POMOC ! POMOC ! POMOC !

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
Hondzzikk
1. Stupeň Varování
Příspěvky: 59
Registrován: 02 Ún 2009 20:53

Re: POMOC ! POMOC ! POMOC !

#46 Příspěvek od Hondzzikk »

ne nepoužívám..

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: POMOC ! POMOC ! POMOC !

#47 Příspěvek od motji »

O kolik máte víc odeslaných dat?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Hondzzikk
1. Stupeň Varování
Příspěvky: 59
Registrován: 02 Ún 2009 20:53

Re: POMOC ! POMOC ! POMOC !

#48 Příspěvek od Hondzzikk »

odeslaných:1626 přijatých:755

Hondzzikk
1. Stupeň Varování
Příspěvky: 59
Registrován: 02 Ún 2009 20:53

Re: POMOC ! POMOC ! POMOC !

#49 Příspěvek od Hondzzikk »

odeslaných:1626 přijatých:755

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: POMOC ! POMOC ! POMOC !

#50 Příspěvek od motji »

Můžete to vysledovat i v nouzovém režimu?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Hondzzikk
1. Stupeň Varování
Příspěvky: 59
Registrován: 02 Ún 2009 20:53

Re: POMOC ! POMOC ! POMOC !

#51 Příspěvek od Hondzzikk »

jo i v nouzovém režimu je víc odeslaných než přijatých...

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: POMOC ! POMOC ! POMOC !

#52 Příspěvek od motji »

Omlouvám se za zpoždění. Tak já už nevím..Problémy pořád přetrvávají?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Hondzzikk
1. Stupeň Varování
Příspěvky: 59
Registrován: 02 Ún 2009 20:53

Re: POMOC ! POMOC ! POMOC !

#53 Příspěvek od Hondzzikk »

ano problémy přetrvávají, tak sem se rozhodl že skusim reinstalovat OS jestli to pomůže a pak se ozvu

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: POMOC ! POMOC ! POMOC !

#54 Příspěvek od motji »

Dobře, pak se ozvěte :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Hondzzikk
1. Stupeň Varování
Příspěvky: 59
Registrován: 02 Ún 2009 20:53

Re: POMOC ! POMOC ! POMOC !

#55 Příspěvek od Hondzzikk »

problémy se zdají být pryč :thumbsups:

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: POMOC ! POMOC ! POMOC !

#56 Příspěvek od motji »

To jsem ráda, poprosím o závěrečný log ze rsitu.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Hondzzikk
1. Stupeň Varování
Příspěvky: 59
Registrován: 02 Ún 2009 20:53

Re: POMOC ! POMOC ! POMOC !

#57 Příspěvek od Hondzzikk »

Logfile of random's system information tool 1.08 (written by random/random)
Run by Hondzik at 2011-05-08 22:54:24
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 69 GB (87%) free of 80 GB
Total RAM: 1535 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:55:20, on 8.5.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\GENIUS~1\GNETMOUS.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Draxysoft\Wallpaper Sequencer\Walser.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AIMP2\AIMP2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\RtWLan.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Hondzik\Plocha\RSIT.exe
C:\Program Files\trend micro\Hondzik.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [mouseElf] C:\PROGRA~1\GENIUS~1\GNETMOUS.EXE
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe" -automount
O4 - HKCU\..\Run: [Walser] C:\Program Files\Draxysoft\Wallpaper Sequencer\Walser.exe start
O4 - HKCU\..\Run: [hudba] C:\Program Files\AIMP2\AIMP2.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Global Startup: REALTEK USB Wireless LAN Utility.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 7555 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\MP Scheduled Scan.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2011-05-08 320920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-04-18 818280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-08 34816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-08 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-04-18 818280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-11-11 90112]
"mouseElf"=C:\PROGRA~1\GENIUS~1\GNETMOUS.EXE [2004-02-24 176128]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-04-18 3460784]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-02 98304]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2011-05-08 136600]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"=C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe [2007-03-19 630784]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-10-11 14940040]
"AlcoholAutomount"=C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2009-11-15 33120]
"Walser"=C:\Program Files\Draxysoft\Wallpaper Sequencer\Walser.exe [2008-10-17 1365504]
"hudba"=C:\Program Files\AIMP2\AIMP2.exe [2010-08-07 1262592]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
REALTEK USB Wireless LAN Utility.lnk - C:\Program Files\REALTEK USB Wireless LAN Driver and Utility\RtWLan.exe

C:\Documents and Settings\Hondzik\Nabídka Start\Programy\Po spuštění
RocketDock.lnk - C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-03-03 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2008-04-27 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

======List of files/folders created in the last 1 months======

2011-05-08 22:54:26 ----D---- C:\Program Files\trend micro
2011-05-08 22:54:24 ----D---- C:\rsit
2011-05-08 13:05:03 ----D---- C:\Program Files\Maxis
2011-05-08 12:42:55 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\URSoft
2011-05-08 12:42:46 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-05-08 12:42:21 ----D---- C:\Program Files\Your Uninstaller 2010
2011-05-08 12:41:57 ----D---- C:\Program Files\Draxysoft
2011-05-08 12:32:01 ----D---- C:\Program Files\FireFly Studios
2011-05-08 12:26:30 ----D---- C:\Program Files\Virgin Interactive
2011-05-08 11:29:07 ----D---- C:\Program Files\ICQ7.5
2011-05-08 11:23:41 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\skypePM
2011-05-08 11:19:24 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\ICQ
2011-05-08 11:17:24 ----D---- C:\Program Files\Common Files\Skype
2011-05-08 11:16:41 ----RD---- C:\Program Files\Skype
2011-05-08 11:16:36 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\Skype
2011-05-08 11:16:20 ----D---- C:\Program Files\ICQ6.5
2011-05-08 11:16:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-05-08 11:09:21 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\ATI
2011-05-08 11:09:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2011-05-08 11:08:24 ----D---- C:\Program Files\Alcohol Soft
2011-05-08 11:05:24 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2011-05-08 11:03:48 ----A---- C:\WINDOWS\BricoPackUninst.cmd
2011-05-08 11:00:38 ----D---- C:\WinCmd
2011-05-08 11:00:22 ----A---- C:\WINDOWS\WINCMD.INI
2011-05-08 10:54:42 ----A---- C:\WINDOWS\ODBC.INI
2011-05-08 10:54:21 ----A---- C:\WINDOWS\system32\mdimon.dll
2011-05-08 10:52:31 ----D---- C:\Program Files\Common Files\DESIGNER
2011-05-08 10:51:50 ----D---- C:\WINDOWS\SHELLNEW
2011-05-08 10:51:47 ----D---- C:\Program Files\Microsoft.NET
2011-05-08 10:51:47 ----D---- C:\Program Files\Microsoft Office
2011-05-08 10:50:09 ----A---- C:\WINDOWS\system32\javaws.exe
2011-05-08 10:50:09 ----A---- C:\WINDOWS\system32\javaw.exe
2011-05-08 10:50:09 ----A---- C:\WINDOWS\system32\java.exe
2011-05-08 10:50:09 ----A---- C:\WINDOWS\system32\deploytk.dll
2011-05-08 10:48:48 ----D---- C:\Program Files\Java
2011-05-08 10:48:01 ----RHD---- C:\MSOCache
2011-05-08 10:47:09 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\Sun
2011-05-08 10:46:49 ----A---- C:\WINDOWS\system32\winstanew.dll
2011-05-08 10:46:49 ----A---- C:\WINDOWS\system32\user32new.dll
2011-05-08 10:46:49 ----A---- C:\WINDOWS\system32\setupapinew.dll
2011-05-08 10:46:48 ----A---- C:\WINDOWS\system32\secur32new.dll
2011-05-08 10:46:48 ----A---- C:\WINDOWS\system32\rpcrt4new.dll
2011-05-08 10:46:48 ----A---- C:\WINDOWS\system32\powrprofnew.dll
2011-05-08 10:46:48 ----A---- C:\WINDOWS\system32\ntdsapinew.dll
2011-05-08 10:46:48 ----A---- C:\WINDOWS\system32\ntdllnew.dll
2011-05-08 10:46:48 ----A---- C:\WINDOWS\system32\msvcrtnew.dll
2011-05-08 10:46:47 ----A---- C:\WINDOWS\system32\M2000Twn.dll
2011-05-08 10:46:46 ----A---- C:\WINDOWS\system32\kernel32new.dll
2011-05-08 10:46:46 ----A---- C:\WINDOWS\system32\dwmapi.dll
2011-05-08 10:46:46 ----A---- C:\WINDOWS\system32\d3dx9_37.dll
2011-05-08 10:46:44 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-05-08 10:46:43 ----A---- C:\WINDOWS\system32\d3d10core.dll
2011-05-08 10:46:42 ----A---- C:\WINDOWS\system32\crypt32new.dll
2011-05-08 10:46:42 ----A---- C:\WINDOWS\system32\apphelpnew.dll
2011-05-08 10:46:42 ----A---- C:\WINDOWS\system32\advapi32new.dll
2011-05-08 10:46:00 ----A---- C:\WINDOWS\system32\Nucleus.dll
2011-05-08 10:46:00 ----A---- C:\WINDOWS\system32\dxgi.dll
2011-05-08 10:46:00 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-05-08 10:46:00 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-05-08 10:46:00 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-05-08 10:45:58 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-05-08 10:45:58 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-05-08 10:45:58 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-05-08 10:45:58 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-05-08 10:45:58 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-05-08 10:45:58 ----A---- C:\WINDOWS\system32\d3dx10.dll
2011-05-08 10:45:58 ----A---- C:\WINDOWS\system32\d3d10.dll
2011-05-08 10:44:47 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\WinRAR
2011-05-08 10:44:26 ----D---- C:\Program Files\WinRAR
2011-05-08 10:41:10 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\Malwarebytes
2011-05-08 10:40:28 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-05-08 10:40:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-05-08 10:40:25 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-05-08 10:40:25 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-05-08 10:38:23 ----A---- C:\WINDOWS\BricoPackUninst.txt
2011-05-08 10:38:23 ----A---- C:\WINDOWS\BricoPackFoldersDelete.cmd
2011-05-08 10:37:52 ----D---- C:\WINDOWS\BricoPacks
2011-05-08 10:34:54 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\Macromedia
2011-05-08 10:34:54 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\Adobe
2011-05-08 10:29:28 ----D---- C:\WINDOWS\Cache
2011-05-08 03:08:08 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2011-05-07 21:50:24 ----A---- C:\WINDOWS\system32\h323log.txt
2011-05-07 21:47:24 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2011-05-07 21:46:54 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2011-05-07 21:46:06 ----A---- C:\WINDOWS\system32\drivers\fetnd5.sys
2011-05-07 21:46:04 ----A---- C:\WINDOWS\system32\usbui.dll
2011-05-07 21:45:57 ----A---- C:\WINDOWS\system32\drivers\UAGP35.SYS
2011-05-07 21:44:43 ----A---- C:\WINDOWS\imsins.BAK
2011-05-07 21:44:40 ----SHD---- C:\WINDOWS\Installer
2011-05-07 21:44:40 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-05-07 21:44:39 ----D---- C:\Program Files\Common Files\ODBC
2011-05-07 21:44:39 ----A---- C:\WINDOWS\ODBCINST.INI
2011-05-07 21:44:36 ----RD---- C:\Program Files
2011-05-07 21:44:36 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-05-07 21:44:36 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-05-07 21:44:36 ----D---- C:\Program Files\Common Files
2011-05-07 21:44:32 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2011-05-07 21:44:32 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2011-05-07 21:44:32 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdur.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdru.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2011-05-07 21:44:30 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2011-05-07 21:44:28 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2011-05-07 21:44:28 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2011-05-07 21:44:28 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2011-05-07 21:44:28 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2011-05-07 21:44:28 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2011-05-07 21:44:28 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2011-05-07 21:44:28 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2011-05-07 21:44:27 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2011-05-07 21:44:27 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2011-05-07 21:44:27 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2011-05-07 21:44:27 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2011-05-07 21:44:27 ----RA---- C:\WINDOWS\system32\kbdest.dll
2011-05-07 21:44:21 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2011-05-07 21:44:21 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2011-05-07 21:44:21 ----RA---- C:\WINDOWS\system32\kbdro.dll
2011-05-07 21:44:20 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2011-05-07 21:44:20 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2011-05-07 21:44:20 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2011-05-07 21:44:20 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2011-05-07 21:44:20 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2011-05-07 21:44:20 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2011-05-07 21:44:20 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2011-05-07 21:44:18 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-05-07 21:44:18 ----A---- C:\WINDOWS\system32\irclass.dll
2011-05-07 21:44:18 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2011-05-07 21:44:18 ----A---- C:\WINDOWS\system32\dgsetup.dll
2011-05-07 21:44:18 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2011-05-07 21:44:16 ----A---- C:\WINDOWS\TASKMAN.EXE
2011-05-07 21:44:15 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2011-05-07 21:44:15 ----A---- C:\WINDOWS\system32\storprop.dll
2011-05-07 21:44:15 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2011-05-07 21:44:15 ----A---- C:\WINDOWS\system32\batt.dll
2011-05-07 21:44:15 ----A---- C:\WINDOWS\notepad.exe
2011-05-07 21:44:06 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2011-05-07 21:44:02 ----RA---- C:\WINDOWS\SET8.tmp
2011-05-07 21:43:59 ----RA---- C:\WINDOWS\SET4.tmp
2011-05-07 21:43:58 ----RA---- C:\WINDOWS\SET3.tmp
2011-05-07 21:43:52 ----D---- C:\WINDOWS\system32\CatRoot2
2011-05-07 21:43:52 ----D---- C:\WINDOWS\system32\CatRoot
2011-05-07 21:43:46 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-05-07 21:43:26 ----A---- C:\WINDOWS\setuplog.txt
2011-05-07 21:43:24 ----D---- C:\Documents and Settings
2011-05-07 21:42:44 ----SH---- C:\boot.ini
2011-05-07 21:42:34 ----D---- C:\Data
2011-05-07 21:39:16 ----SHD---- C:\System Volume Information
2011-05-07 21:38:25 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-05-07 21:38:25 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-05-07 21:38:25 ----RSD---- C:\WINDOWS\Fonts
2011-05-07 21:38:25 ----RD---- C:\WINDOWS\Web
2011-05-07 21:38:25 ----HD---- C:\WINDOWS\inf
2011-05-07 21:38:25 ----D---- C:\WINDOWS\WinSxS
2011-05-07 21:38:25 ----D---- C:\WINDOWS\WBEM
2011-05-07 21:38:25 ----D---- C:\WINDOWS\twain_32
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Temp
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\wins
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\wbem
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\usmt
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\spool
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\ShellExt
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\Setup
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\ras
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\oobe
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\npp
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\mui
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\inetsrv
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\IME
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\icsxml
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\ias
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\export
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\drivers\etc
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\drivers\disdn
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\drivers
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\dhcp
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\cs-cz
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\cs
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\config
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\3com_dmi
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\3076
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\2052
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1054
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1042
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1041
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1037
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1033
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1031
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1029
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1028
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32\1025
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system32
2011-05-07 21:38:25 ----D---- C:\WINDOWS\system
2011-05-07 21:38:25 ----D---- C:\WINDOWS\security
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Resources
2011-05-07 21:38:25 ----D---- C:\WINDOWS\repair
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Provisioning
2011-05-07 21:38:25 ----D---- C:\WINDOWS\pchealth
2011-05-07 21:38:25 ----D---- C:\WINDOWS\PeerNet
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Offline Web Pages
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Network Diagnostic
2011-05-07 21:38:25 ----D---- C:\WINDOWS\mui
2011-05-07 21:38:25 ----D---- C:\WINDOWS\msapps
2011-05-07 21:38:25 ----D---- C:\WINDOWS\msagent
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Media
2011-05-07 21:38:25 ----D---- C:\WINDOWS\L2Schemas
2011-05-07 21:38:25 ----D---- C:\WINDOWS\java
2011-05-07 21:38:25 ----D---- C:\WINDOWS\ime
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Help
2011-05-07 21:38:25 ----D---- C:\WINDOWS\ehome
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Driver Cache
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Debug
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Cursors
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Connection Wizard
2011-05-07 21:38:25 ----D---- C:\WINDOWS\Config
2011-05-07 21:38:25 ----D---- C:\WINDOWS\AppPatch
2011-05-07 21:38:25 ----D---- C:\WINDOWS\addins
2011-05-07 21:38:25 ----D---- C:\WINDOWS
2011-05-07 21:38:25 ----ASH---- C:\pagefile.sys
2011-05-07 21:31:57 ----N---- C:\WINDOWS\system32\spmsg2.dll
2011-05-07 21:31:54 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2011-05-07 21:28:59 ----D---- C:\WINDOWS\system32\XPSViewer
2011-05-07 21:28:54 ----D---- C:\Program Files\MSBuild
2011-05-07 21:28:52 ----D---- C:\WINDOWS\system32\en-US
2011-05-07 21:28:45 ----D---- C:\Program Files\Reference Assemblies
2011-05-07 21:28:07 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2011-05-07 21:28:03 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-05-07 21:28:02 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-05-07 21:28:02 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-05-07 21:28:02 ----D---- C:\7d93cf95cac832b29bf7e24446f2
2011-05-07 21:27:14 ----RSD---- C:\WINDOWS\assembly
2011-05-07 21:26:18 ----D---- C:\WINDOWS\Microsoft.NET
2011-05-07 20:57:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2011-05-07 20:52:38 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\vlc
2011-05-07 20:44:42 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\Mozilla
2011-05-07 20:44:02 ----A---- C:\WINDOWS\RTacDbg.txt
2011-05-07 20:43:43 ----A---- C:\WINDOWS\system32\drivers\AegisP.sys
2011-05-07 20:43:34 ----RA---- C:\WINDOWS\system32\drivers\RTL8187.sys
2011-05-07 20:43:25 ----RA---- C:\WINDOWS\system32\drivers\EAPPkt.sys
2011-05-07 20:43:25 ----D---- C:\WINDOWS\system32\RTL8187
2011-05-07 20:43:19 ----D---- C:\Program Files\REALTEK USB Wireless LAN Driver and Utility
2011-05-07 20:43:11 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\InstallShield
2011-05-07 20:42:48 ----D---- C:\Program Files\Mozilla Firefox
2011-05-07 20:39:14 ----SHD---- C:\RECYCLER
2011-05-07 20:30:35 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\atitvo32.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\atimpc32.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\aticalrt.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\aticaldd.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\atibtmon.exe
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2011-05-07 20:30:34 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\atioglxx.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\ATIODE.exe
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\atikvmag.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\aticalcl.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\ati3duag.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2011-05-07 20:30:33 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2011-05-07 20:30:32 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-05-07 20:30:16 ----D---- C:\Program Files\ATI Technologies
2011-05-07 20:30:11 ----D---- C:\Program Files\ATI
2011-05-07 20:29:31 ----D---- C:\ATI
2011-05-07 20:27:27 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\AIMP
2011-05-07 20:26:32 ----D---- C:\Program Files\AIMP2
2011-05-07 20:25:08 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-05-07 20:25:08 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-05-07 20:24:24 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-05-07 20:24:23 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-05-07 20:24:23 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-05-07 20:24:22 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-05-07 20:24:22 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-05-07 20:24:21 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-05-07 20:24:03 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-05-07 20:23:59 ----D---- C:\Program Files\AVAST Software
2011-05-07 20:23:59 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-05-07 20:22:49 ----D---- C:\Program Files\VideoLAN
2011-05-07 20:22:31 ----A---- C:\WINDOWS\system32\drivers\GMFILTR.SYS
2011-05-07 20:22:31 ----A---- C:\WINDOWS\system32\drivers\gflmouhid.sys
2011-05-07 20:22:30 ----D---- C:\Program Files\Genius NetScroll+ Optical Mouse
2011-05-07 20:14:58 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2011-05-07 20:14:57 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2011-05-07 20:14:55 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2011-05-07 20:14:54 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2011-05-07 20:14:53 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2011-05-07 20:14:51 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2011-05-07 20:14:50 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2011-05-07 20:14:48 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2011-05-07 20:14:47 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011-05-07 20:14:46 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2011-05-07 20:14:45 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011-05-07 20:13:42 ----R---- C:\WINDOWS\system32\ChCfg.exe
2011-05-07 20:13:10 ----R---- C:\WINDOWS\system32\RTLCPL.exe
2011-05-07 20:13:10 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll
2011-05-07 20:13:09 ----R---- C:\WINDOWS\system32\drivers\alcxwdm.sys
2011-05-07 20:13:09 ----R---- C:\WINDOWS\soundman.exe
2011-05-07 20:13:09 ----A---- C:\WINDOWS\system32\ksuser.dll
2011-05-07 20:13:09 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2011-05-07 20:13:09 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2011-05-07 20:13:01 ----D---- C:\Program Files\Realtek AC97
2011-05-07 20:12:36 ----R---- C:\WINDOWS\alcupd.exe
2011-05-07 20:12:35 ----RA---- C:\WINDOWS\Alcrmv.exe
2011-05-07 20:12:34 ----HD---- C:\Program Files\InstallShield Installation Information
2011-05-07 20:12:15 ----RA---- C:\WINDOWS\system32\drivers\fetnd5b.sys
2011-05-07 20:12:04 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-05-07 20:11:54 ----D---- C:\Program Files\VIA
2011-05-07 20:11:48 ----D---- C:\Program Files\Common Files\InstallShield
2011-05-07 20:07:43 ----D---- C:\Documents and Settings\Hondzik\Data aplikací\Identities
2011-05-07 20:07:40 ----HD---- C:\Program Files\Uninstall Information
2011-05-07 20:07:20 ----D---- C:\Program Files\Windows Defender
2011-05-07 20:07:12 ----ASH---- C:\Documents and Settings\Hondzik\Data aplikací\desktop.ini
2011-05-07 20:07:11 ----SD---- C:\Documents and Settings\Hondzik\Data aplikací\Microsoft
2011-05-07 20:06:38 ----D---- C:\WINDOWS\SoftwareDistribution
2011-05-07 20:06:36 ----SD---- C:\WINDOWS\system32\Microsoft
2011-05-07 20:06:36 ----D---- C:\WINDOWS\Prefetch
2011-05-07 20:06:36 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-05-07 19:59:33 ----D---- C:\WINDOWS\system32\xircom
2011-05-07 19:59:33 ----D---- C:\Program Files\xerox
2011-05-07 19:59:33 ----D---- C:\Program Files\microsoft frontpage
2011-05-07 19:58:58 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-05-07 19:58:57 ----HD---- C:\WINDOWS\$hf_mig$
2011-05-07 19:58:44 ----RASH---- C:\MSDOS.SYS
2011-05-07 19:58:44 ----RASH---- C:\IO.SYS
2011-05-07 19:58:44 ----A---- C:\WINDOWS\control.ini
2011-05-07 19:58:44 ----A---- C:\CONFIG.SYS
2011-05-07 19:58:44 ----A---- C:\AUTOEXEC.BAT
2011-05-07 19:58:30 ----A---- C:\WINDOWS\OEWABLog.txt
2011-05-07 19:58:26 ----A---- C:\WINDOWS\system32\mapi32.dll
2011-05-07 19:57:33 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2011-05-07 19:57:29 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-05-07 19:57:24 ----HD---- C:\Program Files\WindowsUpdate
2011-05-07 19:57:19 ----D---- C:\Program Files\Online Services
2011-05-07 19:57:01 ----D---- C:\WINDOWS\system32\DirectX
2011-05-07 19:56:53 ----A---- C:\WINDOWS\system32\atrace.dll
2011-05-07 19:56:51 ----A---- C:\WINDOWS\system32\desktop.ini
2011-05-07 19:56:51 ----A---- C:\WINDOWS\desktop.ini
2011-05-07 19:56:45 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2011-05-07 19:56:44 ----A---- C:\WINDOWS\system32\acctres.dll
2011-05-07 19:56:43 ----D---- C:\Program Files\Common Files\Services
2011-05-07 19:56:41 ----SD---- C:\WINDOWS\Tasks
2011-05-07 19:56:41 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2011-05-07 19:56:40 ----D---- C:\Program Files\Common Files\MSSoap
2011-05-07 19:56:36 ----D---- C:\WINDOWS\srchasst
2011-05-07 19:56:35 ----D---- C:\WINDOWS\system32\Macromed
2011-05-07 19:56:33 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-05-07 19:56:33 ----A---- C:\WINDOWS\system32\wups.dll
2011-05-07 19:56:33 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-05-07 19:56:33 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-05-07 19:56:33 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-05-07 19:56:33 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-05-07 19:56:33 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-05-07 19:56:33 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-05-07 19:56:32 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-05-07 19:56:32 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2011-05-07 19:56:32 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-05-07 19:56:32 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2011-05-07 19:56:32 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2011-05-07 19:56:32 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2011-05-07 19:56:29 ----D---- C:\Program Files\Movie Maker
2011-05-07 19:56:11 ----A---- C:\WINDOWS\system32\safrslv.dll
2011-05-07 19:56:11 ----A---- C:\WINDOWS\system32\safrdm.dll
2011-05-07 19:56:11 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2011-05-07 19:56:11 ----A---- C:\WINDOWS\system32\racpldlg.dll
2011-05-07 19:56:07 ----D---- C:\WINDOWS\system32\Restore
2011-05-07 19:56:07 ----A---- C:\WINDOWS\system32\srsvc.dll
2011-05-07 19:56:07 ----A---- C:\WINDOWS\system32\srrstr.dll
2011-05-07 19:56:07 ----A---- C:\WINDOWS\system32\srclient.dll
2011-05-07 19:56:07 ----A---- C:\WINDOWS\system32\fltMc.exe
2011-05-07 19:56:07 ----A---- C:\WINDOWS\system32\fltlib.dll
2011-05-07 19:56:07 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2011-05-07 19:56:06 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2011-05-07 19:56:06 ----A---- C:\WINDOWS\system32\mnmdd.dll
2011-05-07 19:56:06 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2011-05-07 19:56:06 ----A---- C:\WINDOWS\system32\ils.dll
2011-05-07 19:56:06 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2011-05-07 19:56:05 ----A---- C:\WINDOWS\system32\msconf.dll
2011-05-07 19:56:05 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2011-05-07 19:56:03 ----D---- C:\Program Files\NetMeeting
2011-05-07 19:56:03 ----A---- C:\WINDOWS\system32\msoert2.dll
2011-05-07 19:56:03 ----A---- C:\WINDOWS\system32\msoeacct.dll
2011-05-07 19:56:02 ----A---- C:\WINDOWS\system32\inetres.dll
2011-05-07 19:56:01 ----A---- C:\WINDOWS\system32\inetcomm.dll
2011-05-07 19:56:00 ----D---- C:\Program Files\Outlook Express
2011-05-07 19:56:00 ----A---- C:\WINDOWS\system32\schedsvc.dll
2011-05-07 19:56:00 ----A---- C:\WINDOWS\system32\mstinit.exe
2011-05-07 19:55:59 ----A---- C:\WINDOWS\system32\mstask.dll
2011-05-07 19:55:59 ----A---- C:\WINDOWS\system32\isign32.dll
2011-05-07 19:55:59 ----A---- C:\WINDOWS\system32\inetcfg.dll
2011-05-07 19:55:59 ----A---- C:\WINDOWS\system32\icwphbk.dll
2011-05-07 19:55:59 ----A---- C:\WINDOWS\system32\icwdial.dll
2011-05-07 19:55:53 ----D---- C:\Program Files\Common Files\System
2011-05-07 19:55:50 ----D---- C:\Program Files\Internet Explorer
2011-05-07 19:55:00 ----D---- C:\Program Files\ComPlus Applications
2011-05-07 19:54:57 ----A---- C:\WINDOWS\vbaddin.ini
2011-05-07 19:54:57 ----A---- C:\WINDOWS\vb.ini
2011-05-07 19:54:53 ----D---- C:\WINDOWS\Registration
2011-05-07 19:54:32 ----D---- C:\Program Files\Windows Media Connect 2
2011-05-07 19:54:31 ----D---- C:\Program Files\Windows Media Player
2011-05-07 19:54:29 ----D---- C:\Program Files\Messenger
2011-05-07 19:54:26 ----D---- C:\Program Files\MSN Gaming Zone
2011-05-07 19:54:26 ----A---- C:\WINDOWS\system32\write.exe
2011-05-07 19:54:16 ----A---- C:\WINDOWS\system32\winchat.exe
2011-05-07 19:54:16 ----A---- C:\WINDOWS\system32\sndvol32.exe
2011-05-07 19:54:16 ----A---- C:\WINDOWS\system32\hticons.dll
2011-05-07 19:54:16 ----A---- C:\WINDOWS\system32\avwav.dll
2011-05-07 19:54:16 ----A---- C:\WINDOWS\system32\avtapi.dll
2011-05-07 19:54:16 ----A---- C:\WINDOWS\system32\avmeter.dll
2011-05-07 19:54:09 ----A---- C:\WINDOWS\system32\charmap.exe
2011-05-07 19:54:09 ----A---- C:\WINDOWS\system32\getuname.dll
2011-05-07 19:54:09 ----A---- C:\WINDOWS\system32\calc.exe
2011-05-07 19:54:08 ----A---- C:\WINDOWS\system32\winmine.exe
2011-05-07 19:54:08 ----A---- C:\WINDOWS\system32\sol.exe
2011-05-07 19:54:08 ----A---- C:\WINDOWS\system32\reset.exe
2011-05-07 19:54:08 ----A---- C:\WINDOWS\system32\mshearts.exe
2011-05-07 19:54:08 ----A---- C:\WINDOWS\system32\freecell.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\tslabels.ini
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\tskill.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\tscon.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\shadow.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\rwinsta.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\regini.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\qwinsta.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\qappsrv.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\msg.exe
2011-05-07 19:54:07 ----A---- C:\WINDOWS\system32\logoff.exe
2011-05-07 19:54:06 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2011-05-07 19:54:06 ----A---- C:\WINDOWS\system32\cdmodem.dll
2011-05-07 19:54:01 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2011-05-07 19:54:00 ----A---- C:\WINDOWS\system32\sndrec32.exe
2011-05-07 19:54:00 ----A---- C:\WINDOWS\system32\mplay32.exe
2011-05-07 19:54:00 ----A---- C:\WINDOWS\system32\accwiz.exe
2011-05-07 19:53:59 ----D---- C:\Program Files\Windows NT
2011-05-07 19:53:59 ----A---- C:\WINDOWS\system32\mspaint.exe
2011-05-07 19:53:59 ----A---- C:\WINDOWS\system32\hypertrm.dll
2011-05-07 19:53:59 ----A---- C:\WINDOWS\system32\clipbrd.exe
2011-05-07 19:53:58 ----A---- C:\WINDOWS\system32\spider.exe
2011-05-07 19:53:58 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2011-05-07 19:53:58 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2011-05-07 19:53:58 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2011-05-07 19:53:57 ----A---- C:\WINDOWS\system32\tsgqec.dll
2011-05-07 19:53:57 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2011-05-07 19:53:57 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2011-05-07 19:53:57 ----A---- C:\WINDOWS\system32\mstscax.dll
2011-05-07 19:53:57 ----A---- C:\WINDOWS\system32\aaclient.dll
2011-05-07 19:53:56 ----A---- C:\WINDOWS\system32\termsrv.dll
2011-05-07 19:53:56 ----A---- C:\WINDOWS\system32\sessmgr.exe
2011-05-07 19:53:56 ----A---- C:\WINDOWS\system32\remotepg.dll
2011-05-07 19:53:56 ----A---- C:\WINDOWS\system32\rdshost.exe
2011-05-07 19:53:56 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2011-05-07 19:53:56 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2011-05-07 19:53:56 ----A---- C:\WINDOWS\system32\rdchost.dll
2011-05-07 19:53:56 ----A---- C:\WINDOWS\system32\mstsc.exe
2011-05-07 19:53:55 ----D---- C:\WINDOWS\system32\MsDtc
2011-05-07 19:53:55 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2011-05-07 19:53:55 ----A---- C:\WINDOWS\system32\rdpclip.exe
2011-05-07 19:53:55 ----A---- C:\WINDOWS\system32\qprocess.exe
2011-05-07 19:53:55 ----A---- C:\WINDOWS\system32\mtxoci.dll
2011-05-07 19:53:55 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2011-05-07 19:53:55 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2011-05-07 19:53:55 ----A---- C:\WINDOWS\system32\icaapi.dll
2011-05-07 19:53:55 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2011-05-07 19:53:54 ----A---- C:\WINDOWS\system32\xolehlp.dll
2011-05-07 19:53:54 ----A---- C:\WINDOWS\system32\msdtctm.dll
2011-05-07 19:53:54 ----A---- C:\WINDOWS\system32\msdtclog.dll
2011-05-07 19:53:54 ----A---- C:\WINDOWS\system32\msdtc.exe
2011-05-07 19:53:53 ----D---- C:\WINDOWS\system32\Com
2011-05-07 19:53:53 ----A---- C:\WINDOWS\system32\stclient.dll
2011-05-07 19:53:53 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2011-05-07 19:53:53 ----A---- C:\WINDOWS\system32\mtxex.dll
2011-05-07 19:53:53 ----A---- C:\WINDOWS\system32\mtxdm.dll
2011-05-07 19:53:53 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2011-05-07 19:53:53 ----A---- C:\WINDOWS\system32\comrepl.dll
2011-05-07 19:53:53 ----A---- C:\WINDOWS\system32\comaddin.dll
2011-05-07 19:53:53 ----A---- C:\WINDOWS\system32\colbact.dll
2011-05-07 19:53:52 ----A---- C:\WINDOWS\system32\clbcatex.dll
2011-05-07 19:53:52 ----A---- C:\WINDOWS\system32\catsrvut.dll
2011-05-07 19:53:52 ----A---- C:\WINDOWS\system32\catsrvps.dll
2011-05-07 19:53:52 ----A---- C:\WINDOWS\system32\catsrv.dll
2011-05-07 19:53:51 ----A---- C:\WINDOWS\system32\comuid.dll
2011-05-07 19:53:51 ----A---- C:\WINDOWS\system32\comsvcs.dll
2011-05-07 19:53:51 ----A---- C:\WINDOWS\system32\comsnap.dll
2011-05-07 19:53:51 ----A---- C:\WINDOWS\system32\clbcatq.dll
2011-05-07 19:53:45 ----A---- C:\WINDOWS\system32\servdeps.dll
2011-05-07 19:53:45 ----A---- C:\WINDOWS\system32\mmfutil.dll
2011-05-07 19:53:45 ----A---- C:\WINDOWS\system32\licwmi.dll
2011-05-07 19:53:45 ----A---- C:\WINDOWS\system32\cmprops.dll
2011-05-07 19:53:38 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2011-05-07 19:53:38 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 months======

2011-05-08 11:03:44 ----A---- C:\WINDOWS\system32\uxtheme.dll
2011-05-07 21:44:34 ----A---- C:\WINDOWS\system.ini
2011-05-07 19:58:41 ----A---- C:\WINDOWS\win.ini
2011-05-07 19:58:11 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-05-08 697328]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-04-18 30680]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-04-18 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-04-18 441176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-04-18 307288]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-04-18 49240]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2011-05-07 21035]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-04-18 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-04-18 102488]
R2 EAPPkt;Realtek EAPPkt Protocol; C:\WINDOWS\system32\DRIVERS\EAPPkt.sys [2006-11-15 38144]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-11-22 3804416]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-03-03 4630016]
R3 genmcmnUSB;USB Scroll Mouse Driver; C:\WINDOWS\system32\DRIVERS\gflmouhid.sys [2003-08-07 6528]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-27 12160]
R3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter; C:\WINDOWS\system32\DRIVERS\RTL8187.sys [2007-05-21 235648]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 a2csgpsn;a2csgpsn; C:\WINDOWS\system32\drivers\a2csgpsn.sys []
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2004-04-15 42496]
S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS []
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-04-27 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-04-27 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-03-03 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-04-18 42184]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-08 152984]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2010-04-29 304464]
R2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
R2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.08 2011-05-08 22:55:39

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10p_Plugin.exe -maintain plugin
AIMP2-->C:\Program Files\AIMP2\Uninstall.exe
avast! Free Antivirus-->C:\Program Files\AVAST Software\Avast\aswRunDll.exe "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Catalyst Control Center - Branding-->MsiExec.exe /I{8D7133DE-27D2-47E5-B248-4180278D32AA}
Draxysoft Wallpaper Sequencer Ultra 4.6.2.451-->"C:\Program Files\Draxysoft\Wallpaper Sequencer\unins000.exe"
Genius NetScroll+ Optical Mouse-->C:\Program Files\Genius NetScroll+ Optical Mouse\Setup.exe /Uninstall
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
ICQ7.5-->"C:\Program Files\InstallShield Installation Information\{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}\ICQ7.exe" -runfromtemp -l0x0009 -removeonly
Java(TM) 6 Update 11-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216011FF}
Malwarebytes' Anti-Malware-->"C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - CSY-->MsiExec.exe /I{A2C9CD1B-2551-3AED-B244-6698FB929FA6}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - CSY-->MsiExec.exe /I{546C143E-68DC-314D-97BC-1E454E3BA429}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - csy-->MsiExec.exe /I{DD73CA82-EA82-38AA-863D-9A24A018DC96}
Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - csy\setup.exe
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110405-6000-11D3-8CFE-0150048383C9}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mozilla Firefox (3.6.2)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
Original War-->C:\PROGRA~1\VIRGIN~1\ORIGIN~1\UNWISE.EXE C:\PROGRA~1\VIRGIN~1\ORIGIN~1\INSTALL.LOG
Pack Vista Inspirat 2 1.0-->C:\WINDOWS\BricoPacks\Vista Inspirat 2\Remove.exe
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\Setup.exe" -l0x5 -removeonly
REALTEK USB Wireless LAN Driver and Utility-->C:\Program Files\InstallShield Installation Information\{BE686891-3C56-4714-AFEF-341A7867BA80}\SETUP.EXE -v"ISSCRIPTCMDLINE=\"-d -zREMOVE\"" -l0x0005 -removeonly
SimCity 4 Deluxe-->C:\Program Files\Maxis\SimCity 4 Deluxe\EAUninstall.exe
Skype Toolbars-->MsiExec.exe /I{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Skype™ 5.0-->MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}
Stronghold Crusader-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8C3727F2-8E37-49E4-820C-03B1677F53B6}\setup.exe"
Stronghold-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C917BA70-28A3-4C74-B163-41FD8C8E1A5A}\setup.exe"
VIA Platform Device Manager-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
VLC media player 1.1.9-->C:\Program Files\VideoLAN\VLC\uninstall.exe
Windows Defender-->MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
WinRAR-->C:\Program Files\WinRAR\uninstall.exe
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
Your Uninstaller! 2010-->"C:\Program Files\Your Uninstaller 2010\unins000.exe"

======Security center information======

AV: avast! Antivirus

======System event log======

Computer Name: HECKER
Event Code: 6011
Message: Název tohoto počítače v systémech DNS a NetBIOS byl změněn z MACHINENAME na HECKER.

Record Number: 5
Source Name: EventLog
Time Written: 20110507195028.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Během prověřování, zda \Device\Serial0 je skutečně sériový port, byl zjištěn zásobník typu FIFO. Bude použit tento zásobník.

Record Number: 4
Source Name: Serial
Time Written: 20110507214348.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Během prověřování, zda \Device\Serial1 je skutečně sériový port, byl zjištěn zásobník typu FIFO. Bude použit tento zásobník.

Record Number: 3
Source Name: Serial
Time Written: 20110507214348.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Služba Event Log byla spuštěna.

Record Number: 2
Source Name: EventLog
Time Written: 20110507214329.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Uniprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20110507214329.000000+120
Event Type: Informace
User:

=====Application event log=====

Computer Name: HECKER
Event Code: 1000
Message: Čítače výkonu pro službu MSDTC (MSDTC) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 5
Source Name: LoadPerf
Time Written: 20110507195447.000000+120
Event Type: Informace
User:

Computer Name: HECKER
Event Code: 1000
Message: Čítače výkonu pro službu TermService (Terminálová služba) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 4
Source Name: LoadPerf
Time Written: 20110507195444.000000+120
Event Type: Informace
User:

Computer Name: HECKER
Event Code: 1000
Message: Čítače výkonu pro službu RemoteAccess (Směrování a vzdálený přístup) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 3
Source Name: LoadPerf
Time Written: 20110507195116.000000+120
Event Type: Informace
User:

Computer Name: HECKER
Event Code: 1000
Message: Čítače výkonu pro službu PSched (PSched) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 2
Source Name: LoadPerf
Time Written: 20110507195052.000000+120
Event Type: Informace
User:

Computer Name: HECKER
Event Code: 1000
Message: Čítače výkonu pro službu RSVP (QoS RSVP) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 1
Source Name: LoadPerf
Time Written: 20110507195037.000000+120
Event Type: Informace
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 4 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0409
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: POMOC ! POMOC ! POMOC !

#58 Příspěvek od motji »

Popřemýšlejte ještě o nějakém firewallu, třeba Zone alarmu.
Log je v pořádku :) .
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Odpovědět