VIRY.CZ

ComboFix 14-01-04.03 - Administrator 05.01.2014 15:12:54.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1015.480 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\IsUn0405.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-12-05 do 2014-01-05 )))))))))))))))))))))))))))))))
.
.
2014-01-05 13:51 . 2014-01-05 13:51 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\AVAST Software
2014-01-05 13:51 . 2014-01-05 13:50 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2014-01-05 13:51 . 2014-01-05 13:50 775952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-01-05 13:51 . 2014-01-05 13:50 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-01-05 13:51 . 2014-01-05 13:50 410528 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-01-05 13:51 . 2014-01-05 13:50 180248 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-01-05 13:50 . 2014-01-05 13:50 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-01-05 13:50 . 2014-01-05 13:50 54832 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2014-01-05 13:50 . 2014-01-05 13:50 270240 ----a-w- c:\windows\system32\aswBoot.exe
2014-01-05 13:50 . 2014-01-05 13:50 43152 ----a-w- c:\windows\avastSS.scr
2014-01-05 13:47 . 2014-01-05 13:47 -------- d-----w- c:\program files\AVAST Software
2014-01-05 13:46 . 2014-01-05 13:46 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2014-01-04 22:54 . 2014-01-04 22:54 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Malwarebytes
2014-01-04 22:53 . 2014-01-04 22:53 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2014-01-04 22:27 . 2014-01-05 00:00 -------- d-----w- C:\AdwCleaner
2014-01-04 21:47 . 2014-01-04 21:47 -------- d-----w- c:\program files\trend micro
2014-01-04 21:47 . 2014-01-04 21:47 -------- d-----w- C:\rsit
2014-01-03 13:00 . 2014-01-03 13:00 -------- d-----w- c:\windows\system32\wbem\Repository
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-05 13:32 . 2014-01-05 13:02 82944 ----a-w- c:\windows\system32\drivers\WudfRd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 77568 ----a-w- c:\windows\system32\drivers\WudfPf.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS.bak
2014-01-05 13:32 . 2014-01-05 13:02 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 81664 ----a-w- c:\windows\system32\drivers\videoprt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 52480 ----a-w- c:\windows\system32\drivers\volsnap.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 4352 ----a-w- c:\windows\system32\drivers\wmilib.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 38528 ----a-w- c:\windows\system32\drivers\wpdusb.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 34560 ----a-w- c:\windows\system32\drivers\wanarp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 25471 ----a-w- c:\windows\system32\drivers\watv10nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 22271 ----a-w- c:\windows\system32\drivers\watv06nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 14208 ----a-w- c:\windows\system32\drivers\wacompen.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12032 ----a-w- c:\windows\system32\drivers\ws2ifsl.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11935 ----a-w- c:\windows\system32\drivers\wadv11nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11871 ----a-w- c:\windows\system32\drivers\wadv09nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11807 ----a-w- c:\windows\system32\drivers\wadv07nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11295 ----a-w- c:\windows\system32\drivers\wadv08nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 42240 ----a-w- c:\windows\system32\drivers\viaagp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 20992 ----a-w- c:\windows\system32\drivers\vga.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 20608 ----a-w- c:\windows\system32\drivers\usbuhci.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 121984 ----a-w- c:\windows\system32\drivers\usbvideo.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 59520 ----a-w- c:\windows\system32\drivers\usbhub.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 51712 ----a-w- c:\windows\system32\drivers\tosdvd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 4736 ----a-w- c:\windows\system32\drivers\usbd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 44672 ----a-w- c:\windows\system32\drivers\uagp35.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 40840 ----a-w- c:\windows\system32\drivers\termdd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 384768 ----a-w- c:\windows\system32\drivers\update.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 30208 ----a-w- c:\windows\system32\drivers\usbehci.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 26368 ----a-w- c:\windows\system32\drivers\usbstor.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 25600 ----a-w- c:\windows\system32\drivers\usbcamd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 21376 ----a-w- c:\windows\system32\drivers\tsbvcap.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 15872 ----a-w- c:\windows\system32\drivers\usbintel.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 143872 ----a-w- c:\windows\system32\drivers\usbport.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12800 ----a-w- c:\windows\system32\drivers\usb8023x.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12800 ----a-w- c:\windows\system32\drivers\usb8023.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12288 ----a-w- c:\windows\system32\drivers\tunmp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 21896 ----a-w- c:\windows\system32\drivers\tdtcp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12040 ----a-w- c:\windows\system32\drivers\tdpipe.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 4352 ----a-w- c:\windows\system32\drivers\swenum.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 361344 ----a-w- c:\windows\system32\drivers\tcpip.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 19072 ----a-w- c:\windows\system32\drivers\tdi.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 14976 ----a-w- c:\windows\system32\drivers\tape.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 73344 ----a-w- c:\windows\system32\drivers\sr.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 6272 ----a-w- c:\windows\system32\drivers\splitter.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 5888 ----a-w- c:\windows\system32\drivers\smbali.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 334848 ----a-w- c:\windows\system32\drivers\srv.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 25344 ----a-w- c:\windows\system32\drivers\sonydcam.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 14592 ----a-w- c:\windows\system32\drivers\smclib.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 13240 ----a-w- c:\windows\system32\drivers\slwdmsup.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 64256 ----a-w- c:\windows\system32\drivers\serial.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 5888 ----a-w- c:\windows\system32\drivers\rootmdm.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 40960 ----a-w- c:\windows\system32\drivers\sisagp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 352768 ----a-w- c:\windows\system32\drivers\rt61.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 30592 ----a-w- c:\windows\system32\drivers\rndismpx.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 30592 ----a-w- c:\windows\system32\drivers\rndismp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 20480 ----a-w- c:\windows\system32\drivers\secdrv.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 15744 ----a-w- c:\windows\system32\drivers\serenum.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12032 ----a-w- c:\windows\system32\drivers\riodrv.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11904 ----a-w- c:\windows\system32\drivers\sffdisk.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11392 ----a-w- c:\windows\system32\drivers\sfloppy.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 10240 ----a-w- c:\windows\system32\drivers\sffp_mmc.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 58496 ----a-w- c:\windows\system32\drivers\redbook.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 13776 ----a-w- c:\windows\system32\drivers\recagent.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12032 ----a-w- c:\windows\system32\drivers\rio8drv.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 8832 ----a-w- c:\windows\system32\drivers\rasacd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 69120 ----a-w- c:\windows\system32\drivers\psched.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 68736 ----a-w- c:\windows\system32\drivers\pci.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 51328 ----a-w- c:\windows\system32\drivers\rasl2tp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 48384 ----a-w- c:\windows\system32\drivers\raspptp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 4224 ----a-w- c:\windows\system32\drivers\rdpcdd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 41472 ----a-w- c:\windows\system32\drivers\raspppoe.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 3328 ----a-w- c:\windows\system32\drivers\pciide.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 24960 ----a-w- c:\windows\system32\drivers\pciidex.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 196224 ----a-w- c:\windows\system32\drivers\rdpdr.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 17792 ----a-w- c:\windows\system32\drivers\ptilink.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 175744 ----a-w- c:\windows\system32\drivers\rdbss.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 16512 ----a-w- c:\windows\system32\drivers\raspti.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 146048 ----a-w- c:\windows\system32\drivers\portcls.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 80000 ----a-w- c:\windows\system32\drivers\parport.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 6784 ----a-w- c:\windows\system32\drivers\parvdm.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 19712 ----a-w- c:\windows\system32\drivers\partmgr.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 63232 ----a-w- c:\windows\system32\drivers\nwlnknb.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 574976 ----a-w- c:\windows\system32\drivers\ntfs.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 55936 ----a-w- c:\windows\system32\drivers\nwlnkspx.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 34688 ----a-w- c:\windows\system32\drivers\netbios.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 3456 ----a-w- c:\windows\system32\drivers\oprghdlr.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 32512 ----a-w- c:\windows\system32\drivers\nwlnkfwd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 30848 ----a-w- c:\windows\system32\drivers\npfs.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 2944 ----a-w- c:\windows\system32\drivers\null.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 163584 ----a-w- c:\windows\system32\drivers\nwrdr.sys.bak
2013-07-16 18:28 . 2013-06-08 15:03 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-01-05 13:50 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Zástupce stránky vlastností sběrnice High Definition Audio"="HDAShCut.exe" [2005-01-07 61952]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-09-07 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-09-07 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-09-07 137752]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-05 3764024]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\webcamXP 5\\wLite.exe"=
"c:\\Program Files\\webcamXP 5\\wService.exe"=
.
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [5.1.2014 14:51 180248]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [5.1.2014 14:51 775952]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [5.1.2014 14:51 410528]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [5.1.2014 14:50 67824]
S0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [5.1.2014 14:51 49944]
S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;c:\progra~1\Belkin\BELKIN~1.11G\DNINDIS5.SYS [8.6.2013 15:00 17149]
S3 nrsokwno;nrsokwno; [x]
S3 wxpSvc;webcamXP Service;c:\program files\webcamXP 5\wService.exe [26.3.2012 14:28 5404472]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASWMONFLT
*NewlyCreated* - ASWRDR
*NewlyCreated* - ASWSNX
*NewlyCreated* - ASWSP
*NewlyCreated* - ASWTDI
*NewlyCreated* - ASWVMM
*NewlyCreated* - AVAST!_ANTIVIRUS
.
Obsah adresáře 'Naplánované úlohy'
.
2014-01-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-02 13:19]
.
2014-01-05 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-05 13:50]
.
2014-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-19 21:19]
.
2014-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-19 21:19]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://192.168.0.101:82/video/liveie.asp#
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\yusceuqt.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-Adobe Photoshop 7.0 CE - c:\windows\ISUN0405.EXE
AddRemove-wLite - c:\program files\webcamXP 5\wl-uninst.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-01-05 15:17
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\wxpSvc]
"ImagePath"="c:\program files\webcamXP 5\wService.exe /startedbyscm:5053B757-40E35B3B-webcamSRV"
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TrueSight]
"ImagePath"="\??\"
.
Celkový čas: 2014-01-05 15:18:51
ComboFix-quarantined-files.txt 2014-01-05 14:18
.
Před spuštěním: Volných bajtů: 12 408 594 432
Po spuštění: Volných bajtů: 12 584 865 792
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 628017AC1D1AF2FBA62FC0C671E2BD81
413FC2A0C716421B3158746D63736515

Otevrete si poznamkovy blok a zkopirujte do nej tento skript Vlevo nahore kliknete na napis Soubor
Kliknete na napis Ulozit jako...
Napiste spravne ten cerveny nazev CFScript a ulozte na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Pretahntete mysi tento vytvoreny textovy dokument nad ikonu ComboFix a pustte.
ComboFix by se mel spustit a vykonat prikazy.
Az skonci (muze dojit k restartu pc), mel by se objevit novy log, ten mi sem zase zkopirujte.

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku

ComboFix 14-01-04.03 - Administrator 05.01.2014 17:05:22.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1015.594 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Administrator\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_nrsokwno
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-12-05 do 2014-01-05 )))))))))))))))))))))))))))))))
.
.
2014-01-05 13:51 . 2014-01-05 13:51 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\AVAST Software
2014-01-05 13:51 . 2014-01-05 13:50 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2014-01-05 13:51 . 2014-01-05 13:50 775952 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2014-01-05 13:51 . 2014-01-05 13:50 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-01-05 13:51 . 2014-01-05 13:50 410528 ----a-w- c:\windows\system32\drivers\aswSP.sys
2014-01-05 13:51 . 2014-01-05 13:50 180248 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-01-05 13:50 . 2014-01-05 13:50 67824 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-01-05 13:50 . 2014-01-05 13:50 54832 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2014-01-05 13:50 . 2014-01-05 13:50 270240 ----a-w- c:\windows\system32\aswBoot.exe
2014-01-05 13:50 . 2014-01-05 13:50 43152 ----a-w- c:\windows\avastSS.scr
2014-01-05 13:47 . 2014-01-05 13:47 -------- d-----w- c:\program files\AVAST Software
2014-01-05 13:46 . 2014-01-05 13:46 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2014-01-04 22:54 . 2014-01-04 22:54 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Malwarebytes
2014-01-04 22:53 . 2014-01-04 22:53 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2014-01-04 22:27 . 2014-01-05 00:00 -------- d-----w- C:\AdwCleaner
2014-01-04 21:47 . 2014-01-04 21:47 -------- d-----w- c:\program files\trend micro
2014-01-04 21:47 . 2014-01-04 21:47 -------- d-----w- C:\rsit
2014-01-03 13:00 . 2014-01-03 13:00 -------- d-----w- c:\windows\system32\wbem\Repository
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-01-05 13:32 . 2014-01-05 13:02 82944 ----a-w- c:\windows\system32\drivers\WudfRd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 77568 ----a-w- c:\windows\system32\drivers\WudfPf.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 19200 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS.bak
2014-01-05 13:32 . 2014-01-05 13:02 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 81664 ----a-w- c:\windows\system32\drivers\videoprt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 52480 ----a-w- c:\windows\system32\drivers\volsnap.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 4352 ----a-w- c:\windows\system32\drivers\wmilib.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 38528 ----a-w- c:\windows\system32\drivers\wpdusb.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 34560 ----a-w- c:\windows\system32\drivers\wanarp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 25471 ----a-w- c:\windows\system32\drivers\watv10nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 22271 ----a-w- c:\windows\system32\drivers\watv06nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 14208 ----a-w- c:\windows\system32\drivers\wacompen.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12032 ----a-w- c:\windows\system32\drivers\ws2ifsl.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11935 ----a-w- c:\windows\system32\drivers\wadv11nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11871 ----a-w- c:\windows\system32\drivers\wadv09nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11807 ----a-w- c:\windows\system32\drivers\wadv07nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11295 ----a-w- c:\windows\system32\drivers\wadv08nt.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 58112 ----a-w- c:\windows\system32\drivers\vdmindvd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 42240 ----a-w- c:\windows\system32\drivers\viaagp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 20992 ----a-w- c:\windows\system32\drivers\vga.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 20608 ----a-w- c:\windows\system32\drivers\usbuhci.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 121984 ----a-w- c:\windows\system32\drivers\usbvideo.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 59520 ----a-w- c:\windows\system32\drivers\usbhub.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 51712 ----a-w- c:\windows\system32\drivers\tosdvd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 4736 ----a-w- c:\windows\system32\drivers\usbd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 44672 ----a-w- c:\windows\system32\drivers\uagp35.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 40840 ----a-w- c:\windows\system32\drivers\termdd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 384768 ----a-w- c:\windows\system32\drivers\update.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 30208 ----a-w- c:\windows\system32\drivers\usbehci.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 26368 ----a-w- c:\windows\system32\drivers\usbstor.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 25728 ----a-w- c:\windows\system32\drivers\usbcamd2.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 25600 ----a-w- c:\windows\system32\drivers\usbcamd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 21376 ----a-w- c:\windows\system32\drivers\tsbvcap.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 15872 ----a-w- c:\windows\system32\drivers\usbintel.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 143872 ----a-w- c:\windows\system32\drivers\usbport.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12800 ----a-w- c:\windows\system32\drivers\usb8023x.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12800 ----a-w- c:\windows\system32\drivers\usb8023.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12288 ----a-w- c:\windows\system32\drivers\tunmp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 21896 ----a-w- c:\windows\system32\drivers\tdtcp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12040 ----a-w- c:\windows\system32\drivers\tdpipe.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 4352 ----a-w- c:\windows\system32\drivers\swenum.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 361344 ----a-w- c:\windows\system32\drivers\tcpip.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 19072 ----a-w- c:\windows\system32\drivers\tdi.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 15232 ----a-w- c:\windows\system32\drivers\StreamIP.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 14976 ----a-w- c:\windows\system32\drivers\tape.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 73344 ----a-w- c:\windows\system32\drivers\sr.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 6272 ----a-w- c:\windows\system32\drivers\splitter.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 5888 ----a-w- c:\windows\system32\drivers\smbali.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 334848 ----a-w- c:\windows\system32\drivers\srv.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 25344 ----a-w- c:\windows\system32\drivers\sonydcam.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 14592 ----a-w- c:\windows\system32\drivers\smclib.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 13240 ----a-w- c:\windows\system32\drivers\slwdmsup.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 64256 ----a-w- c:\windows\system32\drivers\serial.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 5888 ----a-w- c:\windows\system32\drivers\rootmdm.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 40960 ----a-w- c:\windows\system32\drivers\sisagp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 352768 ----a-w- c:\windows\system32\drivers\rt61.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 30592 ----a-w- c:\windows\system32\drivers\rndismpx.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 30592 ----a-w- c:\windows\system32\drivers\rndismp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 20480 ----a-w- c:\windows\system32\drivers\secdrv.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 15744 ----a-w- c:\windows\system32\drivers\serenum.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12032 ----a-w- c:\windows\system32\drivers\riodrv.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11904 ----a-w- c:\windows\system32\drivers\sffdisk.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11392 ----a-w- c:\windows\system32\drivers\sfloppy.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 11008 ----a-w- c:\windows\system32\drivers\sffp_sd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 10240 ----a-w- c:\windows\system32\drivers\sffp_mmc.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 58496 ----a-w- c:\windows\system32\drivers\redbook.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 13776 ----a-w- c:\windows\system32\drivers\recagent.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 12032 ----a-w- c:\windows\system32\drivers\rio8drv.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 8832 ----a-w- c:\windows\system32\drivers\rasacd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 69120 ----a-w- c:\windows\system32\drivers\psched.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 68736 ----a-w- c:\windows\system32\drivers\pci.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 51328 ----a-w- c:\windows\system32\drivers\rasl2tp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 48384 ----a-w- c:\windows\system32\drivers\raspptp.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 4224 ----a-w- c:\windows\system32\drivers\rdpcdd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 41472 ----a-w- c:\windows\system32\drivers\raspppoe.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 34432 ----a-w- c:\windows\system32\drivers\rawwan.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 3328 ----a-w- c:\windows\system32\drivers\pciide.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 24960 ----a-w- c:\windows\system32\drivers\pciidex.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 196224 ----a-w- c:\windows\system32\drivers\rdpdr.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 17792 ----a-w- c:\windows\system32\drivers\ptilink.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 175744 ----a-w- c:\windows\system32\drivers\rdbss.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 16512 ----a-w- c:\windows\system32\drivers\raspti.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 146048 ----a-w- c:\windows\system32\drivers\portcls.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 80000 ----a-w- c:\windows\system32\drivers\parport.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 6784 ----a-w- c:\windows\system32\drivers\parvdm.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 19712 ----a-w- c:\windows\system32\drivers\partmgr.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 63232 ----a-w- c:\windows\system32\drivers\nwlnknb.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 574976 ----a-w- c:\windows\system32\drivers\ntfs.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 55936 ----a-w- c:\windows\system32\drivers\nwlnkspx.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 34688 ----a-w- c:\windows\system32\drivers\netbios.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 3456 ----a-w- c:\windows\system32\drivers\oprghdlr.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 32512 ----a-w- c:\windows\system32\drivers\nwlnkfwd.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 30848 ----a-w- c:\windows\system32\drivers\npfs.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 2944 ----a-w- c:\windows\system32\drivers\null.sys.bak
2014-01-05 13:32 . 2014-01-05 13:02 163584 ----a-w- c:\windows\system32\drivers\nwrdr.sys.bak
2013-07-16 18:28 . 2013-06-08 15:03 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-01-05 13:50 259464 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Zástupce stránky vlastností sběrnice High Definition Audio"="HDAShCut.exe" [2005-01-07 61952]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-09-07 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-09-07 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-09-07 137752]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-05 3764024]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\webcamXP 5\\wLite.exe"=
"c:\\Program Files\\webcamXP 5\\wService.exe"=
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [5.1.2014 14:51 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [5.1.2014 14:51 180248]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [5.1.2014 14:51 775952]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [5.1.2014 14:51 410528]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [5.1.2014 14:50 67824]
S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver;c:\progra~1\Belkin\BELKIN~1.11G\DNINDIS5.SYS [8.6.2013 15:00 17149]
S3 wxpSvc;webcamXP Service;c:\program files\webcamXP 5\wService.exe [26.3.2012 14:28 5404472]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ASWRVRT
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2014-01-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-02 13:19]
.
2014-01-05 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-05 13:50]
.
2014-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-19 21:19]
.
2014-01-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-10-19 21:19]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\yusceuqt.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2014-01-05 14:50; wrc@avast.com; c:\program files\AVAST Software\Avast\WebRep\FF
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2014-01-05 17:14
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\wxpSvc]
"ImagePath"="c:\program files\webcamXP 5\wService.exe /startedbyscm:5053B757-40E35B3B-webcamSRV"
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\TrueSight]
"ImagePath"="\??\"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3880)
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\igfxsrvc.exe
.
**************************************************************************
.
Celkový čas: 2014-01-05 17:16:38 - počítač byl restartován
ComboFix-quarantined-files.txt 2014-01-05 16:16
ComboFix2.txt 2014-01-05 14:18
.
Před spuštěním: Volných bajtů: 12 503 126 016
Po spuštění: Volných bajtů: 12 449 173 504
.
- - End Of File - - 296BBA3AC0F7BE03116C8C4E5399856F
413FC2A0C716421B3158746D63736515

Pořád se to tam drží jako klíště
Je možný, že tohle všechno nebude nic platný?
Jestli by nebylo jednodušší prostě všechny pc přeinstalovat?


Slyším až sem,že si za to můžu sám

Nevim jestli to zabere, ale kazdopadne pc vycistime komplet a pak se uvidi. Zkuste jeste, jestli to dela i v nouzovem rezimu s praci v siti.

Jinak je to pripojeno pres wifi, nebo kabelem?


Dejte novy log z RSIT

Je to tam i v nouzovém režimu.
Připojeno přes wifi
log.....
Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2014-01-05 19:43:40
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 12 GB (60%) free of 20 GB
Total RAM: 1015 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:43:45, on 5.1.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O4 - HKLM\..\Run: [Zástupce stránky vlastností sběrnice High Definition Audio] HDAShCut.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: webcamXP Service (wxpSvc) - Moonware Studios - C:\Program Files\webcamXP 5\wService.exe

--
End of file - 4806 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\yusceuqt.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{AB2CE124-6272-4b12-94A9-7303C7397BD1}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\yusceuqt.default\searchplugins\
-seznam-tv-program-.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Zástupce stránky vlastností sběrnice High Definition Audio"=C:\WINDOWS\system32\HDAShCut.exe [2005-01-07 61952]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-09-07 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-09-07 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-09-07 137752]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-05 3764024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-08-24 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\webcamXP 5\wLite.exe"="C:\Program Files\webcamXP 5\wLite.exe:*:Enabled:webcamXP"
"C:\Program Files\webcamXP 5\wService.exe"="C:\Program Files\webcamXP 5\wService.exe:*:Enabled:webcamXP Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======List of files/folders created in the last 1 month======

2014-01-05 19:38:21 ----D---- C:\WINDOWS\CSC
2014-01-05 19:38:15 ----A---- C:\WINDOWS\ntbtlog.txt
2014-01-05 18:31:11 ----SHD---- C:\RECYCLER
2014-01-05 17:16:40 ----A---- C:\ComboFix.txt
2014-01-05 17:09:40 ----D---- C:\WINDOWS\temp
2014-01-05 15:11:41 ----A---- C:\Boot.bak
2014-01-05 15:11:37 ----RASHD---- C:\cmdcons
2014-01-05 15:10:22 ----A---- C:\WINDOWS\zip.exe
2014-01-05 15:10:22 ----A---- C:\WINDOWS\SWXCACLS.exe
2014-01-05 15:10:22 ----A---- C:\WINDOWS\SWSC.exe
2014-01-05 15:10:22 ----A---- C:\WINDOWS\SWREG.exe
2014-01-05 15:10:22 ----A---- C:\WINDOWS\sed.exe
2014-01-05 15:10:22 ----A---- C:\WINDOWS\PEV.exe
2014-01-05 15:10:22 ----A---- C:\WINDOWS\NIRCMD.exe
2014-01-05 15:10:22 ----A---- C:\WINDOWS\MBR.exe
2014-01-05 15:10:22 ----A---- C:\WINDOWS\grep.exe
2014-01-05 15:09:02 ----D---- C:\Qoobox
2014-01-05 15:08:31 ----D---- C:\WINDOWS\erdnt
2014-01-05 14:51:24 ----D---- C:\Documents and Settings\Administrator\Data aplikací\AVAST Software
2014-01-05 14:51:01 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2014-01-05 14:51:00 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-01-05 14:51:00 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2014-01-05 14:51:00 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2014-01-05 14:51:00 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-01-05 14:50:59 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2014-01-05 14:50:59 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2014-01-05 14:50:58 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-01-05 14:50:56 ----A---- C:\WINDOWS\avastSS.scr
2014-01-05 14:47:28 ----D---- C:\Program Files\AVAST Software
2014-01-05 14:46:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-01-05 14:02:25 ----A---- C:\WINDOWS\system32\drivers\WudfRd.sys.bak
2014-01-05 14:02:25 ----A---- C:\WINDOWS\system32\drivers\WudfPf.sys.bak
2014-01-05 14:02:25 ----A---- C:\WINDOWS\system32\drivers\WSTCODEC.SYS.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\ws2ifsl.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wpdusb.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wmilib.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\watv10nt.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\watv06nt.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wanarp.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wadv11nt.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wadv09nt.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wadv08nt.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wadv07nt.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\wacompen.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\volsnap.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\videoprt.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\viaagp.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\vga.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\vdmindvd.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\usbvideo.sys.bak
2014-01-05 14:02:24 ----A---- C:\WINDOWS\system32\drivers\usbuhci.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbstor.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbport.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbintel.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbhub.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbehci.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbd.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbcamd2.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usbcamd.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usb8023x.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\usb8023.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\update.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\uagp35.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\tunmp.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\tsbvcap.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\tosdvd.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\termdd.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys.bak
2014-01-05 14:02:23 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\tdi.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\tape.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\swenum.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\StreamIP.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\srv.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\sr.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\splitter.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\sonydcam.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\smclib.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\smbali.sys.bak
2014-01-05 14:02:22 ----A---- C:\WINDOWS\system32\drivers\slwdmsup.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\SLIP.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\sisagp.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\sfloppy.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\sffp_sd.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\sffp_mmc.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\sffdisk.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\serial.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\serenum.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\secdrv.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\rt61.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\rootmdm.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\rndismpx.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\rndismp.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\riodrv.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\rio8drv.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\redbook.sys.bak
2014-01-05 14:02:21 ----A---- C:\WINDOWS\system32\drivers\recagent.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\rdpcdd.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\rdbss.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\rawwan.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\raspti.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\raspptp.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\raspppoe.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\rasl2tp.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\rasacd.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\ptilink.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\psched.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\portcls.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\pciidex.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\pciide.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\pci.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\parvdm.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\partmgr.sys.bak
2014-01-05 14:02:20 ----A---- C:\WINDOWS\system32\drivers\parport.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\oprghdlr.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\nwrdr.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\nwlnkspx.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\nwlnknb.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\nwlnkfwd.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\nwlnkflt.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\null.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\npfs.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\nikedrv.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\netbt.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\netbios.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\ndproxy.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\ndiswan.sys.bak
2014-01-05 14:02:19 ----A---- C:\WINDOWS\system32\drivers\ndisuio.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\ndistapi.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\NdisIP.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\ndis.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\NABTSFEC.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mutohpen.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mup.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\MSTEE.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mssmbios.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\msgpc.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\msfs.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mrxsmb.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mrxdav.sys.bak
2014-01-05 14:02:18 ----A---- C:\WINDOWS\system32\drivers\mqac.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\mountmgr.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\mouclass.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\modem.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\mnmdd.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\mdmxsdk.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\mcd.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\ksecdd.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\ks.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\kbdhid.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\kbdclass.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\isapnp.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\irenum.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\irbus.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\ipsec.sys.bak
2014-01-05 14:02:17 ----A---- C:\WINDOWS\system32\drivers\ipnat.sys.bak
2014-01-05 14:02:16 ----A---- C:\WINDOWS\system32\drivers\ipinip.sys.bak
2014-01-05 14:02:16 ----A---- C:\WINDOWS\system32\drivers\ipfltdrv.sys.bak
2014-01-05 14:02:16 ----A---- C:\WINDOWS\system32\drivers\ip6fw.sys.bak
2014-01-05 14:02:16 ----A---- C:\WINDOWS\system32\drivers\intelppm.sys.bak
2014-01-05 14:02:16 ----A---- C:\WINDOWS\system32\drivers\imapi.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\igxpmp32.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\i8042prt.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\http.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\hidparse.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\hidir.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\hidclass.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\hidbth.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\Hdaudio.sys.bak
2014-01-05 14:02:15 ----A---- C:\WINDOWS\system32\drivers\hdaudbus.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\ftdisk.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\fsvga.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\fs_rec.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\flpydisk.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\fips.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\fdc.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\fastfat.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\dxgthk.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\dxg.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\dxapi.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\drmk.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\dmload.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\dmio.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\diskdump.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\disk.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\cpqdap01.sys.bak
2014-01-05 14:02:14 ----A---- C:\WINDOWS\system32\drivers\classpnp.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\cinemst2.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\cdrom.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\cdfs.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\cdaudio.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\CCDECODE.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\cbidf2k.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\bthusb.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\bthprint.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\bthmodem.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\bthenum.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\beep.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\baspxp32.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\b57xp32.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\audstub.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\atmuni.sys.bak
2014-01-05 14:02:13 ----A---- C:\WINDOWS\system32\drivers\atmepvc.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\atinxbxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\atinttxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\atinsnxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\atinpdxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\atinmdxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\ati1xsxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\ati1xbxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\ati1tuxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\ati1ttxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\ati1snxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\ati1raxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\ati1pdxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\ati1mdxx.sys.bak
2014-01-05 14:02:12 ----A---- C:\WINDOWS\system32\drivers\atapi.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\asyncmac.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\amdk7.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\amdagp.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\alim1541.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\agpcpq.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\agp440.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\afd.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\AegisP.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\aec.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\acpiec.sys.bak
2014-01-05 14:02:11 ----A---- C:\WINDOWS\system32\drivers\acpi.sys.bak
2014-01-04 23:54:52 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Malwarebytes
2014-01-04 23:53:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-01-04 23:27:30 ----D---- C:\AdwCleaner
2014-01-04 22:47:48 ----D---- C:\Program Files\trend micro
2014-01-04 22:47:47 ----D---- C:\rsit

======List of files/folders modified in the last 1 month======

2014-01-05 19:42:38 ----D---- C:\WINDOWS\system32
2014-01-05 19:42:38 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-05 19:38:21 ----D---- C:\WINDOWS
2014-01-05 19:37:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-01-05 19:26:45 ----D---- C:\WINDOWS\Prefetch
2014-01-05 17:16:45 ----D---- C:\WINDOWS\system32\drivers
2014-01-05 17:14:49 ----A---- C:\WINDOWS\system.ini
2014-01-05 17:14:22 ----D---- C:\WINDOWS\system32\drivers\etc
2014-01-05 17:13:14 ----D---- C:\WINDOWS\system32\CatRoot2
2014-01-05 17:09:53 ----D---- C:\WINDOWS\system32\config
2014-01-05 17:07:51 ----D---- C:\WINDOWS\AppPatch
2014-01-05 17:07:46 ----D---- C:\Program Files\Common Files
2014-01-05 15:11:41 ----RASH---- C:\boot.ini
2014-01-05 14:51:09 ----SD---- C:\WINDOWS\Tasks
2014-01-05 14:50:58 ----D---- C:\WINDOWS\WinSxS
2014-01-05 14:47:28 ----RD---- C:\Program Files
2014-01-05 11:22:03 ----SHD---- C:\System Volume Information
2014-01-05 11:22:03 ----D---- C:\WINDOWS\system32\Restore
2014-01-05 00:37:19 ----D---- C:\WINDOWS\Resources
2014-01-03 14:15:14 ----A---- C:\WINDOWS\win.ini
2014-01-03 14:00:25 ----D---- C:\WINDOWS\system32\wbem
2014-01-03 14:00:25 ----D---- C:\WINDOWS\Registration
2013-12-31 21:44:55 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2013-12-19 13:31:12 ----SHD---- C:\WINDOWS\Installer
2013-12-19 13:31:03 ----D---- C:\Program Files\Google
2013-12-16 13:27:22 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2013-12-11 14:19:59 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-11 14:19:54 ----A---- C:\WINDOWS\system32\FlashPlayerInstaller.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2008-07-25 176640]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 RT61;Belkin RT2500 Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT61.sys [2005-08-26 352768]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-01-05 49944]
S0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-01-05 180248]
S1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
S1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
S1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2013-06-08 20747]
S2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
S3 Blfp;Broadcom Advanced Server Program Driver; C:\WINDOWS\system32\DRIVERS\baspxp32.sys [2008-06-06 98816]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 DNINDIS5;DNINDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\Belkin\BELKIN~1.11G\DNINDIS5.SYS []
S3 HdAudAddService;Ovladač funkcí Microsoft UAA pro služby sběrnice High Definition Audio; C:\WINDOWS\system32\drivers\HdAudio.sys [2005-01-07 145920]
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-08-24 5776928]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 TrueSight;TrueSight; \??\ []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-05 50344]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-19 116648]
S2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-10-19 116648]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-07-16 129976]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 wxpSvc;webcamXP Service; C:\Program Files\webcamXP 5\wService.exe [2012-03-26 5404472]

-----------------EOF-----------------

Zkusil jste pripojit treba mobil, jestli to tam bude taky?

Na tech ostatnich pocitacich to zaclo ve stejnou dobu, nebo postupne?


Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Stahnete OTL http://oldtimer.geekstogo.com/OTL.exe , ulozte na plochu a spustte.
Oznacte polozky (dejte tam zatrzitka) Pro všechny uživatele, Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
Do spodniho okna vlozte nasledujici text Kliknete na Prohledat
Po skenu se vytvori dva logy (OTL.Txt a Extras.txt), oba sem vlozte (kdyz budou dlouhe, rozdelte je do vice prispevku).

mobil sem nezkoušel...
jestli to začalo najednou nebo postupně..nevím. Jako první na to přišel brácha
v baráku vedle, já pak postupně zkusil všechny, a tak do třetího,čtvrtýho kliknutí to naskočilo u všech.
Pc který má brácha, tam nenaskočí vůbec nic...prázdný prohlížeč (google)
Ostatní jdou jen způsobem,který sem popsal...to mazání textu před cílovou adresou.

!!! ten poslední RSIT log sem dělal v tom nouzovém režimu ..je třeba udělat znova?

------------------------------------------------------------------------------------
OTL Extras logfile created on: 5.1.2014 19:59:12 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Administrator\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1015,35 Mb Total Physical Memory | 608,07 Mb Available Physical Memory | 59,89% Memory free
2,39 Gb Paging File | 2,09 Gb Available in Paging File | 87,53% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 11,70 Gb Free Space | 59,88% Space Free | Partition Type: NTFS
Drive D: | 19,53 Gb Total Space | 19,07 Gb Free Space | 97,60% Space Free | Partition Type: NTFS
Drive E: | 35,45 Gb Total Space | 29,85 Gb Free Space | 84,19% Space Free | Partition Type: NTFS

Computer Name: L-98D198A728644 | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1085031214-1788223648-682003330-500\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [ACDBrowse] -- "C:\Program Files\ACD Systems\ACDSee\5.0\ACDSee5.exe" "%1" (ACD Systems, Ltd.)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE" = C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE" = C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
"C:\Program Files\Skype\Plugin Manager\skypePM.exe" = C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager -- (Skype Technologies)
"C:\Program Files\webcamXP 5\wLite.exe" = C:\Program Files\webcamXP 5\wLite.exe:*:Enabled:webcamXP -- (Moonware Studios)
"C:\Program Files\webcamXP 5\wService.exe" = C:\Program Files\webcamXP 5\wService.exe:*:Enabled:webcamXP Service -- (Moonware Studios)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in
"{5058B085-AA79-41E5-A726-681B4C4B846E}" = ACDSee 5.0 PowerPack
"{7BB045C3-D5E4-4620-B536-DC11AACD5942}" = Broadcom Management Programs
"{90120000-0010-0405-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Czech) 12
"{90120000-0015-0405-0000-0000000FF1CE}" = Microsoft Office Access MUI (Czech) 2007
"{90120000-0016-0405-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Czech) 2007
"{90120000-0018-0405-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Czech) 2007
"{90120000-0019-0405-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Czech) 2007
"{90120000-001A-0405-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Czech) 2007
"{90120000-001B-0405-0000-0000000FF1CE}" = Microsoft Office Word MUI (Czech) 2007
"{90120000-001F-0405-0000-0000000FF1CE}" = Microsoft Office Proof (Czech) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-041B-0000-0000000FF1CE}" = Microsoft Office Proof (Slovak) 2007
"{90120000-002C-0405-0000-0000000FF1CE}" = Microsoft Office Proofing (Czech) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0405-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Czech) 2007
"{90120000-006E-0405-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Czech) 2007
"{90120000-00A1-0405-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Czech) 2007
"{90120000-00B2-0405-0000-0000000FF1CE}" = Doplněk Microsoft Save as PDF or XPS pro aplikace sady Microsoft Office 2007
"{90120000-00BA-0405-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Czech) 2007
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-A92000000001}" = Adobe Reader 9.2 - Czech
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{F4BA782D-AE40-48A4-B160-652DA8D9B7C3}" = Belkin 802.11g Wireless PCI Card
"{F870B987-18BC-45FC-9BE8-35C02DCDA10F}" = Broadcom NetXtreme Ethernet Controller
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avast" = avast! Free Antivirus
"ENTERPRISE" = Microsoft Office Enterprise 2007
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Mozilla Firefox 12.0 (x86 cs)" = Mozilla Firefox 12.0 (x86 cs)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"VLC media player" = VLC media player 1.1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WinZip" = WinZip
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1085031214-1788223648-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 23.12.2013 11:17:00 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 24.12.2013 6:47:05 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 24.12.2013 15:22:33 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 25.12.2013 16:31:00 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 26.12.2013 14:51:26 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 26.12.2013 20:13:21 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 27.12.2013 7:50:37 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 27.12.2013 15:55:22 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 27.12.2013 16:37:39 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

Error - 28.12.2013 7:42:50 | Computer Name = L-98D198A728644 | Source = Application Error | ID = 1000
Description = Chybující aplikace imoeom.exe, verze 0.0.0.0, chybující modul imoeom.exe,
verze 0.0.0.0, adresa chyby 0x0000c19e.

[ System Events ]
Error - 5.1.2014 12:19:03 | Computer Name = L-98D198A728644 | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .

Error - 5.1.2014 12:19:03 | Computer Name = L-98D198A728644 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .

Error - 5.1.2014 12:19:03 | Computer Name = L-98D198A728644 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context pro C:\Program Files\AVAST Software\Avast\Setup\776cbf62-201a-447b-a4b4-16fae6b9cd80.exe
se nezdařila. Referenční chybová zpráva: Operace byla dokončena úspěšně. .

Error - 5.1.2014 14:38:44 | Computer Name = L-98D198A728644 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 5.1.2014 14:40:09 | Computer Name = L-98D198A728644 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: aswRvrt aswSnx aswSP aswTdi aswVmm Fips i8042prt intelppm

Error - 5.1.2014 14:56:41 | Computer Name = L-98D198A728644 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 5.1.2014 14:57:25 | Computer Name = L-98D198A728644 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: i8042prt

Error - 5.1.2014 14:57:30 | Computer Name = L-98D198A728644 | Source = SideBySide | ID = 16842784
Description = Závislá symbolická adresa Microsoft.VC90.CRT nebyla nalezena a poslední
chyba byla Sestavení určené odkazem není v systému nainstalováno. .

Error - 5.1.2014 14:57:30 | Computer Name = L-98D198A728644 | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly pro Microsoft.VC90.CRT se nezdařila. Referenční
chybová zpráva: Sestavení určené odkazem není v systému nainstalováno. .

Error - 5.1.2014 14:57:30 | Computer Name = L-98D198A728644 | Source = SideBySide | ID = 16842811
Description = Generate Activation Context pro C:\Program Files\AVAST Software\Avast\Setup\d5392318-cfac-4db7-85a7-d79110a5bcfa.exe
se nezdařila. Referenční chybová zpráva: Operace byla dokončena úspěšně. .


< End of report >

OTL logfile created on: 5.1.2014 19:59:12 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Administrator\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1015,35 Mb Total Physical Memory | 608,07 Mb Available Physical Memory | 59,89% Memory free
2,39 Gb Paging File | 2,09 Gb Available in Paging File | 87,53% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 11,70 Gb Free Space | 59,88% Space Free | Partition Type: NTFS
Drive D: | 19,53 Gb Total Space | 19,07 Gb Free Space | 97,60% Space Free | Partition Type: NTFS
Drive E: | 35,45 Gb Total Space | 29,85 Gb Free Space | 84,19% Space Free | Partition Type: NTFS

Computer Name: L-98D198A728644 | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014.01.05 19:54:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
PRC - [2014.01.05 14:50:54 | 003,764,024 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014.01.05 14:50:53 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.07.16 19:28:06 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2014.01.05 14:50:56 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014.01.05 10:48:22 | 002,152,960 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\14010500\algo.dll
MOD - [2013.07.16 19:28:06 | 001,952,696 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll


========== Services (SafeList) ==========

SRV - [2014.01.05 14:50:53 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.12.11 14:19:59 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.07.16 19:28:06 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.03.26 14:28:58 | 005,404,472 | ---- | M] (Moonware Studios) [On_Demand | Stopped] -- C:\Program Files\webcamXP 5\wService.exe -- (wxpSvc)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (TrueSight)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2014.01.05 14:50:56 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2014.01.05 14:50:56 | 000,410,528 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2014.01.05 14:50:56 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014.01.05 14:50:56 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014.01.05 14:50:56 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014.01.05 14:50:56 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2014.01.05 14:50:56 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2008.07.25 00:18:32 | 000,176,640 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2008.06.06 08:15:40 | 000,098,816 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\baspxp32.sys -- (Blfp)
DRV - [2005.08.26 22:39:08 | 000,352,768 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61)
DRV - [2005.01.07 16:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2003.07.24 11:10:34 | 000,017,149 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Belkin\Belkin 802.11g Wireless PCI Card Configuration Utility\DNINDIS5.SYS -- (DNINDIS5)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1085031214-1788223648-682003330-500\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1085031214-1788223648-682003330-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014.01.05 14:50:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.07.16 19:28:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2013.06.08 21:46:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Extensions
[2013.07.28 11:57:36 | 000,001,631 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\yusceuqt.default\searchplugins\-seznam-tv-program-.xml
[2013.06.08 16:03:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013.07.11 23:40:22 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2013.07.16 19:28:07 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.07.16 19:28:01 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2013.07.16 19:28:01 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2013.07.16 19:28:01 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2013.07.16 19:28:01 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2013.07.16 19:28:01 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.seznam.cz/
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\15.0.874.102\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\15.0.874.102\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\15.0.874.102\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: avast! Online Security = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2011.70_0\

O1 HOSTS File: ([2014.01.05 17:14:22 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Zástupce stránky vlastností sběrnice High Definition Audio] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1085031214-1788223648-682003330-500\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1085031214-1788223648-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1085031214-1788223648-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1085031214-1788223648-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{714A3777-CC35-4F76-95E0-BD7AD83EA2B7}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.06.08 13:57:31 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2014.01.05 19:54:37 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2014.01.05 19:38:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2014.01.05 18:31:11 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2014.01.05 17:09:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2014.01.05 15:11:37 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2014.01.05 15:10:22 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2014.01.05 15:10:22 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2014.01.05 15:10:22 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2014.01.05 15:10:22 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2014.01.05 15:09:02 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014.01.05 15:08:54 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Nabídka Start\Programy\Nástroje pro správu
[2014.01.05 15:08:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2014.01.05 14:59:58 | 005,160,001 | R--- | C] (Swearware) -- C:\Documents and Settings\Administrator\Plocha\ComboFix.exe
[2014.01.05 14:51:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Data aplikací\AVAST Software
[2014.01.05 14:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
[2014.01.05 14:51:01 | 000,057,672 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2014.01.05 14:51:00 | 000,775,952 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2014.01.05 14:51:00 | 000,410,528 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2014.01.05 14:50:59 | 000,067,824 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2014.01.05 14:50:59 | 000,054,832 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2014.01.05 14:50:58 | 000,270,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2014.01.05 14:50:56 | 000,043,152 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2014.01.05 14:47:28 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2014.01.05 14:46:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2014.01.05 14:45:35 | 004,689,480 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Administrator\Plocha\avast_free_antivirus_setup_online.exe
[2014.01.05 14:02:24 | 000,081,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2014.01.05 14:02:24 | 000,058,112 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2014.01.05 14:02:24 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys.bak
[2014.01.05 14:02:24 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys.bak
[2014.01.05 14:02:24 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys.bak
[2014.01.05 14:02:24 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys.bak
[2014.01.05 14:02:24 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys.bak
[2014.01.05 14:02:24 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys.bak
[2014.01.05 14:02:24 | 000,004,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2014.01.05 14:02:23 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys.bak
[2014.01.05 14:02:23 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2014.01.05 14:02:23 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2014.01.05 14:02:23 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2014.01.05 14:02:23 | 000,021,376 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2014.01.05 14:02:23 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2014.01.05 14:02:23 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2014.01.05 14:02:23 | 000,004,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2014.01.05 14:02:22 | 000,025,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2014.01.05 14:02:22 | 000,019,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2014.01.05 14:02:22 | 000,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2014.01.05 14:02:22 | 000,014,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2014.01.05 14:02:22 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys.bak
[2014.01.05 14:02:22 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys.bak
[2014.01.05 14:02:21 | 000,352,768 | ---- | C] (Ralink Technology Inc.) -- C:\WINDOWS\System32\drivers\rt61.sys.bak
[2014.01.05 14:02:21 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys.bak
[2014.01.05 14:02:21 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2014.01.05 14:02:21 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys.bak
[2014.01.05 14:02:21 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2014.01.05 14:02:21 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2014.01.05 14:02:20 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2014.01.05 14:02:20 | 000,034,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2014.01.05 14:02:20 | 000,024,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2014.01.05 14:02:19 | 000,063,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2014.01.05 14:02:19 | 000,055,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2014.01.05 14:02:19 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2014.01.05 14:02:19 | 000,003,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2014.01.05 14:02:18 | 000,092,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mqac.sys.bak
[2014.01.05 14:02:18 | 000,012,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys.bak
[2014.01.05 14:02:17 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2014.01.05 14:02:17 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys.bak
[2014.01.05 14:02:17 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2014.01.05 14:02:15 | 000,145,920 | ---- | C] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\drivers\Hdaudio.sys.bak
[2014.01.05 14:02:15 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2014.01.05 14:02:15 | 000,024,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2014.01.05 14:02:14 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2014.01.05 14:02:14 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2014.01.05 14:02:14 | 000,049,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2014.01.05 14:02:14 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2014.01.05 14:02:14 | 000,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2014.01.05 14:02:14 | 000,011,776 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2014.01.05 14:02:14 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2014.01.05 14:02:14 | 000,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2014.01.05 14:02:13 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2014.01.05 14:02:13 | 000,262,528 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2014.01.05 14:02:13 | 000,176,640 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\b57xp32.sys.bak
[2014.01.05 14:02:13 | 000,098,816 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\baspxp32.sys.bak
[2014.01.05 14:02:13 | 000,036,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys.bak
[2014.01.05 14:02:13 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2014.01.05 14:02:12 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys.bak
[2014.01.05 14:02:12 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys.bak
[2014.01.05 14:02:12 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys.bak
[2014.01.05 14:02:12 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys.bak
[2014.01.05 14:02:12 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys.bak
[2014.01.05 14:02:12 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys.bak
[2014.01.05 14:02:12 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys.bak
[2014.01.05 14:02:12 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys.bak
[2014.01.05 14:02:12 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys.bak
[2014.01.05 14:02:12 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys.bak
[2014.01.05 14:02:12 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys.bak
[2014.01.05 14:02:12 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys.bak
[2014.01.05 14:02:12 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys.bak
[2014.01.05 14:01:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Plocha\RK_Quarantine
[2014.01.04 23:54:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Data aplikací\Malwarebytes
[2014.01.04 23:53:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2014.01.04 23:27:30 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.01.04 22:47:48 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.01.04 22:47:47 | 000,000,000 | ---D | C] -- C:\rsit
[2013.12.19 13:31:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Earth
[2013.12.16 13:27:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dokumenty\Poznámkové bloky aplikace OneNote
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014.01.05 20:01:24 | 000,314,508 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014.01.05 20:01:24 | 000,312,970 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2014.01.05 20:01:24 | 000,047,206 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2014.01.05 20:01:24 | 000,040,836 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014.01.05 19:57:30 | 000,000,378 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014.01.05 19:57:28 | 000,000,950 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014.01.05 19:57:15 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014.01.05 19:54:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2014.01.05 19:29:00 | 000,000,954 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014.01.05 19:19:00 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014.01.05 17:14:22 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2014.01.05 15:11:41 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2014.01.05 15:01:22 | 000,007,168 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014.01.05 15:00:50 | 005,160,001 | R--- | M] (Swearware) -- C:\Documents and Settings\Administrator\Plocha\ComboFix.exe
[2014.01.05 14:51:16 | 000,001,789 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2014.01.05 14:50:56 | 000,775,952 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2014.01.05 14:50:56 | 000,410,528 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2014.01.05 14:50:56 | 000,270,240 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2014.01.05 14:50:56 | 000,180,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014.01.05 14:50:56 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2014.01.05 14:50:56 | 000,057,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2014.01.05 14:50:56 | 000,054,832 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2014.01.05 14:50:56 | 000,049,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014.01.05 14:50:56 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2014.01.05 14:46:08 | 004,689,480 | ---- | M] (AVAST Software) -- C:\Documents and Settings\Administrator\Plocha\avast_free_antivirus_setup_online.exe
[2014.01.05 14:32:07 | 000,081,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2014.01.05 14:32:07 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys.bak
[2014.01.05 14:32:07 | 000,022,271 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys.bak
[2014.01.05 14:32:07 | 000,011,935 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys.bak
[2014.01.05 14:32:07 | 000,011,871 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys.bak
[2014.01.05 14:32:07 | 000,011,807 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys.bak
[2014.01.05 14:32:07 | 000,011,295 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys.bak
[2014.01.05 14:32:07 | 000,004,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2014.01.05 14:32:06 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys.bak
[2014.01.05 14:32:06 | 000,058,112 | ---- | M] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2014.01.05 14:32:06 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2014.01.05 14:32:06 | 000,025,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2014.01.05 14:32:06 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2014.01.05 14:32:06 | 000,021,376 | ---- | M] (Toshiba Corporation) -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2014.01.05 14:32:06 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2014.01.05 14:32:06 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2014.01.05 14:32:06 | 000,004,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2014.01.05 14:32:05 | 000,019,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2014.01.05 14:32:05 | 000,014,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2014.01.05 14:32:04 | 000,352,768 | ---- | M] (Ralink Technology Inc.) -- C:\WINDOWS\System32\drivers\rt61.sys.bak
[2014.01.05 14:32:04 | 000,030,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys.bak
[2014.01.05 14:32:04 | 000,030,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2014.01.05 14:32:04 | 000,025,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2014.01.05 14:32:04 | 000,014,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2014.01.05 14:32:04 | 000,013,240 | ---- | M] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys.bak
[2014.01.05 14:32:04 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2014.01.05 14:32:04 | 000,005,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys.bak
[2014.01.05 14:32:03 | 000,146,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2014.01.05 14:32:03 | 000,034,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2014.01.05 14:32:03 | 000,024,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2014.01.05 14:32:03 | 000,013,776 | ---- | M] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys.bak
[2014.01.05 14:32:03 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2014.01.05 14:32:02 | 000,063,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2014.01.05 14:32:02 | 000,055,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2014.01.05 14:32:02 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2014.01.05 14:32:02 | 000,003,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2014.01.05 14:32:01 | 000,012,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys.bak
[2014.01.05 14:32:00 | 000,141,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2014.01.05 14:32:00 | 000,092,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mqac.sys.bak
[2014.01.05 14:32:00 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys.bak
[2014.01.05 14:32:00 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2014.01.05 14:31:58 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\drivers\Hdaudio.sys.bak
[2014.01.05 14:31:58 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2014.01.05 14:31:58 | 000,024,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2014.01.05 14:31:58 | 000,012,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2014.01.05 14:31:57 | 000,262,528 | ---- | M] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2014.01.05 14:31:57 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2014.01.05 14:31:57 | 000,060,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2014.01.05 14:31:57 | 000,049,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2014.01.05 14:31:57 | 000,014,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2014.01.05 14:31:57 | 000,011,776 | ---- | M] (Compaq Computer Corporation) -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2014.01.05 14:31:57 | 000,010,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2014.01.05 14:31:57 | 000,003,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2014.01.05 14:31:56 | 000,352,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2014.01.05 14:31:56 | 000,176,640 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\b57xp32.sys.bak
[2014.01.05 14:31:56 | 000,098,816 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\baspxp32.sys.bak
[2014.01.05 14:31:56 | 000,036,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys.bak
[2014.01.05 14:31:56 | 000,034,735 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys.bak
[2014.01.05 14:31:56 | 000,031,744 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys.bak
[2014.01.05 14:31:56 | 000,031,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2014.01.05 14:31:56 | 000,029,455 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys.bak
[2014.01.05 14:31:56 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys.bak
[2014.01.05 14:31:56 | 000,014,336 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys.bak
[2014.01.05 14:31:56 | 000,013,824 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys.bak
[2014.01.05 14:31:56 | 000,013,824 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys.bak
[2014.01.05 14:31:55 | 000,036,463 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys.bak
[2014.01.05 14:31:55 | 000,030,671 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys.bak
[2014.01.05 14:31:55 | 000,026,367 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys.bak
[2014.01.05 14:31:55 | 000,021,343 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys.bak
[2014.01.05 14:31:55 | 000,012,047 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys.bak
[2014.01.05 14:31:55 | 000,011,615 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys.bak
[2014.01.05 14:00:41 | 003,810,304 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\RogueKiller.exe
[2014.01.04 23:25:58 | 001,233,962 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\adwcleaner.exe
[2014.01.04 22:47:34 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\RSIT.exe
[2014.01.04 21:41:39 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.12.31 15:08:27 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2013.12.28 17:50:17 | 000,097,314 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\image005.jpg
[2013.12.28 17:50:11 | 000,080,115 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\image004.jpg
[2013.12.28 17:49:23 | 000,055,041 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\1 ksar hellal.jpg
[2013.12.28 17:48:37 | 000,375,765 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\ksar hellal.jpg
[2013.12.15 20:44:12 | 000,002,397 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\ACDSee 5.0.lnk
[2013.12.11 14:19:59 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.12.11 14:19:59 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.12.11 14:19:54 | 009,293,192 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2013.12.09 14:25:54 | 000,030,313 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\UŠNÍ, NOSNÍ, KRČNÍ.JPG
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014.01.05 15:11:41 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2014.01.05 15:11:39 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2014.01.05 15:10:22 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2014.01.05 15:10:22 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2014.01.05 15:10:22 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2014.01.05 15:10:22 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2014.01.05 15:10:22 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2014.01.05 14:51:16 | 000,001,789 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2014.01.05 14:51:09 | 000,000,378 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014.01.05 14:51:00 | 000,180,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014.01.05 14:51:00 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014.01.05 14:00:40 | 003,810,304 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\RogueKiller.exe
[2014.01.04 23:25:58 | 001,233,962 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\adwcleaner.exe
[2014.01.04 22:47:33 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\RSIT.exe
[2013.12.28 17:50:17 | 000,097,314 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\image005.jpg
[2013.12.28 17:50:11 | 000,080,115 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\image004.jpg
[2013.12.28 17:49:23 | 000,055,041 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\1 ksar hellal.jpg
[2013.12.28 17:48:37 | 000,375,765 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\ksar hellal.jpg
[2013.12.09 14:25:54 | 000,030,313 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\UŠNÍ, NOSNÍ, KRČNÍ.JPG
[2013.07.11 23:43:28 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2013.06.09 15:51:52 | 000,007,168 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.06.08 15:43:31 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2013.06.08 15:42:28 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.06.08 15:00:50 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\BelkinwcuiDLL.dll
[2013.06.08 15:00:50 | 000,101,888 | ---- | C] () -- C:\WINDOWS\System32\CrashRpt.dll
[2013.06.08 15:00:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2013.06.08 15:00:49 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\blkwcd.dll
[2013.06.08 15:00:49 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\BelkinHWStatus.dll
[2013.06.08 14:23:24 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4864.dll
[2013.06.08 13:59:44 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013.06.08 13:54:34 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012.12.04 09:59:59 | 000,206,256 | ---- | C] () -- C:\WINDOWS\IPCPlugPlayer.dll

========== ZeroAccess Check ==========


[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 07:51:56 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2008.04.14 07:51:42 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 07:52:06 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013.06.25 22:48:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ACD Systems
[2014.01.05 14:51:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\AVAST Software
[2013.06.08 15:53:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ACD Systems
[2014.01.05 14:46:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2013.11.12 13:54:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\webcamXP 5

========== Purity Check ==========



< End of report >

laada píše:mobil sem nezkoušel...

Pokud mate moznost, zkuste.

Pokud mate moznost zkusit pc pripojit k jine wifi (kabelu), zkuste, jestli to tam bude taky (u souseda, na nejakou verejnou...)

laada píše:!!! ten poslední RSIT log sem dělal v tom nouzovém režimu ..je třeba udělat znova?

Neni treba.



Ten druhy log z OTL neni cely, nebo byl spusteny bez toho textu. Takze repete

Zkusil sem se připojit přes flashku ( O2 5G ), a je to tam taky
----------------------------------------------------------
Jiná wifi tady v okolí není....takže nemůžu zkusit

nojo text sem zapomněl vložit

OTL logfile created on: 5.1.2014 20:47:12 - Run 2
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Administrator\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

1015,35 Mb Total Physical Memory | 543,92 Mb Available Physical Memory | 53,57% Memory free
2,39 Gb Paging File | 2,04 Gb Available in Paging File | 85,34% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 19,53 Gb Total Space | 11,70 Gb Free Space | 59,87% Space Free | Partition Type: NTFS
Drive D: | 19,53 Gb Total Space | 19,07 Gb Free Space | 97,60% Space Free | Partition Type: NTFS
Drive E: | 35,45 Gb Total Space | 29,85 Gb Free Space | 84,19% Space Free | Partition Type: NTFS

Computer Name: L-98D198A728644 | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014.01.05 19:54:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
PRC - [2014.01.05 14:50:54 | 003,764,024 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2014.01.05 14:50:53 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2013.07.16 19:28:06 | 000,924,600 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2014.01.05 14:50:56 | 019,336,120 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll
MOD - [2014.01.05 10:48:22 | 002,152,960 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\defs\14010500\algo.dll
MOD - [2013.07.16 19:28:06 | 001,952,696 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll


========== Services (SafeList) ==========

SRV - [2014.01.05 14:50:53 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.12.11 14:19:59 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013.07.16 19:28:06 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.03.26 14:28:58 | 005,404,472 | ---- | M] (Moonware Studios) [On_Demand | Stopped] -- C:\Program Files\webcamXP 5\wService.exe -- (wxpSvc)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (TrueSight)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - [2014.01.05 14:50:56 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2014.01.05 14:50:56 | 000,410,528 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\aswSP.sys -- (aswSP)
DRV - [2014.01.05 14:50:56 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2014.01.05 14:50:56 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2014.01.05 14:50:56 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2014.01.05 14:50:56 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\aswRdr.sys -- (aswRdr)
DRV - [2014.01.05 14:50:56 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2008.07.25 00:18:32 | 000,176,640 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\b57xp32.sys -- (b57w2k)
DRV - [2008.06.06 08:15:40 | 000,098,816 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\baspxp32.sys -- (Blfp)
DRV - [2005.08.26 22:39:08 | 000,352,768 | ---- | M] (Ralink Technology Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rt61.sys -- (RT61)
DRV - [2005.01.07 16:07:16 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2003.07.24 11:10:34 | 000,017,149 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Program Files\Belkin\Belkin 802.11g Wireless PCI Card Configuration Utility\DNINDIS5.SYS -- (DNINDIS5)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-1085031214-1788223648-682003330-500\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-1085031214-1788223648-682003330-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2014.01.05 14:50:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.07.16 19:28:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2013.06.08 21:46:28 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Extensions
[2013.07.28 11:57:36 | 000,001,631 | ---- | M] () -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\yusceuqt.default\searchplugins\-seznam-tv-program-.xml
[2013.06.08 16:03:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013.07.11 23:40:22 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2013.07.16 19:28:07 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013.07.16 19:28:01 | 000,002,208 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
[2013.07.16 19:28:01 | 000,000,638 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
[2013.07.16 19:28:01 | 000,001,367 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
[2013.07.16 19:28:01 | 000,000,654 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
[2013.07.16 19:28:01 | 000,001,179 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-cz.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: http://www.seznam.cz/
CHR - plugin: Shockwave Flash (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\15.0.874.102\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Program Files\Windows Media Player\npdsplay.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\15.0.874.102\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\Application\15.0.874.102\pdf.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Program Files\Windows Media Player\npwmsdrm.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: avast! Online Security = C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2011.70_0\

O1 HOSTS File: ([2014.01.05 17:14:22 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Zástupce stránky vlastností sběrnice High Definition Audio] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1085031214-1788223648-682003330-500\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1085031214-1788223648-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1085031214-1788223648-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1085031214-1788223648-682003330-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{714A3777-CC35-4F76-95E0-BD7AD83EA2B7}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.06.08 13:57:31 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

NetSvcs: 6to4 - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
PhysicalDisk0 MBR saved to C:\PhysicalMBR.bin

========== Files/Folders - Created Within 30 Days ==========

[2014.01.05 19:54:37 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2014.01.05 19:38:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\CSC
[2014.01.05 18:31:11 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2014.01.05 17:09:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2014.01.05 15:11:37 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2014.01.05 15:10:22 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2014.01.05 15:10:22 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2014.01.05 15:10:22 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2014.01.05 15:10:22 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2014.01.05 15:09:02 | 000,000,000 | ---D | C] -- C:\Qoobox
[2014.01.05 15:08:54 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrator\Nabídka Start\Programy\Nástroje pro správu
[2014.01.05 15:08:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2014.01.05 14:59:58 | 005,160,001 | R--- | C] (Swearware) -- C:\Documents and Settings\Administrator\Plocha\ComboFix.exe
[2014.01.05 14:51:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Data aplikací\AVAST Software
[2014.01.05 14:51:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
[2014.01.05 14:51:01 | 000,057,672 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2014.01.05 14:51:00 | 000,775,952 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2014.01.05 14:51:00 | 000,410,528 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2014.01.05 14:50:59 | 000,067,824 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2014.01.05 14:50:59 | 000,054,832 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2014.01.05 14:50:58 | 000,270,240 | ---- | C] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2014.01.05 14:50:56 | 000,043,152 | ---- | C] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2014.01.05 14:47:28 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2014.01.05 14:46:32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2014.01.05 14:45:35 | 004,689,480 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Administrator\Plocha\avast_free_antivirus_setup_online.exe
[2014.01.05 14:02:24 | 000,081,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2014.01.05 14:02:24 | 000,058,112 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2014.01.05 14:02:24 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys.bak
[2014.01.05 14:02:24 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys.bak
[2014.01.05 14:02:24 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys.bak
[2014.01.05 14:02:24 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys.bak
[2014.01.05 14:02:24 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys.bak
[2014.01.05 14:02:24 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys.bak
[2014.01.05 14:02:24 | 000,004,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2014.01.05 14:02:23 | 000,143,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys.bak
[2014.01.05 14:02:23 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2014.01.05 14:02:23 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2014.01.05 14:02:23 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2014.01.05 14:02:23 | 000,021,376 | ---- | C] (Toshiba Corporation) -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2014.01.05 14:02:23 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2014.01.05 14:02:23 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2014.01.05 14:02:23 | 000,004,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2014.01.05 14:02:22 | 000,025,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2014.01.05 14:02:22 | 000,019,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2014.01.05 14:02:22 | 000,014,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2014.01.05 14:02:22 | 000,014,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2014.01.05 14:02:22 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys.bak
[2014.01.05 14:02:22 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys.bak
[2014.01.05 14:02:21 | 000,352,768 | ---- | C] (Ralink Technology Inc.) -- C:\WINDOWS\System32\drivers\rt61.sys.bak
[2014.01.05 14:02:21 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys.bak
[2014.01.05 14:02:21 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2014.01.05 14:02:21 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys.bak
[2014.01.05 14:02:21 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2014.01.05 14:02:21 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2014.01.05 14:02:20 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2014.01.05 14:02:20 | 000,034,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2014.01.05 14:02:20 | 000,024,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2014.01.05 14:02:19 | 000,063,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2014.01.05 14:02:19 | 000,055,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2014.01.05 14:02:19 | 000,012,032 | ---- | C] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2014.01.05 14:02:19 | 000,003,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2014.01.05 14:02:18 | 000,092,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mqac.sys.bak
[2014.01.05 14:02:18 | 000,012,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys.bak
[2014.01.05 14:02:17 | 000,141,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2014.01.05 14:02:17 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys.bak
[2014.01.05 14:02:17 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2014.01.05 14:02:15 | 000,145,920 | ---- | C] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\drivers\Hdaudio.sys.bak
[2014.01.05 14:02:15 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2014.01.05 14:02:15 | 000,024,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2014.01.05 14:02:14 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2014.01.05 14:02:14 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2014.01.05 14:02:14 | 000,049,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2014.01.05 14:02:14 | 000,014,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2014.01.05 14:02:14 | 000,012,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2014.01.05 14:02:14 | 000,011,776 | ---- | C] (Compaq Computer Corporation) -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2014.01.05 14:02:14 | 000,010,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2014.01.05 14:02:14 | 000,003,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2014.01.05 14:02:13 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2014.01.05 14:02:13 | 000,262,528 | ---- | C] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2014.01.05 14:02:13 | 000,176,640 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\b57xp32.sys.bak
[2014.01.05 14:02:13 | 000,098,816 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\baspxp32.sys.bak
[2014.01.05 14:02:13 | 000,036,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys.bak
[2014.01.05 14:02:13 | 000,031,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2014.01.05 14:02:12 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys.bak
[2014.01.05 14:02:12 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys.bak
[2014.01.05 14:02:12 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys.bak
[2014.01.05 14:02:12 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys.bak
[2014.01.05 14:02:12 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys.bak
[2014.01.05 14:02:12 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys.bak
[2014.01.05 14:02:12 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys.bak
[2014.01.05 14:02:12 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys.bak
[2014.01.05 14:02:12 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys.bak
[2014.01.05 14:02:12 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys.bak
[2014.01.05 14:02:12 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys.bak
[2014.01.05 14:02:12 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys.bak
[2014.01.05 14:02:12 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys.bak
[2014.01.05 14:01:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Plocha\RK_Quarantine
[2014.01.04 23:54:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Data aplikací\Malwarebytes
[2014.01.04 23:53:55 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2014.01.04 23:27:30 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2014.01.04 22:47:48 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2014.01.04 22:47:47 | 000,000,000 | ---D | C] -- C:\rsit
[2013.12.19 13:31:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Earth
[2013.12.16 13:27:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrator\Dokumenty\Poznámkové bloky aplikace OneNote
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014.01.05 20:48:51 | 000,000,512 | ---- | M] () -- C:\PhysicalMBR.bin
[2014.01.05 20:29:00 | 000,000,954 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014.01.05 20:19:15 | 000,000,914 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014.01.05 20:01:24 | 000,314,508 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014.01.05 20:01:24 | 000,312,970 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2014.01.05 20:01:24 | 000,047,206 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2014.01.05 20:01:24 | 000,040,836 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014.01.05 19:57:30 | 000,000,378 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014.01.05 19:57:28 | 000,000,950 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014.01.05 19:57:15 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014.01.05 19:54:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrator\Plocha\OTL.exe
[2014.01.05 17:14:22 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2014.01.05 15:11:41 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2014.01.05 15:01:22 | 000,007,168 | ---- | M] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014.01.05 15:00:50 | 005,160,001 | R--- | M] (Swearware) -- C:\Documents and Settings\Administrator\Plocha\ComboFix.exe
[2014.01.05 14:51:16 | 000,001,789 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2014.01.05 14:50:56 | 000,775,952 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSnx.sys
[2014.01.05 14:50:56 | 000,410,528 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswSP.sys
[2014.01.05 14:50:56 | 000,270,240 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\aswBoot.exe
[2014.01.05 14:50:56 | 000,180,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014.01.05 14:50:56 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys
[2014.01.05 14:50:56 | 000,057,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswTdi.sys
[2014.01.05 14:50:56 | 000,054,832 | ---- | M] (AVAST Software) -- C:\WINDOWS\System32\drivers\aswRdr.sys
[2014.01.05 14:50:56 | 000,049,944 | ---- | M] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014.01.05 14:50:56 | 000,043,152 | ---- | M] (AVAST Software) -- C:\WINDOWS\avastSS.scr
[2014.01.05 14:46:08 | 004,689,480 | ---- | M] (AVAST Software) -- C:\Documents and Settings\Administrator\Plocha\avast_free_antivirus_setup_online.exe
[2014.01.05 14:32:07 | 000,081,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\videoprt.sys.bak
[2014.01.05 14:32:07 | 000,025,471 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys.bak
[2014.01.05 14:32:07 | 000,022,271 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys.bak
[2014.01.05 14:32:07 | 000,011,935 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys.bak
[2014.01.05 14:32:07 | 000,011,871 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys.bak
[2014.01.05 14:32:07 | 000,011,807 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys.bak
[2014.01.05 14:32:07 | 000,011,295 | ---- | M] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys.bak
[2014.01.05 14:32:07 | 000,004,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\wmilib.sys.bak
[2014.01.05 14:32:06 | 000,143,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbport.sys.bak
[2014.01.05 14:32:06 | 000,058,112 | ---- | M] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys.bak
[2014.01.05 14:32:06 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tosdvd.sys.bak
[2014.01.05 14:32:06 | 000,025,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd2.sys.bak
[2014.01.05 14:32:06 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbcamd.sys.bak
[2014.01.05 14:32:06 | 000,021,376 | ---- | M] (Toshiba Corporation) -- C:\WINDOWS\System32\drivers\tsbvcap.sys.bak
[2014.01.05 14:32:06 | 000,015,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbintel.sys.bak
[2014.01.05 14:32:06 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usb8023.sys.bak
[2014.01.05 14:32:06 | 000,004,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\usbd.sys.bak
[2014.01.05 14:32:05 | 000,019,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tdi.sys.bak
[2014.01.05 14:32:05 | 000,014,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\tape.sys.bak
[2014.01.05 14:32:04 | 000,352,768 | ---- | M] (Ralink Technology Inc.) -- C:\WINDOWS\System32\drivers\rt61.sys.bak
[2014.01.05 14:32:04 | 000,030,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys.bak
[2014.01.05 14:32:04 | 000,030,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismp.sys.bak
[2014.01.05 14:32:04 | 000,025,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\sonydcam.sys.bak
[2014.01.05 14:32:04 | 000,014,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smclib.sys.bak
[2014.01.05 14:32:04 | 000,013,240 | ---- | M] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys.bak
[2014.01.05 14:32:04 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\riodrv.sys.bak
[2014.01.05 14:32:04 | 000,005,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys.bak
[2014.01.05 14:32:03 | 000,146,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys.bak
[2014.01.05 14:32:03 | 000,034,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rawwan.sys.bak
[2014.01.05 14:32:03 | 000,024,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\pciidex.sys.bak
[2014.01.05 14:32:03 | 000,013,776 | ---- | M] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys.bak
[2014.01.05 14:32:03 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\rio8drv.sys.bak
[2014.01.05 14:32:02 | 000,063,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnknb.sys.bak
[2014.01.05 14:32:02 | 000,055,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\nwlnkspx.sys.bak
[2014.01.05 14:32:02 | 000,012,032 | ---- | M] (S3/Diamond Multimedia Systems) -- C:\WINDOWS\System32\drivers\nikedrv.sys.bak
[2014.01.05 14:32:02 | 000,003,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\oprghdlr.sys.bak
[2014.01.05 14:32:01 | 000,012,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys.bak
[2014.01.05 14:32:00 | 000,141,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\ks.sys.bak
[2014.01.05 14:32:00 | 000,092,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mqac.sys.bak
[2014.01.05 14:32:00 | 000,046,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys.bak
[2014.01.05 14:32:00 | 000,007,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mcd.sys.bak
[2014.01.05 14:31:58 | 000,145,920 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\System32\drivers\Hdaudio.sys.bak
[2014.01.05 14:31:58 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidclass.sys.bak
[2014.01.05 14:31:58 | 000,024,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\hidparse.sys.bak
[2014.01.05 14:31:58 | 000,012,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\fsvga.sys.bak
[2014.01.05 14:31:57 | 000,262,528 | ---- | M] (RAVISENT Technologies Inc.) -- C:\WINDOWS\System32\drivers\cinemst2.sys.bak
[2014.01.05 14:31:57 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxg.sys.bak
[2014.01.05 14:31:57 | 000,060,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys.bak
[2014.01.05 14:31:57 | 000,049,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\classpnp.sys.bak
[2014.01.05 14:31:57 | 000,014,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\diskdump.sys.bak
[2014.01.05 14:31:57 | 000,011,776 | ---- | M] (Compaq Computer Corporation) -- C:\WINDOWS\System32\drivers\cpqdap01.sys.bak
[2014.01.05 14:31:57 | 000,010,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxapi.sys.bak
[2014.01.05 14:31:57 | 000,003,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\dxgthk.sys.bak
[2014.01.05 14:31:56 | 000,352,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmuni.sys.bak
[2014.01.05 14:31:56 | 000,176,640 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\b57xp32.sys.bak
[2014.01.05 14:31:56 | 000,098,816 | ---- | M] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\baspxp32.sys.bak
[2014.01.05 14:31:56 | 000,036,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys.bak
[2014.01.05 14:31:56 | 000,034,735 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys.bak
[2014.01.05 14:31:56 | 000,031,744 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys.bak
[2014.01.05 14:31:56 | 000,031,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\atmepvc.sys.bak
[2014.01.05 14:31:56 | 000,029,455 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys.bak
[2014.01.05 14:31:56 | 000,028,672 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys.bak
[2014.01.05 14:31:56 | 000,014,336 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys.bak
[2014.01.05 14:31:56 | 000,013,824 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys.bak
[2014.01.05 14:31:56 | 000,013,824 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys.bak
[2014.01.05 14:31:55 | 000,036,463 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys.bak
[2014.01.05 14:31:55 | 000,030,671 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys.bak
[2014.01.05 14:31:55 | 000,026,367 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys.bak
[2014.01.05 14:31:55 | 000,021,343 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys.bak
[2014.01.05 14:31:55 | 000,012,047 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys.bak
[2014.01.05 14:31:55 | 000,011,615 | ---- | M] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys.bak
[2014.01.05 14:00:41 | 003,810,304 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\RogueKiller.exe
[2014.01.04 23:25:58 | 001,233,962 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\adwcleaner.exe
[2014.01.04 22:47:34 | 000,781,383 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\RSIT.exe
[2014.01.04 21:41:39 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013.12.31 15:08:27 | 000,002,283 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Skype.lnk
[2013.12.28 17:50:17 | 000,097,314 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\image005.jpg
[2013.12.28 17:50:11 | 000,080,115 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\image004.jpg
[2013.12.28 17:49:23 | 000,055,041 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\1 ksar hellal.jpg
[2013.12.28 17:48:37 | 000,375,765 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\ksar hellal.jpg
[2013.12.15 20:44:12 | 000,002,397 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\ACDSee 5.0.lnk
[2013.12.11 14:19:59 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.12.11 14:19:59 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.12.11 14:19:54 | 009,293,192 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerInstaller.exe
[2013.12.09 14:25:54 | 000,030,313 | ---- | M] () -- C:\Documents and Settings\Administrator\Plocha\UŠNÍ, NOSNÍ, KRČNÍ.JPG
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014.01.05 20:48:51 | 000,000,512 | ---- | C] () -- C:\PhysicalMBR.bin
[2014.01.05 15:11:41 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2014.01.05 15:11:39 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2014.01.05 15:10:22 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2014.01.05 15:10:22 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2014.01.05 15:10:22 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2014.01.05 15:10:22 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2014.01.05 15:10:22 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2014.01.05 14:51:16 | 000,001,789 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
[2014.01.05 14:51:09 | 000,000,378 | -H-- | C] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2014.01.05 14:51:00 | 000,180,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswVmm.sys
[2014.01.05 14:51:00 | 000,049,944 | ---- | C] () -- C:\WINDOWS\System32\drivers\aswRvrt.sys
[2014.01.05 14:00:40 | 003,810,304 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\RogueKiller.exe
[2014.01.04 23:25:58 | 001,233,962 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\adwcleaner.exe
[2014.01.04 22:47:33 | 000,781,383 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\RSIT.exe
[2013.12.28 17:50:17 | 000,097,314 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\image005.jpg
[2013.12.28 17:50:11 | 000,080,115 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\image004.jpg
[2013.12.28 17:49:23 | 000,055,041 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\1 ksar hellal.jpg
[2013.12.28 17:48:37 | 000,375,765 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\ksar hellal.jpg
[2013.12.09 14:25:54 | 000,030,313 | ---- | C] () -- C:\Documents and Settings\Administrator\Plocha\UŠNÍ, NOSNÍ, KRČNÍ.JPG
[2013.07.11 23:43:28 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2013.06.09 15:51:52 | 000,007,168 | ---- | C] () -- C:\Documents and Settings\Administrator\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.06.08 15:43:31 | 000,004,249 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2013.06.08 15:42:28 | 000,267,800 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.06.08 15:00:50 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\BelkinwcuiDLL.dll
[2013.06.08 15:00:50 | 000,101,888 | ---- | C] () -- C:\WINDOWS\System32\CrashRpt.dll
[2013.06.08 15:00:50 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\preflib.dll
[2013.06.08 15:00:49 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\blkwcd.dll
[2013.06.08 15:00:49 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\BelkinHWStatus.dll
[2013.06.08 14:23:24 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4864.dll
[2013.06.08 13:59:44 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2013.06.08 13:54:34 | 000,021,812 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012.12.04 09:59:59 | 000,206,256 | ---- | C] () -- C:\WINDOWS\IPCPlugPlayer.dll

========== ZeroAccess Check ==========


[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 07:51:56 | 001,499,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2008.04.14 07:51:42 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 07:52:06 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013.06.25 22:48:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ACD Systems
[2014.01.05 14:51:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\AVAST Software
[2013.06.08 15:53:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\ACD Systems
[2014.01.05 14:46:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
[2013.11.12 13:54:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\webcamXP 5

========== Purity Check ==========



========== Custom Scans ==========

< >
[2013.06.08 13:55:30 | 000,000,065 | RH-- | C] () -- C:\WINDOWS\Tasks\desktop.ini
[2013.06.08 14:01:09 | 000,000,006 | -H-- | C] () -- C:\WINDOWS\Tasks\SA.DAT
[2013.08.02 17:06:52 | 000,000,914 | ---- | C] () -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
[2013.10.19 22:19:55 | 000,000,950 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
[2013.10.19 22:19:55 | 000,000,954 | ---- | C] () -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
[2014.01.05 14:51:09 | 000,000,378 | -H-- | C] () -- C:\WINDOWS\Tasks\avast! Emergency Update.job

< >

< MD5 for: AGP440.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 23:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\erdnt\cache\agp440.sys
[2008.04.13 23:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 23:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

< MD5 for: ATAPI.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\erdnt\cache\atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys

< MD5 for: AUTOCHK.EXE >
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\cmdcons\autochk.exe
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\ServicePackFiles\i386\autochk.exe
[2008.04.14 07:52:12 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=C7A9FF12C63E2E448722B02C71A8C431 -- C:\WINDOWS\system32\autochk.exe
[2004.08.17 14:49:22 | 000,601,088 | ---- | M] (Microsoft Corporation) MD5=CEA8636EC12F062C1ED8A7CB4E75324F -- C:\WINDOWS\$NtServicePackUninstall$\autochk.exe

< MD5 for: CDROM.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 23:10:48 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.03 21:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.17 14:49:04 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 07:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\erdnt\cache\cryptsvc.dll
[2008.04.14 07:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 07:51:40 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\erdnt\cache\eventlog.dll
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 07:51:42 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 14:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\erdnt\cache\explorer.exe
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 07:52:24 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 14:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 23:01:30 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 23:01:34 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2004.08.03 21:59:14 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.17 14:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 23:11:00 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys

< MD5 for: ISAPNP.SYS >
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2008.04.14 08:10:02 | 020,102,206 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2001.10.25 13:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2008.04.14 06:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 06:57:54 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.17 14:49:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 07:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\erdnt\cache\lsass.exe
[2008.04.14 07:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 07:52:30 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\erdnt\cache\ndis.sys
[2008.04.13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 23:50:38 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.03 22:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2004.08.17 14:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\erdnt\cache\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 07:51:52 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 14:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\erdnt\cache\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 07:51:56 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.17 14:49:28 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 07:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 07:52:48 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\erdnt\cache\svchost.exe
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 07:52:50 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 14:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.04.13 23:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\erdnt\cache\tcpip.sys
[2008.04.13 23:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.04.13 23:50:18 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\system32\drivers\tcpip.sys
[2004.08.03 22:14:42 | 000,359,040 | ---- | M] (Microsoft Corporation) MD5=9F4B36614A0FC234525BA224957DE55C -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\erdnt\cache\userinit.exe
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 07:52:52 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 14:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 14:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\erdnt\cache\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 07:52:54 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.17 14:49:22 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 07:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\erdnt\cache\ws2_32.dll
[2008.04.14 07:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 07:52:08 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< >

< %systemroot%*.* /U /s >
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\$NtServicePackUninstall$\*.tmp files -> C:\WINDOWS\$NtServicePackUninstall$\*.tmp -> ]
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2013.06.25 22:48:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\ACD Systems
[2013.08.21 19:36:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Adobe
[2014.01.05 14:51:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\AVAST Software
[2013.10.19 22:22:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Google
[2013.06.08 14:01:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Identities
[2013.06.09 16:36:13 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Macromedia
[2014.01.04 23:54:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Malwarebytes
[2013.12.16 13:27:22 | 000,000,000 | --SD | M] -- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
[2013.06.08 21:46:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Mozilla
[2013.12.31 21:44:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Skype
[2013.08.06 12:40:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\skypePM
[2013.07.27 12:02:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\vlc

< %APPDATA%\*.exe /s >

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2013.06.08 15:41:42 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2013.06.08 15:41:42 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2013.06.08 15:41:42 | 000,471,040 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\system32\drivers\*.sys /3 >
[2014.01.05 14:50:56 | 000,067,824 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswMonFlt.sys
[2014.01.05 14:50:56 | 000,054,832 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswRdr.sys
[2014.01.05 14:50:56 | 000,049,944 | ---- | M] () -- C:\WINDOWS\system32\drivers\aswRvrt.sys
[2014.01.05 14:50:56 | 000,775,952 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswSnx.sys
[2014.01.05 14:50:56 | 000,410,528 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswSP.sys
[2014.01.05 14:50:56 | 000,057,672 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\drivers\aswTdi.sys
[2014.01.05 14:50:56 | 000,180,248 | ---- | M] () -- C:\WINDOWS\system32\drivers\aswVmm.sys

< %systemroot%\system32\*.* /3 >
[2014.01.05 14:50:56 | 000,270,240 | ---- | M] (AVAST Software) -- C:\WINDOWS\system32\aswBoot.exe
[2014.01.05 20:01:24 | 000,047,206 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2014.01.05 20:01:24 | 000,040,836 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2014.01.05 20:01:24 | 000,312,970 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2014.01.05 20:01:24 | 000,314,508 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2014.01.05 20:01:24 | 000,723,278 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
[2014.01.04 21:41:39 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< >

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >
"ctfmon.exe" = C:\WINDOWS\system32\ctfmon.exe -- [2008.04.14 07:52:18 | 000,015,360 | ---- | M] (Microsoft Corporation)

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< >

< type c:\boot.ini >> test.txt /c >
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

< %SystemDrive%\PhysicalMBR.bin /md5 >
[2014.01.05 20:48:51 | 000,000,512 | ---- | M] () MD5=B31722E1D7DEEC791C9D786F8397211B -- C:\PhysicalMBR.bin

< >

< *crack* /s >

< *keygen* /s >

< *AntiWPA* /s >

< *loader* /s >
[2002.09.25 20:05:38 | 000,113,664 | ---- | M] () -- \Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
[2006.10.26 12:40:34 | 000,057,344 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.dll
[2006.10.26 12:40:34 | 000,005,120 | ---- | M] () -- \Program Files\Common Files\Microsoft Shared\VS7DEBUG\coloader.tlb
[2004.08.17 14:49:06 | 000,035,840 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\dmloader.dll
[2 \WINDOWS\$NtServicePackUninstall$\*.tmp files -> \WINDOWS\$NtServicePackUninstall$\*.tmp -> ]
[2008.04.14 07:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\dmloader.dll
[2008.04.13 23:01:48 | 000,230,912 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.exe
[2008.04.13 23:01:50 | 000,278,528 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\osloader.ntd
[2008.04.14 07:51:40 | 000,035,840 | ---- | M] () -- \WINDOWS\system32\dmloader.dll
[1 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]

< *minodlogin* /s >

< *tnod* /s >

< *AutoKMS* /s >

< *activator* /s >

< *serial* /s >
[2004.08.17 15:44:16 | 000,030,301 | ---- | M] () -- \cmdcons\SERIAL.SY_
[2004.08.17 14:44:16 | 000,064,640 | ---- | M] () -- \WINDOWS\$NtServicePackUninstall$\serial.sys
[2 \WINDOWS\$NtServicePackUninstall$\*.tmp files -> \WINDOWS\$NtServicePackUninstall$\*.tmp -> ]
[2008.04.14 06:47:26 | 000,028,416 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\grserial.sys
[2008.04.14 06:51:10 | 000,064,256 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\serial.sys
[2007.06.27 17:29:04 | 000,131,072 | ---- | M] () -- \WINDOWS\ServicePackFiles\i386\system.runtime.serialization.formatters.soap.dll
[2001.10.25 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dpserial.dll
[2001.10.25 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\serialui.dll
[2002.03.20 21:00:20 | 000,049,152 | R--- | M] () -- \WINDOWS\system32\TransportSerial.dll
[1 \WINDOWS\system32\*.tmp files -> \WINDOWS\system32\*.tmp -> ]
[2001.10.25 13:00:00 | 000,053,520 | ---- | M] () -- \WINDOWS\system32\dllcache\dpserial.dll
[2001.10.25 13:00:00 | 000,014,336 | ---- | M] () -- \WINDOWS\system32\dllcache\serialui.dll
[2008.04.14 06:51:10 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys
[2014.01.05 14:32:04 | 000,064,256 | ---- | M] () -- \WINDOWS\system32\drivers\serial.sys.bak

< *w7lxe* /s >

< End of report >

můžu se zeptat, do kolika hodin dneska..asi..budete fungovat?
Vím,že to je dobrovolná činnost, a rozhodně netlačím ...jen bych rád věděl
Zítra budu nejspíš skoro celý den mimo, a pokračoval bych tedy až později odpoledne.
Fakt si hodně vážím toho, co děláte...a na úkor vlastního volnýho času.
Antivir už budu používat...abych tu za nějakou dobu zase nebrečel..

Zeptat jste se samozrejme mohl, ale v te dobe uz jsem nefungoval



Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Znovu spustte OTL
Do spodniho okna vlozte nasledujici text (vcetne te dvojtecky pred slovem commands) Kliknete na Opravit a nechte program pracovat. Pri otazce na restart souhlaste.
Po restartu se objevi novy log, ten sem dejte.

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 82121 bytes
->FireFox cache emptied: 94830937 bytes
->Google Chrome cache emptied: 335432015 bytes
->Flash cache emptied: 15023 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2134153 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 295466 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 19866073 bytes

Total Files Cleaned = 432,00 mb


[EMPTYFLASH]

User: Administrator
->Flash cache emptied: 0 bytes

User: All Users

User: Default User

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point
========== SERVICES/DRIVERS ==========
Service gupdate stopped successfully!
Service gupdate deleted successfully!
Service AdobeFlashPlayerUpdateSvc stopped successfully!
Service AdobeFlashPlayerUpdateSvc deleted successfully!
Service gupdatem stopped successfully!
Service gupdatem deleted successfully!
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
File/Folder C:\WINDOWS\*.tmp not found.
C:\WINDOWS\tasks\Adobe Flash Player Updater.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Prefs.js: false removed from browser.search.update
Prefs.js: true removed from browser.search.useDBForOrder
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ deleted successfully.
C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}\ not found.
File C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll not found.
C:\WINDOWS\$NtServicePackUninstall$\set25f.tmp deleted successfully.
C:\WINDOWS\$NtServicePackUninstall$\set260.tmp deleted successfully.
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}\ deleted successfully.

OTL by OldTimer - Version 3.2.69.0 log created on 01062014_143219

Files\Folders moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...

Všiml sem si, že se v adresním řádku občas zdvojí ten nechtěný text...
obrázek Vám asi řekne víc..