Pomalý Net, Avira našla nějaké viry

[kolizek]

Prosím o kontrolu logu:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jaryn at 2010-03-11 17:34:09
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 295 GB (97%) free of 305 GB
Total RAM: 2047 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:34:12, on 11.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Lexmark 1300 Series\lxdcamon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lxdccoms.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\totalcmd\TOTALCMD.EXE
D:\Programy\Aviry\RSIT.exe
D:\Programy\Aviry\Jaryn.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gooeu.eu
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [lxdcamon] "C:\Program Files\Lexmark 1300 Series\lxdcamon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [sysgif32] C:\WINDOWS\TEMP\~TMD.tmp
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 3312881250
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: lxdc_device - - C:\WINDOWS\system32\lxdccoms.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)

--
End of file - 5373 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-28 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-12-28 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-04-23 937416]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2008-03-17 1040384]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"lxdcamon"=C:\Program Files\Lexmark 1300 Series\lxdcamon.exe [2007-02-06 20480]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-28 149280]
"sysgif32"=C:\WINDOWS\TEMP\~TMD.tmp []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-06-02 139264]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Games\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe"="D:\Games\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (CLI)"
"D:\Games\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe"="D:\Games\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (SRV)"
"C:\WINDOWS\system32\lxdccoms.exe"="C:\WINDOWS\system32\lxdccoms.exe:*:Enabled:1300 Series Server"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Games\Residend Evil 5\RE5DX9.EXE"="D:\Games\Residend Evil 5\RE5DX9.EXE:*:Enabled:RESIDENT EVIL 5 (DX9)"
"D:\Games\Residend Evil 5\RE5DX10.EXE"="D:\Games\Residend Evil 5\RE5DX10.EXE:*:Enabled:RESIDENT EVIL 5 (DX10)"
"C:\Program Files\Lexmark 1300 Series\lxdcamon.exe"="C:\Program Files\Lexmark 1300 Series\lxdcamon.exe:*:Enabled:Device Monitor Appliaction"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"D:\Games\dirt 2\dirt2_game.exe"="D:\Games\dirt 2\dirt2_game.exe:*:Enabled:DiRT2"
"D:\Games\Mass Effect 2\Binaries\MassEffect2.exe"="D:\Games\Mass Effect 2\Binaries\MassEffect2.exe:*:Enabled:Mass Effect 2 Hra"
"D:\Games\Mass Effect 2\MassEffect2Launcher.exe"="D:\Games\Mass Effect 2\MassEffect2Launcher.exe:*:Enabled:Mass Effect 2 Spustit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Lexmark 1300 Series\app4r.exe"="C:\Program Files\Lexmark 1300 Series\App4R.exe:*:Enabled:BorgListener"

======List of files/folders created in the last 3 months======

2010-03-11 17:34:09 ----D---- C:\rsit
2010-03-03 19:40:03 ----A---- C:\WINDOWS\system32\fjhdyfhsn.bat
2010-02-18 19:45:59 ----D---- C:\WinUAE
2010-01-30 17:28:53 ----D---- C:\WINDOWS\system32\appmgmt
2010-01-29 19:26:09 ----D---- C:\Program Files\Common Files\BioWare
2010-01-28 20:48:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-01-28 20:47:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-01-28 20:47:54 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-01-28 20:47:51 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-01-28 20:47:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-01-28 20:47:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-01-28 20:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$
2010-01-28 20:46:10 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-01-28 20:46:06 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2010-01-28 20:46:05 ----D---- C:\WINDOWS\system32\KB905474
2010-01-28 20:46:01 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-01-28 20:45:45 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-01-28 20:45:41 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-01-28 20:45:36 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-01-28 20:45:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-01-28 20:45:14 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-01-28 20:45:11 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2010-01-28 20:45:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-01-28 20:43:18 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-01-28 20:43:14 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-01-28 20:43:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2010-01-28 20:43:02 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-01-28 20:42:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-01-28 20:42:54 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-01-28 20:42:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-01-28 20:41:46 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-28 20:41:41 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-01-28 20:41:37 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-01-28 20:41:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-01-28 20:41:30 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-01-28 20:41:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-01-28 20:41:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-01-28 20:41:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-01-28 20:41:17 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-01-28 20:41:13 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-01-28 20:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-01-28 14:02:08 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-01-28 14:02:05 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-01-28 14:02:03 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-28 14:01:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-01-28 14:01:52 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-01-28 14:01:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-01-28 14:01:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-01-28 14:01:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-01-28 14:01:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-01-28 14:01:33 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2010-01-28 14:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2010-01-28 14:01:27 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-01-28 14:01:23 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-01-28 14:01:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-01-28 13:22:21 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-28 13:22:20 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-01-28 13:22:16 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-01-28 13:22:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-01-28 13:22:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-01-28 13:22:05 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2010-01-28 13:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2010-01-28 13:21:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-01-28 13:21:53 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-01-28 13:21:47 ----D---- C:\Program Files\MSXML 4.0
2010-01-28 13:21:40 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-01-28 13:21:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-01-28 13:03:06 ----D---- C:\WINDOWS\system32\PreInstall
2010-01-28 13:03:04 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-01-28 13:03:04 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-28 06:48:18 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\TeamViewer
2010-01-16 09:36:13 ----D---- C:\Program Files\MSECache
2010-01-12 17:15:20 ----A---- C:\WINDOWS\system32\wups2.dll
2010-01-12 17:15:19 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-01-12 17:15:19 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2010-01-12 17:15:19 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2010-01-12 17:15:19 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-01-10 10:24:48 ----D---- C:\Program Files\Microsoft Research
2010-01-10 09:40:59 ----D---- C:\Program Files\Hugin
2009-12-30 10:30:02 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\gtk-2.0
2009-12-30 10:25:43 ----D---- C:\Program Files\GIMP-2.0
2009-12-28 10:36:08 ----A---- C:\WINDOWS\system32\javaws.exe
2009-12-28 10:36:08 ----A---- C:\WINDOWS\system32\javaw.exe
2009-12-28 10:36:08 ----A---- C:\WINDOWS\system32\java.exe
2009-12-28 10:36:08 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-12-28 10:35:57 ----D---- C:\Program Files\Java
2009-12-28 10:34:25 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\Sun
2009-12-25 17:08:18 ----A---- C:\WINDOWS\system32\ptpusb.dll
2009-12-25 17:08:17 ----A---- C:\WINDOWS\system32\ptpusd.dll
2009-12-20 16:09:09 ----D---- C:\Program Files\Rapget.RS_Public_v1.0.4.0_cz
2009-12-16 17:53:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\Codemasters
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\rapture3d_oal.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_vml_p4.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_vml_p3.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_vml_def.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_p4.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_p3.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_lapack64.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_lapack32.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_def.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\libguide40.dll
2009-12-16 17:49:30 ----D---- C:\Program Files\BRS
2009-12-16 17:47:24 ----D---- C:\WINDOWS\SxsCaPendDel
2009-12-16 17:44:15 ----RA---- C:\WINDOWS\system32\tmpB1.tmp
2009-12-16 17:44:15 ----RA---- C:\WINDOWS\system32\tmpB0.tmp
2009-12-16 17:44:15 ----D---- C:\Program Files\OpenAL
2009-12-16 17:44:15 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-12-16 17:44:15 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-12-15 19:04:25 ----D---- C:\users
2009-12-13 18:33:36 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\Leadertech

======List of files/folders modified in the last 3 months======

2010-03-11 17:34:10 ----D---- C:\WINDOWS\Prefetch
2010-03-11 17:33:58 ----A---- C:\WINDOWS\WINCMD.INI
2010-03-11 17:33:31 ----SD---- C:\WINDOWS\Tasks
2010-03-11 17:32:22 ----D---- C:\WINDOWS\Temp
2010-03-11 17:32:19 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-11 17:31:51 ----SHD---- C:\System Volume Information
2010-03-11 17:31:51 ----D---- C:\WINDOWS\system32\Restore
2010-03-11 17:30:08 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-03-11 17:27:04 ----AD---- C:\WINDOWS
2010-03-11 17:26:49 ----D---- C:\WINDOWS\system32
2010-03-07 20:31:33 ----A---- C:\WINDOWS\NeroDigital.ini
2010-03-06 10:58:29 ----D---- C:\Program Files\CCleaner
2010-03-03 19:40:41 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-03-03 19:40:37 ----D---- C:\WINDOWS\system32\drivers
2010-02-28 16:41:56 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\Bioshock
2010-02-19 19:58:08 ----SHD---- C:\WINDOWS\Installer
2010-02-19 17:53:10 ----D---- C:\WINDOWS\system32\config
2010-02-12 19:44:56 ----D---- C:\WINDOWS\Downloaded Installations
2010-02-06 09:53:30 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-01-29 19:36:27 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-01-29 19:36:00 ----D---- C:\Program Files\AGEIA Technologies
2010-01-29 19:26:09 ----D---- C:\Program Files\Common Files
2010-01-29 19:18:05 ----D---- C:\WINDOWS\Debug
2010-01-29 19:00:13 ----D---- C:\WINDOWS\Microsoft.NET
2010-01-29 19:00:11 ----RSD---- C:\WINDOWS\assembly
2010-01-28 20:48:05 ----HD---- C:\WINDOWS\inf
2010-01-28 20:47:52 ----D---- C:\Program Files\Messenger
2010-01-28 20:47:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-28 20:47:21 ----D---- C:\WINDOWS\WinSxS
2010-01-28 20:30:20 ----D---- C:\WINDOWS\system32\wbem
2010-01-28 14:02:21 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-28 14:01:25 ----D---- C:\Program Files\Outlook Express
2010-01-28 13:55:19 ----D---- C:\WINDOWS\AppPatch
2010-01-28 13:21:47 ----RD---- C:\Program Files
2010-01-16 09:36:45 ----SD---- C:\Documents and Settings\Jaryn\Data aplikací\Microsoft
2010-01-16 09:36:27 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-16 09:36:25 ----RSD---- C:\WINDOWS\Fonts
2010-01-16 09:36:21 ----D---- C:\Program Files\Microsoft Office
2010-01-12 17:15:24 ----D---- C:\WINDOWS\SoftwareDistribution
2010-01-12 17:15:21 ----D---- C:\WINDOWS\Help
2010-01-12 17:14:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-11 16:50:26 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-22 06:09:54 ----A---- C:\WINDOWS\system32\wininet.dll
2009-12-22 06:09:53 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-12-22 06:09:53 ----A---- C:\WINDOWS\system32\shdocvw.dll
2009-12-22 06:09:53 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-12-22 06:09:51 ----A---- C:\WINDOWS\system32\ieencode.dll
2009-12-16 17:48:15 ----D---- C:\WINDOWS\system32\XPSViewer
2009-12-16 17:48:13 ----D---- C:\WINDOWS\system32\en-us
2009-12-16 17:46:18 ----D---- C:\Program Files\Internet Explorer
2009-12-16 17:44:31 ----D---- C:\WINDOWS\system32\DirectX
2009-12-16 17:35:43 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-07-17 279712]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-07 56816]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-07-17 25888]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2008-03-24 331264]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-06-02 3100160]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-05-20 93696]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2002-09-23 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-12 5810]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-09-19 290432]
S3 ak9cftaf;ak9cftaf; C:\WINDOWS\system32\drivers\ak9cftaf.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.SYS []
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 w800bus;Sony Ericsson W800 driver (WDM); C:\WINDOWS\system32\DRIVERS\w800bus.sys [2005-05-24 52384]
S3 w800mdfl;Sony Ericsson W800 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\w800mdfl.sys [2005-05-24 6096]
S3 w800mdm;Sony Ericsson W800 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\w800mdm.sys [2005-05-24 87424]
S3 w800mgmt;Sony Ericsson W800 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\w800mgmt.sys [2005-05-24 79216]
S3 w800obex;Sony Ericsson W800 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\w800obex.sys [2005-05-24 77040]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-06 185089]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-06-02 552960]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-12-28 153376]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-02-05 1181328]
R2 lxdc_device;lxdc_device; C:\WINDOWS\system32\lxdccoms.exe [2007-02-13 537520]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-08-10 66872]
R2 yksvc;Marvell Yukon Service; ykx32mpcoinst,serviceStartProc []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Caroprd111]

Zdravím

Na logu se pracuje, prosím o strpení.

[Caroprd111]

Podle návodu http://www.viry.cz/forum/viewtopic.php?f=15&t=72743 aplikujte tento skript.

Kód: Vybrat vše

:processes
explorer.exe

:files
C:\WINDOWS\TEMP\~TMD.tmp
C:\WINDOWS\system32\fjhdyfhsn.bat

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"sysgif32"=-

:commands
[EmptyTemp]
[Reboot]
[ClearAllRestorePoints]
[Purity]

Odinstalujte Ad-Aware.


Doporučuji odinstalovat (pokud nepoužíváte) toolbary (lišty) v Přidat nebo odebrat programy.


Doporučuji odinstalovat:
C:\Program Files\eMule\emule.exe

P2P sítě a jejich klienti jsou potenciálním bezpečnostním rizikem, prakticky neustále jsou zdrojem virů, zbytečně se vystavujete riziku.

[kolizek]

Předně mnohokrát děkuji za pomoc!

Ad 1 - All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
File/Folder C:\WINDOWS\TEMP\~TMD.tmp not found.
C:\WINDOWS\system32\fjhdyfhsn.bat moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\sysgif32 deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Jaryn
->Temp folder emptied: 722 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 2046 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 1619120 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16832 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 2,00 mb


Restore points cleared and new OTM Restore Point set!

OTM by OldTimer - Version 3.1.10.0 log created on 03122010_071219

Files moved on Reboot...
File C:\WINDOWS\temp\Perflib_Perfdata_554.dat not found!

Registry entries deleted on Reboot...

Ad 2 - Možná se ptám hloupě, ale proč odinstalovat AdAware? Avira ho plně zastoupí?

Ad 3 - Toolbaru jsem si nevšiml, jinak je mažu okamžitě

Ad 4 - S P2P sítěmi máte určitě pravdu, eMule mám jen proto, že jsem ho zapomněl odinstalovat, použil jsem ho kdysi asi 2x

[Caroprd111]

Ad-Aware je zastaralý a nedoporučuje se používat, Avira stačí.


Jak to vypadá s PC

[kolizek]

Děkuji za pomoc a rady, vše se zdá ok.

[Caroprd111]

Dejte nový log z RSIT.

[kolizek]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jaryn at 2010-03-12 18:01:26
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 295 GB (97%) free of 305 GB
Total RAM: 2047 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:01:29, on 12.3.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Lexmark 1300 Series\lxdcamon.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lxdccoms.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Opera\opera.exe
C:\totalcmd\TOTALCMD.EXE
D:\Programy\Aviry\RSIT.exe
D:\Programy\Aviry\Jaryn.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gooeu.eu
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [lxdcamon] "C:\Program Files\Lexmark 1300 Series\lxdcamon.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 3312881250
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: lxdc_device - - C:\WINDOWS\system32\lxdccoms.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)

--
End of file - 5017 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-12-28 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-12-28 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2008-01-21 61440]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2008-03-17 1040384]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2009-03-02 209153]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"lxdcamon"=C:\Program Files\Lexmark 1300 Series\lxdcamon.exe [2007-02-06 20480]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-28 149280]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-06-02 139264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"D:\Games\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe"="D:\Games\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (CLI)"
"D:\Games\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe"="D:\Games\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (SRV)"
"C:\WINDOWS\system32\lxdccoms.exe"="C:\WINDOWS\system32\lxdccoms.exe:*:Enabled:1300 Series Server"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Games\Residend Evil 5\RE5DX9.EXE"="D:\Games\Residend Evil 5\RE5DX9.EXE:*:Enabled:RESIDENT EVIL 5 (DX9)"
"D:\Games\Residend Evil 5\RE5DX10.EXE"="D:\Games\Residend Evil 5\RE5DX10.EXE:*:Enabled:RESIDENT EVIL 5 (DX10)"
"C:\Program Files\Lexmark 1300 Series\lxdcamon.exe"="C:\Program Files\Lexmark 1300 Series\lxdcamon.exe:*:Enabled:Device Monitor Appliaction"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"D:\Games\dirt 2\dirt2_game.exe"="D:\Games\dirt 2\dirt2_game.exe:*:Enabled:DiRT2"
"D:\Games\Mass Effect 2\Binaries\MassEffect2.exe"="D:\Games\Mass Effect 2\Binaries\MassEffect2.exe:*:Enabled:Mass Effect 2 Hra"
"D:\Games\Mass Effect 2\MassEffect2Launcher.exe"="D:\Games\Mass Effect 2\MassEffect2Launcher.exe:*:Enabled:Mass Effect 2 Spustit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Lexmark 1300 Series\app4r.exe"="C:\Program Files\Lexmark 1300 Series\App4R.exe:*:Enabled:BorgListener"

======List of files/folders created in the last 3 months======

2010-03-12 07:12:19 ----D---- C:\_OTM
2010-03-11 17:34:09 ----D---- C:\rsit
2010-02-18 19:45:59 ----D---- C:\WinUAE
2010-01-30 17:28:53 ----D---- C:\WINDOWS\system32\appmgmt
2010-01-29 19:26:09 ----D---- C:\Program Files\Common Files\BioWare
2010-01-28 20:48:03 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-01-28 20:47:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-01-28 20:47:54 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-01-28 20:47:51 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-01-28 20:47:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-01-28 20:47:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-01-28 20:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB978207$
2010-01-28 20:46:10 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-01-28 20:46:06 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2010-01-28 20:46:05 ----D---- C:\WINDOWS\system32\KB905474
2010-01-28 20:46:01 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-01-28 20:45:45 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-01-28 20:45:41 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-01-28 20:45:36 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-01-28 20:45:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-01-28 20:45:14 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-01-28 20:45:11 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2010-01-28 20:45:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-01-28 20:43:18 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-01-28 20:43:14 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-01-28 20:43:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2010-01-28 20:43:02 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-01-28 20:42:57 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-01-28 20:42:54 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-01-28 20:42:51 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-01-28 20:41:46 ----A---- C:\WINDOWS\system32\MRT.exe
2010-01-28 20:41:41 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-01-28 20:41:37 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-01-28 20:41:34 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-01-28 20:41:30 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-01-28 20:41:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-01-28 20:41:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-01-28 20:41:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-01-28 20:41:17 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-01-28 20:41:13 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-01-28 20:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-01-28 14:02:08 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-01-28 14:02:05 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-01-28 14:02:03 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-01-28 14:01:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-01-28 14:01:52 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-01-28 14:01:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-01-28 14:01:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-01-28 14:01:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-01-28 14:01:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-01-28 14:01:33 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2010-01-28 14:01:30 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2010-01-28 14:01:27 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-01-28 14:01:23 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-01-28 14:01:18 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-01-28 13:22:21 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-01-28 13:22:20 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-01-28 13:22:16 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-01-28 13:22:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-01-28 13:22:09 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-01-28 13:22:05 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2010-01-28 13:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB973525$
2010-01-28 13:21:57 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-01-28 13:21:53 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-01-28 13:21:47 ----D---- C:\Program Files\MSXML 4.0
2010-01-28 13:21:40 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-01-28 13:21:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-01-28 13:03:06 ----D---- C:\WINDOWS\system32\PreInstall
2010-01-28 13:03:04 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-01-28 13:03:04 ----HD---- C:\WINDOWS\$hf_mig$
2010-01-28 06:48:18 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\TeamViewer
2010-01-16 09:36:13 ----D---- C:\Program Files\MSECache
2010-01-12 17:15:20 ----A---- C:\WINDOWS\system32\wups2.dll
2010-01-12 17:15:19 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-01-12 17:15:19 ----A---- C:\WINDOWS\system32\wucltui.dll.mui
2010-01-12 17:15:19 ----A---- C:\WINDOWS\system32\wuaueng.dll.mui
2010-01-12 17:15:19 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2010-01-10 10:24:48 ----D---- C:\Program Files\Microsoft Research
2010-01-10 09:40:59 ----D---- C:\Program Files\Hugin
2009-12-30 10:30:02 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\gtk-2.0
2009-12-30 10:25:43 ----D---- C:\Program Files\GIMP-2.0
2009-12-28 10:36:08 ----A---- C:\WINDOWS\system32\javaws.exe
2009-12-28 10:36:08 ----A---- C:\WINDOWS\system32\javaw.exe
2009-12-28 10:36:08 ----A---- C:\WINDOWS\system32\java.exe
2009-12-28 10:36:08 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-12-28 10:35:57 ----D---- C:\Program Files\Java
2009-12-28 10:34:25 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\Sun
2009-12-25 17:08:18 ----A---- C:\WINDOWS\system32\ptpusb.dll
2009-12-25 17:08:17 ----A---- C:\WINDOWS\system32\ptpusd.dll
2009-12-20 16:09:09 ----D---- C:\Program Files\Rapget.RS_Public_v1.0.4.0_cz
2009-12-16 17:53:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\Codemasters
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\rapture3d_oal.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_vml_p4.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_vml_p3.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_vml_def.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_p4.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_p3.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_lapack64.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_lapack32.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\mkl_def.dll
2009-12-16 17:49:31 ----A---- C:\WINDOWS\system32\libguide40.dll
2009-12-16 17:49:30 ----D---- C:\Program Files\BRS
2009-12-16 17:47:24 ----D---- C:\WINDOWS\SxsCaPendDel
2009-12-16 17:44:15 ----D---- C:\Program Files\OpenAL
2009-12-16 17:44:15 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2009-12-16 17:44:15 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2009-12-15 19:04:25 ----D---- C:\users
2009-12-13 18:33:36 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\Leadertech

======List of files/folders modified in the last 3 months======

2010-03-12 18:01:17 ----A---- C:\WINDOWS\WINCMD.INI
2010-03-12 18:00:08 ----AD---- C:\WINDOWS
2010-03-12 17:59:36 ----D---- C:\WINDOWS\Prefetch
2010-03-12 17:58:39 ----D---- C:\WINDOWS\system32\CatRoot2
2010-03-12 17:58:37 ----D---- C:\WINDOWS\Temp
2010-03-12 16:03:04 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-03-12 14:58:11 ----D---- C:\WINDOWS\system32\drivers
2010-03-12 07:51:50 ----A---- C:\WINDOWS\NeroDigital.ini
2010-03-12 07:24:03 ----SHD---- C:\WINDOWS\Installer
2010-03-12 07:24:03 ----RD---- C:\Program Files
2010-03-12 07:23:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-03-12 07:23:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-03-12 07:23:55 ----D---- C:\WINDOWS\system32
2010-03-12 07:23:44 ----D---- C:\Program Files\eMule
2010-03-12 07:19:26 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-03-12 07:17:33 ----SD---- C:\WINDOWS\Tasks
2010-03-12 07:12:31 ----SHD---- C:\System Volume Information
2010-03-12 07:12:31 ----D---- C:\WINDOWS\system32\Restore
2010-03-06 10:58:29 ----D---- C:\Program Files\CCleaner
2010-03-03 19:40:41 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-02-28 16:41:56 ----D---- C:\Documents and Settings\Jaryn\Data aplikací\Bioshock
2010-02-19 17:53:10 ----D---- C:\WINDOWS\system32\config
2010-02-12 19:44:56 ----D---- C:\WINDOWS\Downloaded Installations
2010-02-06 09:53:30 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-01-29 19:36:27 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-01-29 19:36:00 ----D---- C:\Program Files\AGEIA Technologies
2010-01-29 19:26:09 ----D---- C:\Program Files\Common Files
2010-01-29 19:18:05 ----D---- C:\WINDOWS\Debug
2010-01-29 19:00:13 ----D---- C:\WINDOWS\Microsoft.NET
2010-01-29 19:00:11 ----RSD---- C:\WINDOWS\assembly
2010-01-28 20:48:05 ----HD---- C:\WINDOWS\inf
2010-01-28 20:47:52 ----D---- C:\Program Files\Messenger
2010-01-28 20:47:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-28 20:47:21 ----D---- C:\WINDOWS\WinSxS
2010-01-28 20:30:20 ----D---- C:\WINDOWS\system32\wbem
2010-01-28 14:02:21 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-28 14:01:25 ----D---- C:\Program Files\Outlook Express
2010-01-28 13:55:19 ----D---- C:\WINDOWS\AppPatch
2010-01-16 09:36:45 ----SD---- C:\Documents and Settings\Jaryn\Data aplikací\Microsoft
2010-01-16 09:36:27 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-01-16 09:36:25 ----RSD---- C:\WINDOWS\Fonts
2010-01-16 09:36:21 ----D---- C:\Program Files\Microsoft Office
2010-01-12 17:15:24 ----D---- C:\WINDOWS\SoftwareDistribution
2010-01-12 17:15:21 ----D---- C:\WINDOWS\Help
2010-01-12 17:14:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-01-11 16:50:26 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-12-22 06:09:54 ----A---- C:\WINDOWS\system32\wininet.dll
2009-12-22 06:09:53 ----A---- C:\WINDOWS\system32\urlmon.dll
2009-12-22 06:09:53 ----A---- C:\WINDOWS\system32\shdocvw.dll
2009-12-22 06:09:53 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-12-22 06:09:51 ----A---- C:\WINDOWS\system32\ieencode.dll
2009-12-16 17:48:15 ----D---- C:\WINDOWS\system32\XPSViewer
2009-12-16 17:48:13 ----D---- C:\WINDOWS\system32\en-us
2009-12-16 17:46:18 ----D---- C:\Program Files\Internet Explorer
2009-12-16 17:44:31 ----D---- C:\WINDOWS\system32\DirectX
2009-12-16 17:35:43 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2009-03-30 96104]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-07-17 279712]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2009-12-07 56816]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-07-17 25888]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2008-03-24 331264]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-06-02 3100160]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-05-20 93696]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2002-09-23 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-12 5810]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-09-19 290432]
S3 a3y4wuov;a3y4wuov; C:\WINDOWS\system32\drivers\a3y4wuov.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.SYS []
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 w800bus;Sony Ericsson W800 driver (WDM); C:\WINDOWS\system32\DRIVERS\w800bus.sys [2005-05-24 52384]
S3 w800mdfl;Sony Ericsson W800 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\w800mdfl.sys [2005-05-24 6096]
S3 w800mdm;Sony Ericsson W800 USB WMC Modem Drivers; C:\WINDOWS\system32\DRIVERS\w800mdm.sys [2005-05-24 87424]
S3 w800mgmt;Sony Ericsson W800 USB WMC Device Management Drivers; C:\WINDOWS\system32\DRIVERS\w800mgmt.sys [2005-05-24 79216]
S3 w800obex;Sony Ericsson W800 USB WMC OBEX Interface Drivers; C:\WINDOWS\system32\DRIVERS\w800obex.sys [2005-05-24 77040]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2009-08-06 185089]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2009-05-13 108289]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-06-02 552960]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-12-28 153376]
R2 lxdc_device;lxdc_device; C:\WINDOWS\system32\lxdccoms.exe [2007-02-13 537520]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-08-10 66872]
R2 yksvc;Marvell Yukon Service; ykx32mpcoinst,serviceStartProc []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Caroprd111]

Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

• Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
• Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

• Spusťte.
• Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478

• Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.
  
  Záložka Čistič
• Dejte analyzovat, po dokončení dejte Spustit Ccleaner.
  
  Záložka Registry
• Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
  OK Zavřít

V logu nevidím firewall, doinstalujte Přehled: http://www.viry.cz/forum/viewtopic.php?f=41&t=6523