Prosím pomožte mě někdo

[Airm]

Dobrý den už jsem zoufalej a nevím co dál. Chtěl jsem reinstalovat Windows XP (naformátovat) ale nejde to protože mě naběhne modrá obrazovka a tam píše že jsou v PC viry CHKDSK /F jsem dával ale nic nenašel. Chci reinstalovat PC protože v Přidat nebo odebrat programy jsou už dost staré aplikace které nejdou odinstalovat je tam jen napsáno Využito zřídka. Neukazuje to ani velikost ani volbu změnit odebrat.
Chtěl jsem totiž nainstalovat Adobe After effects a nechce se spustit instalace ale přitom je instalační program v pořádku. Počítač je i pomalejší bratr jak hraje hry tak říkal že při natáčení přes Fraps se mu FPS sníží až na 8 což předtím nebylo ... nastavení grafické karty mám asi v pořádku jen bych řekl že je počítač zaprasenej. Předevčírem jsem stahoval automatické aktualizace na Windows a byl tam i nástroj na odebrání škodlivého softweru nebo tak něják a tam mě to nahlásilo win32/sality tak jsem stáhnul z AVG stránek rmslt.exe a pročistil PC trvalo to asi 4.5 hodiny ale problémy jsou pořád stejné. Přikádám log z RSIT


Logfile of random's system information tool 1.08 (written by random/random)
Run by Hlavni at 2011-04-16 22:38:51
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 3 GB (17%) free of 19 GB
Total RAM: 3070 MB (82% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:38:53, on 16.4.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
C:\Program Files\OO Software\Defrag\oodag.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe
H:\Download Opera\RSIT.exe
C:\Program Files\trend micro\Hlavni.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - (no file)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [KB976002-v5] rundll32.exe advpack.dll,LaunchINFSection OPMWXPUP.inf,BrowserChoiceGoo (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Hlavni\Nabídka Start\Programy\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/Messenger ... E_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b56907.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: Performance Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag Agent (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Update Center Service (UpdateCenterService) - NVIDIA - C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe

--
End of file - 5838 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-07-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-11-15 16270848]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-11-04 1753192]
"OODefragTray"=C:\Program Files\OO Software\Defrag\oodtray.exe [2011-01-25 2781000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DWPersistentQueuedReporting]
C:\Program Files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE [2007-02-26 437160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-11-04 1753192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
C:\WINDOWS\SkyTel.EXE [2006-05-17 2879488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^LOLRecorder.lnk]
H:\Programy\LOLREP~1\LOLREC~1.EXE [2011-03-03 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2010-06-23 239496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2010-06-23 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2010-06-23 304128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\QIP\qip.exe"="C:\Program Files\QIP\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\Program Files\Ventrilo\Ventrilo.exe"="C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:ipsec"
"H:\Hry\League of Legends\air\LolClient.exe"="H:\Hry\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"H:\Hry\League of Legends\game\League of Legends.exe"="H:\Hry\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"H:\Hry\Half-Life\hl.exe"="H:\Hry\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"
"H:\Hry\Crysis\Bin32\Crysis.exe"="H:\Hry\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"H:\Hry\Crysis\Bin32\CrysisDedicatedServer.exe"="H:\Hry\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"H:\Hry\Diablo II\Diablo II.exe"="H:\Hry\Diablo II\Diablo II.exe:*:Enabled:Diablo II - Lord of Destruction"
"H:\Hry\Alaplaya\LOCO\System\LOCO.exe"="H:\Hry\Alaplaya\LOCO\System\LOCO.exe:*:Enabled:LOCO"
"H:\Hry\Mytheon\MytheonClient.exe"="H:\Hry\Mytheon\MytheonClient.exe:*:Enabled:Mytheon"
"H:\Download FireFox\ProfessionalKO\KOGuard\KGUpdate.exe"="H:\Download FireFox\ProfessionalKO\KOGuard\KGUpdate.exe:*:Enabled:KGUpdate"
"H:\Hry\ProfessionalKO\KOGuard\KGUpdate.exe"="H:\Hry\ProfessionalKO\KOGuard\KGUpdate.exe:*:Enabled:KGUpdate"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:ipsec"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Steam\steamapps\alifok\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\alifok\counter-strike\hl.exe:*:Enabled:Counter-Strike"
"H:\Hry\Lineage II Interlude\system\L2.exe"="H:\Hry\Lineage II Interlude\system\L2.exe:*:Enabled:ipsec"
"C:\WINDOWS\Explorer.EXE"="C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\auxw.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\auxw.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\w9b506fe.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\w9b506fe.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\nebm.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\nebm.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winemess.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winemess.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ecfjly.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ecfjly.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winkfgxnt.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winkfgxnt.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\dfsbcp.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\dfsbcp.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\bfran.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\bfran.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\windkjpru.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\windkjpru.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winkxdoa.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winkxdoa.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winijaq.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winijaq.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winqvttk.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winqvttk.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\xsysyu.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\xsysyu.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winvlwty.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winvlwty.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ddru.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ddru.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winjyujt.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winjyujt.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\lovv.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\lovv.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\bxwc.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\bxwc.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winobxw.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winobxw.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winqoxqg.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winqoxqg.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winvrednc.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winvrednc.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winxlxui.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winxlxui.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wpeojq.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wpeojq.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winbcjg.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winbcjg.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\tviu.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\tviu.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wcvm.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wcvm.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winhprott.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winhprott.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\auitpp.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\auitpp.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winwobkpp.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winwobkpp.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winyrth.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winyrth.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winaxnwn.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winaxnwn.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winfqyn.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winfqyn.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\haxn.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\haxn.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winneib.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winneib.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wintyij.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wintyij.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\qgoid.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\qgoid.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\edmdd.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\edmdd.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winaiwfh.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winaiwfh.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wincgnm.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wincgnm.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\pkbfh.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\pkbfh.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\fdvp.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\fdvp.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ctbs.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ctbs.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\fmykd.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\fmykd.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winiylht.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winiylht.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winxhooeo.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winxhooeo.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winwjtqdo.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winwjtqdo.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winkbnirj.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winkbnirj.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wincwen.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wincwen.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\mkth.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\mkth.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wintvwlww.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wintvwlww.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\koprg.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\koprg.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\lypcsu.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\lypcsu.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\rxofs.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\rxofs.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winldckq.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winldckq.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winyndxs.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winyndxs.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winqglou.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winqglou.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\bslhcq.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\bslhcq.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\snwbl.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\snwbl.exe:*:Enabled:ipsec"
"C:\Program Files\NVIDIA Corporation\nView\nwiz.exe"="C:\Program Files\NVIDIA Corporation\nView\nwiz.exe:*:Enabled:ipsec"
"H:\Programy\LOLReplay\LOLRecorder.exe"="H:\Programy\LOLReplay\LOLRecorder.exe:*:Enabled:ipsec"
"C:\PROGRA~1\ELECTR~1\EADM\EADMUI\EACoreServer.exe"="C:\PROGRA~1\ELECTR~1\EADM\EADMUI\EACoreServer.exe:*:Enabled:ipsec"
"C:\WINDOWS\RTHDCPL.EXE"="C:\WINDOWS\RTHDCPL.EXE:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ivqje.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ivqje.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wa0cd0.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\wa0cd0.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winkqly.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winkqly.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winnvooca.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winnvooca.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winsrrw.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winsrrw.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\qpxlb.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\qpxlb.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ywmtrn.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\ywmtrn.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\mtclfr.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\mtclfr.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\vyjt.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\vyjt.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\nbefk.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\nbefk.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winbsbu.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winbsbu.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winxwbuqc.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\winxwbuqc.exe:*:Enabled:ipsec"
"C:\DOCUME~1\Hlavni\LOCALS~1\Temp\jjdiy.exe"="C:\DOCUME~1\Hlavni\LOCALS~1\Temp\jjdiy.exe:*:Enabled:ipsec"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Nexon\Combat Arms EU\CombatArms.exe"="C:\Nexon\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"C:\Nexon\Combat Arms EU\Engine.exe"="C:\Nexon\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"H:\Combat Arms EU\CombatArms.exe"="H:\Combat Arms EU\CombatArms.exe:*Enabled:CombatArms.exe"
"H:\Combat Arms EU\Engine.exe"="H:\Combat Arms EU\Engine.exe:*Enabled:Engine.exe"
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe"="C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

======List of files/folders created in the last 1 months======

2011-04-16 22:38:52 ----D---- C:\Program Files\trend micro
2011-04-16 22:38:51 ----D---- C:\rsit
2011-04-16 10:55:05 ----D---- C:\WINDOWS\system32\oodag
2011-04-16 09:34:35 ----D---- C:\Rbackup
2011-04-16 08:55:02 ----D---- C:\Program Files\OO Software
2011-04-16 08:53:13 ----A---- C:\WINDOWS\iun6002.exe
2011-04-16 08:07:52 ----A---- C:\WINDOWS\system32\nvgenco322040.dll
2011-04-16 08:07:51 ----A---- C:\WINDOWS\system32\nvdispco322090.dll
2011-04-16 03:26:17 ----D---- C:\Hry
2011-04-15 20:58:21 ----D---- C:\Program Files\Perfect Uninstaller
2011-04-15 11:51:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2011-04-15 11:51:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2506223$
2011-04-15 11:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-04-15 11:50:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2508272$
2011-04-15 11:50:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2503658$
2011-04-15 11:49:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2011-04-15 11:48:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-04-15 11:48:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2511455$
2011-04-15 11:48:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2011-04-15 11:41:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2011-04-14 09:47:32 ----A---- C:\WINDOWS\system32\frapsvid.dll
2011-04-12 16:06:21 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2011-04-12 16:06:20 ----A---- C:\WINDOWS\system32\drivers\PnkBstrK.sys
2011-04-12 16:06:14 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-04-11 05:38:14 ----D---- C:\Program Files\Microsoft
2011-04-11 05:37:54 ----D---- C:\Program Files\Windows Live SkyDrive
2011-04-11 05:37:21 ----D---- C:\Program Files\Windows Live
2011-04-11 05:35:51 ----D---- C:\Program Files\Common Files\Windows Live
2011-04-09 14:41:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2011-04-09 14:40:56 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-04-09 14:22:43 ----D---- C:\WINDOWS\pss
2011-04-05 04:42:46 ----D---- C:\Documents and Settings\Hlavni\Data aplikací\Google
2011-04-05 04:33:32 ----D---- C:\Program Files\Google
2011-03-26 10:58:05 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-03-26 10:55:46 ----A---- C:\WINDOWS\system32\drivers\dtsoftbus01.sys
2011-03-26 10:55:03 ----D---- C:\Program Files\DAEMON Tools Lite
2011-03-26 10:49:48 ----D---- C:\Documents and Settings\Hlavni\Data aplikací\Publish Providers
2011-03-26 10:46:15 ----N---- C:\WINDOWS\system32\dbmsqlgc.dll
2011-03-26 10:46:15 ----N---- C:\WINDOWS\system32\dbmsgnet.dll
2011-03-26 10:46:11 ----A---- C:\WINDOWS\IsUninst.exe
2011-03-26 10:45:38 ----D---- C:\Program Files\Microsoft SQL Server
2011-03-26 10:45:07 ----D---- C:\Documents and Settings\Hlavni\Data aplikací\Sony
2011-03-26 10:43:50 ----D---- C:\Program Files\Vstplugins
2011-03-26 10:43:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sony
2011-03-26 10:43:08 ----D---- C:\Program Files\Sony
2011-03-26 10:41:49 ----D---- C:\Program Files\Sony Setup
2011-03-26 03:32:44 ----A---- C:\WINDOWS\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
2011-03-24 12:48:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-03-24 10:37:20 ----D---- C:\Program Files\Common Files\Solveig Multimedia
2011-03-24 09:03:42 ----A---- C:\WINDOWS\system32\wmv8dmod.dll
2011-03-24 09:03:42 ----A---- C:\WINDOWS\system32\mpg4c32.dll

======List of files/folders modified in the last 1 months======

2011-04-16 22:38:52 ----RD---- C:\Program Files
2011-04-16 22:04:50 ----D---- C:\WINDOWS\temp
2011-04-16 20:45:57 ----D---- C:\Program Files\Opera
2011-04-16 20:44:57 ----D---- C:\WINDOWS
2011-04-16 20:34:35 ----D---- C:\Config.Msi
2011-04-16 20:34:09 ----SHD---- C:\WINDOWS\Installer
2011-04-16 19:47:22 ----D---- C:\Program Files\Common Files\Adobe
2011-04-16 19:37:59 ----D---- C:\WINDOWS\system32\CatRoot2
2011-04-16 19:36:12 ----HD---- C:\WINDOWS\system32
2011-04-16 17:38:16 ----D---- C:\WINDOWS\Microsoft.NET
2011-04-16 08:53:07 ----D---- C:\Program Files\Codec Pack - All In 1
2011-04-16 08:51:19 ----D---- C:\Program Files\CCleaner
2011-04-16 08:18:58 ----D---- C:\Program Files\NVIDIA Corporation
2011-04-16 08:14:30 ----HD---- C:\WINDOWS\system32\drivers
2011-04-16 08:14:30 ----HD---- C:\WINDOWS\inf
2011-04-16 08:11:15 ----D---- C:\WINDOWS\Help
2011-04-16 08:08:49 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-04-16 08:08:21 ----D---- C:\NVIDIA
2011-04-16 08:05:24 ----D---- C:\Program Files\Common Files
2011-04-16 07:52:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-04-16 07:52:04 ----SD---- C:\Documents and Settings\Hlavni\Data aplikací\Microsoft
2011-04-16 07:52:04 ----D---- C:\Documents and Settings\Hlavni\Data aplikací\Adobe
2011-04-16 00:57:00 ----D---- C:\Program Files\Steam
2011-04-16 00:57:00 ----D---- C:\Documents and Settings\Hlavni\Data aplikací\TS3Client
2011-04-16 00:56:59 ----D---- C:\WINDOWS\Debug
2011-04-15 15:56:15 ----D---- C:\Program Files\Bonjour
2011-04-15 15:52:15 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-04-15 15:49:17 ----D---- C:\Program Files\OpenAL
2011-04-15 15:49:15 ----D---- C:\Program Files\Portrait Professional Max 6
2011-04-15 15:47:30 ----D---- C:\Program Files\TeamSpeak 3 Client
2011-04-15 15:47:09 ----D---- C:\Program Files\Windows NT
2011-04-15 15:47:06 ----D---- C:\Program Files\Xvid
2011-04-15 12:21:44 ----D---- C:\Program Files\Internet Explorer
2011-04-15 11:51:27 ----HD---- C:\WINDOWS\$hf_mig$
2011-04-15 11:50:27 ----D---- C:\WINDOWS\WinSxS
2011-04-15 11:48:28 ----A---- C:\WINDOWS\system32\MRT.INI
2011-04-15 11:42:08 ----A---- C:\WINDOWS\system32\MRT.exe
2011-04-15 11:41:48 ----D---- C:\WINDOWS\ie8updates
2011-04-13 02:13:37 ----RSD---- C:\WINDOWS\Fonts
2011-04-12 15:32:21 ----D---- C:\WINDOWS\system32\DirectX
2011-04-12 15:31:48 ----RSD---- C:\WINDOWS\assembly
2011-04-11 05:51:49 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-04-11 05:38:00 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-04-11 05:35:50 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-04-10 12:47:40 ----D---- C:\WINDOWS\SoftwareDistribution
2011-04-09 18:39:22 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB981957$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2479628$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2011-04-09 18:38:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2011-04-09 14:42:15 ----D---- C:\WINDOWS\system32\config
2011-04-09 14:24:06 ----RASH---- C:\boot.ini
2011-04-09 14:24:06 ----A---- C:\WINDOWS\win.ini
2011-04-09 14:24:06 ----A---- C:\WINDOWS\system.ini
2011-04-09 04:36:14 ----D---- C:\Documents and Settings\Hlavni\Data aplikací\Ventrilo
2011-04-05 04:33:38 ----SD---- C:\WINDOWS\Tasks
2011-04-02 10:09:52 ----D---- C:\WINDOWS\Minidump
2011-03-31 13:29:28 ----D---- C:\WINDOWS\Prefetch
2011-03-26 11:41:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-03-26 10:46:14 ----HD---- C:\Program Files\Uninstall Information
2011-03-26 03:31:42 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-03-24 22:37:33 ----D---- C:\Program Files\Mozilla Firefox
2011-03-24 12:48:58 ----D---- C:\WINDOWS\system32\CatRoot
2011-03-24 09:03:30 ----HD---- C:\Program Files\InstallShield Installation Information
2011-03-24 09:02:17 ----D---- C:\Program Files\Common Files\InstallShield
2011-03-22 19:18:39 ----D---- C:\WINDOWS\system
2011-03-21 18:46:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2005-08-10 19968]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-11-26 691696]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-26 218688]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 rspndr;Odpovídající zařízení zjišťování topologie linkové vrstvy; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2010-06-23 62848]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 nvoclock;NVIDIA Enthusiasts Platform KDM; C:\WINDOWS\system32\DRIVERS\nvoclock.sys [2009-09-15 38248]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2009-03-25 130432]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R4 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S1 DumpDrv;Crash Dump Driver; C:\WINDOWS\system32\drivers\DumpDrv.sys [2010-06-23 9472]
S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys []
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2011-02-15 25280]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2008-10-29 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2008-10-29 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2008-10-29 21568]
S3 npkcrypt;npkcrypt; \??\H:\Hry\Kopie - Lineage II\system\npkcrypt.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-22 32384]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2010-06-23 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2010-06-23 82944]
S4 exFat;exFat; C:\WINDOWS\system32\drivers\exFat.sys [2010-06-23 133632]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-07-18 153376]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2010-06-23 14848]
R2 nTuneService;Performance Service; C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe [2010-03-22 191080]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
R2 OODefragAgent;O&O Defrag Agent; C:\Program Files\OO Software\Defrag\oodag.exe [2011-01-25 2398536]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2010-06-23 14848]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-04-12 66872]
R2 UpdateCenterService;Update Center Service; C:\Program Files\NVIDIA Corporation\System Update\UpdateCenterService.exe [2009-11-06 195176]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2010-06-23 439808]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-05 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-02-05 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSSQL$SONY_MEDIAMGR;MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [2002-12-17 7520337]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-01-06 4192928]
S3 SQLAgent$SONY_MEDIAMGR;SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [2002-12-17 311872]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2010-06-23 14848]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2010-06-23 14848]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[Rudy]

Počítač je dost zaplevelený. Udělejte sken ComboFix a dejte log:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

[Airm]

Děkuji Rudy ale už jsem to vyřešil na PC HELP fóru. Problém byl v tom že jsem v BIOSU neměl přeplou SATA1 z AHCI na IDE. Omlouvám se za zbytečný topick. A cením si vaší práce a ochoty.

[Rudy]

Nic se nestalo. Nic to ovšem nemění na tom, že máte v PC viry.

[Airm]

Omlouvám se Rudy zakladal jsem nový topick měl jsem za to že tento je už uzamčený.

Mám teď problém s autorun.inf projel jsem přenosný HDD Avastem a ten našel toto

[Airm]

Tady je log z ComboFix

ComboFix 11-04-17.02 - Server 18.04.2011 14:33:33.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.3070.2698 [GMT 2:00]
Spuštěný z: c:\documents and settings\Server\Plocha\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-18 do 2011-04-18 )))))))))))))))))))))))))))))))
.
.
2011-04-17 17:17 . 2011-04-18 04:33 -------- d-----w- C:\SexyKO
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-04 06:43 . 2002-09-23 12:00 434176 ----a-w- c:\windows\system32\vbscript.dll
2011-03-03 13:53 . 2002-09-23 12:00 1857920 ----a-w- c:\windows\system32\win32k.sys
2011-02-17 13:51 . 2002-09-23 12:00 668160 ----a-w- c:\windows\system32\wininet.dll
2011-02-17 13:51 . 2002-09-23 12:00 61952 ----a-w- c:\windows\system32\tdc.ocx
2011-02-17 13:51 . 2002-09-23 12:00 1510912 ----a-w- c:\windows\system32\shdocvw.dll
2011-02-17 13:18 . 2002-09-23 12:00 455936 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-02-17 13:18 . 2002-09-23 12:00 357888 ----a-w- c:\windows\system32\drivers\srv.sys
2011-02-17 12:54 . 2010-08-13 16:44 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2011-02-15 12:56 . 2002-09-23 12:00 290432 ----a-w- c:\windows\system32\atmfd.dll
2011-02-09 13:53 . 2002-09-23 12:00 270848 ----a-w- c:\windows\system32\sbe.dll
2011-02-09 13:53 . 2002-09-23 12:00 186880 ----a-w- c:\windows\system32\encdec.dll
2011-02-08 13:33 . 2002-09-23 12:00 978944 ----a-w- c:\windows\system32\mfc42.dll
2011-02-08 13:33 . 2002-09-23 12:00 974848 ----a-w- c:\windows\system32\mfc42u.dll
2011-01-21 14:44 . 2002-09-23 12:00 8466432 ----a-w- c:\windows\system32\shell32.dll
2011-01-21 14:44 . 2002-09-23 12:00 440320 ----a-w- c:\windows\system32\shimgvw.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 14:04 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-01-07 111208]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-01-07 13880424]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2010-11-04 1753192]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2011-03-04 281768]
"RTHDCPL"="RTHDCPL.EXE" [2011-03-21 20053096]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-02-23 3451496]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"i:\\Hry\\League of Legends\\air\\LolClient.exe"=
"i:\\Hry\\League of Legends\\game\\League of Legends.exe"=
"i:\\Hry\\Half-Life\\hl.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"i:\\Programy\\QIP\\qip.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"8397:TCP"= 8397:TCP:League of Legends Launcher
"8397:UDP"= 8397:UDP:League of Legends Launcher
"6893:TCP"= 6893:TCP:League of Legends Launcher
"6893:UDP"= 6893:UDP:League of Legends Launcher
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [17.4.2011 14:50 371544]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [17.4.2011 14:50 301528]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [17.4.2011 14:02 135336]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [17.4.2011 14:50 19544]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uInternet Settings,ProxyOverride = *.local
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Server\Data aplikací\Mozilla\Firefox\Profiles\e8zmt2mg.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/ig?hl=cs&source=iglk
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Notify-TPSvc - TPSvc.dll
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-18 15:24
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2011-04-18 15:38:56
ComboFix-quarantined-files.txt 2011-04-18 13:38
.
Před spuštěním: 7 602 868 224
Po spuštění: 7 715 078 144
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /fastdetect /NoExecute=OptIn
.
- - End Of File - - 0A5E2F7A696C542AACE5C68340C48EAB

[Rudy]

Log CF vypadá čistý. Viry jsou už jen v záloze systému. Vypněte obnovu systému, restartujte PC a obnovu opět zapněte.

[Airm]

Kde tu obnovu systému mám vypnout ?

[dodopa]

Dobrý večer,ospravedlňujem sa Rudy-mu za vstup.

Tu máte návod od riffmana:http://www.viry.cz/forum/viewtopic.php?t=47040

[Airm]

Super už je všechno OK děkuji vám lidi za pomoc. Vážím si vaší práce. LOCK

[Rudy]

Za všechny: nemáte zač!