Hidden object problém

[Jabkozrout]

Zdravím,
moje Avira při bežném testu objeví hidden object, nic víc mi k tomu bohužel neřekne. Zkoušel jsem různé odstaraňovače rootkitů, ale vesměs jediné co mi něco našlo tak byl anti rootkit od AVG, ten sice soubor dokázal smazat (jednalo se o nějáký .SYS soubor v system32\drivers ). Nicméně po restartu to našlo opět rootkit, pouze šlo o jinak vygenerovaný názes .SYS souboru. Moc si s tím nevím rady. Budu velmi rád za vaši pomoc.

Zde jsou logy.

RootkitRevealer:

HKU\S-1-5-21-746137067-117609710-682003330-1004\Console 4.4.2010 23:16 0 bytes Security mismatch.
HKLM\SECURITY\Policy\Secrets\SAC* 21.3.2009 23:54 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 21.3.2009 23:54 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Swearware\backup\winsock2 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SOFTWARE\Swearware\backup\winsock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018 4.4.2010 22:32 0 bytes Security mismatch.
HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg 3.4.2009 23:59 0 bytes Access is denied.

RSIT:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Petr at 2010-04-05 13:56:15
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 751 MB (13%) free of 6 GB
Total RAM: 767 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:56:16, on 5.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Programy\Avira\AntiVir Desktop\sched.exe
D:\Programy\Avira\AntiVir Desktop\avguard.exe
D:\Programy\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
D:\Programy\Spyware Terminator\SpywareTerminatorShield.exe
D:\Programy\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\AGRSMMSG.exe
D:\Programy\Java\bin\jqs.exe
D:\Programy\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\Petr\LOCALS~1\Temp\mexe.com
D:\Programy\Opera\opera.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
D:\Programy\totalcmd\TOTALCMD.EXE
C:\Documents and Settings\Petr\Plocha\RSIT.exe
C:\Program Files\trend micro\Petr.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Programy\Java\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Programy\Java\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SpywareTerminator] "D:\Programy\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [avgnt] "D:\Programy\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - D:\Programy\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - D:\Programy\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Programy\Java\bin\jqs.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - D:\Programy\Spyware Terminator\sp_rsser.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe

--
End of file - 3566 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Programy\Java\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - D:\Programy\Java\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2002-06-14 46592]
"SpywareTerminator"=D:\Programy\Spyware Terminator\SpywareTerminatorShield.exe [2009-10-12 2171904]
"avgnt"=D:\Programy\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe [2004-06-29 88363]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-12-12 335872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
D:\Programy\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe [2005-08-11 249856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-08-11 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
D:\Programy\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-10-12 3055616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
D:\Programy\Java\bin\jusched.exe [2009-10-11 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^TabUserW.exe.lnk]
C:\WINDOWS\system32\WTablet\TabUserW.exe [2005-12-06 114688]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Petr^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
D:\Programy\OPENOF~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-01-15 393216]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ATI Smart"=2

C:\Documents and Settings\Petr\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-02-25 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Hry\Unreal\Unreal\System\UnrealTournament.exe"="D:\Hry\Unreal\Unreal\System\UnrealTournament.exe:*:Enabled:UnrealTournament"
"D:\Programy\Opera\opera.exe"="D:\Programy\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"D:\Hry\zu onliene\ZU-ONLINE\BT_Update.exe"="D:\Hry\zu onliene\ZU-ONLINE\BT_Update.exe:*:Enabled:BT_Update"
"D:\Hry\zu onliene\ZU-ONLINE\ZuOnline.exe"="D:\Hry\zu onliene\ZU-ONLINE\ZuOnline.exe:*:Enabled:ZuOnline"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 3 months======

2010-04-05 13:52:24 ----A---- C:\WINDOWS\system32\RootkitReveal.txt
2010-04-05 13:16:31 ----D---- C:\Program Files\trend micro
2010-04-05 13:16:30 ----D---- C:\rsit
2010-04-05 11:14:44 ----AD---- C:\WINDOWS\VDLL.DLL
2010-04-05 11:14:44 ----AD---- C:\WINDOWS\system32\runouce.exe
2010-04-05 11:14:44 ----AD---- C:\WINDOWS\rundll16.exe
2010-04-05 11:14:44 ----AD---- C:\WINDOWS\RUNDL132.EXE
2010-04-05 11:14:44 ----AD---- C:\WINDOWS\logo1_.exe
2010-04-05 11:14:44 ----AD---- C:\WINDOWS\logo_1.exe
2010-04-05 11:10:32 ----A---- C:\WINDOWS\system32\msvcr80.dll
2010-04-05 11:10:31 ----A---- C:\WINDOWS\system32\msvcp80.dll
2010-04-05 11:10:30 ----A---- C:\WINDOWS\system32\eEmpty.exe
2010-04-05 11:10:27 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2010-04-05 11:10:27 ----A---- C:\WINDOWS\system32\T.COM
2010-04-05 11:10:27 ----A---- C:\WINDOWS\REGEDIT.COM
2010-04-05 11:10:27 ----A---- C:\WINDOWS\R.COM
2010-04-05 11:10:25 ----D---- C:\Program Files\Common Files\MicroWorld
2010-04-05 11:10:23 ----D---- C:\Documents and Settings\All Users\Data aplikací\MicroWorld
2010-04-04 23:27:10 ----SHD---- C:\RECYCLER
2010-04-04 22:33:41 ----A---- C:\Boot.bak
2010-04-04 22:33:37 ----RASHD---- C:\cmdcons
2010-04-04 22:32:23 ----A---- C:\WINDOWS\zip.exe
2010-04-04 22:32:23 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-04-04 22:32:23 ----A---- C:\WINDOWS\SWSC.exe
2010-04-04 22:32:23 ----A---- C:\WINDOWS\SWREG.exe
2010-04-04 22:32:23 ----A---- C:\WINDOWS\sed.exe
2010-04-04 22:32:23 ----A---- C:\WINDOWS\PEV.exe
2010-04-04 22:32:23 ----A---- C:\WINDOWS\NIRCMD.exe
2010-04-04 22:32:23 ----A---- C:\WINDOWS\MBR.exe
2010-04-04 22:32:23 ----A---- C:\WINDOWS\grep.exe
2010-04-04 22:32:12 ----D---- C:\WINDOWS\ERDNT
2010-04-04 21:44:00 ----RASHOT---- C:\WINDOWS\winstart.bat
2010-04-04 17:02:36 ----D---- C:\Documents and Settings\Petr\Data aplikací\Avira
2010-03-19 19:07:54 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-03-11 16:46:23 ----HDC---- C:\WINDOWS\$NtUninstallKB977165-v2$
2010-03-11 16:46:08 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-02-27 20:16:26 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-02-27 20:16:20 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-02-27 20:16:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-02-27 20:15:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-02-27 20:15:54 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2010-02-27 20:15:14 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2010-02-27 13:35:12 ----SHD---- C:\System Volume Information
2010-02-27 06:47:23 ----D---- C:\WINDOWS\Prefetch
2010-02-27 05:24:47 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-02-27 05:24:32 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-02-27 05:24:19 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-02-27 05:24:08 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-02-27 05:23:53 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-02-27 05:23:41 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-02-27 05:23:31 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-02-27 05:23:20 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-02-27 05:23:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-02-27 05:23:01 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-02-27 05:22:51 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-02-27 05:22:42 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-02-27 05:22:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-02-27 05:22:16 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-02-27 05:22:05 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-02-27 05:21:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-02-27 05:21:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-02-27 05:21:35 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-02-27 05:21:20 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-02-27 05:21:11 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-02-27 05:20:53 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2010-02-27 05:20:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-02-27 05:20:29 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-02-27 05:20:21 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-02-27 05:20:13 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-02-27 05:20:05 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-02-27 05:19:57 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-02-27 05:19:45 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-02-27 05:19:37 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-02-27 05:19:20 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-02-27 05:19:11 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-02-27 05:19:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-02-27 05:18:57 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-02-27 05:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-02-27 05:18:42 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-02-27 05:18:35 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-02-27 05:18:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-02-27 05:18:20 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-02-27 05:18:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-02-27 05:17:53 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-02-27 05:17:44 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-02-27 05:17:37 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-02-27 05:17:28 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-02-27 05:17:21 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-02-27 05:17:11 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-02-27 05:17:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-02-27 05:16:54 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-02-27 05:16:46 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-02-27 05:16:38 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-02-27 05:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-02-27 05:16:17 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-02-27 05:11:55 ----D---- C:\Program Files\Messenger
2010-02-27 05:11:37 ----D---- C:\WINDOWS\l2schemas
2010-02-27 05:11:36 ----D---- C:\WINDOWS\system32\cs
2010-02-27 05:11:36 ----D---- C:\WINDOWS\system32\bits
2010-02-27 05:07:08 ----D---- C:\WINDOWS\network diagnostic
2010-02-27 04:45:16 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-02-27 04:45:14 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2010-02-27 04:44:44 ----D---- C:\Program Files\Windows Media Connect 2
2010-02-27 04:44:32 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2010-02-27 04:42:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-02-26 09:35:38 ----HDC---- C:\WINDOWS\$NtUninstallKB970430_0$
2010-02-26 09:34:41 ----HDC---- C:\WINDOWS\$NtUninstallKB961118_0$
2010-02-26 09:34:13 ----HDC---- C:\WINDOWS\$NtUninstallKB925720$
2010-02-26 09:34:05 ----HDC---- C:\WINDOWS\$NtUninstallKB971737_0$
2010-02-26 09:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-02-14 17:17:50 ----D---- C:\WINDOWS\system32\XPSViewer
2010-02-14 17:17:45 ----D---- C:\Program Files\MSBuild
2010-02-14 17:17:42 ----D---- C:\WINDOWS\system32\en-US
2010-02-14 17:17:34 ----D---- C:\Program Files\Reference Assemblies
2010-02-14 17:17:03 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-02-14 17:17:03 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-02-14 17:17:03 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-02-14 17:13:52 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-02-14 17:13:45 ----D---- C:\Program Files\MSXML 6.0
2010-02-14 15:35:52 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2010-02-14 15:35:44 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2010-02-14 15:34:59 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2010-02-14 15:34:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2010-02-14 15:34:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971468_0$
2010-02-14 15:34:36 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-02-14 15:34:28 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-02-14 15:34:18 ----HDC---- C:\WINDOWS\$NtUninstallKB955759_0$
2010-02-14 15:34:09 ----HDC---- C:\WINDOWS\$NtUninstallKB974318_0$
2010-02-14 15:33:56 ----HDC---- C:\WINDOWS\$NtUninstallKB969059_0$
2010-02-14 15:33:46 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2010-02-14 15:33:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978037_0$
2010-02-14 15:33:28 ----HDC---- C:\WINDOWS\$NtUninstallKB975713_0$
2010-02-14 15:33:18 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2010-02-14 15:33:04 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2010-02-14 15:32:53 ----HDC---- C:\WINDOWS\$NtUninstallKB972270_0$
2010-02-14 15:32:44 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2010-02-14 15:32:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2010-02-14 15:31:55 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2010-02-14 15:31:42 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2010-02-14 15:31:30 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-02-14 15:31:13 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-02-14 15:30:59 ----HDC---- C:\WINDOWS\$NtUninstallKB978251_0$
2010-02-14 15:30:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975025_0$
2010-02-14 15:30:37 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-02-14 15:30:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-02-14 15:29:30 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2010-02-14 15:28:58 ----HDC---- C:\WINDOWS\$NtUninstallKB975560_0$
2010-02-14 15:28:30 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2010-02-14 15:28:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973354_0$
2010-02-14 15:28:09 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-02-14 15:27:55 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2010-02-14 15:27:40 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2010-02-14 15:27:16 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2010-02-14 15:27:04 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2010-02-14 15:26:32 ----HDC---- C:\WINDOWS\$NtUninstallKB971486_0$
2010-02-14 15:26:03 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$
2010-02-14 15:25:48 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$
2010-02-14 13:35:16 ----N---- C:\WINDOWS\system32\wlanapi.dll
2010-02-14 13:34:59 ----N---- C:\WINDOWS\system32\verclsid.exe
2010-02-14 13:34:49 ----N---- C:\WINDOWS\system32\tspkg.dll
2010-02-14 13:34:48 ----N---- C:\WINDOWS\system32\tsgqec.dll
2010-02-14 13:34:25 ----N---- C:\WINDOWS\system32\setupn.exe
2010-02-14 13:34:17 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2010-02-14 13:34:15 ----N---- C:\WINDOWS\system32\rasqec.dll
2010-02-14 13:34:14 ----N---- C:\WINDOWS\system32\qutil.dll
2010-02-14 13:34:12 ----N---- C:\WINDOWS\system32\qcliprov.dll
2010-02-14 13:34:12 ----N---- C:\WINDOWS\system32\qagentrt.dll
2010-02-14 13:34:12 ----N---- C:\WINDOWS\system32\qagent.dll
2010-02-14 13:34:00 ----N---- C:\WINDOWS\system32\onex.dll
2010-02-14 13:33:44 ----N---- C:\WINDOWS\system32\napstat.exe
2010-02-14 13:33:44 ----N---- C:\WINDOWS\system32\napmontr.dll
2010-02-14 13:33:44 ----N---- C:\WINDOWS\system32\napipsec.dll
2010-02-14 13:33:39 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2010-02-14 13:33:38 ----N---- C:\WINDOWS\system32\mssha.dll
2010-02-14 13:33:19 ----N---- C:\WINDOWS\system32\mmcperf.exe
2010-02-14 13:33:19 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2010-02-14 13:33:19 ----N---- C:\WINDOWS\system32\mmcex.dll
2010-02-14 13:33:18 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2010-02-14 13:33:03 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2010-02-14 13:33:02 ----N---- C:\WINDOWS\system32\kmsvc.dll
2010-02-14 13:33:01 ----N---- C:\WINDOWS\system32\kbdpash.dll
2010-02-14 13:33:00 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2010-02-14 13:33:00 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2010-02-14 13:33:00 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2010-02-14 13:32:50 ----N---- C:\WINDOWS\system32\ieencode.dll
2010-02-14 13:32:32 ----A---- C:\WINDOWS\005094_.tmp
2010-02-14 13:32:30 ----N---- C:\WINDOWS\system32\eapsvc.dll
2010-02-14 13:32:30 ----N---- C:\WINDOWS\system32\eapqec.dll
2010-02-14 13:32:29 ----N---- C:\WINDOWS\system32\eappprxy.dll
2010-02-14 13:32:29 ----N---- C:\WINDOWS\system32\eapphost.dll
2010-02-14 13:32:29 ----N---- C:\WINDOWS\system32\eappgnui.dll
2010-02-14 13:32:29 ----N---- C:\WINDOWS\system32\eappcfg.dll
2010-02-14 13:32:29 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2010-02-14 13:32:29 ----N---- C:\WINDOWS\system32\eapolqec.dll
2010-02-14 13:32:22 ----N---- C:\WINDOWS\system32\dot3ui.dll
2010-02-14 13:32:22 ----N---- C:\WINDOWS\system32\dot3svc.dll
2010-02-14 13:32:22 ----N---- C:\WINDOWS\system32\dot3msm.dll
2010-02-14 13:32:22 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2010-02-14 13:32:22 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2010-02-14 13:32:22 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2010-02-14 13:32:22 ----N---- C:\WINDOWS\system32\dot3api.dll
2010-02-14 13:32:18 ----N---- C:\WINDOWS\system32\dimsroam.dll
2010-02-14 13:32:18 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2010-02-14 13:32:17 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2010-02-14 13:32:10 ----N---- C:\WINDOWS\system32\credssp.dll
2010-02-14 13:31:59 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2010-02-14 13:31:58 ----N---- C:\WINDOWS\system32\azroles.dll
2010-02-14 13:31:43 ----N---- C:\WINDOWS\system32\aaclient.dll
2010-02-14 13:05:26 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-02-14 13:05:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2010-02-14 13:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB976098-v2$
2010-02-14 13:02:57 ----A---- C:\WINDOWS\system32\MRT.exe
2010-02-14 13:02:44 ----HDC---- C:\WINDOWS\$NtUninstallKB974571_0$
2010-02-14 13:02:36 ----HDC---- C:\WINDOWS\$NtUninstallKB973507_0$
2010-02-14 13:02:28 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2010-02-14 13:02:16 ----HDC---- C:\WINDOWS\$NtUninstallKB974392_0$
2010-02-14 11:48:50 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-02-14 11:48:07 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-02-14 11:47:36 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-02-14 11:47:21 ----HDC---- C:\WINDOWS\$NtUninstallKB977914_0$
2010-02-14 11:46:47 ----HDC---- C:\WINDOWS\$NtUninstallKB978706_0$
2010-02-14 11:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2010-02-14 11:46:28 ----HDC---- C:\WINDOWS\$NtUninstallKB973815_0$
2010-02-14 11:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2010-02-14 11:29:12 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-02-14 04:46:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973869_0$
2010-02-14 04:46:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_0$
2010-02-14 04:46:22 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-02-14 04:46:15 ----D---- C:\WINDOWS\ie8updates
2010-02-14 04:46:01 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2010-02-14 04:45:54 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2010-02-14 04:45:51 ----D---- C:\Program Files\MSXML 4.0
2010-02-14 04:45:34 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2010-02-14 04:45:16 ----HDC---- C:\WINDOWS\$NtUninstallKB969947_0$
2010-02-14 04:00:26 ----D---- C:\WINDOWS\system32\PreInstall
2010-02-14 04:00:24 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-02-14 04:00:24 ----HD---- C:\WINDOWS\$hf_mig$
2010-02-13 19:58:12 ----N---- C:\WINDOWS\system32\XMNT2001.EXE
2010-02-13 18:53:57 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-02-13 02:28:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira

======List of files/folders modified in the last 3 months======

2010-04-05 13:54:38 ----D---- C:\WINDOWS\system32
2010-04-05 13:53:29 ----A---- C:\WINDOWS\wincmd.ini
2010-04-05 13:37:24 ----D---- C:\WINDOWS\system32\drivers
2010-04-05 13:16:49 ----D---- C:\WINDOWS\Temp
2010-04-05 13:16:31 ----RD---- C:\Program Files
2010-04-05 11:14:44 ----D---- C:\WINDOWS
2010-04-05 11:10:25 ----D---- C:\Program Files\Common Files
2010-04-05 11:05:19 ----SHD---- C:\WINDOWS\Installer
2010-04-05 11:05:19 ----SD---- C:\WINDOWS\Tasks
2010-04-05 11:03:59 ----D---- C:\WINDOWS\Minidump
2010-04-05 11:03:59 ----D---- C:\WINDOWS\Debug
2010-04-05 10:37:24 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-05 01:13:12 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-04-05 01:12:56 ----D---- C:\Documents and Settings\Petr\Data aplikací\foobar2000
2010-04-04 23:49:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-04-04 23:40:31 ----D---- C:\Documents and Settings\Petr\Data aplikací\Spyware Terminator
2010-04-04 23:18:18 ----D---- C:\WINDOWS\system32\Restore
2010-04-04 23:14:43 ----A---- C:\WINDOWS\system.ini
2010-04-04 23:13:22 ----D---- C:\WINDOWS\AppPatch
2010-04-04 22:33:41 ----RASH---- C:\boot.ini
2010-04-04 22:26:51 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-04-04 21:37:41 ----A---- C:\WINDOWS\win.ini
2010-04-02 23:54:46 ----HD---- C:\WINDOWS\inf
2010-04-02 23:54:38 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-02 23:54:37 ----D---- C:\Program Files\Internet Explorer
2010-04-02 23:48:00 ----D---- C:\WINDOWS\WinSxS
2010-04-02 22:53:43 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-11 16:46:10 ----D---- C:\Program Files\Movie Maker
2010-02-27 20:16:04 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-27 06:46:59 ----D---- C:\WINDOWS\system32\wbem
2010-02-27 06:46:59 ----D---- C:\WINDOWS\system32\Setup
2010-02-27 06:46:58 ----RSD---- C:\WINDOWS\Fonts
2010-02-27 06:46:06 ----D---- C:\WINDOWS\security
2010-02-27 05:21:48 ----D---- C:\Program Files\Outlook Express
2010-02-27 05:11:53 ----D---- C:\WINDOWS\ime
2010-02-27 05:11:53 ----D---- C:\WINDOWS\Help
2010-02-27 05:11:38 ----D---- C:\WINDOWS\system32\usmt
2010-02-27 05:11:38 ----D---- C:\WINDOWS\system32\cs-CZ
2010-02-27 05:11:36 ----D---- C:\WINDOWS\peernet
2010-02-27 05:09:03 ----D---- C:\WINDOWS\system32\npp
2010-02-27 05:09:02 ----D---- C:\WINDOWS\msagent
2010-02-27 05:09:00 ----D---- C:\WINDOWS\srchasst
2010-02-27 05:09:00 ----D---- C:\Program Files\NetMeeting
2010-02-27 05:08:58 ----D---- C:\WINDOWS\system32\Com
2010-02-27 05:08:56 ----D---- C:\Program Files\Windows NT
2010-02-27 05:08:56 ----D---- C:\Program Files\Windows Media Player
2010-02-27 05:08:51 ----D---- C:\Program Files\Common Files\System
2010-02-27 05:08:35 ----D---- C:\WINDOWS\system32\oobe
2010-02-27 05:08:33 ----D---- C:\WINDOWS\system
2010-02-27 05:05:29 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-02-27 05:05:16 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-02-27 05:01:11 ----D---- C:\WINDOWS\EHome
2010-02-26 13:57:22 ----D---- C:\WINDOWS\Microsoft.NET
2010-02-26 13:57:16 ----RSD---- C:\WINDOWS\assembly
2010-02-25 11:48:52 ----A---- C:\WINDOWS\system32\ieframe.dll
2010-02-25 08:18:56 ----N---- C:\WINDOWS\system32\wininet.dll
2010-02-25 08:18:56 ----A---- C:\WINDOWS\system32\urlmon.dll
2010-02-25 08:18:55 ----N---- C:\WINDOWS\system32\mshtml.dll
2010-02-25 08:18:55 ----A---- C:\WINDOWS\system32\occache.dll
2010-02-25 08:18:55 ----A---- C:\WINDOWS\system32\mstime.dll
2010-02-25 08:18:53 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2010-02-25 08:18:53 ----A---- C:\WINDOWS\system32\msfeeds.dll
2010-02-25 08:18:52 ----A---- C:\WINDOWS\system32\jsproxy.dll
2010-02-25 08:18:52 ----A---- C:\WINDOWS\system32\iertutil.dll
2010-02-25 08:18:51 ----A---- C:\WINDOWS\system32\iepeers.dll
2010-02-25 08:18:48 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2010-02-24 11:53:12 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2010-02-14 17:17:18 ----D---- C:\WINDOWS\system32\spool
2010-02-14 17:15:28 ----D---- C:\WINDOWS\system32\mui
2010-02-14 12:23:42 ----SD---- C:\Documents and Settings\Petr\Data aplikací\Microsoft
2010-02-13 19:58:05 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-13 18:54:12 ----D---- C:\WINDOWS\SoftwareDistribution

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 avgio;avgio; \??\D:\Programy\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2001-08-10 3252]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-06-20 225856]
R1 VIAPFD;VIAPFD; C:\WINDOWS\System32\Drivers\VIAPFD.SYS [2001-12-18 3279]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2004-06-29 1268204]
R3 ALCXWDM;Service for Avance AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2002-06-12 654604]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2009-02-26 3565568]
R3 RTL8023xp;ZyXEL FN312 10/100 PCI Adapter XP Driver; C:\WINDOWS\system32\DRIVERS\FN312XP.sys [2005-05-02 74496]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 ar8vg74j;ar8vg74j; C:\WINDOWS\system32\drivers\ar8vg74j.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\Petr\LOCALS~1\Temp\catchme.sys []
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NTACCESS;NTACCESS; \??\E:\NTACCESS.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\E:\NTGLM7X.sys []
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 AntiVirService;Avira AntiVir Guard; D:\Programy\Avira\AntiVir Desktop\avguard.exe [2010-03-16 267432]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; D:\Programy\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 JavaQuickStarterService;Java Quick Starter; D:\Programy\Java\bin\jqs.exe [2009-10-11 153376]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; D:\Programy\Spyware Terminator\sp_rsser.exe [2009-10-12 487424]
R2 TabletService;TabletService; C:\WINDOWS\system32\Tablet.exe [2005-12-06 753664]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-04-03 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-02-25 602112]
S4 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-02-25 593920]
S4 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2009-03-22 68096]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

MWAV:

Invalid Entry DllName = appmgmts.dll (in key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{c6dc5466-785a-11d2-84d0-00c04fb169f7}). Action Taken: Deleting Registry Key {c6dc5466-785a-11d2-84d0-00c04fb169f7}.
** Scanning may fail! File Locked [SUSPICIOUS]: C:\WINDOWS\system32\Drivers\sptd.sys (????)
Objekt "Backdoor (IRCBot) Trojans Spyware/Adware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "AntiSpyware Pro XP Corrupted Adware/Spyware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Objekt "PersonalAntispy Corrupted Adware/Spyware" nalezen v souborovém systému! Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\Alg.AlgSetup" odkazuje na neplatný objekt "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\Alg.AlgSetup.1" odkazuje na neplatný objekt "{27D0BCCC-344D-4287-AF37-0C72C161C14C}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\AppleSoftwareUpdate.ASUInstallHost" odkazuje na neplatný objekt "{91A9E6A9-3935-4A37-AFBA-F0904B166364}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\AppleSoftwareUpdate.ASUInstallHost.1" odkazuje na neplatný objekt "{91A9E6A9-3935-4A37-AFBA-F0904B166364}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\AppleSoftwareUpdateAdmin.ASUTaskSched.1" odkazuje na neplatný objekt "{BB46F03E-7CD2-489F-8F95-BB950F395FDB}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\AppleSoftwareUpdateAdmin.ASUTaskSchedul" odkazuje na neplatný objekt "{BB46F03E-7CD2-489F-8F95-BB950F395FDB}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\CTREEVIEW.RadioPlayer.3" odkazuje na neplatný objekt "{E66693FF-45A5-D6B1-A1AD-DF5B7245A7BE}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.DBEngine.35" odkazuje na neplatný objekt "{00000010-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.Field.35" odkazuje na neplatný objekt "{00000014-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.Group.35" odkazuje na neplatný objekt "{00000016-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.Index.35" odkazuje na neplatný objekt "{00000015-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.PrivateDBEngine.35" odkazuje na neplatný objekt "{00000011-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.QueryDef.35" odkazuje na neplatný objekt "{00000018-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.Relation.35" odkazuje na neplatný objekt "{00000019-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.TableDef.35" odkazuje na neplatný objekt "{00000013-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DAO.User.35" odkazuje na neplatný objekt "{00000017-0000-0010-8000-00AA006D2EA4}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DirectAnimation.PathControl" odkazuje na neplatný objekt "{D7A7D7C3-D47F-11D0-89D3-00A0C90833E6}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DirectAnimation.Sequence" odkazuje na neplatný objekt "{4F241DB1-EE9F-11D0-9824-006097C99E51}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DirectAnimation.SequencerControl" odkazuje na neplatný objekt "{B0A6BAE2-AAF0-11D0-A152-00A0C908DB96}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DirectAnimation.SpriteControl" odkazuje na neplatný objekt "{FD179533-D86E-11D0-89D6-00A0C90833E6}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\DirectAnimation.StructuredGraphicsControl" odkazuje na neplatný objekt "{369303C2-D7AC-11D0-89D5-00A0C90833E6}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\JavaPlugin.FamilyVersionSupport" odkazuje na neplatný objekt "{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\KMPlayer.kpl" odkazuje na neplatný objekt "{9EB4C4CB-74C2-4BE9-AA5D-8249F16020AD}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\KMPlayer.ksf" odkazuje na neplatný objekt "{9EB4C4CB-74C2-4BE9-AA5D-8249F16020AD}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\Microsoft.ActiveXPlugin" odkazuje na neplatný objekt "{06DD38D3-D187-11CF-A80D-00C04FD74AD8}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\Microsoft.ActiveXPlugin.1" odkazuje na neplatný objekt "{06DD38D3-D187-11CF-A80D-00C04FD74AD8}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\opendocument.CalcDocument.1" odkazuje na neplatný objekt "{7FA8AE11-B3E3-4D88-AABF-255526CD1CE8}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\opendocument.DrawDocument.1" odkazuje na neplatný objekt "{448BB771-CFE2-47C4-BCDF-1FBF378E202C}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\opendocument.ImpressDocument.1" odkazuje na neplatný objekt "{EE5D1EA4-D445-4289-B2FC-55FC93693917}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\opendocument.MathDocument.1" odkazuje na neplatný objekt "{D2D59CD1-0A6A-4D36-AE20-47817077D57C}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\opendocument.WriterDocument.1" odkazuje na neplatný objekt "{F616B81F-7BB8-4F22-B8A5-47428D59F8AD}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\Plenoptic.Plenoptic" odkazuje na neplatný objekt "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\Plenoptic.Plenoptic.1" odkazuje na neplatný objekt "{607C27E9-AB27-11d3-A116-A0EA50C10801}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\RTCCore.RTCClient" odkazuje na neplatný objekt "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\RTCCore.RTCClient.1" odkazuje na neplatný objekt "{7a42ea29-a2b7-40c4-b091-f6f024aa89be}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\RTCIMSP.RTCIMService" odkazuje na neplatný objekt "{83D4679F-B6D7-11D2-BF36-00C04FB90A03}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\RTCIMSP.RTCIMService.1" odkazuje na neplatný objekt "{83D4679F-B6D7-11D2-BF36-00C04FB90A03}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\soffice.StarCalcDocument.6" odkazuje na neplatný objekt "{7B342DC4-139A-4a46-8A93-DB0827CCEE9C}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\soffice.StarDrawDocument.6" odkazuje na neplatný objekt "{41662FC2-0D57-4aff-AB27-AD2E12E7C273}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\soffice.StarImpressDocument.6" odkazuje na neplatný objekt "{E5A0B632-DFBA-4549-9346-E414DA06E6F8}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\soffice.StarMathDocument.6" odkazuje na neplatný objekt "{D0484DE6-AAEE-468a-991F-8D4B0737B57A}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\soffice.StarWriterDocument.6" odkazuje na neplatný objekt "{30A2652A-DDF7-45e7-ACA6-3EAB26FC8A4E}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\SoftwareUpdate.ASUController" odkazuje na neplatný objekt "{2692A9D5-61DF-46D5-A5A1-A6CCA921D578}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\SoftwareUpdate.ASUController.1" odkazuje na neplatný objekt "{2692A9D5-61DF-46D5-A5A1-A6CCA921D578}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\WMPPublsihCntr.WMPPublsihCntr" odkazuje na neplatný objekt "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKCR\WMPPublsihCntr.WMPPublsihCntr.1" odkazuje na neplatný objekt "{939438A9-CF0F-44d8-9140-599736F0D3A2}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "KB893803". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "KB893803v2". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "KB898461". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "KB926239". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "KB958470". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "Microsoft .NET Framework 2.0". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{1C8DFA71-4079-4F02-B8BB-47B12C1A565F}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{1EFE09D3-6C77-4E6D-876F-76CB30D2056C}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{268789C4-53E6-4DDB-8F33-8D0F9E000BEA}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{298ED0E9-EF39-3BB9-8389-2FE41DC8FC80}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{2D1AC484-E516-408C-8825-ACB1C356AC7A}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{2F3AB6ED-951C-4CE7-8AC9-8546FDCF1F5A}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{309E2514-29D4-405C-B3B1-14D7231BFA16}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{4582C7EB-93F5-408D-9F29-5A5BE1E76845}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{494AD45E-E071-4819-8E15-E1041FBFF073}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{4B296228-DF7C-43EA-8DED-76027355B219}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{690BE098-6D0D-493D-B079-BD7E8F81A141}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{724309E5-E712-426C-B94D-B6B42511C29F}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{81719652-18E0-47B1-9A12-F82BF075D4DB}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{971D6F8B-E8C5-49A4-9ED3-89C010B0D8D2}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{AF5D3F34-843A-41BF-A0F3-2FBBA00BA9B9}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{BEEBFC3C-48B1-4A38-A3C5-81BA19DF5F40}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{C96D1542-585F-412D-8C5A-0240BDA164B9}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{CF24EDF1-E236-4332-83CB-4C701A9BCBF0}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{DAC0309E-07F6-45AD-B5BF-5B0DEF71FFEE}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{DB164C6E-8E4A-4730-97C6-DE8486EB367F}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{DF76B188-11DB-43DC-A389-10422995A979}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{ECD82B28-48BE-426C-B55B-6EC022616285}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{F0B7330E-24B8-43EA-8CD6-D114428A1CEC}". Provedené akce: Ponecháno, neodstraněno!.
Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "{F4D03C19-DCA0-4B09-83E7-BE3B06C8D4DC}". Provedené akce: Ponecháno, neodstraněno!.
Soubor D:\dokumenty\Hudba\Hungry Lucy\HUNGRY LUCY - To Kill A King [2004]\Desktop_.ini je infikovaný virem VB.CO.Leftover !! Provedené akce: Ponecháno, neodstraněno!.


Tak snad tyto informace postačí, reinstal systému se mi moc dělat nechce...
Předem dík.

[Jabkozrout]

Teď nevím, zda to, že se honím za tím driverem od daemon tools je řeším celého problém.
Pro jistotu tu teda dím ještě ten log z toho COMBOFIXu, když už jsem ho teda dělal...

ComboFix 10-04-04.01 - Petr 05.04.2010 14:24:16.3.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.767.493 [GMT 2:00]
Spuštěný z: c:\documents and settings\Petr\Plocha\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\regedit.com
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-05 do 2010-04-05 )))))))))))))))))))))))))))))))
.

2010-04-05 11:16 . 2010-04-05 11:56 -------- d-----w- c:\program files\trend micro
2010-04-05 11:16 . 2010-04-05 11:16 -------- d-----w- C:\rsit
2010-04-05 09:14 . 2010-04-05 09:14 -------- d---a-w- c:\windows\VDLL.DLL
2010-04-05 09:14 . 2010-04-05 09:14 -------- d---a-w- c:\windows\system32\runouce.exe
2010-04-05 09:14 . 2010-04-05 09:14 -------- d---a-w- c:\windows\RUNDL132.EXE
2010-04-05 09:14 . 2010-04-05 09:14 -------- d---a-w- c:\windows\logo_1.exe
2010-04-05 09:10 . 2010-04-05 09:10 632064 ----a-w- c:\windows\system32\msvcr80.dll
2010-04-05 09:10 . 2010-04-05 09:10 554240 ----a-w- c:\windows\system32\msvcp80.dll
2010-04-05 09:10 . 2010-04-05 09:10 34048 ----a-w- c:\windows\system32\eEmpty.exe
2010-04-05 09:10 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2010-04-05 09:10 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2010-04-05 09:10 . 2010-04-05 09:10 -------- d-----w- c:\program files\Common Files\MicroWorld
2010-04-04 19:44 . 2010-04-04 19:44 2 --shatr- c:\windows\winstart.bat
2010-03-19 17:07 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-03-11 12:45 . 2009-10-23 15:28 3558912 -c----w- c:\windows\system32\dllcache\moviemk.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-05 12:22 . 2009-04-03 20:55 12941 ----a-w- c:\windows\system32\tablet.dat
2010-04-02 20:53 . 2002-09-23 12:00 78052 ----a-w- c:\windows\system32\perfc005.dat
2010-04-02 20:53 . 2002-09-23 12:00 429024 ----a-w- c:\windows\system32\perfh005.dat
2010-03-01 07:05 . 2010-02-13 00:28 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-02-27 03:14 . 2009-03-21 21:39 76487 ----a-w- c:\windows\PCHealth\HelpCtr\OfflineCache\index.dat
2010-02-27 03:14 . 2009-03-21 21:39 2982 ----a-w- c:\windows\PCHealth\HelpCtr\PackageStore\SkuStore.bin
2010-02-27 02:44 . 2010-02-27 02:44 -------- d-----w- c:\program files\Windows Media Connect 2
2010-02-25 06:18 . 2002-09-23 12:00 916480 ------w- c:\windows\system32\wininet.dll
2010-02-16 11:24 . 2010-02-13 00:28 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-02-14 15:17 . 2010-02-14 15:17 -------- d-----w- c:\program files\MSBuild
2010-02-14 15:17 . 2010-02-14 15:17 -------- d-----w- c:\program files\Reference Assemblies
2010-02-14 15:13 . 2010-02-14 15:13 -------- d-----w- c:\program files\MSXML 6.0
2010-02-14 02:45 . 2010-02-14 02:45 -------- d-----w- c:\program files\MSXML 4.0
2010-02-13 17:58 . 2009-03-21 22:23 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-12-25 23:02 . 2009-12-25 23:02 848 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2002-06-14 46592]
"SpywareTerminator"="d:\programy\Spyware Terminator\SpywareTerminatorShield.exe" [2009-10-12 2171904]
"avgnt"="d:\programy\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 88363]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-03-13 39264]

c:\documents and settings\Petr\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^TabUserW.exe.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\TabUserW.exe.lnk
backup=c:\windows\pss\TabUserW.exe.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Petr^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.0.lnk]
path=c:\documents and settings\Petr\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
backup=c:\windows\pss\OpenOffice.org 3.0.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]
2003-12-12 10:31 335872 ----a-w- c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2008-12-29 10:40 687560 ----a-w- d:\programy\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup]
2005-08-11 15:30 249856 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler]
2005-08-11 15:30 81920 ----a-w- c:\program files\Common Files\InstallShield\UpdateService\issch.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
2009-10-12 20:41 3055616 ----a-w- d:\programy\Spyware Terminator\SpywareTerminatorUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-10-11 03:17 149280 ----a-w- d:\programy\Java\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"ATI Smart"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Hry\\Unreal\\Unreal\\System\\UnrealTournament.exe"=
"d:\\Programy\\Opera\\opera.exe"=
"d:\\Hry\\zu onliene\\ZU-ONLINE\\BT_Update.exe"=
"d:\\Hry\\zu onliene\\ZU-ONLINE\\ZuOnline.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [12.10.2009 22:41 142592]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;d:\programy\Avira\AntiVir Desktop\sched.exe [13.2.2010 2:28 135336]
S0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\e:\ntglm7x.sys --> e:\NTGLM7X.sys [?]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
mStart Page = about:blank
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-05 14:28
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(568)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-04-05 14:30:08
ComboFix-quarantined-files.txt 2010-04-05 12:30

Před spuštěním: 717 053 952
Po spuštění: 1 016 590 336

- - End Of File - - 455B20FC4B8053688F9963F1C56FEFFC

[Jabkozrout]

MOC DÍKY !