Zmražování windowsu a "Monitor going to sleep"

[martas2]

Ahoj mím problémem je že se mi skoro každých 15min sekne pc asi na 15s. a někdy se tam objeví "Monitor going to sleep" a resetne se mi pc. Prosím help.

[Rudy]

Dejte log z RSIT: http://viry.cz/forum/viewtopic.php?f=24&t=81939 . Problém ale může být i hardwarový.

[martas2]

Jo dík mam tam toto :


Logfile of random's system information tool 1.08 (written by random/random)
Run by verso at 2010-12-01 20:59:28
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 30 GB (26%) free of 114 GB
Total RAM: 1023 MB (34% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:00:33, on 1.12.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\verso\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\verso\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\verso\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\verso\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\verso\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\verso\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\verso\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\verso.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT1098640
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\20101006130821\ICQToolBar.dll
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
R3 - URLSearchHook: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll
R3 - URLSearchHook: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
O2 - BHO: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\20101006130821\ICQToolBar.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: RadioBar Toolbar - {5B291E6C-9A74-4034-971B-A4B007A0B315} - C:\Program Files\RadioBar\toolbar.ni.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll
O3 - Toolbar: ToggleEN Toolbar - {038cb5c7-48ea-4af9-94e0-a1646542e62b} - C:\Program Files\ToggleEN\tbTog1.dll
O3 - Toolbar: free-downloads.net Toolbar - {ecdee021-0d17-467f-a1ff-c7a115230949} - C:\Program Files\free-downloads.net\tbfree.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Skype Recorder] "C:\Program Files\Skype Recorder\Skype Recorder.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\verso\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [M5T8QL3YW3] C:\DOCUME~1\verso\LOCALS~1\Temp\Oh1.exe
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Global Startup: GamersFirst LIVE!.lnk = C:\Program Files\GamersFirst\LIVE!\Live.exe
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Data aplikací\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Program Files\ICQ7.1\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Unibet - {00000000-0000-0000-0000-000000000000} - C:\MicroGaming\Poker\unibetpokerMPP\MPPoker.exe (HKCU)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Protocol: toolbarchrome - {718733BC-AD64-4E5F-AC18-A85FBD75D54D} - C:\Program Files\RadioBar\toolbar.ni.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 12643 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1004336348-789336058-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1004336348-789336058-725345543-1003UA.job
C:\WINDOWS\tasks\Norton Security Scan for verso.job
C:\WINDOWS\tasks\WGASetup.job
C:\WINDOWS\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job
C:\WINDOWS\tasks\{8C3FDD81-7AE0-4605-A46A-2488B179F2A3}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{038cb5c7-48ea-4af9-94e0-a1646542e62b}]
ToggleEN Toolbar - C:\Program Files\ToggleEN\tbTog1.dll [2010-09-24 2735200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-05-11 50376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2010-08-10 1242064]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41bc-8B58-22DDC8AB8C20}]
Winamp Toolbar Loader - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-05-06 1262888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2011-12-05 1623392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5B291E6C-9A74-4034-971B-A4B007A0B315}]
RadioBar Toolbar - C:\Program Files\RadioBar\toolbar.ni.dll [2010-01-11 451808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-10-06 2475336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-09-03 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-09-03 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ecdee021-0d17-467f-a1ff-c7a115230949}]
free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfree.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar - C:\Program Files\BS_Player\tbBS_0.dll [2010-09-24 2735200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-10-06 2475336]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\20101006130821\ICQToolBar.dll [2010-10-04 1049912]
{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - Winamp Toolbar - C:\Program Files\Winamp Toolbar\winamptb.dll [2009-05-06 1262888]
{5B291E6C-9A74-4034-971B-A4B007A0B315} - RadioBar Toolbar - C:\Program Files\RadioBar\toolbar.ni.dll [2010-01-11 451808]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player Toolbar - C:\Program Files\BS_Player\tbBS_0.dll [2010-09-24 2735200]
{038cb5c7-48ea-4af9-94e0-a1646542e62b} - ToggleEN Toolbar - C:\Program Files\ToggleEN\tbTog1.dll [2010-09-24 2735200]
{ecdee021-0d17-467f-a1ff-c7a115230949} - free-downloads.net Toolbar - C:\Program Files\free-downloads.net\tbfree.dll [2010-09-12 3863136]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2010-08-10 1242064]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-03-17 19520544]
"nwiz"=nwiz.exe /installquiet []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-04-03 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-04-03 13670504]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-10-05 2067808]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-01-12 37888]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2008-08-11 63048]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2010-03-30 1820040]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Skype Recorder"=C:\Program Files\Skype Recorder\Skype Recorder.exe [2009-07-21 917504]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-08-12 2215064]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Google Update"=C:\Documents and Settings\verso\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2010-05-27 136176]
"M5T8QL3YW3"=C:\DOCUME~1\verso\LOCALS~1\Temp\Oh1.exe []
"Pando Media Booster"=C:\Program Files\Pando Networks\Media Booster\PMB.exe [2010-06-06 2937528]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2010-08-20 33120]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]
"ICQ"=C:\Program Files\ICQ7.1\ICQ.exe [2010-10-27 133432]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
GamersFirst LIVE!.lnk - C:\Program Files\GamersFirst\LIVE!\Live.exe

C:\Documents and Settings\verso\Nabídka Start\Programy\Po spuštění
hamachi.lnk - C:\Program Files\Hamachi\hamachi.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-08-27 12536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2010-10-07 87424]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\AVG\AVG9\avgemc.exe"="C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Call of Duty\CoDMP.exe"="C:\Program Files\Call of Duty\CoDMP.exe:*:Enabled:CoDMP"
"C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX00.937\teamspeak3-server_win32\ts3server_win32.exe"="C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX00.937\teamspeak3-server_win32\ts3server_win32.exe:*:Enabled:TeamSpeak 3 Server"
"C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX00.390\utorrent.exe"="C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX00.390\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\EA GAMES\Battlefield 2\Bf2_w32ded.exe"="C:\Program Files\EA GAMES\Battlefield 2\Bf2_w32ded.exe:*:Enabled:Bf2_w32ded"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe"="C:\Program Files\TrackMania Nations ESWC\TmNationsESWC.exe:*:Disabled:TmNationsESWC"
"C:\Program Files\Warcraft III\Warcraft III.exe"="C:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\Warcraft III\War3.exe"="C:\Program Files\Warcraft III\War3.exe:*:Enabled:Warcraft III"
"C:\Documents and Settings\verso\Plocha\Warcraft 3 Frozen Throne\Warcraft III.exe"="C:\Documents and Settings\verso\Plocha\Warcraft 3 Frozen Throne\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\Warcraft 3 Frozen Throne\Warcraft III.exe"="C:\Program Files\Warcraft 3 Frozen Throne\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\Eidos\Hitman Blood Money\HitmanBloodMoney.exe"="C:\Program Files\Eidos\Hitman Blood Money\HitmanBloodMoney.exe:*:Enabled:HitmanBloodMoney"
"C:\Documents and Settings\verso\Dokumenty\Downloads\FOGDownloader-RoM_3_0_1_2153.exe"="C:\Documents and Settings\verso\Dokumenty\Downloads\FOGDownloader-RoM_3_0_1_2153.exe:*:Enabled:FOGDownloader-RoM_3_0_1_2153"
"C:\Documents and Settings\verso\Plocha\Hry\samp\samp-server.exe"="C:\Documents and Settings\verso\Plocha\Hry\samp\samp-server.exe:*:Enabled:samp-server"
"C:\Documents and Settings\verso\Plocha\samp\samp-server.exe"="C:\Documents and Settings\verso\Plocha\samp\samp-server.exe:*:Enabled:samp-server"
"C:\Documents and Settings\verso\Plocha\smap\samp-server.exe"="C:\Documents and Settings\verso\Plocha\smap\samp-server.exe:*:Enabled:samp-server"
"C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX34.062\samp-server.exe"="C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX34.062\samp-server.exe:*:Enabled:samp-server"
"C:\Documents and Settings\verso\Plocha\samp022server\samp-server.exe"="C:\Documents and Settings\verso\Plocha\samp022server\samp-server.exe:*:Enabled:samp-server"
"C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\Documents and Settings\verso\Plocha\Hry\Warcraft 3 Frozen Throne\War3.exe"="C:\Documents and Settings\verso\Plocha\Hry\Warcraft 3 Frozen Throne\War3.exe:*:Enabled:Warcraft III"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"C:\Documents and Settings\verso\Dokumenty\Downloads\lancraft.exe"="C:\Documents and Settings\verso\Dokumenty\Downloads\lancraft.exe:*:Enabled:lancraft"
"C:\Documents and Settings\verso\Plocha\Hry\Warcraft 3 Frozen Throne\lancraft.exe"="C:\Documents and Settings\verso\Plocha\Hry\Warcraft 3 Frozen Throne\lancraft.exe:*:Enabled:lancraft"
"C:\Documents and Settings\verso\Dokumenty\Downloads\lancraft (1).exe"="C:\Documents and Settings\verso\Dokumenty\Downloads\lancraft (1).exe:*:Enabled:lancraft (1)"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Firefly Studios\Stronghold 2\Stronghold2.exe"="C:\Program Files\Firefly Studios\Stronghold 2\Stronghold2.exe:*:Enabled:Stronghold 2"
"C:\Documents and Settings\verso\Plocha\Hry\Warcraft 3 Frozen Throne\Warcraft III.exe"="C:\Documents and Settings\verso\Plocha\Hry\Warcraft 3 Frozen Throne\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat"="C:\Program Files\EA GAMES\The Battle for Middle-earth (tm)\game.dat:*:Enabled:The Battle for Middle-earth (tm)"
"C:\Program Files\Aspyr Media, Inc\THAW\Game\THAW.exe"="C:\Program Files\Aspyr Media, Inc\THAW\Game\THAW.exe:*:Enabled:Tony Hawk's American Wasteland"
"C:\Program Files\Metin2\metin2.bin"="C:\Program Files\Metin2\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Metin2\metin2client.bin"="C:\Program Files\Metin2\metin2client.bin:*:Enabled:metin2client"
"C:\Documents and Settings\verso\Plocha\Hry\Age Of Empire II\empires2.EXE"="C:\Documents and Settings\verso\Plocha\Hry\Age Of Empire II\empires2.EXE:*:Enabled:Age of Empires II"
"C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX36.093\samp-server.exe"="C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX36.093\samp-server.exe:*:Enabled:samp-server"
"C:\Documents and Settings\verso\Plocha\samp server\samp-server.exe"="C:\Documents and Settings\verso\Plocha\samp server\samp-server.exe:*:Enabled:samp-server"
"C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX12.718\samp-server.exe"="C:\Documents and Settings\verso\Local Settings\Temp\Rar$EX12.718\samp-server.exe:*:Enabled:SA-MP dedicated server"
"C:\Documents and Settings\verso\Plocha\Nová složka\samp-server.exe"="C:\Documents and Settings\verso\Plocha\Nová složka\samp-server.exe:*:Enabled:SA-MP dedicated server"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.1\ICQ.exe"="C:\Program Files\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1"
"C:\Program Files\ICQ7.1\aolload.exe"="C:\Program Files\ICQ7.1\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2011-12-13 21:40:56 ----D---- C:\Program Files\ESET
2011-12-08 22:54:07 ----D---- C:\Documents and Settings\verso\Data aplikací\Media Player Classic
2011-12-08 22:47:57 ----A---- C:\WINDOWS\system32\unrar.dll
2011-12-08 22:47:57 ----A---- C:\WINDOWS\avisplitter.ini
2011-12-08 22:47:56 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2011-12-08 22:47:55 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2011-12-08 22:47:55 ----A---- C:\WINDOWS\system32\xvidcore.dll
2011-12-08 22:47:55 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2011-12-08 22:47:55 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2011-12-08 22:47:52 ----D---- C:\Program Files\K-Lite Codec Pack
2011-12-07 16:17:30 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-12-07 16:17:15 ----D---- C:\Program Files\Skype Recorder
2011-12-05 15:44:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2011-12-04 22:21:55 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-12-04 22:21:55 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-12-04 22:21:54 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-12-04 22:21:54 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-12-04 22:21:53 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-12-04 22:21:53 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-12-04 22:21:52 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2011-12-04 22:21:52 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2011-12-04 22:21:52 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-12-04 22:21:51 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2011-12-04 22:21:51 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-12-04 22:21:51 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2011-12-04 22:21:50 ----A---- C:\WINDOWS\system32\XAudio2_2.dll
2011-12-04 22:21:50 ----A---- C:\WINDOWS\system32\XAPOFX1_1.dll
2011-12-04 22:21:50 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-12-04 22:21:49 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2011-12-04 22:21:49 ----A---- C:\WINDOWS\system32\d3dx10_39.dll
2011-12-04 22:21:49 ----A---- C:\WINDOWS\system32\D3DCompiler_39.dll
2011-12-04 22:21:48 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-12-04 22:21:48 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-12-04 22:21:48 ----A---- C:\WINDOWS\system32\D3DX9_39.dll
2011-12-04 22:21:47 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-12-04 22:21:47 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-12-04 22:21:46 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-12-04 22:21:46 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-12-04 22:21:45 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-12-04 21:33:37 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-12-04 21:33:36 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-12-04 21:33:36 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-12-04 21:33:35 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2011-12-04 21:33:35 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-12-04 21:33:35 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-12-04 21:33:34 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-12-04 21:33:34 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-12-04 21:33:33 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-12-04 21:33:33 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-12-04 21:33:33 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-12-04 21:33:30 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-12-04 21:33:30 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-12-04 21:33:29 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-12-04 21:33:29 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-12-04 21:33:29 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-12-04 21:33:26 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-12-04 21:33:25 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-12-04 21:33:25 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-12-04 21:33:23 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-12-04 21:33:22 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-12-04 21:33:21 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-12-04 21:33:20 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-12-04 21:33:20 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-12-04 21:33:20 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-12-04 21:33:18 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2011-12-04 21:33:18 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2011-12-04 21:33:18 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2011-12-04 21:33:17 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2011-12-04 21:33:16 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2011-12-04 21:33:16 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2010-12-02 19:45:03 ----D---- C:\WINDOWS\system32\appmgmt
2010-12-01 20:59:29 ----D---- C:\Program Files\trend micro
2010-12-01 20:59:28 ----D---- C:\rsit
2010-12-01 20:52:39 ----D---- C:\Program Files\RadarSync
2010-12-01 19:44:52 ----RSD---- C:\WINDOWS\assembly
2010-12-01 19:44:04 ----D---- C:\WINDOWS\Microsoft.NET
2010-12-01 19:42:26 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-12-01 19:41:40 ----D---- C:\Program Files\MSXML 6.0
2010-11-30 12:23:56 ----D---- C:\Documents and Settings\verso\Data aplikací\Ventrilo
2010-11-30 12:22:39 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-11-30 11:53:02 ----A---- C:\WINDOWS\system32\npptNT2.sys
2010-11-30 11:38:05 ----D---- C:\Program Files\Lineage II
2010-11-30 11:27:59 ----D---- C:\Documents and Settings\verso\Data aplikací\InstallShield
2010-11-29 21:19:17 ----D---- C:\lcc
2010-11-26 00:29:29 ----D---- C:\WINDOWS\.jagex_cache_32
2010-11-26 00:29:22 ----D---- C:\WINDOWS\Sun
2010-11-24 22:36:16 ----D---- C:\Program Files\VentriloMIX
2010-11-24 17:24:53 ----D---- C:\Program Files\Common Files\Skype
2010-11-23 09:37:25 ----A---- C:\WINDOWS\system32\MRT.exe
2010-11-22 15:40:51 ----D---- C:\Poker
2010-11-21 18:19:16 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2010-11-21 18:01:14 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-11-21 18:01:12 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys
2010-11-21 18:01:04 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2010-11-21 17:59:28 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2010-11-15 16:03:47 ----D---- C:\Program Files\PokerStars

======List of files/folders modified in the last 1 months======

2011-12-15 09:16:20 ----D---- C:\Program Files\Mount&Blade
2011-12-13 21:40:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-12-13 13:18:28 ----D---- C:\Program Files\translations
2011-12-13 13:18:28 ----D---- C:\Program Files\plugins
2011-12-13 13:18:28 ----A---- C:\Program Files\update.ini
2011-12-13 13:18:28 ----A---- C:\Program Files\apps.ini
2011-12-13 13:18:27 ----A---- C:\Program Files\ts3client_win32.exe
2011-12-13 13:18:26 ----A---- C:\Program Files\changelog.txt
2011-12-11 12:57:36 ----D---- C:\FreeRapid-0.83u1
2011-12-07 09:45:00 ----D---- C:\WINDOWS\system32\drivers\Avg
2011-12-05 20:45:56 ----D---- C:\Program Files\Ubisoft
2011-12-04 22:20:58 ----D---- C:\WINDOWS\system32\DirectX
2011-12-04 22:04:07 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-02 20:16:02 ----D---- C:\WINDOWS\system32\CatRoot
2010-12-02 20:15:18 ----D---- C:\WINDOWS\WinSxS
2010-12-02 19:45:03 ----SD---- C:\Documents and Settings\verso\Data aplikací\Microsoft
2010-12-02 17:56:59 ----D---- C:\Program Files\GamersFirst
2010-12-01 21:31:57 ----D---- C:\Program Files\ICQ7.1
2010-12-01 20:59:29 ----RD---- C:\Program Files
2010-12-01 20:59:29 ----D---- C:\WINDOWS\Temp
2010-12-01 20:59:22 ----D---- C:\WINDOWS\Prefetch
2010-12-01 20:47:45 ----D---- C:\Documents and Settings\verso\Data aplikací\Skype
2010-12-01 20:24:23 ----D---- C:\Program Files\Garena
2010-12-01 20:00:35 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-01 19:57:01 ----D---- C:\Documents and Settings\verso\Data aplikací\Hamachi
2010-12-01 19:45:47 ----D---- C:\WINDOWS\pchealth
2010-12-01 19:45:47 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-12-01 19:45:45 ----D---- C:\WINDOWS\system32\mui
2010-12-01 19:45:45 ----D---- C:\Program Files\Internet Explorer
2010-12-01 19:45:30 ----D---- C:\WINDOWS
2010-12-01 17:07:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-01 16:16:16 ----D---- C:\Documents and Settings\verso\Data aplikací\skypePM
2010-12-01 14:10:08 ----D---- C:\Documents and Settings\verso\Data aplikací\Microgaming
2010-12-01 14:01:44 ----D---- C:\Documents and Settings\verso\Data aplikací\ICQ
2010-11-30 23:01:38 ----D---- C:\Program Files\Call of Duty
2010-11-30 22:06:38 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-11-30 20:37:55 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-11-30 14:44:13 ----D---- C:\Documents and Settings\verso\Data aplikací\BSplayer
2010-11-30 11:35:32 ----D---- C:\Program Files\EA GAMES
2010-11-30 11:31:59 ----D---- C:\Documents and Settings\verso\Data aplikací\uTorrent
2010-11-24 22:37:22 ----D---- C:\WINDOWS\system32
2010-11-24 17:25:12 ----SHD---- C:\WINDOWS\Installer
2010-11-24 17:24:58 ----RD---- C:\Program Files\Skype
2010-11-24 17:24:53 ----D---- C:\Program Files\Common Files
2010-11-24 17:24:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-11-23 09:37:29 ----D---- C:\WINDOWS\Debug
2010-11-21 18:19:22 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-11-21 18:19:17 ----D---- C:\WINDOWS\system32\drivers
2010-11-21 17:59:18 ----HD---- C:\WINDOWS\inf
2010-11-18 17:58:34 ----D---- C:\Program Files\Gameforge4D
2010-11-18 16:26:25 ----D---- C:\WINDOWS\Minidump
2010-11-18 15:33:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-11-18 14:52:23 ----D---- C:\Program Files\LogMeIn
2010-11-17 20:17:35 ----SHD---- C:\System Volume Information
2010-11-17 20:17:35 ----D---- C:\WINDOWS\system32\Restore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-08-21 105344]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-06-10 45648]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\WINDOWS\System32\drivers\sfvfs02.sys [2005-11-03 63488]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-10-05 436792]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-08-27 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-06-03 29584]
R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-08-27 243024]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-07-29 115008]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-08-03 95896]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-08-04 140752]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\safedrv.sys []
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-05-30 25280]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-03-17 5878304]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2008-08-11 10144]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-04-03 10232128]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-09-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-09-11 19968]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
S3 a7bnmtwm;a7bnmtwm; C:\WINDOWS\system32\drivers\a7bnmtwm.sys []
S3 a8u5dz0o;a8u5dz0o; C:\WINDOWS\system32\drivers\a8u5dz0o.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\verso\LOCALS~1\Temp\RNX234.tmp []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 npkcrypt;npkcrypt; \??\C:\Program Files\Lineage II\system\npkcrypt.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-08-27 921952]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-08-27 308136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-08-12 810144]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-03 153376]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [2010-09-27 374152]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-04-03 154216]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-07-01 75064]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2010-03-30 1107336]
S2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2010-10-07 116104]
S2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2008-08-11 63040]
S2 SSHNAS;SSHNAS; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-10-06 517448]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-08-12 33584]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]

-----------------EOF-----------------

[martas2]

co s tím ?

[Rudy]

Vidím tam minimálně jednoho šmejda. Dejte ještě log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[martas2]

Jo, mam staženo ale píše to že se to nemůže rozjet když mam nainstalovaný AVG mam AVG Anti-Virus Free a tam sem vypnul vše co se dalo a pořád to otravuje a nejde to...
co s tím ?

[Rudy]

AVG, bohužel, musíte pro tuto akci dočasně odinstalovat.