Zamrzání, restartování PC, blue screen

[padmé]

Systém zamrzne při spuštění Opery, nebo pokusu přehrát v Exploreru např. video na YT, za chvíli potom se restartuje a přitom problikne blue screena. Opakuje se to stále dokola. Prosím o kontrolu.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Karinecka at 2011-04-08 14:04:18
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 33 GB (22%) free of 153 GB
Total RAM: 1022 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:04:28, on 8.4.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\setup_9.0.0.722_27.03.2011_04-16.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Common Files\Nokia\NoA\nokiaaserver.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Documents and Settings\Karinecka\Plocha\RSIT.exe
C:\Program Files\trend micro\Karinecka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.crawler.com/homepage.aspx?tbid=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - (no file)
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninstall ... er=9.0.894
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: setup_9.0.0.722_27.03.2011_04-16.lnk = C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\startup.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Eurotran XP - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra 'Tools' menuitem: Eurotran XP... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 9522 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-299502267-725345543-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-299502267-725345543-1003.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
&Crawler Toolbar Helper - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2011-03-11 1232632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-12-01 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2011-03-11 1232632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-03 16841216]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2011-03-27 2216960]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"=cmd.exe /c start http://www.avg.com/ww.special-uninstall ... er=9.0.894 []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2006-10-09 139264]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2011-03-27 3037696]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2010-07-16 141608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-01-31 703360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2010-03-18 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-12-01 202256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Karinecka^Nabídka Start^Programy^Po spuštění^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2009-02-26 97680]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

C:\Documents and Settings\Karinecka\Nabídka Start\Programy\Po spuštění
setup_9.0.0.722_27.03.2011_04-16.lnk - C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\startup.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-06-27 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe"="C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe:*:Enabled:Far Cry"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Disabled:CoD2MP_s"
"C:\Program Files\Call of Duty\CoDMP.exe"="C:\Program Files\Call of Duty\CoDMP.exe:*:Disabled:CoDMP"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\WINDOWS\system32\WgaTray.exe"="C:\WINDOWS\system32\WgaTray.exe:*:Enabled:ENABLE"
"C:\Program Files\Axesstel\Axesstel Manager\Axesstel_manager.exe"="C:\Program Files\Axesstel\Axesstel Manager\Axesstel_manager.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\netsh.exe"="C:\WINDOWS\system32\netsh.exe:*:Enabled:ENABLE"
"C:\WINDOWS\RTHDCPL.EXE"="C:\WINDOWS\RTHDCPL.EXE:*:Enabled:ENABLE"
"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE:*:Enabled:ENABLE"
"C:\Program Files\QuickTime\qttask.exe"="C:\Program Files\QuickTime\qttask.exe:*:Enabled:ENABLE"
"C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe:*:Enabled:ENABLE"
"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe:*:Enabled:ENABLE"
"C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe"="C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe:*:Enabled:ENABLE"
"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe:*:Enabled:ENABLE"
"C:\Program Files\Axesstel\Axesstel Manager\AXESSTEL_MAIN.exe"="C:\Program Files\Axesstel\Axesstel Manager\AXESSTEL_MAIN.exe:*:Enabled:ENABLE"
"C:\Program Files\Opera\Opera.exe"="C:\Program Files\Opera\Opera.exe:*:Enabled:ENABLE"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Documents and Settings\Karinecka\Plocha\Skype.exe"="C:\Documents and Settings\Karinecka\Plocha\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-04-08 14:04:19 ----D---- C:\Program Files\trend micro
2011-04-08 14:04:18 ----D---- C:\rsit
2011-04-08 13:46:57 ----D---- C:\WINDOWS\pss
2011-04-06 15:33:54 ----ASH---- C:\pagefile.sys
2011-04-05 22:18:48 ----SHD---- C:\RECYCLER
2011-04-04 20:17:57 ----D---- C:\WINDOWS\temp
2011-04-04 20:17:55 ----A---- C:\ComboFix.txt
2011-03-29 11:38:21 ----A---- C:\Boot.bak
2011-03-29 11:38:14 ----RASHD---- C:\cmdcons
2011-03-29 11:31:16 ----A---- C:\WINDOWS\zip.exe
2011-03-29 11:31:16 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-03-29 11:31:16 ----A---- C:\WINDOWS\SWSC.exe
2011-03-29 11:31:16 ----A---- C:\WINDOWS\SWREG.exe
2011-03-29 11:31:16 ----A---- C:\WINDOWS\sed.exe
2011-03-29 11:31:16 ----A---- C:\WINDOWS\PEV.exe
2011-03-29 11:31:16 ----A---- C:\WINDOWS\NIRCMD.exe
2011-03-29 11:31:16 ----A---- C:\WINDOWS\MBR.exe
2011-03-29 11:31:16 ----A---- C:\WINDOWS\grep.exe
2011-03-29 11:31:08 ----D---- C:\WINDOWS\ERDNT
2011-03-29 11:30:53 ----AD---- C:\Qoobox
2011-03-28 10:38:10 ----D---- C:\WINDOWS\ie8updates
2011-03-28 10:36:13 ----D---- C:\WINDOWS\WBEM
2011-03-28 10:34:49 ----HDC---- C:\WINDOWS\ie8
2011-03-28 09:07:28 ----D---- C:\Program Files\WinClamAVShield
2011-03-27 13:47:51 ----A---- C:\WINDOWS\system32\REN3E.tmp
2011-03-27 13:47:51 ----A---- C:\WINDOWS\system32\REN3D.tmp
2011-03-27 13:47:51 ----A---- C:\WINDOWS\system32\REN3C.tmp
2011-03-27 13:46:49 ----A---- C:\WINDOWS\system32\REN36.tmp
2011-03-27 13:46:49 ----A---- C:\WINDOWS\system32\REN35.tmp
2011-03-27 13:46:49 ----A---- C:\WINDOWS\system32\REN34.tmp
2011-03-27 13:43:03 ----A---- C:\WINDOWS\system32\REN1A.tmp
2011-03-27 13:43:03 ----A---- C:\WINDOWS\system32\REN19.tmp
2011-03-27 13:43:03 ----A---- C:\WINDOWS\system32\REN18.tmp
2011-03-27 11:44:52 ----A---- C:\WINDOWS\system32\drivers\27119412.sys
2011-03-27 11:44:52 ----A---- C:\WINDOWS\system32\drivers\27119411.sys
2011-03-27 11:44:52 ----A---- C:\WINDOWS\system32\drivers\2711941.sys
2011-03-27 11:33:00 ----D---- C:\Program Files\Crawler
2011-03-27 11:32:56 ----A---- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2011-03-27 11:32:55 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Spyware Terminator
2011-03-27 11:32:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2011-03-27 11:32:46 ----D---- C:\Program Files\Spyware Terminator
2011-03-25 12:30:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-03-15 09:45:39 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2011-03-14 15:13:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\Installations
2011-03-13 15:41:20 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-03-11 17:24:56 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Nokia Ovi Suite
2011-03-11 00:20:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nokia
2011-03-11 00:14:24 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Datalayer
2011-03-11 00:13:42 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-03-11 00:13:27 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2011-03-11 00:04:04 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-03-11 00:01:51 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2011-03-11 00:01:50 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2011-03-11 00:01:49 ----A---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2011-03-11 00:01:47 ----A---- C:\WINDOWS\system32\wdfcoinstaller01009.dll
2011-03-11 00:01:47 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2011-03-11 00:01:47 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2011-03-11 00:01:46 ----A---- C:\WINDOWS\system32\ccdcmbwu.dll
2011-03-10 23:59:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
2011-03-10 10:34:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-03-10 10:27:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$

======List of files/folders modified in the last 1 months======

2011-04-08 14:04:28 ----D---- C:\WINDOWS\Prefetch
2011-04-08 14:04:19 ----RD---- C:\Program Files
2011-04-08 13:46:57 ----D---- C:\WINDOWS
2011-04-08 13:41:18 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Azureus
2011-04-08 13:40:32 ----D---- C:\WINDOWS\Debug
2011-04-08 13:40:31 ----D---- C:\WINDOWS\Minidump
2011-04-08 13:35:17 ----SD---- C:\WINDOWS\Tasks
2011-04-08 13:22:19 ----A---- C:\WINDOWS\NeroDigital.ini
2011-04-08 10:19:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab
2011-04-07 22:35:23 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-04-07 22:35:21 ----D---- C:\WINDOWS\system32\CatRoot2
2011-04-06 15:31:10 ----A---- C:\WINDOWS\DUMPa6a0.tmp
2011-04-06 15:27:22 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Skype
2011-04-06 14:34:35 ----D---- C:\WINDOWS\system32\config
2011-04-06 08:07:32 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\skypePM
2011-04-04 20:15:16 ----A---- C:\WINDOWS\system.ini
2011-04-04 20:15:05 ----D---- C:\WINDOWS\system32\drivers\etc
2011-04-04 20:12:33 ----D---- C:\WINDOWS\system32\drivers
2011-04-04 20:12:33 ----D---- C:\WINDOWS\system32
2011-04-04 20:12:33 ----D---- C:\WINDOWS\AppPatch
2011-04-04 20:12:29 ----D---- C:\Program Files\Common Files
2011-04-04 17:38:19 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\vlc
2011-04-01 13:28:31 ----D---- C:\WINDOWS\system32\CatRoot
2011-03-30 09:23:52 ----HD---- C:\WINDOWS\inf
2011-03-30 09:23:50 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-03-30 09:23:41 ----HD---- C:\WINDOWS\$hf_mig$
2011-03-29 11:38:21 ----RASH---- C:\boot.ini
2011-03-28 14:27:26 ----D---- C:\WINDOWS\system32\cs-cz
2011-03-28 14:27:25 ----D---- C:\WINDOWS\Help
2011-03-28 14:27:25 ----D---- C:\Program Files\Internet Explorer
2011-03-28 10:36:02 ----D---- C:\WINDOWS\Media
2011-03-27 22:19:37 ----D---- C:\WINDOWS\system32\NtmsData
2011-03-27 22:03:27 ----D---- C:\Config.Msi
2011-03-27 21:38:49 ----SHD---- C:\WINDOWS\Installer
2011-03-27 21:38:46 ----D---- C:\Program Files\Nokia
2011-03-27 21:38:46 ----D---- C:\Program Files\Common Files\Nokia
2011-03-27 21:38:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Downloaded Installations
2011-03-27 21:38:26 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-03-27 21:28:02 ----D---- C:\Program Files\Common Files\Adobe
2011-03-27 21:28:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-03-27 21:28:00 ----D---- C:\Program Files\Panasonic
2011-03-27 21:27:57 ----HD---- C:\Program Files\InstallShield Installation Information
2011-03-27 21:27:29 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Panasonic
2011-03-27 21:25:49 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Adobe
2011-03-27 21:21:45 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-03-27 21:21:23 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2011-03-27 21:19:40 ----D---- C:\Program Files\Opera
2011-03-27 20:44:26 ----D---- C:\Program Files\GamePark
2011-03-27 13:57:45 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Samsung
2011-03-27 13:57:20 ----D---- C:\WINDOWS\WinSxS
2011-03-27 13:56:00 ----D---- C:\Program Files\PC Connectivity Solution
2011-03-27 13:48:14 ----D---- C:\Program Files\Common Files\Java
2011-03-27 11:46:15 ----SHD---- C:\System Volume Information
2011-03-27 11:43:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2011-03-27 11:27:12 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-03-27 10:12:00 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-03-11 17:24:50 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Nokia
2011-03-11 17:23:42 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\PC Suite
2011-03-11 00:04:05 ----D---- C:\Program Files\DIFX
2011-03-10 10:31:00 ----A---- C:\WINDOWS\system32\MRT.exe
2011-03-10 10:30:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 27119412;27119412 Boot Guard Driver; C:\WINDOWS\system32\DRIVERS\27119412.sys [2009-10-22 37392]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 27119411;27119411; C:\WINDOWS\system32\DRIVERS\27119411.sys [2009-09-25 128016]
R1 setup_9.0.0.722_27.03.2011_04-16drv;setup_9.0.0.722_27.03.2011_04-16drv; C:\WINDOWS\system32\DRIVERS\2711941.sys [2009-10-09 315408]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2003-04-16 12032]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2003-04-16 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2003-04-16 55936]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2007-06-27 2303488]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-09-05 4611072]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys [2008-07-26 41752]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [2007-06-28 45824]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [2007-06-28 20480]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-19 21248]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2008-07-26 2570520]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 Axtmvflt;Axesstel USB Filter Service; C:\WINDOWS\system32\DRIVERS\Axtmvflt.sys [2007-09-20 3456]
S3 Axtmvmdm;Axesstel USB Modem; C:\WINDOWS\system32\DRIVERS\Axtmvmdm.sys [2007-09-20 40064]
S3 Axtmvprt;Axesstel Diagnostic Port; C:\WINDOWS\System32\Drivers\Axtmvprt.sys [2007-09-20 38784]
S3 catchme;catchme; \??\C:\DOCUME~1\KARINE~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-08 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-08 21568]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-07-30 18048]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-07-30 23040]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2007-05-02 83592]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2007-05-02 15112]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2007-05-02 109704]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-07-30 8192]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-07-30 8192]
S3 utexnjq5;AVZ Kernel Driver; \??\C:\WINDOWS\system32\Drivers\utexnjq5.sys []
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\System32\Ati2evxx.exe [2007-06-27 483328]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2011-03-27 496128]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-16 540968]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-29 520192]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-10-09 724992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[MiliNess]

Mrkněte se do složky Windows\Minidump, pokud tam najdete nějaké soubory, tak je zabalte třeba v RARu a upněte na www.leteckaposta.cz

[padmé]

Minidump složka je prázdná.

[MiliNess]

1)Start->Tento počítač->Vlastnosti->Upřesnit->Výkon->Nastavení->Upřesnit->Virtuální paměť->podívejte se, zda je povolen stránkovací soubor (musí být povolen, jinak se výpisy paměti nevytvoří)

2)Start->Tento počítač->Vlastnosti->Upřesnit->Spuštění a zotavení systému->Nastavení->Zapsat ladící informace->nastavte na Omezený výpis paměti

3)Ovládací panely->Nástroje pro správu->Prohlížeč událostí->klik pravým myšítkem na Systém->Uložit soubor protokolu jako->někam si ho uložte jako .evt soubor a pak upněte na http://www.leteckaposta.cz

4)spusťte Verifier

Spustit->napište "verifier"->OK->Vytvořit uživatelské nastavení->Vybrat individuální nastavení z úplného seznamu->mimo "Simulace nedostatku prostředků" zatrhněte vše->vybrat ovladače ze seznamu->vyberte vše, co není od Microsoftu->Dokončit->restartujte PC

Pokud verifier narazí na nějaký problém, objeví se BSOD a dojde k restartu počítače. Ve složce Windows\Minidump by se měl vytvořit nový výpis paměti, který mi upněte.
Pokud by k BSOD docházelo už při startu OS a nedařilo se i po několika restartech zavést systém,
spusťte nouzový režim (mačkání F8 při startu PC)
Tam spusťte Verifier a zvolte "Odstranit existující nastavení->Dokončit->restart PC.

[padmé]

http://leteckaposta.cz/988859456

http://leteckaposta.cz/790526695

Díky moc za Váš čas

[MiliNess]

Pády způsobuje buď ovladač grafické karty nebo přímo závada grafické karty. Spíše to ale bude pouze v ovladači.
Updatněte ovladač grafické karty. Pokud mi řeknete něco o konfiguraci počítače, pomohu vám ho najít. Ten co právě používáte je dost starý.

Dále jsem v logu narazil ještě na pár událostí, na které bych se podíval blíže.
Stáhněte CrystalDiskInfo, spusťte ho, v nabídce Úpravy zvolte Kopírovat a obsah schránky sem vložte pomocí Ctrl+V.

Kolegyně pro jistotu mrkne po případné havěti.

[cernohous13]

Zdravím,
třeba nebude tolik vadit, že nejsem zrovna kolegyně

ComboFix odinstalujeme
jdi Start -> Spustit... a zkopíruj ComboFix /Uninstall (pozor, za x je mezera) -> OK

Stáhni a spusť T-cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe - uklidí po použitých čističích.
Po spuštění ignoruj případné varování antiviru - je to v pořádku
Po provedení akce T-cleaner smažeš

Stáhni OTM z jednoho odkazu a rozbal nejlépe na plochu.
http://oldtimer.geekstogo.com/OTM.exe
http://www.itxassociates.com/OT-Tools/OTM.exe

Spusť program „OTM.exe“ (pro Vistu a Win7 – pravým a „Run As Administrator“).
Do okna pod žlutou čáru vlož celý text zeleným písmem ze „Scriptu“

Klikni na červené „Moveit!“

Při nabídce restartu „YES“
a log potom najdeš v C:\_OTM\MovedFiles\

Script OTM

Kód: Vybrat vše

:Commands
[emptytemp]
[purity]

:Files
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-299502267-725345543-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-299502267-725345543-1003.job
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\Documents and Settings\Karinecka\Nabídka Start\Programy\Po spuštění\setup_9.0.0.722_27.03.2011_04-16.lnk
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool

:Reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-

:Services
27119412
27119411
2711941
utexnjq5

dáš log OTM + nový RSIT

zabezpečení PC budeme řešit následně

[MiliNess]

Zdravím,
třeba nebude tolik vadit, že nejsem zrovna kolegyně

Nevím jak Padmé, ale potom co jsem si odmyslel piňdoura s tím nemám problém

[padmé]

Zdravím ) Uff. Snad jsem to všechno zvládla....ovladač grafické karty se nakonec podařilo upgredovat, vyčištěno, přikládám logy OTM, RSIT. Díky

----------------------------------------------------------------------------
CrystalDiskInfo 3.10.0 (C) 2008-2010 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows XP Professional SP3 [5.1 Build 2600] (x86)
Date : 2011/04/09 11:30:36

-- Controller Map ----------------------------------------------------------
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- Primární kanál IDE (0)
- Sekundární kanál IDE (1)
+ PCI Standardní dvoukanálový řadič IDE [ATA]
+ Primární kanál IDE (0)
- TSSTcorp CDDVDW SH-S203D
- ST3160815AS
- Sekundární kanál IDE (1)

-- Disk List ---------------------------------------------------------------
(1) ST3160815AS : 160.0 GB [0-1-0, pd1]

----------------------------------------------------------------------------
(1) ST3160815AS
----------------------------------------------------------------------------
Model : ST3160815AS
Firmware : 3.AAD
Serial Number : 9RX4FHFW
Disk Size : 160.0 GB (8.4/137.4/160.0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 312579695
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA/ATAPI-7
Minor Version : ----
Transfer Mode : SATA/300
Power On Hours : 11185 hod.
Power On Count : 1250 krát
Temparature : 34 C (93 F)
Health Status : Dobrý
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 119 100 __6 00000D0D48F9 Počet chyb čtení
03 _98 _97 __0 000000000000 Čas na roztočení ploten
04 _99 _99 _20 0000000004F8 Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _84 _60 _30 00000E72FAFF Počet chybných hledání
09 _88 _88 __0 000000002BB1 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 _20 0000000004E2 Počet cyklů zapnutí zařízení
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BD 100 100 __0 000000000000 Vysoká rychlost zápisu
BE _66 _54 _45 000023150022 Teplota toku vzduchu
C2 _34 _46 __0 000F00000022 Teplota
C3 _80 _72 __0 000004F099E4 Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
C8 100 253 __0 000000000000 Počet chyb při zápisu sektorů
CA 100 253 __0 000000000000 Počet chyb při směrování údajů

-- IDENTIFY_DEVICE ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0C 5A 3F FF C8 37 00 10 00 00 00 00 00 3F 00 00
010: 00 00 00 00 20 20 20 20 20 20 20 20 20 20 20 20
020: 39 52 58 34 46 48 46 57 00 00 40 00 00 04 33 2E
030: 41 41 44 20 20 20 53 54 33 31 36 30 38 31 35 41
040: 53 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
050: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 80 10
060: 00 00 2F 00 40 00 02 00 02 00 00 07 3F FF 00 10
070: 00 3F FC 10 00 FB 01 10 FF FF 0F FF 00 00 00 07
080: 00 03 00 78 00 78 00 78 00 78 00 00 00 00 00 00
090: 00 00 00 00 00 00 00 1F 05 06 00 00 00 48 00 40
0A0: 00 FE 00 00 34 6B 7D 01 40 23 34 69 3C 01 40 23
0B0: 40 7F 00 00 00 00 FE FE FF FE 00 00 D0 00 00 00
0C0: 00 00 00 00 00 00 00 00 96 6F 12 A1 00 00 00 00
0D0: 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 02
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 09 9E B0 12 A1 9E B0 12 A1 20 20 00 02 02 B6
110: 00 02 00 8A 3C 06 3C 0A 00 00 07 C6 01 00 08 00
120: 13 14 12 00 00 02 00 80 00 00 00 00 00 A2 02 02
130: 00 00 04 04 00 00 00 00 00 00 00 00 1B 00 00 0B
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 86 A5


All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Karinecka
->Temp folder emptied: 16384 bytes
->Temporary Internet Files folder emptied: 10304498 bytes
->Java cache emptied: 569353 bytes
->Opera cache emptied: 2241310 bytes
->Flash cache emptied: 1930623 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1248883 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 16,00 mb

========== FILES ==========
C:\WINDOWS\tasks\AppleSoftwareUpdate.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-299502267-725345543-1003.job moved successfully.
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-299502267-725345543-1003.job moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP27B.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2F9.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP32F.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP62C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP700.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP714.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP72C.tmp folder moved successfully.
C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Temp\ZAP7EC.tmp folder moved successfully.
C:\WINDOWS\Installer\MSI11BE.tmp moved successfully.
C:\WINDOWS\Installer\MSI1D4.tmp moved successfully.
C:\WINDOWS\Installer\MSI2D6.tmp moved successfully.
C:\WINDOWS\Installer\MSI2D9.tmp moved successfully.
C:\WINDOWS\Installer\MSI5F.tmp moved successfully.
C:\WINDOWS\Installer\MSI64.tmp moved successfully.
C:\WINDOWS\Installer\MSIEC.tmp moved successfully.
C:\WINDOWS\Installer\MSIF7.tmp moved successfully.
C:\WINDOWS\Installer\MSIFE.tmp moved successfully.
C:\Documents and Settings\Karinecka\Nabídka Start\Programy\Po spuštění\setup_9.0.0.722_27.03.2011_04-16.lnk moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\temp folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\sounds folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\vi folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\tur folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\tch folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\sv folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\sch\skin\loc folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\sch\skin\layout folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\sch\skin folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\sch\images folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\sch folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\ru\images folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\ru folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\pt folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\pl folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\nor folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\nl folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\la folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\kor\skin\loc folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\kor\skin folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\kor folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\sounds folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\loc folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\layout folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\images\wtb folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\images\vkbd folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\images\tray folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\images\tasks folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\images\radar folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin\images folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp\skin folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\jp folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\it folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\id folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\hu folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\fr folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\fi folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\esp folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\en folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\el folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\de_ab folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\de folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\da folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\cz folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\br folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\ar\skin folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc\ar folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\loc folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\layout folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\images\tasks folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\images\radar folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin\images folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\skin folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\0C folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\0B folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\0A folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\09 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\08 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\07 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\06 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\05 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\04 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\03 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\02 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\01 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report\00 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\report folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\qb folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\LOG folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\drivers\2 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\drivers\1 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\drivers folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\tur folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\sv folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\sch folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\ru folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\pt folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\pl folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\nl folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\la folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\kor folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\it folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\hu folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\fr folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\esp folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\en folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\el folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\de folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\da folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\cz folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc\br folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\Doc folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\data folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\bases\Stat folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16\bases folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool\setup_9.0.0.722_27.03.2011_04-16 folder moved successfully.
C:\Documents and Settings\Karinecka\Plocha\Virus Removal Tool folder moved successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\\AvgUninstallURL deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} deleted successfully.
========== SERVICES/DRIVERS ==========
Error: Unable to stop service 27119412!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\27119412 deleted successfully.
Error: Unable to stop service 27119411!
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\27119411 deleted successfully.
Error: No service named 2711941 was found to stop!
Service\Driver key 2711941 not found.
Service utexnjq5 stopped successfully!
Service utexnjq5 deleted successfully!

OTM by OldTimer - Version 3.1.17.2 log created on 04092011_111110


Logfile of random's system information tool 1.08 (written by random/random)
Run by Karinecka at 2011-04-09 11:29:53
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 38 GB (25%) free of 153 GB
Total RAM: 1022 MB (61% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:30:02, on 9.4.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\internet explorer\iexplore.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Documents and Settings\Karinecka\Plocha\CrystalDiskInfo3_10_0\DiskInfo.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Karinecka\Plocha\RSIT.exe
C:\Program Files\trend micro\Karinecka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.crawler.com/homepage.aspx?tbid=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Eurotran XP - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra 'Tools' menuitem: Eurotran XP... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Eurotran XP\etnxp.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 7742 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-299502267-725345543-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-299502267-725345543-1003.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D}]
XTTBPos00 Class - C:\PROGRA~1\ICQTOO~1\toolbaru.dll [2006-12-25 701952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
&Crawler Toolbar Helper - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2011-03-11 1232632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-12-01 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2011-03-11 1232632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-09-03 16841216]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2011-03-27 2216960]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-03-18 421888]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"ATIModeChange"=C:\WINDOWS\system32\Ati2mdxx.exe [2011-03-09 26112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2011-03-27 3037696]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2010-07-16 141608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaMServer]
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-01-31 703360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2010-03-18 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-12-01 202256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Karinecka^Nabídka Start^Programy^Po spuštění^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2009-02-26 97680]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-06-27 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe"="C:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe:*:Enabled:Far Cry"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Disabled:CoD2MP_s"
"C:\Program Files\Call of Duty\CoDMP.exe"="C:\Program Files\Call of Duty\CoDMP.exe:*:Disabled:CoDMP"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\WINDOWS\system32\WgaTray.exe"="C:\WINDOWS\system32\WgaTray.exe:*:Enabled:ENABLE"
"C:\Program Files\Axesstel\Axesstel Manager\Axesstel_manager.exe"="C:\Program Files\Axesstel\Axesstel Manager\Axesstel_manager.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\netsh.exe"="C:\WINDOWS\system32\netsh.exe:*:Enabled:ENABLE"
"C:\WINDOWS\RTHDCPL.EXE"="C:\WINDOWS\RTHDCPL.EXE:*:Enabled:ENABLE"
"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE:*:Enabled:ENABLE"
"C:\Program Files\QuickTime\qttask.exe"="C:\Program Files\QuickTime\qttask.exe:*:Enabled:ENABLE"
"C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe:*:Enabled:ENABLE"
"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe:*:Enabled:ENABLE"
"C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe"="C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe:*:Enabled:ENABLE"
"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe:*:Enabled:ENABLE"
"C:\Program Files\Axesstel\Axesstel Manager\AXESSTEL_MAIN.exe"="C:\Program Files\Axesstel\Axesstel Manager\AXESSTEL_MAIN.exe:*:Enabled:ENABLE"
"C:\Program Files\Opera\Opera.exe"="C:\Program Files\Opera\Opera.exe:*:Enabled:ENABLE"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Documents and Settings\Karinecka\Plocha\Skype.exe"="C:\Documents and Settings\Karinecka\Plocha\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2011-04-09 11:29:53 ----D---- C:\rsit
2011-04-09 11:27:59 ----D---- C:\Program Files\AMD APP
2011-04-09 11:27:22 ----D---- C:\WINDOWS\LastGood
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET53.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET4B.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET49.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET45.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET43.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET41.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET2C.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET2A.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET26.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\SET24.tmp
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\ativvamv.dll
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\atioglxx.dll
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\atimpc32.dll
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\aticalrt.dll
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\aticaldd.dll
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\aticalcl.dll
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\atibtmon.exe
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2011-04-09 11:27:21 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2011-04-09 11:11:10 ----D---- C:\_OTM
2011-04-09 11:01:04 ----D---- C:\Program Files\ATI
2011-04-09 10:59:42 ----D---- C:\ATI
2011-04-08 14:04:19 ----D---- C:\Program Files\trend micro
2011-04-08 13:46:57 ----D---- C:\WINDOWS\pss
2011-04-06 15:33:54 ----ASH---- C:\pagefile.sys
2011-04-05 22:18:48 ----SHD---- C:\RECYCLER
2011-04-04 20:17:57 ----D---- C:\WINDOWS\temp
2011-03-29 11:38:21 ----A---- C:\Boot.bak
2011-03-29 11:38:14 ----RASHD---- C:\cmdcons
2011-03-28 10:38:10 ----D---- C:\WINDOWS\ie8updates
2011-03-28 10:36:13 ----D---- C:\WINDOWS\WBEM
2011-03-28 10:34:49 ----HDC---- C:\WINDOWS\ie8
2011-03-28 09:07:28 ----D---- C:\Program Files\WinClamAVShield
2011-03-27 11:44:52 ----A---- C:\WINDOWS\system32\drivers\27119412.sys
2011-03-27 11:44:52 ----A---- C:\WINDOWS\system32\drivers\27119411.sys
2011-03-27 11:44:52 ----A---- C:\WINDOWS\system32\drivers\2711941.sys
2011-03-27 11:33:00 ----D---- C:\Program Files\Crawler
2011-03-27 11:32:56 ----A---- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2011-03-27 11:32:55 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Spyware Terminator
2011-03-27 11:32:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2011-03-27 11:32:46 ----D---- C:\Program Files\Spyware Terminator
2011-03-25 12:30:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-03-21 19:56:22 ----A---- C:\WINDOWS\system32\OVDecode.dll
2011-03-21 19:56:06 ----A---- C:\WINDOWS\system32\OpenCL.dll
2011-03-21 19:55:46 ----A---- C:\WINDOWS\system32\amdocl.dll
2011-03-15 09:45:39 ----HD---- C:\Documents and Settings\All Users\Data aplikací\Common Files
2011-03-14 15:13:04 ----D---- C:\Documents and Settings\All Users\Data aplikací\Installations
2011-03-13 15:41:20 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2011-03-11 17:24:56 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Nokia Ovi Suite
2011-03-11 00:20:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nokia
2011-03-11 00:14:24 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Datalayer
2011-03-11 00:13:42 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-03-11 00:13:27 ----HDC---- C:\WINDOWS\$NtUninstallWdf01009$
2011-03-11 00:04:04 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2011-03-11 00:01:51 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2011-03-11 00:01:50 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2011-03-11 00:01:49 ----A---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2011-03-11 00:01:47 ----A---- C:\WINDOWS\system32\wdfcoinstaller01009.dll
2011-03-11 00:01:47 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2011-03-11 00:01:47 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2011-03-11 00:01:46 ----A---- C:\WINDOWS\system32\ccdcmbwu.dll
2011-03-10 23:59:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
2011-03-10 10:34:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2011-03-10 10:27:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$

======List of files/folders modified in the last 1 months======

2011-04-09 11:28:03 ----D---- C:\Config.Msi
2011-04-09 11:28:02 ----SHD---- C:\WINDOWS\Installer
2011-04-09 11:28:00 ----D---- C:\WINDOWS\system32
2011-04-09 11:27:59 ----RD---- C:\Program Files
2011-04-09 11:27:54 ----D---- C:\WINDOWS
2011-04-09 11:27:41 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-04-09 11:27:35 ----D---- C:\WINDOWS\system32\drivers
2011-04-09 11:27:26 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-04-09 11:27:24 ----HD---- C:\WINDOWS\inf
2011-04-09 11:27:21 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-04-09 11:27:19 ----D---- C:\WINDOWS\system32\CatRoot2
2011-04-09 11:19:55 ----SD---- C:\WINDOWS\Tasks
2011-04-09 11:14:44 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-04-09 11:10:27 ----D---- C:\WINDOWS\Prefetch
2011-04-09 11:08:24 ----D---- C:\WINDOWS\Minidump
2011-04-09 11:01:23 ----D---- C:\Program Files\ATI Technologies
2011-04-09 10:49:32 ----SHD---- C:\System Volume Information
2011-04-09 10:49:32 ----D---- C:\WINDOWS\system32\Restore
2011-04-09 10:39:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab
2011-04-08 22:39:44 ----A---- C:\WINDOWS\NeroDigital.ini
2011-04-08 13:41:18 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Azureus
2011-04-08 13:40:32 ----D---- C:\WINDOWS\Debug
2011-04-06 15:27:22 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Skype
2011-04-06 14:34:35 ----D---- C:\WINDOWS\system32\config
2011-04-06 08:07:32 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\skypePM
2011-04-04 20:15:16 ----A---- C:\WINDOWS\system.ini
2011-04-04 20:15:05 ----D---- C:\WINDOWS\system32\drivers\etc
2011-04-04 20:12:33 ----D---- C:\WINDOWS\AppPatch
2011-04-04 20:12:29 ----D---- C:\Program Files\Common Files
2011-04-04 17:38:19 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\vlc
2011-04-01 13:28:31 ----D---- C:\WINDOWS\system32\CatRoot
2011-03-30 09:23:41 ----HD---- C:\WINDOWS\$hf_mig$
2011-03-29 11:38:21 ----RASH---- C:\boot.ini
2011-03-28 14:27:26 ----D---- C:\WINDOWS\system32\cs-cz
2011-03-28 14:27:25 ----D---- C:\WINDOWS\Help
2011-03-28 14:27:25 ----D---- C:\Program Files\Internet Explorer
2011-03-28 10:36:02 ----D---- C:\WINDOWS\Media
2011-03-27 22:19:37 ----D---- C:\WINDOWS\system32\NtmsData
2011-03-27 21:38:46 ----D---- C:\Program Files\Nokia
2011-03-27 21:38:46 ----D---- C:\Program Files\Common Files\Nokia
2011-03-27 21:38:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Downloaded Installations
2011-03-27 21:28:02 ----D---- C:\Program Files\Common Files\Adobe
2011-03-27 21:28:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-03-27 21:28:00 ----D---- C:\Program Files\Panasonic
2011-03-27 21:27:57 ----HD---- C:\Program Files\InstallShield Installation Information
2011-03-27 21:27:29 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Panasonic
2011-03-27 21:25:49 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Adobe
2011-03-27 21:21:45 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-03-27 21:21:23 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2011-03-27 21:19:40 ----D---- C:\Program Files\Opera
2011-03-27 20:44:26 ----D---- C:\Program Files\GamePark
2011-03-27 13:57:45 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Samsung
2011-03-27 13:57:20 ----D---- C:\WINDOWS\WinSxS
2011-03-27 13:56:00 ----D---- C:\Program Files\PC Connectivity Solution
2011-03-27 13:48:14 ----D---- C:\Program Files\Common Files\Java
2011-03-27 11:43:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2011-03-27 11:27:12 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-03-27 10:12:00 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-03-11 17:24:50 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\Nokia
2011-03-11 17:23:42 ----D---- C:\Documents and Settings\Karinecka\Data aplikací\PC Suite
2011-03-11 00:04:05 ----D---- C:\Program Files\DIFX
2011-03-10 10:31:00 ----A---- C:\WINDOWS\system32\MRT.exe
2011-03-10 10:30:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 setup_9.0.0.722_27.03.2011_04-16drv;setup_9.0.0.722_27.03.2011_04-16drv; C:\WINDOWS\system32\DRIVERS\2711941.sys [2009-10-09 315408]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2003-04-16 12032]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2008-04-13 88320]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2003-04-16 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2003-04-16 55936]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2011-03-09 6553088]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-09-05 4611072]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\DRIVERS\LVUSBSta.sys [2008-07-26 41752]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [2007-06-28 45824]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [2007-06-28 20480]
R3 NWRDR;NetWare Rdr; C:\WINDOWS\system32\DRIVERS\nwrdr.sys [2008-04-13 163584]
R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-19 21248]
R3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS [2008-07-26 2570520]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 Axtmvflt;Axesstel USB Filter Service; C:\WINDOWS\system32\DRIVERS\Axtmvflt.sys [2007-09-20 3456]
S3 Axtmvmdm;Axesstel USB Modem; C:\WINDOWS\system32\DRIVERS\Axtmvmdm.sys [2007-09-20 40064]
S3 Axtmvprt;Axesstel Diagnostic Port; C:\WINDOWS\System32\Drivers\Axtmvprt.sys [2007-09-20 38784]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-03-08 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-03-08 21568]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-07-30 18048]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-07-30 23040]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ss_bus.sys [2007-05-02 83592]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys [2007-05-02 15112]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ss_mdm.sys [2007-05-02 109704]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-07-30 8192]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-07-30 8192]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-06-10 144176]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-06-27 483328]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-05-18 345376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NWCWorkstation;Klient systému NetWare; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2011-03-27 496128]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-29 520192]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-07-16 540968]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-10-09 724992]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-12-08 628736]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[MiliNess]

Měl jsem podezření na chybu disku, vypadá to ale dobře. Disk občas nedokončí operaci v časovém limitu a někdy se vyskytne chyba při operaci stránkování, ale nestává se to až tak často. Zatím bych to nechal být.
Bylo by dobré updatnout BIOS a přepnout řadič disku do AHCI módu, to by ale musel udělat někdo zkušený.
Ještě počkáme na kolegu, jestli něco nenajde.
Nějaké nové BSOD?

[cernohous13]

Nový script pro OTM - postup jako v předchozím návodu.

Kód: Vybrat vše

:Commands
[emptytemp]

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\WINDOWS\system32\drivers\27119412.sys
C:\WINDOWS\system32\drivers\27119411.sys
C:\WINDOWS\system32\drivers\2711941.sys
C:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab
C:\Documents and Settings\All Users\Data aplikací\avg9
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1123561945-299502267-725345543-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1123561945-299502267-725345543-1003.job

:Services
2711941
27119411
27119412
setup_9.0.0.722_27.03.2011_04-16drv

:Reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"KernelFaultCheck"=-

Stáhni a nainstaluj MBAM zde http://www.download.com/Malwarebytes-An ... tag=button
Spustit > na 3.záložce "Aktualizace" > Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Rychlá kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení

[padmé]

PC už se začal chovat zase aspon trošku normálně Díky moc za Váš čas přikládám log.

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 6345

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

12.4.2011 22:15:08
mbam-log-2011-04-12 (22-14-57).txt

Typ kontroly: Rychlý test
Testované objekty: 150592
Uplynulý čas: 7 minut, 14 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 5
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{055FD26D-3A88-4e15-963D-DC8493744B1D} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{055FD26D-3A88-4e15-963D-DC8493744B1D} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{77D6DDFA-7834-4541-B2B3-A8B0FB0E3924} (Trojan.BHO) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{055FD26D-3A88-4E15-963D-DC8493744B1D} (Trojan.BHO) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{055FD26D-3A88-4E15-963D-DC8493744B1D} (Trojan.BHO) -> No action taken.

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\documents and settings\karinecka\data aplikací\wiaserva.log (Malware.Trace) -> No action taken.
c:\program files\icqtoolbar\toolbaru.dll (Trojan.BHO) -> No action taken.

[cernohous13]

Předpokládám, že v OTM bylo vše smazáno.

MBAM spustit znovu - dát Úplná kontrola
po ukončení -> Zobrazit výsledky -> zkontrolovat zda je vše označeno -> Odstranit označené
vyběhne log, ve kterém budou záznamy tohoto typu:
Infikované adresáře:
C:\Program Files\xxxxxx -> Quarantined and deleted successfully.
ten bych taky rád viděl

dej i aktuální RSIT a napiš jaké problémy ještě vidíš