Zasekávájící se hudba s myší a podivné chování Windows

[Korialis]

Zdravim, poslední dobou se mi stává problém, že se mi zasekává spuštěná hudba nebo zvuky a většinou i myš, a to při prohlížení stránek na internetu, stahování a občas jen tak. Děje se to při celkem velkých a náhlých zvýšeních zatážení procesoru.
Antivir mám ESET Smart Security, při prohlížení PC nic nenašel, ale na to se asi nemůžu spolehnout... něják sem tu neměl žádné problémy s viry, jen jednou mi tu vyjela modrá obrazovka s nějákým anglickým textem.. zachytil sem jen něco ve smylsu, že byl počítač napaden nebezpečným útokem.
Poslední dobou mi PC i podivně blbne a po restartu mi to vypíše, že byl počítač zotaven z chyb.
Proto prosím o pomoc při čištění a rád bych nějáký popis toho, co mám dělat. Asi před rokem sem použil Combofix, který tu zmiňujete, ale nemám s tim dobré zkušenosti, protože mi pak přestal fungovat autorun a po přečtení jednoho podpisu na fóru, že může zničit systém, mám v něj nedůvěuj ještě větší.
V tomhle čištění se nevyznám a sem z toho celkem vystrašený, proto bych byl vděčný za každou radu.

[Rudy]

Dejte log z RSIT: http://viry.cz/forum/viewtopic.php?f=24&t=81939 .

[Black-g]

Zkusim ti pomoct....
Takže http://www.malwarebytes.org/
Tady tohle si stáhněte a projeďte PC pak log dejte sem....a když si nebudu vědět rady tak to nechám někomu více zkušenému OK?
Jinak hudba se mi taky sekala ale jak mi pomohli tady na fóru tak je to OK

[Korialis]

Tak prvně sem dám log z prvního zde zmiňovaného programu:
Nebyl by k tomu druhému nějáký návod?

Logfile of random's system information tool 1.08 (written by random/random)
Run by Erich at 2010-10-11 21:24:09
Microsoft Windows 7 Ultimate
System drive C: has 89 GB (57%) free of 156 GB
Total RAM: 3327 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:24:27, on 11.10.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\soundman.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Erich\Desktop\RSIT.exe
C:\Program Files\trend micro\Erich.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Erich\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\Erich\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [reset] regedit /s reset.reg
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Erich\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe

--
End of file - 7204 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1591573108-4114605597-248233602-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1591573108-4114605597-248233602-1000UA.job
C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\Windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Users\Erich\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2010-08-12 149968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-27 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"reset"=regedit /s reset.reg []
"NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"SoundMan"=C:\Windows\SOUNDMAN.EXE [2005-08-17 90112]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-07-22 402432]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-09-08 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-09-24 421160]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2009-02-06 2021400]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"Google Update"=C:\Users\Erich\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-26 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QIP Internet Guardian]
C:\Users\Erich\AppData\Roaming\QipGuard\QipGuard.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-10-11 21:24:09 ----D---- C:\rsit
2010-10-11 21:24:09 ----D---- C:\Program Files\trend micro
2010-10-09 23:03:44 ----D---- C:\Program Files\Microsoft Silverlight
2010-10-08 18:37:28 ----D---- C:\Windows\Sun
2010-10-06 18:26:09 ----D---- C:\Program Files\ESET
2010-10-06 15:56:07 ----A---- C:\Windows\system32\drivers\cpuz134_x32.sys
2010-10-06 15:56:05 ----D---- C:\Program Files\CPUID
2010-10-05 17:26:45 ----D---- C:\Users\Erich\AppData\Roaming\TeamViewer
2010-10-05 17:26:35 ----D---- C:\Program Files\TeamViewer
2010-10-03 13:56:57 ----D---- C:\Users\Erich\AppData\Roaming\IrfanView
2010-10-03 13:56:54 ----D---- C:\Program Files\IrfanView
2010-10-03 10:36:46 ----D---- C:\Users\Erich\AppData\Roaming\HandBrake
2010-10-03 10:36:40 ----D---- C:\Program Files\Handbrake
2010-10-03 09:51:26 ----D---- C:\Program Files\Windows Media Player
2010-10-03 09:51:24 ----D---- C:\Windows\ehome
2010-09-30 22:18:55 ----D---- C:\Program Files\iPod
2010-09-30 22:18:54 ----D---- C:\Program Files\iTunes
2010-09-30 22:12:13 ----D---- C:\Program Files\QuickTime
2010-09-29 22:25:20 ----D---- C:\Program Files\JoWooD
2010-09-29 21:55:55 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-09-29 21:55:55 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-09-29 21:55:54 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-09-29 21:55:54 ----A---- C:\Windows\system32\D3DX9_37.dll
2010-09-29 21:55:54 ----A---- C:\Windows\system32\d3dx10_37.dll
2010-09-29 21:55:54 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2010-09-29 21:55:53 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-09-29 21:55:53 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-09-29 21:55:53 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-09-29 21:55:52 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-09-29 21:55:52 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-09-29 21:55:51 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-09-29 21:55:51 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-09-29 21:55:51 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-09-29 21:55:50 ----A---- C:\Windows\system32\xinput1_3.dll
2010-09-29 21:55:50 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-09-29 21:55:50 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-09-29 21:55:50 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-09-29 21:55:50 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-09-29 21:55:50 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-09-29 21:55:49 ----A---- C:\Windows\system32\xactengine2_7.dll
2010-09-29 21:55:49 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-09-29 21:55:49 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-09-29 21:55:48 ----A---- C:\Windows\system32\xactengine2_6.dll
2010-09-29 21:55:48 ----A---- C:\Windows\system32\xactengine2_5.dll
2010-09-29 21:55:48 ----A---- C:\Windows\system32\d3dx9_33.dll
2010-09-29 21:55:47 ----A---- C:\Windows\system32\xactengine2_4.dll
2010-09-29 21:55:47 ----A---- C:\Windows\system32\x3daudio1_1.dll
2010-09-29 21:55:47 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-09-29 21:55:47 ----A---- C:\Windows\system32\d3dx10.dll
2010-09-29 21:55:45 ----A---- C:\Windows\system32\xinput1_2.dll
2010-09-29 21:55:45 ----A---- C:\Windows\system32\xinput1_1.dll
2010-09-29 21:55:45 ----A---- C:\Windows\system32\xactengine2_3.dll
2010-09-29 21:55:45 ----A---- C:\Windows\system32\xactengine2_2.dll
2010-09-29 21:55:44 ----A---- C:\Windows\system32\xactengine2_1.dll
2010-09-29 21:55:35 ----A---- C:\Windows\system32\d3dx9_30.dll
2010-09-29 21:55:34 ----A---- C:\Windows\system32\xactengine2_0.dll
2010-09-29 21:55:34 ----A---- C:\Windows\system32\x3daudio1_0.dll
2010-09-29 21:55:34 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-09-29 21:55:34 ----A---- C:\Windows\system32\d3dx9_28.dll
2010-09-29 21:55:33 ----A---- C:\Windows\system32\d3dx9_27.dll
2010-09-29 21:55:33 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-09-29 21:55:32 ----A---- C:\Windows\system32\d3dx9_24.dll
2010-09-29 21:49:43 ----D---- C:\Program Files\Piranha Bytes
2010-09-29 21:49:10 ----D---- C:\Users\Erich\AppData\Roaming\InstallShield
2010-09-29 14:27:39 ----A---- C:\Windows\system32\drivers\ks.sys
2010-09-29 13:46:02 ----A---- C:\Windows\system32\tzres.dll
2010-09-28 12:45:29 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-09-28 12:37:06 ----D---- C:\Program Files\Common Files\Adobe AIR
2010-09-27 14:42:12 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-09-27 12:15:05 ----D---- C:\Windows\Minidump
2010-09-27 00:04:45 ----D---- C:\Users\Erich\AppData\Roaming\VitySoft
2010-09-27 00:04:30 ----D---- C:\ProgramData\Sun
2010-09-27 00:04:29 ----D---- C:\Program Files\Common Files\Java
2010-09-27 00:04:05 ----A---- C:\Windows\system32\javaws.exe
2010-09-27 00:04:05 ----A---- C:\Windows\system32\javaw.exe
2010-09-27 00:04:05 ----A---- C:\Windows\system32\java.exe
2010-09-27 00:04:05 ----A---- C:\Windows\system32\deployJava1.dll
2010-09-27 00:03:39 ----D---- C:\Program Files\Java
2010-09-26 23:59:08 ----D---- C:\Program Files\FreeRapid
2010-09-26 14:12:14 ----D---- C:\Users\Erich\AppData\Roaming\Opera
2010-09-26 14:11:41 ----D---- C:\Program Files\Opera
2010-09-26 13:23:01 ----D---- C:\ProgramData\Motive
2010-09-25 16:08:35 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-09-25 16:08:34 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-09-25 16:07:19 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-09-24 20:37:03 ----R---- C:\Windows\avrack.ini
2010-09-24 20:36:50 ----D---- C:\Program Files\Realtek AC97
2010-09-24 20:28:03 ----D---- C:\Program Files\Realtek Sound Manager
2010-09-24 20:24:53 ----D---- C:\Program Files\AvRack
2010-09-24 20:21:05 ----RA---- C:\Windows\system32\drivers\alcxwdm.sys
2010-09-24 20:18:36 ----R---- C:\Windows\system32\ChCfg.exe
2010-09-24 20:16:43 ----R---- C:\Windows\alcupd.exe
2010-09-24 20:16:41 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-24 20:16:07 ----D---- C:\Program Files\Common Files\InstallShield
2010-09-24 19:42:48 ----D---- C:\Windows\system32\appmgmt
2010-09-24 19:23:45 ----D---- C:\Windows\Roaming
2010-09-24 14:45:45 ----A---- C:\Windows\NeroDigital.ini
2010-09-23 17:29:24 ----D---- C:\Program Files\QIP Infium bz™Pack
2010-09-22 21:30:45 ----HD---- C:\Windows\PIF
2010-09-22 21:09:29 ----A---- C:\Windows\RtlRack.ini
2010-09-22 21:08:47 ----D---- C:\Windows\system32\Lang
2010-09-22 20:57:31 ----A---- C:\Windows\SET4612.tmp
2010-09-22 20:57:02 ----A---- C:\Windows\system32\SET511F.tmp
2010-09-22 20:55:39 ----A---- C:\Windows\Ascd_tmp.ini
2010-09-22 18:18:19 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-09-22 18:17:53 ----D---- C:\Program Files\DAEMON Tools Lite
2010-09-22 18:17:08 ----D---- C:\Users\Erich\AppData\Roaming\DAEMON Tools Lite
2010-09-22 18:17:05 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-09-22 17:12:27 ----A---- C:\Windows\AutoKMS.exe
2010-09-22 16:59:02 ----D---- C:\Program Files\Microsoft Synchronization Services
2010-09-22 16:59:01 ----D---- C:\Program Files\Common Files\DESIGNER
2010-09-22 16:58:20 ----D---- C:\Windows\PCHEALTH
2010-09-22 16:58:20 ----D---- C:\Program Files\Microsoft Sync Framework
2010-09-22 16:58:20 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2010-09-22 16:56:49 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-09-22 16:55:36 ----D---- C:\Program Files\Microsoft Analysis Services
2010-09-22 16:54:36 ----D---- C:\Program Files\Microsoft Office
2010-09-22 16:54:35 ----D---- C:\ProgramData\Microsoft Help
2010-09-22 16:54:22 ----RHD---- C:\MSOCache
2010-09-22 16:41:02 ----D---- C:\Program Files\totalcmd
2010-09-22 16:29:13 ----RASH---- C:\MSDOS.SYS
2010-09-22 16:29:13 ----RASH---- C:\IO.SYS
2010-09-22 16:08:20 ----A---- C:\Windows\UC.PIF
2010-09-22 16:08:20 ----A---- C:\Windows\RAR.PIF
2010-09-22 16:08:20 ----A---- C:\Windows\PKZIP.PIF
2010-09-22 16:08:20 ----A---- C:\Windows\PKUNZIP.PIF
2010-09-22 16:08:20 ----A---- C:\Windows\NOCLOSE.PIF
2010-09-22 16:08:20 ----A---- C:\Windows\LHA.PIF
2010-09-22 16:08:20 ----A---- C:\Windows\ARJ.PIF
2010-09-22 16:08:19 ----D---- C:\Users\Erich\AppData\Roaming\GHISLER
2010-09-22 16:02:36 ----D---- C:\Program Files\Guitar Pro 5
2010-09-22 14:39:32 ----D---- C:\Users\Erich\AppData\Roaming\Broad Intelligence
2010-09-22 14:38:42 ----D---- C:\Program Files\MediaCoder iPod Edition
2010-09-22 14:28:20 ----D---- C:\Users\Erich\AppData\Roaming\TS3Client
2010-09-22 14:28:10 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-09-22 14:08:09 ----A---- C:\Windows\system32\unrar.dll
2010-09-22 14:08:08 ----A---- C:\Windows\avisplitter.ini
2010-09-22 14:08:05 ----A---- C:\Windows\system32\yv12vfw.dll
2010-09-22 14:08:05 ----A---- C:\Windows\system32\xvidvfw.dll
2010-09-22 14:08:05 ----A---- C:\Windows\system32\xvidcore.dll
2010-09-22 14:08:05 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-09-22 14:08:05 ----A---- C:\Windows\system32\ff_vfw.dll
2010-09-22 14:07:56 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-21 21:57:58 ----D---- C:\ProgramData\FLEXnet
2010-09-21 21:49:38 ----D---- C:\ProgramData\ESET
2010-09-21 21:44:10 ----D---- C:\Program Files\Adobe Media Player
2010-09-21 21:41:49 ----D---- C:\Program Files\RocketDock
2010-09-21 21:40:20 ----D---- C:\ProgramData\Adobe
2010-09-21 21:40:05 ----D---- C:\Program Files\Adobe
2010-09-21 21:36:15 ----D---- C:\Program Files\Common Files\Adobe
2010-09-21 21:36:05 ----D---- C:\Users\Erich\AppData\Roaming\Apple Computer
2010-09-21 21:35:49 ----DC---- C:\Windows\system32\DRVSTORE
2010-09-21 21:35:49 ----A---- C:\Windows\system32\GEARAspi.dll
2010-09-21 21:35:49 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys
2010-09-21 21:35:14 ----D---- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
2010-09-21 21:28:16 ----D---- C:\ProgramData\Apple Computer
2010-09-21 21:27:04 ----D---- C:\Program Files\Apple Software Update
2010-09-21 21:26:10 ----D---- C:\Program Files\Bonjour
2010-09-21 21:25:53 ----D---- C:\Program Files\Common Files\Apple
2010-09-21 21:07:20 ----D---- C:\Users\Erich\AppData\Roaming\Sony
2010-09-21 21:07:20 ----D---- C:\ProgramData\Sony
2010-09-21 21:05:02 ----D---- C:\Program Files\Common Files\Sony Shared
2010-09-21 21:04:41 ----D---- C:\Program Files\Sony
2010-09-21 21:04:35 ----D---- C:\Program Files\Sony Ericsson
2010-09-21 21:00:12 ----D---- C:\ProgramData\Apple
2010-09-21 20:52:51 ----A---- C:\Windows\system32\TwnLib20.dll
2010-09-21 20:52:47 ----N---- C:\Windows\system32\TwnLib4.dll
2010-09-21 20:52:47 ----N---- C:\Windows\system32\ImagXRA7.dll
2010-09-21 20:52:47 ----N---- C:\Windows\system32\ImagXR7.dll
2010-09-21 20:52:47 ----N---- C:\Windows\system32\ImagXpr7.dll
2010-09-21 20:52:47 ----N---- C:\Windows\system32\ImagX7.dll
2010-09-21 20:52:45 ----N---- C:\Windows\system32\picn20.dll
2010-09-21 20:51:10 ----D---- C:\Program Files\Common Files\Ahead
2010-09-21 20:51:10 ----A---- C:\Windows\system32\NeroCheck.exe
2010-09-21 20:51:04 ----D---- C:\Program Files\Ahead
2010-09-21 20:49:39 ----D---- C:\Users\Erich\AppData\Roaming\PhotoFiltre Studio X
2010-09-21 20:48:28 ----D---- C:\Program Files\PhotoFiltre Studio X
2010-09-21 20:46:55 ----D---- C:\Program Files\PSPad editor
2010-09-21 20:29:46 ----D---- C:\Program Files\GIMP-2.0
2010-09-21 20:22:27 ----D---- C:\Program Files\Fraps
2010-09-21 20:19:24 ----D---- C:\Program Files\CCleaner
2010-09-21 20:17:33 ----D---- C:\Program Files\Barvy
2010-09-21 20:12:53 ----D---- C:\Users\Erich\AppData\Roaming\AnvSoft
2010-09-21 20:12:37 ----D---- C:\Program Files\AnvSoft
2010-09-21 19:37:40 ----D---- C:\Program Files\uTorrent
2010-09-21 19:37:14 ----D---- C:\Users\Erich\AppData\Roaming\uTorrent
2010-09-21 19:13:45 ----D---- C:\Program Files\Microsoft.NET
2010-09-21 18:14:45 ----D---- C:\Users\Erich\AppData\Roaming\skypePM
2010-09-21 18:14:08 ----D---- C:\Users\Erich\AppData\Roaming\Skype
2010-09-21 18:13:06 ----RD---- C:\Program Files\Skype
2010-09-21 18:13:06 ----D---- C:\Program Files\Common Files\Skype
2010-09-21 18:13:02 ----D---- C:\ProgramData\Skype
2010-09-21 17:37:18 ----D---- C:\Program Files\PlayReady
2010-09-21 17:26:20 ----D---- C:\Users\Erich\AppData\Roaming\ESET
2010-09-21 17:01:55 ----D---- C:\Users\Erich\AppData\Roaming\WinRAR
2010-09-21 16:59:25 ----D---- C:\Program Files\WinRAR
2010-09-21 16:45:49 ----D---- C:\Users\Erich\AppData\Roaming\Macromedia
2010-09-21 16:45:49 ----D---- C:\Users\Erich\AppData\Roaming\Adobe
2010-09-21 16:45:21 ----D---- C:\Windows\system32\Macromed
2010-09-21 16:21:22 ----D---- C:\ProgramData\NVIDIA
2010-09-21 13:20:06 ----D---- C:\Windows\system32\Wat
2010-09-21 13:14:09 ----D---- C:\Windows\Panther
2010-09-21 13:13:56 ----RASH---- C:\BOOTSECT.BAK
2010-09-21 13:13:54 ----SHD---- C:\Boot
2010-09-21 13:02:08 ----A---- C:\Windows\system32\msv1_0.dll
2010-09-21 13:00:45 ----SHD---- C:\Windows\Installer
2010-09-21 13:00:42 ----D---- C:\ProgramData\NVIDIA Corporation
2010-09-21 13:00:39 ----D---- C:\Program Files\NVIDIA Corporation
2010-09-21 12:59:04 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-09-21 12:59:04 ----A---- C:\Windows\system32\PresentationHost.exe
2010-09-21 12:59:04 ----A---- C:\Windows\system32\netfxperf.dll
2010-09-21 12:59:04 ----A---- C:\Windows\system32\mscoree.dll
2010-09-21 12:59:04 ----A---- C:\Windows\system32\dfshim.dll
2010-09-21 12:52:37 ----A---- C:\Windows\system32\browserchoice.exe
2010-09-21 12:51:50 ----A---- C:\Windows\system32\MRT.exe
2010-09-21 12:50:52 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2010-09-21 12:49:59 ----A---- C:\Windows\system32\inetcomm.dll
2010-09-21 12:49:58 ----A---- C:\Windows\system32\winlogon.exe
2010-09-21 12:49:58 ----A---- C:\Windows\explorer.exe
2010-09-21 12:49:57 ----A---- C:\Windows\system32\mshtml.dll
2010-09-21 12:49:56 ----A---- C:\Windows\system32\ieframe.dll
2010-09-21 12:49:55 ----A---- C:\Windows\system32\wininet.dll
2010-09-21 12:49:55 ----A---- C:\Windows\system32\urlmon.dll
2010-09-21 12:49:55 ----A---- C:\Windows\system32\mstime.dll
2010-09-21 12:49:55 ----A---- C:\Windows\system32\msfeedssync.exe
2010-09-21 12:49:55 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-09-21 12:49:55 ----A---- C:\Windows\system32\jsproxy.dll
2010-09-21 12:49:55 ----A---- C:\Windows\system32\ieui.dll
2010-09-21 12:49:55 ----A---- C:\Windows\system32\iepeers.dll
2010-09-21 12:49:55 ----A---- C:\Windows\system32\iedkcs32.dll
2010-09-21 12:49:54 ----A---- C:\Windows\system32\rtutils.dll
2010-09-21 12:49:50 ----A---- C:\Windows\system32\psisdecd.dll
2010-09-21 12:49:50 ----A---- C:\Windows\system32\msdri.dll
2010-09-21 12:49:50 ----A---- C:\Windows\system32\CPFilters.dll
2010-09-21 12:49:49 ----A---- C:\Windows\system32\t2embed.dll
2010-09-21 12:49:48 ----A---- C:\Windows\system32\wmp.dll
2010-09-21 12:49:47 ----A---- C:\Windows\system32\winresume.exe
2010-09-21 12:49:47 ----A---- C:\Windows\system32\winload.exe
2010-09-21 12:49:47 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-09-21 12:49:47 ----A---- C:\Windows\system32\CertEnroll.dll
2010-09-21 12:49:45 ----A---- C:\Windows\system32\wmploc.DLL
2010-09-21 12:49:41 ----A---- C:\Windows\system32\lsasrv.dll
2010-09-21 12:49:41 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-09-21 12:49:40 ----A---- C:\Windows\system32\tsbyuv.dll
2010-09-21 12:49:40 ----A---- C:\Windows\system32\quartz.dll
2010-09-21 12:49:40 ----A---- C:\Windows\system32\msyuv.dll
2010-09-21 12:49:40 ----A---- C:\Windows\system32\msvidc32.dll
2010-09-21 12:49:40 ----A---- C:\Windows\system32\msrle32.dll
2010-09-21 12:49:40 ----A---- C:\Windows\system32\mciavi32.dll
2010-09-21 12:49:40 ----A---- C:\Windows\system32\iyuv_32.dll
2010-09-21 12:49:40 ----A---- C:\Windows\system32\avifil32.dll
2010-09-21 12:49:39 ----A---- C:\Windows\system32\ntdll.dll
2010-09-21 12:49:39 ----A---- C:\Windows\system32\jscript.dll
2010-09-21 12:49:38 ----A---- C:\Windows\system32\ir32_32.dll
2010-09-21 12:49:38 ----A---- C:\Windows\system32\iccvid.dll
2010-09-21 12:49:38 ----A---- C:\Windows\system32\asycfilt.dll
2010-09-21 12:49:37 ----A---- C:\Windows\system32\msasn1.dll
2010-09-21 12:49:37 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-09-21 12:49:37 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-09-21 12:49:37 ----A---- C:\Windows\system32\drivers\srv.sys
2010-09-21 12:49:36 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-09-21 12:49:35 ----A---- C:\Windows\system32\msxml3.dll
2010-09-21 12:49:27 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-09-21 12:49:27 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-09-21 12:49:27 ----A---- C:\Windows\system32\secproc_isv.dll
2010-09-21 12:49:27 ----A---- C:\Windows\system32\secproc.dll
2010-09-21 12:49:27 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-09-21 12:49:27 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-09-21 12:49:27 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-09-21 12:49:27 ----A---- C:\Windows\system32\RMActivate.exe
2010-09-21 12:49:19 ----A---- C:\Windows\system32\vbscript.dll
2010-09-21 12:49:17 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-21 12:49:16 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-09-21 12:49:15 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-09-21 12:49:06 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-09-21 12:49:05 ----A---- C:\Windows\system32\schannel.dll
2010-09-21 12:47:29 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-09-21 12:47:29 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-09-21 12:47:29 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-09-21 12:46:26 ----A---- C:\Windows\system32\shell32.dll
2010-09-21 12:46:24 ----A---- C:\Windows\system32\kernel32.dll
2010-09-21 12:46:23 ----A---- C:\Windows\system32\apphelp.dll
2010-09-21 12:43:52 ----A---- C:\Windows\system32\win32k.sys
2010-09-21 12:43:49 ----A---- C:\Windows\system32\fontsub.dll
2010-09-21 12:43:49 ----A---- C:\Windows\system32\atmlib.dll
2010-09-21 12:43:49 ----A---- C:\Windows\system32\atmfd.dll
2010-09-21 12:40:49 ----N---- C:\Windows\system32\MpSigStub.exe
2010-09-21 12:39:44 ----A---- C:\Windows\system32\wintrust.dll
2010-09-21 12:39:37 ----A---- C:\Windows\system32\cabview.dll
2010-09-21 12:38:05 ----D---- C:\Users\Erich\AppData\Roaming\Mozilla
2010-09-21 12:37:57 ----D---- C:\Program Files\Mozilla Firefox
2010-09-21 12:29:12 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-21 12:26:36 ----A---- C:\Windows\system32\drivers\wlanUSB.sys
2010-09-21 12:26:36 ----A---- C:\Windows\system32\drivers\wlanNDS.sys
2010-09-21 12:23:08 ----D---- C:\Users\Erich\AppData\Roaming\Identities
2010-09-21 12:22:45 ----SD---- C:\Users\Erich\AppData\Roaming\Microsoft
2010-09-21 12:22:45 ----D---- C:\Users\Erich\AppData\Roaming\Media Center Programs
2010-09-21 12:21:09 ----SHD---- C:\Recovery
2010-09-21 12:21:09 ----SHD---- C:\ProgramData\Šablony
2010-09-21 12:21:09 ----SHD---- C:\ProgramData\Plocha
2010-09-21 12:21:09 ----SHD---- C:\ProgramData\Oblíbené položky
2010-09-21 12:21:09 ----SHD---- C:\ProgramData\Nabídka Start
2010-09-21 12:21:09 ----SHD---- C:\ProgramData\Dokumenty
2010-09-21 12:21:09 ----SHD---- C:\ProgramData\Data aplikací
2010-09-21 12:17:43 ----D---- C:\Windows\SoftwareDistribution
2010-09-21 12:15:09 ----D---- C:\Windows\Prefetch
2010-09-21 12:14:48 ----ASH---- C:\pagefile.sys
2010-09-21 12:14:48 ----ASH---- C:\hiberfil.sys
2010-09-21 12:14:47 ----SHD---- C:\System Volume Information

======List of files/folders modified in the last 1 months======

2010-10-11 21:24:20 ----D---- C:\Windows\Temp
2010-10-11 21:24:09 ----RD---- C:\Program Files
2010-10-11 20:56:55 ----D---- C:\Windows\system32\config
2010-10-11 19:58:59 ----HD---- C:\ProgramData
2010-10-10 11:12:26 ----D---- C:\Windows\system32\Tasks
2010-10-09 10:41:17 ----D---- C:\Windows\system32\catroot2
2010-10-08 22:59:18 ----D---- C:\Windows
2010-10-08 15:13:31 ----D---- C:\Windows\Microsoft.NET
2010-10-08 15:13:07 ----RSD---- C:\Windows\assembly
2010-10-08 13:57:49 ----D---- C:\Windows\System32
2010-10-08 13:57:43 ----D---- C:\Windows\winsxs
2010-10-08 13:54:10 ----D---- C:\Windows\system32\catroot
2010-10-06 18:32:27 ----D---- C:\Windows\system32\drivers
2010-10-06 18:32:14 ----D---- C:\Windows\inf
2010-10-06 18:32:11 ----D---- C:\Windows\system32\DriverStore
2010-10-03 18:11:09 ----D---- C:\Windows\rescache
2010-10-03 09:51:26 ----D---- C:\Program Files\DVD Maker
2010-10-03 09:51:24 ----D---- C:\Windows\system32\wbem
2010-10-03 09:51:24 ----D---- C:\Windows\system32\migration
2010-10-03 09:51:24 ----D---- C:\Windows\system32\cs-CZ
2010-10-03 09:51:24 ----D---- C:\Windows\PolicyDefinitions
2010-09-29 14:27:30 ----D---- C:\Program Files\Internet Explorer
2010-09-29 13:42:21 ----RSD---- C:\Windows\Fonts
2010-09-28 12:37:06 ----D---- C:\Program Files\Common Files
2010-09-27 14:27:51 ----D---- C:\Program Files\Microsoft Games
2010-09-27 13:10:31 ----D---- C:\Windows\system32\NDF
2010-09-26 12:32:46 ----D---- C:\Windows\Tasks
2010-09-25 16:07:59 ----D---- C:\Windows\Logs
2010-09-24 19:47:02 ----D---- C:\Windows\debug
2010-09-24 14:43:38 ----D---- C:\Windows\system32\LogFiles
2010-09-22 18:13:18 ----D---- C:\Windows\system32\wdi
2010-09-22 17:00:18 ----D---- C:\Windows\ShellNew
2010-09-22 17:00:14 ----D---- C:\Program Files\Common Files\microsoft shared
2010-09-22 16:59:58 ----D---- C:\Program Files\MSBuild
2010-09-22 16:58:20 ----SD---- C:\ProgramData\Microsoft
2010-09-22 16:56:09 ----A---- C:\Windows\win.ini
2010-09-22 16:56:04 ----D---- C:\Program Files\Common Files\System
2010-09-22 14:00:09 ----D---- C:\Windows\system32\drivers\UMDF
2010-09-21 19:13:47 ----D---- C:\Windows\system32\en-US
2010-09-21 19:08:16 ----D---- C:\Windows\Downloaded Program Files
2010-09-21 19:00:05 ----SHD---- C:\$Recycle.Bin
2010-09-21 13:20:08 ----D---- C:\Program Files\Windows Mail
2010-09-21 13:20:07 ----D---- C:\Windows\system32\Boot
2010-09-21 13:20:07 ----D---- C:\Windows\AppPatch
2010-09-21 13:13:40 ----D---- C:\Windows\Setup
2010-09-21 13:01:01 ----D---- C:\Windows\Help
2010-09-21 12:32:37 ----D---- C:\Windows\system32\CodeIntegrity
2010-09-21 12:26:43 ----D---- C:\Windows\system32\restore
2010-09-21 12:22:45 ----RD---- C:\Users
2010-09-21 12:21:09 ----D---- C:\Program Files\Windows NT
2010-09-21 12:17:34 ----D---- C:\Windows\system32\sysprep
2010-09-21 12:15:35 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-09-22 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R2 cpuz134;cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-02-06 113448]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2009-02-06 130952]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2009-02-06 38240]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\ALCXWDM.SYS [2005-08-19 3644800]
R3 AVerA706;AVerMedia A706 BDA Service; C:\Windows\system32\DRIVERS\AVerA706.sys [2009-06-10 1169920]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-02-06 33096]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 LEX_NIC_SERVICE;IEEE 802.11 Wireless NIC Win2000 Driver; C:\Windows\system32\DRIVERS\Express.sys [2002-06-19 57728]
R3 ULI526X;ULi M526X 10/100 Ethernet Controller Driver; C:\Windows\system32\DRIVERS\ULILAN32.SYS [2006-06-30 30720]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 aqgut2ts;aqgut2ts; C:\Windows\system32\drivers\aqgut2ts.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder iPod Edition\SysInfo.sys [2007-09-25 15152]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S3 WLAN; Wireless LAN Driver; C:\Windows\system32\DRIVERS\wlanNDS.sys [2002-01-18 54784]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-08-13 144672]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-07-27 345376]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2009-02-06 727720]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-07-09 129640]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-09-24 820008]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2009-02-06 20680]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-21 1343400]

-----------------EOF-----------------

[Rudy]

Nic nebezpečného není vidět. S MBAM souhlasím. Stáhněte, nainstalujte, spusťte, proveďte update. Zaškrtněte "úplný sken" a spusťte. Na konci skenu se objeví log, který sem zkopírujete.

[Korialis]

A skutečně... pět virů tu mám.
Zatim nic nedělám, nic nemažu a pouze sem dávám log (asi to nebude on, ale žádný jiný sem nenašel).

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4796

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

11.10.2010 22:36:35
mbam-log-2010-10-11 (22-36-35).txt

Typ skenu: Úplný sken (C:\|)
Skenované objekty: 228876
Uplynulý čas: 51 minuta(y), 33 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 3
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
HKEY_CURRENT_USER\SOFTWARE\3FWHZQA3LT (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\SMH2B46TDP (Trojan.FakeAlert) -> No action taken.

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Windows\Tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job (Trojan.Downloader) -> No action taken.
C:\Windows\Tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job (Trojan.Downloader) -> No action taken.

[Rudy]

Vše, co MBAM nalezl, smažte.

[Korialis]

Tak smazáno... řek bych, že nějáké ty podivné problémy po startu windows už nemám, ale furt se mi seká ta hudba. Ale asi už můžu říct, že míň a v menších intervlaech. Sekání myši jsem také něják nezaregistroval.
Fakt nevim, co s tim sekáním. Virama by to už být nemělo, tak mě nic jiného nenapadá... Black-g, jak jsi to vyřešila ty?

[Rudy]

Zkuste PC vyčistit CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 .

[Korialis]

PC čistim pravidelně. Ničemu z problémů to nepomáhá... ale aspoň vim, že tu nemám viry a sem klidnější, takže díky oběma za rady, ale furt bych byl rád za nějáký typ, jak se toho zbavit.

[Rudy]

Můžeme se jen dohadovat, co problém způsobuje. Zkuste reinstalovat kodeky, DirectX. Reinstalujte přehrávač, poříp. vyzkoušejte jiný. Problém dále může být v nějakém sw konfliktu, či v chybě systému.

[Korialis]

Všechno jsem vyzkoušel, ale furt si nevim rady.
No to je jedno, hlavní je, že tu nemám viry a problém se zmenšil, ještě jednou díky.

[Rudy]

Ještě je možná oprava systému Win7Managerem: http://www.yamicsoft.com/windows7manager/ .

[Korialis]

Tak program mám stažený, ale nevím, co dál.

[Rudy]

Zde je návod: http://www.viry.cz/forum/viewtopic.php?f=46&t=17549 . Je sice na WinXP, ale analogicky použitelný i pro Win7.