Zmrazení a restrart

[psychous3]

Už delší dobu mám problém,několikrát za den my "zamrzne" a neb ose samovolně restartuje PC,podle logu,který vypadá čistý je vše v pořádku,zdá se mi že tu mám Spyware (doufám že to píši dobře),ale Ad-Aware nic nenajde nevíte čím to je?

[Rudy]

Dejte log z RSIT: http://viry.cz/forum/viewtopic.php?f=24&t=81939 .

[psychous3]

tady je ten log z RSIT
Logfile of random's system information tool 1.06 (written by random/random)
Run by computer at 2010-04-28 20:16:25
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 55 GB (29%) free of 191 GB
Total RAM: 2047 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:16:33, on 28.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\tsnp325.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\vsnp325.exe
C:\PROGRA~1\INTERN~2\MEDIAKEY.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe
C:\PROGRA~1\INTERN~2\KBOSDCtl.EXE
C:\PROGRA~1\INTERN~2\KCodeMsg.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\OETRN.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\Product Assistant\bin\hprblog.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Documents and Settings\computer\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\computer.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = About:Blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINDOWS\WebIE.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\WINDOWS\WebIE.dll
O4 - HKLM\..\Run: [Zástupce stránky vlastností sběrnice High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [tsnp325] C:\WINDOWS\tsnp325.exe
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [snp325] C:\WINDOWS\vsnp325.exe
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\INTERN~2\MEDIAKEY.EXE
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [USB2Check] RUNDLL32.EXE "C:\WINDOWS\system32\PCLECoInst.dll",CheckUSBController
O4 - HKLM\..\Run: [RTBatteryMeter] C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU\..\Run: [OEXPRESS] C:\WINDOWS\OETRN.EXE
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: RAID Manager.lnk = ?
O4 - Global Startup: Sam.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O24 - Desktop Component 0: (no name) - http://affenknecht.com/images/biography/chris.jpg

--
End of file - 9547 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\WINDOWS\WebIE.dll [2009-11-01 491520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-09 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\WINDOWS\WebIE.dll [2009-11-01 491520]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Zástupce stránky vlastností sběrnice High Definition Audio"=C:\WINDOWS\system32\HDAudPropShortcut.exe [2004-03-17 61952]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"Control Center"=C:\Program Files\ASUS\WLAN Card Utilities\Center.exe [2004-08-13 1557504]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2007-12-21 1443072]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"tsnp325"=C:\WINDOWS\tsnp325.exe [2007-04-21 270336]
"FixCamera"=C:\WINDOWS\FixCamera.exe [2007-07-11 20480]
"snp325"=C:\WINDOWS\vsnp325.exe [2007-05-10 835584]
"MediaKey"=C:\PROGRA~1\INTERN~2\MEDIAKEY.EXE [2000-08-01 73728]
"SW20"=C:\WINDOWS\system32\sw20.exe [2005-06-30 200704]
"SW24"=C:\WINDOWS\system32\sw24.exe [2005-07-04 69632]
"nwiz"=nwiz.exe /installquiet []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-11-20 12669544]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit []
"USB2Check"=C:\WINDOWS\system32\PCLECoInst.dll [2005-12-21 73728]
"RTBatteryMeter"=C:\Program Files\VibrateGameDeviceDriver\RFPIcon.exe [2003-01-16 49152]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
"OEXPRESS"=C:\WINDOWS\OETRN.EXE [2009-11-01 26624]
"WEBTRAN"= []
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe -silent []
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
RAID Manager.lnk - C:\Program Files\ITE\ITE IT8212 ATA RAID Controller\RaidMgr.exe
Sam.lnk - C:\Program Files\Silicon Image\Sam\sam.jar

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat"="C:\Program Files\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\Program Files\Pinnacle\Studio 10\programs\RM.exe"="C:\Program Files\Pinnacle\Studio 10\programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe"="C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile"
"C:\Program Files\Pinnacle\Studio 10\programs\umi.exe"="C:\Program Files\Pinnacle\Studio 10\programs\umi.exe:*:Enabled:umi"
"C:\Program Files\TmNationsForever\TmForever.exe"="C:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\FlightGear\bin\Win32\fgfs.exe"="C:\Program Files\FlightGear\bin\Win32\fgfs.exe:*:Enabled:fgfs"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"C:\Program Files\Codemasters\DiRT2\dirt2_game.exe"="C:\Program Files\Codemasters\DiRT2\dirt2_game.exe:*:Enabled:DiRT2"
"C:\Documents and Settings\computer\Dokumenty\Stažené soubory\MTGOIII_Helper.exe"="C:\Documents and Settings\computer\Dokumenty\Stažené soubory\MTGOIII_Helper.exe:*:Enabled:Magic: The Gathering Online III"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{746cfa7e-c6f4-11de-aaa5-0011d8184185}]
shell\AutoRun\command - F:\autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e687af9e-fc75-11de-ab55-0011d8184185}]
shell\AutoRun\command - F:\Launcher.exe


======List of files/folders created in the last 1 months======

2010-04-22 16:59:28 ----D---- C:\Documents and Settings\computer\Data aplikací\Sports Interactive
2010-04-21 14:00:28 ----A---- C:\WINDOWS\MBR.exe
2010-04-21 14:00:27 ----A---- C:\WINDOWS\NIRCMD.exe
2010-04-21 14:00:23 ----A---- C:\WINDOWS\PEV.exe
2010-04-21 14:00:22 ----A---- C:\WINDOWS\SWREG.exe
2010-04-21 14:00:21 ----A---- C:\WINDOWS\zip.exe
2010-04-21 14:00:21 ----A---- C:\WINDOWS\grep.exe
2010-04-21 14:00:20 ----A---- C:\WINDOWS\sed.exe
2010-04-21 14:00:19 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-04-21 14:00:19 ----A---- C:\WINDOWS\SWSC.exe
2010-04-21 13:59:54 ----D---- C:\WINDOWS\ERDNT
2010-04-21 13:56:33 ----SD---- C:\ComboFix
2010-04-21 13:47:10 ----D---- C:\Qoobox
2010-04-21 13:40:20 ----D---- C:\Program Files\trend micro
2010-04-21 13:40:19 ----D---- C:\rsit
2010-04-20 21:29:24 ----D---- C:\Program Files\Google
2010-04-20 21:29:15 ----DC---- C:\Documents and Settings\All Users\Data aplikací\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-04-20 21:28:35 ----D---- C:\Program Files\Lavasoft
2010-04-17 19:47:50 ----D---- C:\Documents and Settings\computer\Data aplikací\Wizards of the Coast
2010-04-17 19:46:52 ----D---- C:\Program Files\Wizards of the Coast
2010-04-14 22:19:56 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-14 22:19:42 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-14 22:17:31 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-14 22:17:22 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-14 22:17:10 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-14 22:16:29 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-14 13:38:43 ----D---- C:\Program Files\Counter-Strike 1.6
2010-04-11 14:22:02 ----D---- C:\Program Files\EA Sports
2010-04-06 23:47:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\Codemasters
2010-04-06 23:29:01 ----RA---- C:\WINDOWS\system32\tmp1634.tmp
2010-04-06 23:29:01 ----RA---- C:\WINDOWS\system32\tmp1633.tmp
2010-04-06 21:21:15 ----A---- C:\WINDOWS\wininit.ini
2010-04-06 15:06:05 ----D---- C:\ProgramData
2010-04-06 15:06:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
2010-04-05 18:54:26 ----A---- C:\WINDOWS\system32\mkl_vml_p4.dll
2010-04-05 18:54:26 ----A---- C:\WINDOWS\system32\mkl_vml_p3.dll
2010-04-05 18:54:26 ----A---- C:\WINDOWS\system32\mkl_vml_def.dll
2010-04-05 18:54:26 ----A---- C:\WINDOWS\system32\mkl_p4.dll
2010-04-05 18:54:25 ----A---- C:\WINDOWS\system32\mkl_p3.dll
2010-04-05 18:54:25 ----A---- C:\WINDOWS\system32\mkl_lapack64.dll
2010-04-05 18:54:25 ----A---- C:\WINDOWS\system32\mkl_lapack32.dll
2010-04-05 18:54:24 ----A---- C:\WINDOWS\system32\rapture3d_oal.dll
2010-04-05 18:54:24 ----A---- C:\WINDOWS\system32\mkl_def.dll
2010-04-05 18:54:24 ----A---- C:\WINDOWS\system32\libguide40.dll
2010-04-05 18:54:17 ----D---- C:\Program Files\BRS
2010-04-05 18:52:08 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2010-04-05 18:52:06 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2010-04-05 18:51:42 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2010-04-05 18:51:15 ----RA---- C:\WINDOWS\system32\tmp8C1.tmp
2010-04-05 18:51:15 ----D---- C:\Program Files\OpenAL
2010-04-05 18:51:14 ----RA---- C:\WINDOWS\system32\tmp8C0.tmp
2010-04-05 18:51:11 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2010-04-05 18:51:10 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2010-04-05 18:51:09 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2010-04-05 18:51:07 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2010-04-05 18:51:05 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2010-04-05 18:51:02 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2010-04-05 18:51:02 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2010-04-05 18:51:00 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2010-04-05 18:50:59 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2010-04-05 18:50:59 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2010-04-05 18:50:58 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2010-04-05 18:50:57 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2010-04-05 18:50:56 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2010-04-05 18:50:56 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2010-04-05 18:50:54 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2010-04-05 18:50:52 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2010-04-05 18:50:52 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2010-04-05 18:50:51 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2010-04-05 18:50:50 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2010-04-05 18:50:48 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2010-04-05 18:50:48 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2010-04-05 18:50:47 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2010-04-05 18:50:46 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2010-04-05 18:50:46 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2010-04-05 18:50:44 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2010-04-05 18:50:43 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2010-04-05 18:50:43 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2010-04-05 18:50:42 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2010-04-05 18:50:40 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2010-04-05 18:50:39 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2010-04-05 18:50:39 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2010-04-05 18:50:38 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2010-04-05 18:50:37 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2010-04-05 18:50:35 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2010-04-05 18:50:34 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2010-04-05 18:50:33 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2010-04-05 18:50:32 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2010-04-05 18:50:30 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2010-04-05 18:50:28 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2010-04-05 18:50:26 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2010-04-05 18:50:26 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2010-04-05 18:50:24 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2010-04-05 18:50:22 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2010-04-05 18:50:19 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2010-04-05 18:50:19 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2010-04-05 18:50:16 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2010-04-05 18:50:14 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2010-04-05 18:50:14 ----A---- C:\WINDOWS\system32\x3daudio1_2.dll
2010-04-05 18:50:12 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2010-04-05 18:50:12 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2010-04-05 18:50:11 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2010-04-05 18:50:10 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2010-04-05 18:50:08 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2010-04-05 18:50:06 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2010-04-05 18:50:06 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2010-04-05 18:50:04 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2010-04-05 18:49:59 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2010-04-05 18:49:59 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2010-04-05 18:49:58 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2010-04-05 18:49:58 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2010-04-05 18:49:57 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2010-04-05 18:49:56 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2010-04-05 18:49:55 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2010-04-05 18:49:55 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2010-04-05 18:49:55 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2010-04-05 18:49:55 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2010-04-05 18:49:54 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2010-04-05 18:49:44 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2010-04-05 18:49:44 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-04-05 18:49:43 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2010-04-05 18:49:43 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2010-04-05 18:49:42 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2010-04-05 18:49:42 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2010-04-05 18:49:42 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2010-04-05 18:49:41 ----A---- C:\WINDOWS\system32\d3dx9_26.dll
2010-04-05 18:49:41 ----A---- C:\WINDOWS\system32\d3dx9_25.dll
2010-04-05 18:49:41 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2010-04-05 18:33:55 ----D---- C:\Program Files\Codemasters
2010-03-31 20:19:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-03-31 20:19:16 ----A---- C:\WINDOWS\system32\javaws.exe
2010-03-31 20:19:15 ----A---- C:\WINDOWS\system32\javaw.exe
2010-03-31 20:19:15 ----A---- C:\WINDOWS\system32\java.exe

======List of files/folders modified in the last 1 months======

2010-04-28 20:16:33 ----D---- C:\WINDOWS\Prefetch
2010-04-28 20:16:15 ----D---- C:\WINDOWS\Temp
2010-04-28 20:12:52 ----D---- C:\WINDOWS\system32
2010-04-28 20:12:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-04-28 20:11:53 ----D---- C:\Program Files\Mozilla Firefox
2010-04-28 20:10:58 ----D---- C:\FOTKY
2010-04-28 20:10:00 ----D---- C:\WINDOWS
2010-04-28 20:10:00 ----A---- C:\WINDOWS\MAILTRAN.INI
2010-04-28 20:08:40 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-28 17:32:02 ----D---- C:\MACEK
2010-04-27 20:19:43 ----D---- C:\Documents and Settings\computer\Data aplikací\Skype
2010-04-27 19:43:58 ----D---- C:\Documents and Settings\computer\Data aplikací\skypePM
2010-04-27 16:28:08 ----A---- C:\WINDOWS\NeroDigital.ini
2010-04-27 15:56:39 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-21 16:34:51 ----D---- C:\WINDOWS\system32\drivers
2010-04-21 14:56:18 ----D---- C:\Program Files\DAEMON Tools Lite
2010-04-21 14:54:28 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-04-21 14:00:18 ----SHD---- C:\System Volume Information
2010-04-21 14:00:18 ----D---- C:\WINDOWS\system32\Restore
2010-04-21 13:40:20 ----RD---- C:\Program Files
2010-04-20 21:29:24 ----HD---- C:\Config.Msi
2010-04-20 21:29:23 ----SHD---- C:\WINDOWS\Installer
2010-04-20 21:29:22 ----D---- C:\WINDOWS\WinSxS
2010-04-20 21:28:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-04-17 19:54:32 ----RSD---- C:\WINDOWS\assembly
2010-04-17 19:54:12 ----D---- C:\WINDOWS\system32\DirectX
2010-04-17 19:54:05 ----D---- C:\temp
2010-04-17 19:46:39 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-17 15:49:15 ----HD---- C:\WINDOWS\inf
2010-04-17 14:22:20 ----A---- C:\WINDOWS\TRNCOM.INI
2010-04-14 22:20:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-04-14 22:20:00 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-14 22:19:54 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-14 22:19:51 ----A---- C:\WINDOWS\imsins.BAK
2010-04-14 16:20:58 ----D---- C:\Program Files\Valve
2010-04-12 14:36:34 ----D---- C:\Program Files\World of Warcraft
2010-04-10 12:16:16 ----D---- C:\Program Files\Internet Keyboard
2010-04-06 23:29:01 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2010-04-06 23:29:01 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2010-04-06 21:59:42 ----D---- C:\PROGRAMY
2010-04-06 21:30:54 ----D---- C:\FILIP
2010-04-06 21:28:16 ----D---- C:\VILO
2010-04-06 21:26:46 ----D---- C:\Program Files\Railroad Tycoon II - Platinum
2010-04-06 21:12:06 ----A---- C:\WINDOWS\win.ini
2010-04-06 20:53:22 ----D---- C:\Documents and Settings\computer\Data aplikací\Adobe
2010-04-06 19:52:54 ----A---- C:\WINDOWS\system32\MRT.exe
2010-04-05 19:33:35 ----D---- C:\Program Files\Electronic Arts
2010-04-05 18:51:44 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-04-05 10:23:04 ----D---- C:\Program Files\FlatOut2
2010-03-31 20:19:09 ----D---- C:\Program Files\Java
2010-03-31 15:54:46 ----D---- C:\Program Files\Internet Explorer
2010-03-29 20:41:13 ----A---- C:\WINDOWS\WTRAN32.INI
2010-03-29 16:25:18 ----A---- C:\WINDOWS\WDICT32.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2007-12-21 53768]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2007-12-21 71176]
R2 ubumapi;Unibrain 1394 FireAPI Driver; C:\WINDOWS\system32\DRIVERS\ubumapi.sys [2004-06-01 29440]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
R3 cmudax;C-Media High Definition Audio Interface; C:\WINDOWS\system32\drivers\cmudax.sys [2004-07-27 1258432]
R3 DynCal;Dynamic Calibration Service; C:\WINDOWS\system32\drivers\Dyncal.sys [2007-11-07 12928]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2007-12-21 30728]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 KBFiltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\KBFiltr.sys [2000-04-07 13620]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-06-02 171008]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-11-21 10235968]
R3 SNP325;USB PC Camera (SNPSTD325); C:\WINDOWS\system32\DRIVERS\snp325.sys [2007-07-24 10394624]
R3 ubohci;Unibrain 1394 OHCI Driver; C:\WINDOWS\system32\DRIVERS\ubohci.sys [2004-06-01 70528]
R3 ubsbp2;Unibrain SBP2 Bus Driver; C:\WINDOWS\system32\DRIVERS\ubsbp2.sys [2004-06-01 31872]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 W8100XP;Marvell Libertas 802.11b/g SoftAP Driver for Windows XP ; C:\WINDOWS\system32\DRIVERS\mrv8ka51.sys [2004-05-20 258560]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2004-06-16 180480]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aqjk9u9l;aqjk9u9l; C:\WINDOWS\system32\drivers\aqjk9u9l.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 DCamUSBEMPIA;Dazzle DVC Video Device; C:\WINDOWS\system32\DRIVERS\emDevice.sys [2005-12-21 100957]
S3 emAudio;Dazzle DVC Audio Device; C:\WINDOWS\system32\drivers\emAudio.sys [2005-12-21 19712]
S3 esihdrv;esihdrv; \??\C:\DOCUME~1\computer\LOCALS~1\Temp\esihdrv.sys []
S3 FiltUSBEMPIA;USB Device Lower Filter; C:\WINDOWS\system32\DRIVERS\emFilter.sys [2005-12-21 5245]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;Ovladač funkcí Microsoft UAA pro služby sběrnice High Definition Audio; C:\WINDOWS\system32\drivers\HdAudio.sys [2004-03-17 113664]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2009-10-06 17664]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2009-10-06 22016]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2009-10-06 136704]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2009-10-06 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PRODIGY;PRODIGY; C:\WINDOWS\System32\Drivers\PRODIGY.SYS [2006-08-29 32377]
S3 ScanUSBEMPIA;USB Still Image Capture Device; C:\WINDOWS\system32\DRIVERS\emScan.sys [2005-12-21 4493]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2009-10-06 7936]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2009-10-06 7936]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2007-12-21 468224]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-09 153376]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-11-20 154216]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2007-12-21 19200]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-10-27 657408]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Nic nebezpečného v logu nevidím. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log.

[psychous3]

Mám provést >rychlý sken
>úplný sken
>bleskový sken
zatím provedu rychlý sken

[psychous3]

Právě mi dojel Rychlý sken...naško mi to 2 Trojany mám je odstranit?? (jeden bude nejspíše KEYGEN a ten druhý nevím) ,nejde přiložit Protokol....

[Rudy]

Nic nebezpečného v logu nevidím. Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log.

O jako trojany jde?

[psychous3]

Nevím jak se dělá v tom programu log,pridávám jsméno Trojana (tedy jenom název) Trojan.Chifrax
Mám je smazat?

[psychous3]

Tady je log (zjistil to)
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 4049

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

29.4.2010 20:54:01
mbam-log-2010-04-29 (20-54-01).txt

Typ skenu: Úplný sken (C:\|D:\|E:\|)
Skenované objekty: 200014
Uplynulý čas: 59 minuta(y), 15 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 1
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe (Trojan.Chifrax) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Documents and Settings\computer\Local Settings\Temp\Setup.exe (Trojan.Chifrax) -> No action taken.

[Rudy]

Vše, co našel, smažte.

[psychous3]

Dávám sem to co mi vyskočilo po dokončení odstranění virů
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 4049

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

30.4.2010 14:28:35
mbam-log-2010-04-30 (14-28-35).txt

Typ skenu: Rychlý sken
Skenované objekty: 115524
Uplynulý čas: 10 minuta(y), 4 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 1
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Setup.exe (Trojan.Chifrax) -> Quarantined and deleted successfully.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Documents and Settings\computer\Local Settings\Temp\Setup.exe (Trojan.Chifrax) -> Quarantined and deleted successfully.

[Rudy]

Vše smazáno. Nastala nějaká změna?

[psychous3]

Zatím ANO dnes se nic nestalo DÍKY MOC!!!
Odteď budu věrný tomuto foru!!! v

[Rudy]

Odteď budu věrný tomuto foru!!!

To nás těší. Nemáte zač!

[psychous3]