log již vypadá čistý.

Pořád se točí disk.....

To musí. Kdyby se disk netočil, PC by negungovalo.

[wellis]

Log již vypadá čistý.

Pořád se točí disk.....

To musí. Kdyby se disk netočil, PC by negungovalo.

To chápu, nenapsal jsem,že je hlučný, dříve takový nebýval.
Taky se NTB vypíná, je hodně nahřátej.
Ve facebooku se sekají aplikace.
Ale i tak děkuji za vyčištění logu.

[Rudy]

Udělejte ještě kontrolu na rootkit. Stáhněte a spusťte IceSword: http://www.viry.cz/forum/viewtopic.php?f=29&t=11394 a dejte logy Process a KernelModule.

[wellis]

Posílám logy.
Kernel Module:

\WINDOWS\system32\ntkrnlpa.exe
\WINDOWS\system32\hal.dll
\WINDOWS\system32\KDCOM.DLL
\WINDOWS\system32\BOOTVID.dll
ACPI.sys
\WINDOWS\system32\DRIVERS\WMILIB.SYS
pci.sys
isapnp.sys
compbatt.sys
\WINDOWS\system32\DRIVERS\BATTC.SYS
pciide.sys
\WINDOWS\system32\DRIVERS\PCIIDEX.SYS
aliide.sys
intelide.sys
toside.sys
viaide.sys
cmdide.sys
pcmcia.sys
MountMgr.sys
ftdisk.sys
dmload.sys
dmio.sys
ACPIEC.sys
\WINDOWS\system32\DRIVERS\OPRGHDLR.SYS
PartMgr.sys
UBHelper.sys
VolSnap.sys
cpqarray.sys
\WINDOWS\system32\DRIVERS\SCSIPORT.SYS
atapi.sys
aha154x.sys
sparrow.sys
symc810.sys
aic78xx.sys
dac960nt.sys
ql10wnt.sys
amsint.sys
asc.sys
asc3550.sys
mraid35x.sys
i2omp.sys
ini910u.sys
ql1240.sys
aic78u2.sys
symc8xx.sys
sym_hi.sys
sym_u3.sys
ABP480N5.SYS
asc3350p.sys
cd20xrnt.sys
ultra.sys
adpu160m.sys
dpti2o.sys
ql1080.sys
ql1280.sys
ql12160.sys
perc2.sys
perc2hib.sys
hpn.sys
cbidf2k.sys
dac2w2k.sys
ahcix86.sys
disk.sys
\WINDOWS\system32\DRIVERS\CLASSPNP.SYS
fltMgr.sys
sr.sys
KSecDD.sys
Ntfs.sys
NDIS.sys
sisagp.sys
viaagp.sys
Mup.sys
alim1541.sys
amdagp.sys
agp440.sys
agpCPQ.sys
\SystemRoot\system32\DRIVERS\AmdPPM.sys
\SystemRoot\system32\DRIVERS\wmiacpi.sys
\SystemRoot\system32\DRIVERS\ati2mtag.sys
\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\b57xp32.sys
\SystemRoot\system32\DRIVERS\athw.sys
\SystemRoot\system32\DRIVERS\imapi.sys
\SystemRoot\system32\drivers\iviaspi.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\system32\DRIVERS\redbook.sys
\SystemRoot\system32\DRIVERS\ks.sys
\SystemRoot\system32\DRIVERS\NTIDrvr.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbfilter.sys
\SystemRoot\system32\DRIVERS\USBD.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\DRIVERS\CmBatt.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\DKbFltr.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\Apfiltr.sys
\SystemRoot\system32\DRIVERS\WDFLDR.SYS
\SystemRoot\system32\DRIVERS\Wdf01000.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\o2sd.sys
\SystemRoot\system32\DRIVERS\o2media.sys
\SystemRoot\system32\DRIVERS\btkrnl.sys
\SystemRoot\system32\DRIVERS\audstub.sys
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\DRIVERS\psched.sys
\SystemRoot\system32\DRIVERS\msgpc.sys
\SystemRoot\system32\DRIVERS\ptilink.sys
\SystemRoot\system32\DRIVERS\raspti.sys
\SystemRoot\system32\DRIVERS\rdpdr.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\update.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\system32\DRIVERS\btport.sys
\SystemRoot\system32\drivers\btaudio.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RtHDMI.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\system32\drivers\RtkHDAud.sys
\SystemRoot\system32\DRIVERS\HSFHWAZL.sys
\SystemRoot\system32\DRIVERS\HSF_DPV.sys
\SystemRoot\system32\DRIVERS\HSF_CNXT.sys
\SystemRoot\System32\Drivers\Modem.SYS
\SystemRoot\System32\Drivers\i2omgmt.SYS
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\usbccgp.sys
\SystemRoot\System32\Drivers\Fs_Rec.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\Drivers\Beep.SYS
\SystemRoot\system32\DRIVERS\ehdrv.sys
\SystemRoot\system32\DRIVERS\snp2uvc.sys
\SystemRoot\system32\DRIVERS\STREAM.SYS
\SystemRoot\system32\DRIVERS\sncduvc.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\Drivers\mnmdd.SYS
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\system32\DRIVERS\rasacd.sys
\SystemRoot\system32\DRIVERS\ipsec.sys
\SystemRoot\system32\DRIVERS\tcpip.sys
\SystemRoot\system32\DRIVERS\ipnat.sys
\SystemRoot\system32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\epfwtdir.sys
\SystemRoot\System32\drivers\afd.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\System32\Drivers\StarOpen.SYS
\SystemRoot\System32\Drivers\spyemrg.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\System32\Drivers\Fips.SYS
\SystemRoot\System32\Drivers\Cdfs.SYS
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_ahcix86.sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\System32\watchdog.sys
\SystemRoot\System32\drivers\dxg.sys
\SystemRoot\System32\drivers\dxgthk.sys
\SystemRoot\System32\ati2dvag.dll
\SystemRoot\System32\ati2cqag.dll
\SystemRoot\System32\atikvmag.dll
\SystemRoot\System32\atiok3x2.dll
\SystemRoot\System32\ati3duag.dll
\SystemRoot\System32\ativvaxx.dll
\SystemRoot\system32\DRIVERS\eamon.sys
\SystemRoot\system32\DRIVERS\nwlnkipx.sys
\SystemRoot\system32\DRIVERS\nwlnknb.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\drivers\wdmaud.sys
\SystemRoot\system32\drivers\sysaudio.sys
\SystemRoot\system32\DRIVERS\nwlnkspx.sys
\SystemRoot\system32\DRIVERS\mrxdav.sys
\SystemRoot\system32\DRIVERS\srv.sys
\SystemRoot\system32\DRIVERS\mdmxsdk.sys
\SystemRoot\system32\drivers\regi.sys
\SystemRoot\System32\Drivers\TDTCP.SYS
\SystemRoot\System32\Drivers\RDPWD.SYS
\SystemRoot\System32\Drivers\HTTP.sys
\SystemRoot\System32\Drivers\spyemrg_guard.sys
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\drivers\kmixer.sys
\SystemRoot\System32\Drivers\IsDrv122.sys
\WINDOWS\system32\ntdll.dll

Process:

System Idle Process
System
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\RTHDCPL.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\PLFSetI.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\NETGATE\Spy Emergency\SpyEmergency.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Apoint2K\ApntEx.exe
C:\Program Files\Apoint2K\Hidfind.exe
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\NETGATE\Spy Emergency\SpyEmergencySrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\searchindexer.exe
C:\WINDOWS\system32\searchfilterhost.exe
C:\DOCUME~1\Karel\LOCALS~1\temp\RtkBtMnt.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\alg.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\Karel\LOCALS~1\temp\_tc\IceSword122en\IceSword.exe
C:\WINDOWS\system32\searchprotocolhost.exe

[Rudy]

Rootkit nemáte. Ještě zkuste sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 .

[wellis]

Tak jsem provedl vše podle instrukcí.
Tady je log.
Asi je vše v pořádku.
Děkuji.
Autoscan: completed 26 minutes ago (events: 2, objects: 193547, time: 00:46:27)
12.3.2010 6:37:58 Task started
12.3.2010 7:24:26 Task completed

[Rudy]

Ok. Nainstalujte Speedfan: http://www.stahuj.centrum.cz/utility_a_ ... /speedfan/ a za chodu NTB sledujte jeho teploty. Neměly by trvale překračovat 65°C. Log AVPTool je v pořádku.

[wellis]

Temp1 87C
Temp2 80C
Core 74C
Asi je něco špatně, mám spuštěnou pouze Operu.

[Rudy]

To je hodně (pokud ty teploty trvale drží). Patrně je prach v chladiči, špatná fce ventilátoru, nebo máte NTB na měkké podložce, která brání cirkulaci chladicího vzduchu.

[wellis]

NTB mám na stole. I když ho přepnu do úsporného režimu, tak se rozběhne rychleji, potom zase zpomalí. Teplota se drží pořád na 87C. Myslel jsem,že běží nějaké programy na pozadí.
Jěště je v záruce, tak nevím. Jestli to je HW nebo SW. Jsem vděčný za každou pomoc. Už
tak jste se mi věnoval až až. Takže dík.