Asus Smart Doctor podezřele dlouho startuje...

[Serifus]

Zdravím! Mám problémek: Používám Asus Smart doctor, který se spouští po startu. Od včerejška ale začal podezřele dlouho nabíhat. Během nabíhání nejde s PC nic dělat. Trvá to třeba dvě minuty. Zkusil jsem reinstal, CCleaner a nic. Nepomohlo. Prosím o kontrolu a radu.


Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2011-01-03 19:00:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 12 GB (12%) free of 100 GB
Total RAM: 2046 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:00:54, on 03.01.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe
C:\WINDOWS\ZSSnp211.exe
C:\WINDOWS\Domino.exe
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Replay Media Catcher\FLVSrvc.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe
C:\PROGRA~1\SCROLL~1\GNETMOUS.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\RSFIRXD9\RSIT[1].exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [ZSSnp211] C:\WINDOWS\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\WINDOWS\Domino.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ASUSGamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Ask and Record FLV Service] "C:\Program Files\Replay Media Catcher\FLVSrvc.exe" /run
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [USBToolTip] C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [mouseElf] C:\PROGRA~1\SCROLL~1\GNETMOUS.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O4 - Global Startup: ImageMixer 3 SE Camera Monitor Ver.4.5.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Windows Presentation Foundation Font Cache 4.0.0.0 (WPFFontCache_v0400) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (file missing)

--
End of file - 9929 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-09-22 349640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-24 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-09-22 349640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2010-09-22 349640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-07-07 1753192]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-07-09 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-07-09 13923432]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-09-03 19573352]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2009-03-15 180224]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2010-09-23 38840]
""= []
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2010-09-22 640440]
"ZSSnp211"=C:\WINDOWS\ZSSnp211.exe [2007-04-06 57344]
"Domino"=C:\WINDOWS\Domino.exe [2006-08-18 49152]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]
"ASUSGamerOSD"=C:\Program Files\ASUS\GamerOSD\GamerOSD.exe [2009-07-30 380928]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-10-05 2500552]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Ask and Record FLV Service"=C:\Program Files\Replay Media Catcher\FLVSrvc.exe [2009-09-22 156672]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2010-03-25 2516296]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2010-11-30 74752]
"USBToolTip"=C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [2007-02-20 199752]
"NBAgent"=C:\Program Files\Nero\Nero 10\Nero BackItUp\NBAgent.exe [2010-03-26 1234216]
"mouseElf"=C:\PROGRA~1\SCROLL~1\GNETMOUS.EXE [2004-02-24 176128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"ASUS SmartDoctor"=C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe [2010-04-02 1212416]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Akcelerátor spuštění AutoCADu.lnk - C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
ImageMixer 3 SE Camera Monitor Ver.4.5.lnk - C:\Program Files\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-09-07 190976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Miranda\miranda32.exe"="C:\Miranda\miranda32.exe:*:Enabled:Miranda IM"
"M:\STRONG\StrongDC.exe"="M:\STRONG\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"I:\Hry\LEFT 4 DEAD\Valve\Left 4 Dead\left4dead.exe"="I:\Hry\LEFT 4 DEAD\Valve\Left 4 Dead\left4dead.exe:*:Enabled:left4dead"
"P:\ZORÍKA\miranda32.exe"="P:\ZORÍKA\miranda32.exe:*:Enabled:Miranda IM"
"K:\Hry\Team Fortress 2\Team Fortress 2\Team Fortress 2\hl2.exe"="K:\Hry\Team Fortress 2\Team Fortress 2\Team Fortress 2\hl2.exe:*:Disabled:hl2"
"C:\Program Files\Graphisoft\ArchiCAD 13\ArchiCAD.exe"="C:\Program Files\Graphisoft\ArchiCAD 13\ArchiCAD.exe:*:Disabled:ArchiCAD 13.0.0 Component"
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe"="C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Administrator\Local Settings\Temp\bccad7febc29458fb6981eefccf81e73\RelicDownloader.exe"="C:\Documents and Settings\Administrator\Local Settings\Temp\bccad7febc29458fb6981eefccf81e73\RelicDownloader.exe:*:Disabled:Relic Patch Download Manager"
"K:\Hry\oh\RelicCOH.exe"="K:\Hry\oh\RelicCOH.exe:*:Disabled:RelicCOH"
"K:\Hry\oh\RelicDownloader\RelicDownloader.exe"="K:\Hry\oh\RelicDownloader\RelicDownloader.exe:*:Disabled:Relic Patch Download Manager"
"K:\Hry\CoH OF\RelicCOH.exe"="K:\Hry\CoH OF\RelicCOH.exe:*:Disabled:RelicCOH"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 12\Programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Disabled:Winamp"
"C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe"="C:\Program Files\Pinnacle\Studio 14\Programs\umi.exe:*:Enabled:umi"
"P:\ZORÍKA\totalcmd\TOTALCMD.EXE"="P:\ZORÍKA\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======File associations======

.scr - open - "C:\WINDOWS\system32\notepad.exe" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2011-01-03 19:00:33 ----D---- C:\Program Files\trend micro
2011-01-03 19:00:29 ----D---- C:\rsit
2011-01-03 18:48:03 ----A---- C:\WINDOWS\system32\drivers\EIO64_xp.sys
2011-01-03 08:27:49 ----D---- C:\Documents and Settings\Administrator\Data aplikací\GHISLER
2011-01-03 08:27:49 ----A---- C:\WINDOWS\UC.PIF
2011-01-03 08:27:49 ----A---- C:\WINDOWS\RAR.PIF
2011-01-03 08:27:49 ----A---- C:\WINDOWS\PKZIP.PIF
2011-01-03 08:27:49 ----A---- C:\WINDOWS\PKUNZIP.PIF
2011-01-03 08:27:49 ----A---- C:\WINDOWS\NOCLOSE.PIF
2011-01-03 08:27:49 ----A---- C:\WINDOWS\LHA.PIF
2011-01-03 08:27:49 ----A---- C:\WINDOWS\ARJ.PIF
2011-01-02 22:33:39 ----D---- C:\Program Files\PIXELA
2011-01-02 19:54:14 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Publish Providers
2011-01-02 19:49:48 ----N---- C:\WINDOWS\system32\dbmsqlgc.dll
2011-01-02 19:49:48 ----N---- C:\WINDOWS\system32\dbmsgnet.dll
2011-01-02 19:49:44 ----A---- C:\WINDOWS\IsUninst.exe
2011-01-02 19:49:39 ----D---- C:\Program Files\Microsoft SQL Server
2011-01-02 19:49:04 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Sony
2011-01-02 19:48:08 ----D---- C:\Program Files\Vstplugins
2011-01-02 19:48:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony
2011-01-02 19:48:03 ----D---- C:\Program Files\Sony
2011-01-02 19:46:24 ----D---- C:\Program Files\Sony Setup
2010-12-28 04:01:24 ----A---- C:\WINDOWS\system32\drivers\GMFILTR.SYS
2010-12-28 04:01:24 ----A---- C:\WINDOWS\system32\drivers\gflmouhid.sys
2010-12-28 04:01:19 ----D---- C:\Program Files\Scroll Mouse
2010-12-27 22:06:43 ----D---- C:\Program Files\Microsoft.NET
2010-12-27 22:04:08 ----D---- C:\WINDOWS\system32\XPSViewer
2010-12-27 22:04:05 ----D---- C:\Program Files\MSBuild
2010-12-27 22:04:04 ----D---- C:\WINDOWS\system32\en-US
2010-12-27 22:04:00 ----D---- C:\Program Files\Reference Assemblies
2010-12-27 21:10:11 ----D---- C:\Program Files\LooksBuilderSE
2010-12-27 21:08:55 ----D---- C:\Program Files\Common Files\Pinnacle
2010-12-27 21:08:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate Collection
2010-12-27 21:06:31 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Vso
2010-12-27 21:06:31 ----A---- C:\WINDOWS\system32\drivers\pcouffin.sys
2010-12-27 21:06:31 ----A---- C:\Documents and Settings\Administrator\Data aplikací\pcouffin.sys
2010-12-27 21:06:31 ----A---- C:\Documents and Settings\Administrator\Data aplikací\inst.exe
2010-12-27 21:06:24 ----A---- C:\WINDOWS\system32\sipr3260.dll
2010-12-27 21:06:23 ----A---- C:\WINDOWS\system32\drv43260.dll
2010-12-27 21:06:23 ----A---- C:\WINDOWS\system32\drv33260.dll
2010-12-27 21:06:23 ----A---- C:\WINDOWS\system32\drv23260.dll
2010-12-27 21:06:23 ----A---- C:\WINDOWS\system32\cook3260.dll
2010-12-27 21:06:20 ----A---- C:\WINDOWS\system32\vp7vfw.dll
2010-12-27 21:06:18 ----A---- C:\WINDOWS\system32\wvc1dmod.dll
2010-12-27 21:06:16 ----D---- C:\Program Files\VSO
2010-12-27 21:04:42 ----D---- C:\Program Files\Common Files\Pegasus Imaging
2010-12-27 21:04:41 ----D---- C:\Program Files\Common Files\Yahoo!
2010-12-27 21:04:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Studio 14
2010-12-27 21:04:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Plus
2010-12-27 20:48:01 ----D---- C:\Program Files\The KMPlayer
2010-12-27 20:42:15 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2010-12-27 20:18:32 ----A---- C:\WINDOWS\NeroDigital.ini
2010-12-27 00:17:56 ----D---- C:\Program Files\Collectorz.com
2010-12-26 21:43:16 ----D---- C:\Program Files\Winamp Detect
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\vxblock.dll
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\pxwave.dll
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\pxsfs.dll
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\pxmas.dll
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\pxinsa64.exe
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\pxhpinst.exe
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\pxdrv.dll
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\pxcpya64.exe
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\pxafs.dll
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\px.dll
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\drivers\PxHelp20.sys
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\drivers\cdralw2k.sys
2010-12-26 21:43:10 ----N---- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2010-12-26 21:43:09 ----D---- C:\Program Files\Winamp
2010-12-26 21:43:09 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Winamp
2010-12-21 18:51:08 ----D---- C:\Program Files\proDAD
2010-12-21 18:51:08 ----D---- C:\Documents and Settings\Administrator\Data aplikací\proDAD
2010-12-21 18:50:51 ----A---- C:\WINDOWS\Graffiti5.2Pin.ini
2010-12-21 18:50:50 ----N---- C:\WINDOWS\system32\qtmlClient.dll
2010-12-21 18:50:50 ----N---- C:\WINDOWS\system32\MtxPreview.dll
2010-12-21 18:50:50 ----N---- C:\WINDOWS\system32\MtxParhBFXPreview.dll
2010-12-21 18:50:50 ----N---- C:\WINDOWS\system32\CvoAPI.dll
2010-12-21 18:50:18 ----D---- C:\Program Files\Boris FX, Inc
2010-12-21 18:48:04 ----A---- C:\WINDOWS\system32\drivers\MarvinBus.sys
2010-12-21 18:47:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle Studio Ultimate
2010-12-21 18:44:17 ----D---- C:\Program Files\Pinnacle
2010-12-21 18:39:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Pinnacle
2010-12-19 21:56:59 ----D---- C:\Documents and Settings\Administrator\Data aplikací\InstallShield Installation Information
2010-12-19 21:56:47 ----D---- C:\WINDOWS\D56B0E274A3E46C9B5C1D93D580C099C.TMP
2010-12-19 21:56:46 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-12-19 16:57:16 ----A---- C:\WINDOWS\fonts\GE_Inspira_Regular_(wwww.font-cat.com).ttf
2010-12-17 23:45:41 ----D---- C:\Program Files\DAEMON Tools Lite
2010-12-17 23:45:23 ----D---- C:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite
2010-12-17 23:45:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2010-12-16 19:14:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-16 19:14:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-16 19:14:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-16 19:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-16 19:13:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-16 19:13:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-16 19:13:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2010-12-14 17:05:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-12-12 22:09:22 ----D---- C:\Program Files\Common Files\Skype

======List of files/folders modified in the last 1 months======

2011-01-03 19:00:37 ----D---- C:\WINDOWS\Prefetch
2011-01-03 19:00:33 ----RD---- C:\Program Files
2011-01-03 18:56:43 ----D---- C:\WINDOWS\Temp
2011-01-03 18:55:08 ----D---- C:\WINDOWS
2011-01-03 18:54:42 ----D---- C:\WINDOWS\system32\CatRoot2
2011-01-03 18:53:48 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-01-03 18:48:41 ----HD---- C:\Program Files\InstallShield Installation Information
2011-01-03 18:48:38 ----SHD---- C:\WINDOWS\Installer
2011-01-03 18:48:05 ----D---- C:\WINDOWS\system32
2011-01-03 18:48:05 ----D---- C:\Program Files\ASUS
2011-01-03 18:48:03 ----D---- C:\WINDOWS\system32\drivers
2011-01-03 18:35:46 ----D---- C:\Downloads
2011-01-02 19:49:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-01-02 19:49:47 ----HD---- C:\Program Files\Uninstall Information
2011-01-02 19:49:03 ----RSD---- C:\WINDOWS\assembly
2011-01-01 21:52:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-01-01 21:52:37 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Adobe
2011-01-01 21:36:01 ----A---- C:\WINDOWS\WTRAN32.INI
2011-01-01 04:37:09 ----D---- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
2010-12-31 18:37:19 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2010-12-28 19:17:09 ----D---- C:\WINDOWS\Microsoft.NET
2010-12-28 19:15:32 ----D---- C:\WINDOWS\WinSxS
2010-12-28 18:06:27 ----D---- C:\Program Files\Java
2010-12-28 04:01:25 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-12-28 04:01:24 ----HD---- C:\WINDOWS\inf
2010-12-28 04:01:24 ----D---- C:\WINDOWS\system32\CatRoot
2010-12-27 23:06:04 ----SD---- C:\WINDOWS\Tasks
2010-12-27 23:02:12 ----D---- C:\Program Files\Common Files\Nero
2010-12-27 23:01:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2010-12-27 23:01:38 ----D---- C:\Program Files\Nero
2010-12-27 22:26:35 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Nero
2010-12-27 22:04:03 ----RSD---- C:\WINDOWS\Fonts
2010-12-27 21:49:17 ----D---- C:\WINDOWS\system32\cs-cz
2010-12-27 21:09:02 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2010-12-27 21:09:02 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-12-27 21:08:55 ----D---- C:\Program Files\Common Files
2010-12-27 20:42:20 ----D---- C:\WINDOWS\system32\mui
2010-12-27 20:42:19 ----DC---- C:\WINDOWS\system32\dllcache
2010-12-27 11:14:19 ----D---- C:\WINDOWS\Network Diagnostic
2010-12-19 21:58:01 ----D---- C:\WINDOWS\system32\DirectX
2010-12-18 20:07:23 ----A---- C:\WINDOWS\win.ini
2010-12-18 18:31:14 ----D---- C:\Documents and Settings\Administrator\Data aplikací\skypePM
2010-12-17 16:02:16 ----D---- C:\Program Files\Internet Explorer
2010-12-16 19:14:27 ----A---- C:\WINDOWS\imsins.BAK
2010-12-16 19:14:11 ----D---- C:\WINDOWS\ie8updates
2010-12-16 19:14:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-16 19:13:50 ----D---- C:\Program Files\Outlook Express
2010-12-12 22:09:22 ----RD---- C:\Program Files\Skype
2010-12-12 22:09:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-12-12 16:10:58 ----D---- C:\Program Files\uTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel RAID Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2010-10-02 330264]
R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2010-10-05 91560]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-11-08 436792]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2009-02-17 11136]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2010-10-05 239240]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2010-10-05 25240]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2007-02-28 15440]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-03-15 56268]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R2 EIO_XP;EIO_XP; \??\C:\WINDOWS\system32\drivers\EIO_XP.sys []
R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\WINDOWS\SYSTEM32\DRIVERS\WibuKey.sys [2006-11-22 72704]
R3 AnyDVD;AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [2007-03-15 77000]
R3 asusgsb;ASUS Virtual Video Capture Device Driver; C:\WINDOWS\system32\drivers\asusgsb.sys [2009-02-17 12416]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 genmcmnUSB;USB Scroll Mouse Driver; C:\WINDOWS\system32\DRIVERS\gflmouhid.sys [2003-08-07 6528]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-10-05 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-09-03 6139496]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-07-09 10604128]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-12-27 47360]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2010-10-10 9856]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-10-02 234392]
R3 susbser;BenQ Siemens USB Device for Legacy Serial Communication; C:\WINDOWS\system32\DRIVERS\susbser.sys [2006-08-17 91136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 Video3D;ASUS Video3D Service; C:\WINDOWS\System32\Drivers\Video3D32.sys [2009-02-17 10752]
R3 vvftav211;vvftav211; C:\WINDOWS\system32\drivers\vvftav211.sys [2007-12-10 480128]
R3 ZSMC30x;USB PC Camera Service ZSMC30x; C:\WINDOWS\System32\Drivers\ZS211.sys [2007-12-05 1537024]
S1 EIO;EIO; \??\C:\WINDOWS\system32\drivers\EIO.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 awj2mkha;awj2mkha; C:\WINDOWS\system32\drivers\awj2mkha.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ATKKeyboardService;ATK Keyboard Service; C:\WINDOWS\ATKKBService.exe [2010-04-06 264704]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-10-05 1901056]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-11-12 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2001-02-23 270336]
R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2010-03-25 490280]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-07-09 155752]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-11-09 66872]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-11-19 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-12-01 77944]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-10-02 651720]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe []
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[Serifus]

Po spuštění se objeví tato hláška:



Jsem admin. FW a antivir je vypnut.

[Serifus]

Ha.. tak problém byl asi v COMODU, protože jej nestačí jen vypnout. Musí se nějak deaktivovat a restartovat počítač. Postoupil jsem dál:



Mám Win XP, jak je vidět

[Rudy]

Zkuste spustit v nouz. režimu, příp. CF přejmenujte třeba na cokoli.com .

[Serifus]

Tak jsem to rozběhl. Chyba byla, že jsem to nedal nakonec na plochu. Jak jsem s tím šachoval, tak jsem na to zapomněl. Sken trval přes hodinu a furt ne a ne se ukončit. Musel jsem resetnout PC Jdu to zkusit znovu.

[Rudy]

Zkuste to v nouz. režimu.

[Serifus]

Zkusil jsem to v nouzovém režimu. Běželo to půl hodiny bez výsledku. Nevím, ale většinou to bylo do těch 10 minut. Ale to jsem nepoužíval ten Firewall. Asi ho odinstaluju a nechám to běžet přes noc. Už mi z toho jebe

EDIT: Jak poznám, že to pracuje????

[Rudy]

EDIT: Jak poznám, že to pracuje????

To poznáte jen podle toho, že CF běží v nějakém rozumném čase. Pokud se nic neděje více než 10min, je dost pravděpodobné, že CF vytuhl. Zkuste nejdřív sken AVPTool: http://www.viry.cz/forum/viewtopic.php?f=29&t=58179 a dejte log.

[Serifus]

Tady je log:

Vesměs to byly nehrozné hrozby

Automatická kontrola: dokončeno před 4 min. (události: 53, objekty: 1000652, čas: 02:17:43)
03.01.2011 22:48:45 Úloha byla spuštěna
03.01.2011 23:03:30 Zjištěno: Trojan.Win32.Monder.cufy C:\Downloads\ACDSee 7.0 Powerpack+Crack+Serial+Keygen.rar/Setup.exe/data0002
03.01.2011 23:03:30 Neošetřeno: Trojan.Win32.Monder.cufy C:\Downloads\ACDSee 7.0 Powerpack+Crack+Serial+Keygen.rar/Setup.exe/data0002 Zápis není podporován
03.01.2011 23:04:59 Zjištěno: Trojan-Downloader.Win32.Banload.bdvu C:\Downloads\diablo-v1.07-trainer-plus101.zip/CES Diablo Trainer.exe
03.01.2011 23:05:00 Odstraněno: Trojan-Downloader.Win32.Banload.bdvu C:\Downloads\diablo-v1.07-trainer-plus101.zip/CES Diablo Trainer.exe
03.01.2011 23:10:30 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:30 Neošetřeno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll Zápis není podporován
03.01.2011 23:10:31 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:31 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:32 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:32 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:32 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:33 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:33 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:34 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:34 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:34 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:35 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:35 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:35 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:36 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:36 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
03.01.2011 23:10:36 Zjištěno: HEUR:Trojan.Win32.Generic C:\Downloads\Alien.Breed.Impact.Crackfix-SKIDROW\sr-abicf.rar/Binaries/Steamclient.dll
04.01.2011 0:08:17 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:44 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:45 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:45 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:45 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:08:45 Zjištěno: HEUR:Trojan.Win32.Generic K:\Hry\Alien Breed Impact\Binaries\Steamclient.dll
04.01.2011 0:09:11 Zjištěno: Trojan-Downloader.Win32.Banload.bdvu K:\Hry\Diablo II\CES Diablo Trainer.exe
04.01.2011 0:09:11 Odstraněno: Trojan-Downloader.Win32.Banload.bdvu K:\Hry\Diablo II\CES Diablo Trainer.exe
04.01.2011 0:36:05 Zjištěno: Trojan-Dropper.Win32.Delf.hbq M:\Install\Utils\Norton Utilities + Restoration Kit\GetDataBack v2.31 for FAT.zip/gdb.exe
04.01.2011 0:36:06 Odstraněno: Trojan-Dropper.Win32.Delf.hbq M:\Install\Utils\Norton Utilities + Restoration Kit\GetDataBack v2.31 for FAT.zip/gdb.exe
04.01.2011 0:36:34 Zjištěno: Trojan-Dropper.Win32.Delf.hbq M:\Install\Utils\Norton Utilities + Restoration Kit\GetDataBack-Cracked\gdb.exe
04.01.2011 0:37:08 Odstraněno: Trojan-Dropper.Win32.Delf.hbq M:\Install\Utils\Norton Utilities + Restoration Kit\GetDataBack-Cracked\gdb.exe
04.01.2011 0:45:54 Zjištěno: Trojan-PSW.Win32.Dybalom.bze P:\Hry - For install\Doom 3\tntd31p1.rar/CRACK/CRACK.RAR/DOOM3.EXE
04.01.2011 0:45:54 Neošetřeno: Trojan-PSW.Win32.Dybalom.bze P:\Hry - For install\Doom 3\tntd31p1.rar/CRACK/CRACK.RAR/DOOM3.EXE Zápis není podporován
04.01.2011 0:45:59 Zjištěno: Trojan-PSW.Win32.Dybalom.cue P:\Hry - For install\Doom 3\tntd31p1.rar/CRACK/WIN9X.RAR/DOOM3.EXE
04.01.2011 0:45:59 Neošetřeno: Trojan-PSW.Win32.Dybalom.cue P:\Hry - For install\Doom 3\tntd31p1.rar/CRACK/WIN9X.RAR/DOOM3.EXE Zápis není podporován
04.01.2011 0:48:02 Zjištěno: Trojan.Win32.VBKrypt.abm P:\Hry - For install\Alien.Breed.Impact-SKIDROW\sr-abi.iso/WindowsUpdate.exe
04.01.2011 0:48:02 Neošetřeno: Trojan.Win32.VBKrypt.abm P:\Hry - For install\Alien.Breed.Impact-SKIDROW\sr-abi.iso/WindowsUpdate.exe Zápis není podporován
04.01.2011 1:06:29 Úloha byla dokončena

[Rudy]

OK. Nastala nějaká změna?

[Serifus]

Ne.


Jen si teď už nezahraju pár her

[Rudy]

Když si je koupíte, určitě si i zahrajete Neměnil jste gr. kartu, či neupravoval její nastavení?

[Serifus]

Chápu Neměnil jsem nic. Zkusil jsem běžet Combofix 5 hodin a bez výsledku. Prostě nefunguje a já nechápu proč. Pro jistotu jsem smazal i COMODO, ale stejně to nepomohlo. Proč sakra nejde ten combofix? Už jsem z toho na prášky. Co s tím krámem zase je?

[motji]

Omlouvám se za vstup, byla jsem požádána přes sz, ze staré známosti
Hned jsem se tu zasmála

Poslední pokus pro combofix, pak bych zkusila něco jiného

Stahněte Rkill z jednoho z odkazů, pokud by ho vir blokoval, zkuste stahnout jiný

Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill COM:
http://download.bleepingcomputer.com/grinler/rkill.com

Rkill SCR:
http://download.bleepingcomputer.com/grinler/rkill.scr

Rkill PIF:
http://download.bleepingcomputer.com/grinler/rkill.pif

-spusťte ho a nechejte pracovat. Sám se ukončí.

- Ted nerestartujte počítač!

přejmenujte combofix a spusťte.


Když Vám běží 5 hodin, je u nějaké fáze? Má jich 50 a pak by měl restartovat pc a vytvořit log.