Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

viry, trojany

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
cpt
5. stupeň - BAN
Příspěvky: 39
Registrován: 23 dub 2008 14:39

viry, trojany

#1 Příspěvek od cpt »

Dobry den, avg naslo FakeAlert, Packed.Autolt. Pri spusteni windousu napise "nenalezen soubor csrcs.exe"

Logfile of random's system information tool 1.06 (written by random/random)
Run by Olga Gajdová at 2010-04-20 14:32:54
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 43 GB (40%) free of 107 GB
Total RAM: 1015 MB (36% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:33:07, on 20.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\HPQ\IAM\bin\asghost.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\WINDOWS\Sminst\Recguard.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\AVG\AVG9\avgui.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Olga Gajdová\Plocha\RSIT.exe
C:\Program Files\trend micro\Olga Gajdová.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hp.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
F2 - REG:system.ini: Shell=Explorer.exe csrcs.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunServices: [csrcs] C:\WINDOWS\system32\csrcs.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKLM\..\Policies\Explorer\Run: [csrcs] C:\WINDOWS\system32\csrcs.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 1672347937
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: OneCard - C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe

--
End of file - 10833 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-04-20 1615200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2005-08-31 110652]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 184423]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2010-04-17 1191424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
HP Credential Manager for ProtectTools - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll [2005-03-03 50688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2010-04-17 1191424]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2005-05-06 716800]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe [2005-11-10 36975]
"PTHOSTTR"=C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE [2006-02-14 122880]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"DLA"=C:\WINDOWS\System32\DLA\DLACTRLW.EXE [2005-08-31 122940]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-09-15 1015808]
"hpWirelessAssistant"=C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe [2006-02-14 454656]
"CognizanceTS"=C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll [2003-12-22 17920]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2006-03-02 131072]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2006-02-22 40960]
"Recguard"=C:\WINDOWS\Sminst\Recguard.exe [2005-12-20 1187840]
"Reminder"=C:\WINDOWS\Creator\Remind_XP.exe [2006-01-23 802816]
"Scheduler"=C:\WINDOWS\SMINST\Scheduler.exe [2006-02-15 892928]
"WatchDog"=C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [2005-11-08 184320]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-04-20 2064736]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-09-15 102400]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-01-05 872448]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-02-15 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-02-15 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-02-15 131072]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"csrcs"=C:\WINDOWS\system32\csrcs.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
DVD Check.lnk - C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-04-18 12464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-15 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OneCard]
C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll [2005-07-25 40960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
AsWlnPkg

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\SMINST\Scheduler.exe"="C:\WINDOWS\SMINST\Scheduler.exe:*:Enabled:Scheduler "
"C:\Program Files\AVG\AVG9\avgam.exe"="C:\Program Files\AVG\AVG9\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG9\avgdiagex.exe"="C:\Program Files\AVG\AVG9\avgdiagex.exe:*:Enabled:avgdiagex.exe"
"C:\Program Files\AVG\AVG9\avgemc.exe"="C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{585e8558-4a5e-11df-a6b2-0019d2624cdc}]
shell\AutoRun\command - DXcdSu.exE
shell\oPeN\command - dXCdsu.EXe


======List of files/folders created in the last 1 months======

2010-04-20 14:32:55 ----D---- C:\Program Files\trend micro
2010-04-20 14:32:54 ----D---- C:\rsit
2010-04-20 12:21:51 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\GHISLER
2010-04-20 12:21:25 ----A---- C:\WINDOWS\iun6002.exe
2010-04-20 12:21:16 ----D---- C:\Program Files\Codec Pack - All In 1
2010-04-20 12:21:00 ----A---- C:\WINDOWS\Codec Pack - All In 1 Setup Log.txt
2010-04-20 12:17:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-04-20 12:17:14 ----D---- C:\Program Files\Common Files\Adobe
2010-04-20 10:03:59 ----A---- C:\WINDOWS\system32\mdimon.dll
2010-04-20 10:03:43 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-04-20 10:02:56 ----D---- C:\Program Files\Microsoft Works
2010-04-20 10:02:32 ----D---- C:\Program Files\Common Files\DESIGNER
2010-04-20 10:01:58 ----D---- C:\Program Files\Microsoft.NET
2010-04-20 09:59:40 ----D---- C:\WINDOWS\SHELLNEW
2010-04-20 09:59:22 ----D---- C:\Program Files\Microsoft Office
2010-04-20 09:59:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-04-20 09:13:32 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-04-20 09:13:31 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2010-04-20 08:56:45 ----HDC---- C:\WINDOWS\$NtUninstallKB963093$
2010-04-20 08:55:43 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-04-20 08:55:25 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2010-04-20 08:55:22 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-04-20 08:54:59 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2010-04-20 08:49:05 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-04-20 08:49:04 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-04-19 17:54:05 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-04-19 17:51:22 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Windows Search
2010-04-19 17:48:58 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-04-19 17:45:41 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-04-19 17:45:32 ----D---- C:\Program Files\Microsoft Silverlight
2010-04-19 17:45:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971513$
2010-04-19 17:42:47 ----D---- C:\WINDOWS\ie8updates
2010-04-19 17:39:50 ----HDC---- C:\WINDOWS\ie8
2010-04-19 17:32:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-04-19 17:24:43 ----D---- C:\WINDOWS\system32\XPSViewer
2010-04-19 17:24:38 ----D---- C:\Program Files\MSBuild
2010-04-19 17:24:37 ----D---- C:\WINDOWS\system32\en-US
2010-04-19 17:24:31 ----D---- C:\Program Files\Reference Assemblies
2010-04-19 17:24:00 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-04-19 17:24:00 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-04-19 17:23:58 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-04-19 17:23:58 ----D---- C:\3ce7dfa89d9ca9d7ec31bd0d6a
2010-04-19 17:20:43 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2010-04-19 17:20:39 ----D---- C:\Program Files\LSI SoftModem
2010-04-19 17:20:13 ----D---- C:\WINDOWS\system32\x64
2010-04-19 17:20:13 ----A---- C:\WINDOWS\system32\igxpun.exe
2010-04-19 17:19:44 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-04-19 17:19:44 ----A---- C:\WINDOWS\system32\difxapi.dll
2010-04-19 17:19:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-04-19 17:18:57 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Windows Desktop Search
2010-04-19 17:18:31 ----D---- C:\Program Files\Windows Desktop Search
2010-04-19 17:18:30 ----D---- C:\WINDOWS\system32\GroupPolicy
2010-04-19 17:18:19 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2010-04-19 17:18:13 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2010-04-19 17:17:51 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-04-19 17:17:49 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2010-04-19 17:17:33 ----D---- C:\Program Files\Windows Media Connect 2
2010-04-19 17:17:22 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2010-04-19 17:16:32 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2010-04-19 17:15:57 ----D---- C:\WINDOWS\system32\LogFiles
2010-04-19 17:15:54 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2010-04-19 14:19:13 ----D---- C:\WINDOWS\Prefetch
2010-04-19 14:07:24 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-19 14:07:12 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-19 14:07:01 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-19 14:06:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-04-19 14:06:46 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-19 14:06:39 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-19 14:06:30 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-04-19 14:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-04-19 14:06:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-04-19 14:06:08 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-04-19 14:05:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-04-19 14:05:52 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-04-19 14:05:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-04-19 14:05:39 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-04-19 14:05:32 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-04-19 14:05:26 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-04-19 14:05:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-04-19 14:05:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-04-19 14:05:04 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-04-19 14:04:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-04-19 14:04:50 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-04-19 14:04:42 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-04-19 14:04:35 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-04-19 14:04:28 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-04-19 14:04:21 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-04-19 14:04:14 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-04-19 14:04:07 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-04-19 14:03:59 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-04-19 14:03:51 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-04-19 14:03:44 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-04-19 14:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-04-19 14:03:25 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-04-19 14:03:17 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-04-19 14:03:10 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-04-19 14:03:03 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-04-19 14:02:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-04-19 14:02:47 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-04-19 14:02:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-04-19 14:02:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-04-19 14:02:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-04-19 14:02:19 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-04-19 14:02:07 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-04-19 14:01:57 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-04-19 14:01:49 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-04-19 14:01:42 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-04-19 14:01:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-04-19 14:01:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-04-19 14:01:21 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-04-19 14:01:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-04-19 14:01:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-04-19 14:00:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-04-19 14:00:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-04-19 14:00:45 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-04-19 14:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-04-19 14:00:29 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-04-19 13:56:44 ----D---- C:\WINDOWS\l2schemas
2010-04-19 13:56:43 ----D---- C:\WINDOWS\system32\cs
2010-04-19 13:56:43 ----D---- C:\WINDOWS\system32\bits
2010-04-19 13:49:33 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-04-19 13:49:32 ----D---- C:\WINDOWS\EHome
2010-04-19 13:43:29 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2010-04-19 13:28:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970430_0$
2010-04-19 13:27:46 ----D---- C:\WINDOWS\ie7updates
2010-04-19 13:27:19 ----D---- C:\WINDOWS\WBEM
2010-04-19 13:27:18 ----D---- C:\WINDOWS\system32\cs-cz
2010-04-19 13:26:56 ----HDC---- C:\WINDOWS\ie7
2010-04-19 13:26:45 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2010-04-19 13:26:30 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-04-19 13:26:10 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2010-04-19 13:26:08 ----A---- C:\WINDOWS\system32\xmllite.dll
2010-04-19 13:24:33 ----D---- C:\WINDOWS\network diagnostic
2010-04-19 13:24:32 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2010-04-19 13:16:09 ----HDC---- C:\WINDOWS\$NtUninstallKB971737_0$
2010-04-19 13:02:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-04-18 20:58:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-04-18 20:58:43 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2010-04-18 20:58:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2010-04-18 20:58:27 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2010-04-18 20:58:20 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2010-04-18 20:58:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2010-04-18 20:58:05 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2010-04-18 20:57:58 ----HDC---- C:\WINDOWS\$NtUninstallKB971468_0$
2010-04-18 20:57:46 ----HDC---- C:\WINDOWS\$NtUninstallKB979683_0$
2010-04-18 20:57:38 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-04-18 20:57:32 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-04-18 20:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB980232_0$
2010-04-18 20:57:20 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2010-04-18 20:57:11 ----HDC---- C:\WINDOWS\$NtUninstallKB955759_0$
2010-04-18 20:55:35 ----A---- C:\WINDOWS\system32\MRT.exe
2010-04-18 20:55:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974318_0$
2010-04-18 20:55:21 ----HDC---- C:\WINDOWS\$NtUninstallKB969059_0$
2010-04-18 20:51:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2010-04-18 20:50:57 ----HDC---- C:\WINDOWS\$NtUninstallKB978037_0$
2010-04-18 20:50:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975713_0$
2010-04-18 20:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2010-04-18 20:50:32 ----HDC---- C:\WINDOWS\$NtUninstallKB978338_0$
2010-04-18 20:50:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2010-04-18 20:50:19 ----HDC---- C:\WINDOWS\$NtUninstallKB972270_0$
2010-04-18 20:50:12 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2010-04-18 20:50:05 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_1$
2010-04-18 20:49:58 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_1$
2010-04-18 20:49:38 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2010-04-18 20:49:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2010-04-18 20:49:20 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2010-04-18 20:49:14 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-04-18 20:49:09 ----HDC---- C:\WINDOWS\$NtUninstallKB975561_0$
2010-04-18 20:49:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-04-18 20:48:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973869_0$
2010-04-18 20:48:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975025_0$
2010-04-18 20:48:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-04-18 20:48:33 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2010-04-18 20:48:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974571_0$
2010-04-18 20:48:17 ----HDC---- C:\WINDOWS\$NtUninstallKB975560_0$
2010-04-18 20:48:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973507_0$
2010-04-18 20:48:03 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-04-18 20:47:39 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-18 20:47:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_0$
2010-04-18 20:47:26 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2010-04-18 20:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB980182$
2010-04-18 20:46:58 ----HDC---- C:\WINDOWS\$NtUninstallKB978601_0$
2010-04-18 20:46:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2010-04-18 20:46:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973354_0$
2010-04-18 20:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-04-18 20:46:25 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2010-04-18 20:46:19 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-04-18 20:46:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2010-04-18 20:46:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974392_0$
2010-04-18 20:45:03 ----HDC---- C:\WINDOWS\$NtUninstallKB977914_0$
2010-04-18 20:44:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2010-04-18 20:44:44 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-04-18 20:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2010-04-18 20:44:32 ----HDC---- C:\WINDOWS\$NtUninstallKB979309_0$
2010-04-18 20:44:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978706_0$
2010-04-18 20:44:19 ----D---- C:\WINDOWS\ServicePackFiles
2010-04-18 20:44:15 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-04-18 20:44:08 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2010-04-18 20:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB973815_0$
2010-04-18 20:43:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2010-04-18 20:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2010-04-18 20:43:43 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2010-04-18 20:43:30 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-04-18 20:43:27 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2010-04-18 20:43:13 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2010-04-18 20:43:08 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$
2010-04-18 20:42:58 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$
2010-04-18 20:42:48 ----HDC---- C:\WINDOWS\$NtUninstallKB969947_0$
2010-04-18 19:52:07 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-04-18 19:50:42 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-04-18 16:55:40 ----D---- C:\WINDOWS\system32\PreInstall
2010-04-18 16:55:38 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-04-18 15:01:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\hps
2010-04-18 14:59:59 ----D---- C:\Program Files\Fotolab
2010-04-18 11:15:27 ----HD---- C:\$AVG
2010-04-18 11:15:14 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-04-18 11:14:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG Security Toolbar
2010-04-18 11:14:35 ----D---- C:\Program Files\AVG
2010-04-18 11:14:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2010-04-18 11:05:42 ----A---- C:\WINDOWS\system32\LuResult.txt
2010-04-18 10:18:19 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-04-18 06:07:23 ----D---- C:\WINDOWS\i386
2010-04-18 05:45:55 ----D---- C:\My Backup -- 17-04-10 2045
2010-04-17 21:28:03 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Adobe
2010-04-17 21:23:18 ----D---- C:\Program Files\WIDCOMM
2010-04-17 21:22:58 ----D---- C:\Program Files\Google
2010-04-17 21:21:40 ----A---- C:\WINDOWS\system32\IVIresizeW7.dll
2010-04-17 21:21:40 ----A---- C:\WINDOWS\system32\IVIresizePX.dll
2010-04-17 21:21:39 ----A---- C:\WINDOWS\system32\IVIresizeP6.dll
2010-04-17 21:21:39 ----A---- C:\WINDOWS\system32\IVIresizeM6.dll
2010-04-17 21:21:39 ----A---- C:\WINDOWS\system32\IVIresizeA6.dll
2010-04-17 21:21:39 ----A---- C:\WINDOWS\system32\IVIresize.dll
2010-04-17 21:21:18 ----D---- C:\Program Files\InterVideo
2010-04-17 21:20:22 ----ASH---- C:\Documents and Settings\Olga Gajdová\Data aplikací\desktop.ini
2010-04-17 21:20:20 ----SD---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Microsoft
2010-04-17 21:20:20 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\SampleView
2010-04-17 21:20:20 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Identities
2010-04-17 21:19:22 ----D---- C:\Program Files\Zástupci programů

======List of files/folders modified in the last 1 months======

2010-04-20 14:32:55 ----RD---- C:\Program Files
2010-04-20 14:32:48 ----D---- C:\WINDOWS\Temp
2010-04-20 14:15:53 ----D---- C:\Windows
2010-04-20 12:21:52 ----D---- C:\totalcmd
2010-04-20 12:21:38 ----D---- C:\WINDOWS\system32
2010-04-20 12:19:55 ----D---- C:\WINDOWS\SMINST
2010-04-20 12:19:16 ----SHD---- C:\Config.Msi
2010-04-20 12:18:21 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-20 12:17:59 ----SHD---- C:\WINDOWS\Installer
2010-04-20 12:17:14 ----D---- C:\Program Files\Adobe
2010-04-20 12:17:01 ----D---- C:\Program Files\Common Files
2010-04-20 12:15:19 ----HD---- C:\WINDOWS\inf
2010-04-20 12:04:56 ----RSD---- C:\WINDOWS\assembly
2010-04-20 11:07:47 ----RSD---- C:\WINDOWS\Fonts
2010-04-20 11:07:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-04-20 10:03:26 ----D---- C:\WINDOWS\system32\config
2010-04-20 10:02:50 ----D---- C:\WINDOWS\WinSxS
2010-04-20 10:01:58 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-04-20 09:55:29 ----D---- C:\WINDOWS\Microsoft.NET
2010-04-20 09:47:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-04-20 09:13:28 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-20 09:02:34 ----A---- C:\WINDOWS\imsins.BAK
2010-04-20 09:02:31 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-04-20 09:02:21 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-20 08:57:55 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-20 08:53:38 ----D---- C:\WINDOWS\system32\drivers
2010-04-19 17:47:53 ----D---- C:\WINDOWS\Media
2010-04-19 17:47:53 ----D---- C:\Program Files\Internet Explorer
2010-04-19 17:47:52 ----D---- C:\WINDOWS\Help
2010-04-19 17:47:10 ----D---- C:\WINDOWS\security
2010-04-19 17:24:14 ----D---- C:\WINDOWS\system32\spool
2010-04-19 17:22:33 ----D---- C:\WINDOWS\pchealth
2010-04-19 17:20:39 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-04-19 17:18:30 ----D---- C:\WINDOWS\system32\wbem
2010-04-19 17:17:39 ----A---- C:\WINDOWS\win.ini
2010-04-19 17:17:32 ----D---- C:\Program Files\Windows Media Player
2010-04-19 17:15:32 ----D---- C:\Program Files\Windows Media Connect
2010-04-19 14:20:17 ----A---- C:\WINDOWS\OEWABLog.txt
2010-04-19 14:19:53 ----A---- C:\WINDOWS\setuplog.txt
2010-04-19 14:18:48 ----D---- C:\WINDOWS\AppPatch
2010-04-19 14:18:47 ----D---- C:\WINDOWS\system32\Setup
2010-04-19 14:06:09 ----D---- C:\Program Files\Movie Maker
2010-04-19 14:04:44 ----D---- C:\Program Files\Outlook Express
2010-04-19 14:00:38 ----D---- C:\Program Files\Messenger
2010-04-19 13:56:56 ----D---- C:\WINDOWS\ime
2010-04-19 13:56:45 ----D---- C:\WINDOWS\system32\usmt
2010-04-19 13:56:43 ----D---- C:\WINDOWS\PeerNet
2010-04-19 13:53:56 ----D---- C:\WINDOWS\system32\Restore
2010-04-19 13:53:56 ----D---- C:\WINDOWS\system32\npp
2010-04-19 13:53:55 ----D---- C:\WINDOWS\msagent
2010-04-19 13:53:53 ----D---- C:\WINDOWS\srchasst
2010-04-19 13:53:53 ----D---- C:\Program Files\NetMeeting
2010-04-19 13:53:51 ----D---- C:\WINDOWS\system32\Com
2010-04-19 13:53:49 ----D---- C:\Program Files\Windows NT
2010-04-19 13:53:47 ----D---- C:\Program Files\Common Files\System
2010-04-19 13:53:36 ----D---- C:\WINDOWS\system32\oobe
2010-04-19 13:53:34 ----D---- C:\WINDOWS\system
2010-04-19 12:20:38 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-04-19 12:14:39 ----D---- C:\WINDOWS\SoftwareDistribution
2010-04-18 20:06:22 ----D---- C:\WINDOWS\Debug
2010-04-18 11:30:56 ----SHD---- C:\RECYCLER
2010-04-18 11:10:49 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-04-18 11:10:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-04-18 11:05:18 ----SD---- C:\WINDOWS\Tasks
2010-04-18 05:59:36 ----RD---- C:\WINDOWS\Web
2010-04-18 05:59:36 ----D---- C:\WINDOWS\twain_32
2010-04-18 05:59:28 ----D---- C:\WINDOWS\system32\URTTemp
2010-04-18 05:59:20 ----D---- C:\WINDOWS\system32\ras
2010-04-18 05:59:18 ----D---- C:\WINDOWS\system32\mui
2010-04-18 05:59:16 ----D---- C:\WINDOWS\system32\MsDtc
2010-04-18 05:59:15 ----SD---- C:\WINDOWS\system32\Microsoft
2010-04-18 05:59:15 ----D---- C:\WINDOWS\system32\Macromed
2010-04-18 05:59:15 ----D---- C:\WINDOWS\system32\IME
2010-04-18 05:59:15 ----D---- C:\WINDOWS\system32\icsxml
2010-04-18 05:59:15 ----D---- C:\WINDOWS\system32\ias
2010-04-18 05:59:07 ----D---- C:\WINDOWS\system32\DLA
2010-04-18 05:59:06 ----D---- C:\WINDOWS\system32\DirectX
2010-04-18 05:58:58 ----D---- C:\WINDOWS\system32\1033
2010-04-18 05:58:58 ----D---- C:\WINDOWS\system32\1029
2010-04-18 05:57:15 ----D---- C:\WINDOWS\Resources
2010-04-18 05:57:15 ----D---- C:\WINDOWS\repair
2010-04-18 05:57:04 ----D---- C:\WINDOWS\RegisteredPackages
2010-04-18 05:57:04 ----D---- C:\WINDOWS\Provisioning
2010-04-18 05:55:58 ----RD---- C:\WINDOWS\Offline Web Pages
2010-04-18 05:55:57 ----D---- C:\WINDOWS\msapps
2010-04-18 05:55:46 ----D---- C:\WINDOWS\java
2010-04-18 05:55:16 ----D---- C:\WINDOWS\Hewlett-Packard
2010-04-18 05:54:44 ----D---- C:\WINDOWS\Driver Cache
2010-04-18 05:54:44 ----D---- C:\WINDOWS\Cursors
2010-04-18 05:54:43 ----D---- C:\WINDOWS\CREATOR
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB912919$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB892559$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB885855$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB885464$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB884575$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB883667$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB910728$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB908519$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB896727$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB896358$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB888239$
2010-04-18 05:54:29 ----HD---- C:\WINDOWS\$NtUninstallKB911927$
2010-04-18 05:54:29 ----HD---- C:\WINDOWS\$NtUninstallKB904706$
2010-04-18 05:54:29 ----HD---- C:\WINDOWS\$NtUninstallKB885884$
2010-04-18 05:54:28 ----HD---- C:\WINDOWS\$NtUninstallKB912436$
2010-04-18 05:54:28 ----HD---- C:\WINDOWS\$NtUninstallKB896256$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB913446$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB896423$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB893066$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB889673$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB886185$
2010-04-18 05:54:25 ----HD---- C:\WINDOWS\$NtUninstallKB915326$
2010-04-18 05:54:25 ----HD---- C:\WINDOWS\$NtUninstallKB911565$
2010-04-18 05:54:25 ----HD---- C:\WINDOWS\$NtUninstallKB891781$
2010-04-18 05:54:25 ----HD---- C:\WINDOWS\$NtUninstallKB887472$
2010-04-18 05:54:24 ----HD---- C:\WINDOWS\$NtUninstallKB888402$
2010-04-18 05:54:24 ----HD---- C:\WINDOWS\$NtUninstallKB873333$
2010-04-18 05:54:23 ----HD---- C:\WINDOWS\$NtUninstallKB909095$
2010-04-18 05:54:23 ----HD---- C:\WINDOWS\$NtUninstallKB901214$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB911564$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB903235$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB896422$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB896243$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB888113$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB885250$
2010-04-18 05:54:19 ----HD---- C:\WINDOWS\$NtUninstallKB913580$
2010-04-18 05:54:19 ----HD---- C:\WINDOWS\$NtUninstallKB894391$
2010-04-18 05:54:18 ----HD---- C:\WINDOWS\$NtUninstallKB901190$
2010-04-18 05:54:18 ----HD---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-04-18 05:54:01 ----D---- C:\SwSetup
2010-04-18 05:54:01 ----D---- C:\Program Files\xerox
2010-04-18 05:53:53 ----D---- C:\Program Files\Synaptics
2010-04-18 05:52:52 ----D---- C:\Program Files\Sonic
2010-04-18 05:52:51 ----D---- C:\Program Files\Online Services
2010-04-18 05:52:36 ----D---- C:\Program Files\MSN Gaming Zone
2010-04-18 05:52:35 ----D---- C:\Program Files\microsoft frontpage
2010-04-18 05:52:20 ----D---- C:\Program Files\Java
2010-04-18 05:52:04 ----D---- C:\Program Files\Hp
2010-04-18 05:51:55 ----D---- C:\Program Files\Hewlett-Packard
2010-04-18 05:51:55 ----D---- C:\Program Files\Fingerprint Sensor
2010-04-18 05:51:55 ----D---- C:\Program Files\Common Files\TiVo Shared
2010-04-18 05:51:33 ----D---- C:\Program Files\Common Files\SureThing Shared
2010-04-18 05:51:33 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-04-18 05:51:29 ----D---- C:\Program Files\Common Files\Sonic Shared
2010-04-18 05:51:29 ----D---- C:\Program Files\Common Files\Services
2010-04-18 05:51:29 ----D---- C:\Program Files\Common Files\ODBC
2010-04-18 05:51:29 ----D---- C:\Program Files\Common Files\MSSoap
2010-04-18 05:51:27 ----D---- C:\Program Files\Common Files\LightScribe
2010-04-18 05:51:21 ----D---- C:\Program Files\Common Files\Java
2010-04-18 05:51:17 ----D---- C:\Program Files\Common Files\InstallShield
2010-04-18 05:51:16 ----D---- C:\Program Files\Analog Devices
2010-04-18 05:50:35 ----D---- C:\I386
2010-04-18 05:48:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallShield
2010-04-18 05:48:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\hpqLog
2010-04-18 05:48:14 ----RSHD---- C:\cmdcons
2010-04-18 05:47:18 ----D---- C:\WinXP
2010-04-17 21:24:42 ----D---- C:\System.sav
2010-04-17 21:21:28 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-17 21:20:18 ----D---- C:\Documents and Settings
2010-04-17 21:19:30 ----SHD---- C:\System Volume Information
2010-04-17 21:19:26 ----RASH---- C:\boot.ini
2010-04-17 21:18:15 ----D---- C:\WINDOWS\Registration
2010-04-17 21:13:50 ----D---- C:\Program Files\HPQ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-04-18 216200]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-04-18 29512]
R1 AvgTdiX;AVG Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-04-20 242896]
R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2005-08-25 5628]
R1 DLARTL_N;DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [2005-08-25 22684]
R1 eabfiltr;eabfiltr; C:\WINDOWS\system32\DRIVERS\eabfiltr.sys [2005-09-19 7808]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2005-08-31 25628]
R2 DLADResN;DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2005-08-31 2496]
R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2005-08-31 86524]
R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2005-08-31 14684]
R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2005-08-31 6364]
R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2005-08-31 87036]
R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2005-08-31 94332]
R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2005-08-12 40544]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-10-01 281600]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2006-02-06 45312]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2006-02-15 1342570]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HBtnKey;HBtnKey; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2008-04-28 9344]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
R3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-11-17 3636864]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-09-15 213696]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2006-02-16 57096]
S3 eabusb;eabusb; C:\WINDOWS\system32\DRIVERS\eabusb.sys [2005-09-19 5760]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
S3 SMCIRDA;SMC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-10-24 35913]
S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2006-01-19 1428096]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2008-08-26 14336]
R2 ASChannel;Local Communication Channel; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 avg9emc;AVG E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-04-18 916760]
R2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-04-18 308064]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2006-02-15 258103]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-01-12 98304]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-06-20 49152]
R2 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 PCA;PC Angel; C:\WINDOWS\SMINST\PCAngel.exe [2006-01-12 294912]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-02-23 369920]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: viry, trojany

#2 Příspěvek od Caroprd111 »

Zdravím :)

Obrázek Vložte do PC všechny flash disky, které používáte.

Obrázek Stáhněte na plochu UsbFix http://pagesperso-orange.fr/NosTools/Ch ... UsbFix.exe
  • Spusťte, poté zvolte jazyk E - Enter
  • Zvolte 2 - Enter (je možný restart PC)
  • Po dokončení na Vás vyskočí log, vložte mi ho sem, případně ho najdete v C:\UsbFix.txt


Obrázek Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
  • Spusťte, poté do spodního políčka vložte následující skript.

Kód: Vybrat vše

netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys 
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys 
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav 
%systemroot%\system32\*.dll /lockedfiles
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
CREATERESTOREPOINT
  • Označte položku Pro všechny uživatele.
  • Označte položky Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
  • Klikněte na tlačítko Prohledat
  • Po dokončení, sem vložte logy OTL.Txt a Extras.txt
Obrázek
Nahoru
cpt
5. stupeň - BAN
Příspěvky: 39
Registrován: 23 dub 2008 14:39

Re: viry, trojany

#3 Příspěvek od cpt »

############################## | UsbFix V6.106 |

User : Olga Gajdová (Administrators) # PC257173278573
Update on 19/04/2010 by El Desaparecido , C_XX & Chimay8
Start at: 15:40:43 | 20.4.2010
Website : http://pagesperso-orange.fr/NosTools/index.html
Contact : FindyKill.Contact@gmail.com

Intel(R) Core(TM)2 CPU T5200 @ 1.60GHz
Microsoft Windows XP Home Edition (5.1.2600 32-bit) # Service Pack 3
Internet Explorer 8.0.6001.18702
Windows Firewall Status : Enabled
AV : AVG Anti-Virus 9.0 [ Enabled | Updated ]

C:\ -> Místní pevný disk # 104,47 Go (41,85 Go free) # NTFS
D:\ -> Místní pevný disk # 7,3 Go (555,1 Mo free) [HP_RECOVERY] # FAT32
E:\ -> Disk CD-ROM

################## | Files # Infected Folders |

Deleted ! C:\kht
Deleted ! C:\khw
Deleted ! C:\Recycler\S-1-5-21-1202660629-2052111302-725345543-1003
Deleted ! C:\Recycler\S-1-5-21-1907003270-945288386-1343631969-1003
Deleted ! C:\Recycler\S-1-5-21-600638489-3002925310-1209892087-1006
Deleted ! D:\kht
Deleted ! D:\khw

################## | Registry |


################## | Mountpoints2 |

Deleted ! HKCU\...\Explorer\MountPoints2\{585e8558-4a5e-11df-a6b2-0019d2624cdc}\Shell\AutoRun\Command

################## | Listing of the present files |

[17.04.2010 21:19|-rahs----|211] C:\boot.ini
[13.04.1999 01:12|--a------|512] C:\Boot32.w2k
[18.08.2004 10:00|-rahs----|4952] C:\Bootfont.bin
[05.10.1998 17:32|--a------|512] C:\bootsec
[07.04.1999 04:34|--a------|1536] C:\BOOTSEC.32
[12.04.2009 17:28|--a------|19391496] C:\DivXInstaller.exe
[08.12.2008 13:52|--a------|7730856] C:\Google_Earth_CZXV.exe
[?|?|?] C:\hiberfil.sys
[02.04.2007 21:22|-rahs----|0] C:\IO.SYS
[02.04.2007 21:22|-rahs----|0] C:\MSDOS.SYS
[18.08.2004 10:00|--ahs----|47564] C:\NTDETECT.COM
[19.04.2010 13:51|--ahs----|250576] C:\NTLDR
[?|?|?] C:\pagefile.sys
[28.07.2009 19:33|--a------|13030] C:\PDOXUSRS.NET
[12.06.2009 08:35|--a------|44661248] C:\Poradce1.24.1.MAKFAC.exe
[20.04.2010 15:50|--a------|1996] C:\UsbFix.txt
[15.06.2007 09:39|--a------|9516033] C:\vlc-0.8.6b-win32.exe
[04.01.2009 10:13|--a------|2642992] C:\zivot.exe
[22.03.2004 10:47|--a------|214] C:\Z stupce - Felix21.exe.lnk
[22.03.2004 10:47|--a------|222] C:\Z stupce - Oveźka.exe.lnk
[27.07.2001 23:07|---hs----|0] D:\AUTOEXEC.BAT
[09.01.2002 12:52|---hs----|244] D:\BOOT.INI
[17.08.2001 02:26|---hs----|237728] D:\CMLDR
[27.07.2001 23:07|---hs----|0] D:\CONFIG.SYS
[01.07.2005 13:16|---hs----|102] D:\Desktop.ini
[22.11.2004 17:28|---hs----|8130] D:\Folder.htt
[30.11.2004 13:01|---hs----|73728] D:\Info.exe
[27.07.2001 23:07|---hs----|0] D:\IO.SYS
[21.06.2005 19:22|---hs----|0] D:\MENUND
[27.07.2001 23:07|---hs----|0] D:\MSDOS.SYS
[25.07.2001 15:00|---hs----|45124] D:\NTDETECT.COM
[19.06.2001 00:53|---hs----|0] D:\NTFS
[25.07.2001 15:00|---hs----|222880] D:\NTLDR
[03.01.2006 08:42|---hs----|181724] D:\protect.ed
[28.07.2005 21:09|---hs----|36] D:\SAVEFILE.DIR
[21.10.2005 03:12|---hs----|42] D:\st_log.ini
[08.02.2002 17:44|---hs----|88038] D:\Warning.bmp
[24.05.2001 04:19|---hs----|0] D:\XGA
[18.08.2001 02:00|---hs----|10] D:\WIN51
[22.01.2001 02:00|---hs----|11] D:\WIN51.B2
[25.07.2001 02:00|---hs----|11] D:\WIN51.RC1
[25.07.2001 07:47|---hs----|11] D:\WIN51.RC2
[18.08.2001 02:00|---hs----|10] D:\WIN51IC
[20.03.2001 02:00|---hs----|11] D:\WIN51IC.B2
[25.07.2001 02:00|---hs----|11] D:\WIN51IC.RC1
[25.07.2001 02:00|---hs----|11] D:\WIN51IC.RC2
[17.08.2001 02:00|---hs----|10] D:\WIN51IP
[22.01.2001 02:00|---hs----|11] D:\WIN51IP.B2
[25.07.2001 07:47|---hs----|11] D:\WIN51IP.RC2
[17.08.2001 00:17|---hs----|184] D:\WINBOM.INI
[02.04.2007 18:29|---hs----|1280] D:\MASTER.LOG
[02.04.2007 18:30|---hs----|0] D:\RCBoot.sys
[02.04.2007 19:38|---hs----|22] D:\HPCD.sys

################## | Vaccination |

# C:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).
# D:\autorun.inf -> Autorun.inf created by UsbFix (El Desaparecido).

################## | Upload |

Please send the file : C:\UsbFix_Upload_Me_PC257173278573.zip : http://chiquitine.changelog.fr/Sample/Upload.php
Thank you for your contribution .

################## | ! End of report # UsbFix V6.106 ! |
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: viry, trojany

#4 Příspěvek od Caroprd111 »

OK, ještě log z OTL. :)
Obrázek
Nahoru
cpt
5. stupeň - BAN
Příspěvky: 39
Registrován: 23 dub 2008 14:39

Re: viry, trojany

#5 Příspěvek od cpt »

OTL se vzdy zasekne - viz priloha
Přílohy
OTL.JPG
(143.97 KiB) Staženo 217 x
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: viry, trojany

#6 Příspěvek od Caroprd111 »

Zkuste OTL v nouzovém režimu.
Obrázek
Nahoru
cpt
5. stupeň - BAN
Příspěvky: 39
Registrován: 23 dub 2008 14:39

Re: viry, trojany

#7 Příspěvek od cpt »

v nouzovem rezimu skoncil - viz priloha
Přílohy
OTL1.JPG
OTL1.JPG (84.48 KiB) Zobrazeno 1645 x
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: viry, trojany

#8 Příspěvek od Caroprd111 »

Obrázek Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary
  • Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrazí stránka s licenčními podmínkami, pokračujte stisknutím tlačítka "Ano"
  • Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna :!:
  • Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.
  • Během skenování může být počítač restartován.
Obrázek
Nahoru
cpt
5. stupeň - BAN
Příspěvky: 39
Registrován: 23 dub 2008 14:39

Re: viry, trojany

#9 Příspěvek od cpt »

ani Combofix nedobehne spravne, po kroku 50 se restartuje, objevi se pritom modra obrazovka s nejakou hlaskou, kterou nestihnu precist a v combofix.txt je poze:
ComboFix 10-04-20.02 - Olga Gajdová 21.04.2010 14:58:24.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1015.521 [GMT 2:00]
Spuštěný z: C:\Documents and Settings\Olga Gajdová\Plocha\ComboFix.exe
AV: AVG Anti-Virus *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: viry, trojany

#10 Příspěvek od Caroprd111 »

Poprosím o nový log z RSIT.
Obrázek
Nahoru
cpt
5. stupeň - BAN
Příspěvky: 39
Registrován: 23 dub 2008 14:39

Re: viry, trojany

#11 Příspěvek od cpt »

Logfile of random's system information tool 1.06 (written by random/random)
Run by Olga Gajdová at 2010-04-22 13:44:10
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 43 GB (40%) free of 107 GB
Total RAM: 1015 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:44:16, on 22.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\LSI SoftModem\agrsmsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\HPQ\IAM\bin\asghost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\AVG\AVG9\avgam.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG9\avgemc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\WINDOWS\Sminst\Recguard.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\PROGRA~1\HPQ\Shared\HPQTOA~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Olga Gajdová\Plocha\RSIT.exe
C:\Program Files\trend micro\Olga Gajdová.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: HP Credential Manager for ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll,RegisterModule
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 1672347937
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: OneCard - C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: PEVSystemStart - Unknown owner - C:\ComboFix\PEV.cfxxe

--
End of file - 10094 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-04-20 1615200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5CA3D70E-1895-11CF-8E15-001234567890}]
DriveLetterAccess - C:\WINDOWS\System32\DLA\DLASHX_W.DLL [2005-08-31 110652]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll [2005-11-10 184423]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2010-04-17 1191424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
HP Credential Manager for ProtectTools - C:\Program Files\HPQ\IAM\Bin\ItIeAddIN.dll [2005-03-03 50688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2010-04-17 1191424]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe [2005-11-10 36975]
"PTHOSTTR"=C:\Program Files\HPQ\HP ProtectTools Security Manager\PTHOSTTR.EXE [2006-02-14 122880]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"DLA"=C:\WINDOWS\System32\DLA\DLACTRLW.EXE [2005-08-31 122940]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-09-15 1015808]
"hpWirelessAssistant"=C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe [2006-02-14 454656]
"CognizanceTS"=C:\PROGRA~1\HPQ\IAM\Bin\AsTsVcc.dll [2003-12-22 17920]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2006-03-02 131072]
"Cpqset"=C:\Program Files\HPQ\Default Settings\cpqset.exe [2006-02-22 40960]
"Recguard"=C:\WINDOWS\Sminst\Recguard.exe [2005-12-20 1187840]
"Reminder"=C:\WINDOWS\Creator\Remind_XP.exe [2006-01-23 802816]
"Scheduler"=C:\WINDOWS\SMINST\Scheduler.exe [2006-02-15 892928]
"WatchDog"=C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [2005-11-08 184320]
"SynTPStart"=C:\Program Files\Synaptics\SynTP\SynTPStart.exe [2007-09-15 102400]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-01-05 872448]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-02-15 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-02-15 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-02-15 131072]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
DVD Check.lnk - C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-04-18 12464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-02-15 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OneCard]
C:\Program Files\HPQ\IAM\Bin\AsWlnPkg.dll [2005-07-25 40960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"HonorAutoRunSetting"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\SMINST\Scheduler.exe"="C:\WINDOWS\SMINST\Scheduler.exe:*:Enabled:Scheduler "
"C:\Program Files\AVG\AVG9\avgam.exe"="C:\Program Files\AVG\AVG9\avgam.exe:*:Enabled:avgam.exe"
"C:\Program Files\AVG\AVG9\avgdiagex.exe"="C:\Program Files\AVG\AVG9\avgdiagex.exe:*:Enabled:avgdiagex.exe"
"C:\Program Files\AVG\AVG9\avgemc.exe"="C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-04-21 15:03:21 ----D---- C:\WINDOWS\temp
2010-04-21 14:52:05 ----SD---- C:\ComboFix
2010-04-21 14:47:45 ----D---- C:\WINDOWS\Minidump
2010-04-21 14:21:02 ----A---- C:\Boot.bak
2010-04-21 14:20:56 ----RASHD---- C:\cmdcons
2010-04-21 14:19:53 ----A---- C:\WINDOWS\zip.exe
2010-04-21 14:19:53 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-04-21 14:19:53 ----A---- C:\WINDOWS\SWSC.exe
2010-04-21 14:19:53 ----A---- C:\WINDOWS\SWREG.exe
2010-04-21 14:19:53 ----A---- C:\WINDOWS\sed.exe
2010-04-21 14:19:53 ----A---- C:\WINDOWS\PEV.exe
2010-04-21 14:19:53 ----A---- C:\WINDOWS\NIRCMD.exe
2010-04-21 14:19:53 ----A---- C:\WINDOWS\MBR.exe
2010-04-21 14:19:53 ----A---- C:\WINDOWS\grep.exe
2010-04-21 14:19:47 ----D---- C:\WINDOWS\ERDNT
2010-04-21 14:19:40 ----D---- C:\Qoobox
2010-04-20 17:05:59 ----A---- C:\WINDOWS\ntbtlog.txt
2010-04-20 15:50:16 ----RASHD---- C:\autorun.inf
2010-04-20 15:40:38 ----A---- C:\UsbFix.txt
2010-04-20 15:37:37 ----D---- C:\UsbFix
2010-04-20 14:32:55 ----D---- C:\Program Files\trend micro
2010-04-20 14:32:54 ----D---- C:\rsit
2010-04-20 12:21:51 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\GHISLER
2010-04-20 12:21:25 ----A---- C:\WINDOWS\iun6002.exe
2010-04-20 12:21:16 ----D---- C:\Program Files\Codec Pack - All In 1
2010-04-20 12:21:00 ----A---- C:\WINDOWS\Codec Pack - All In 1 Setup Log.txt
2010-04-20 12:17:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-04-20 12:17:14 ----D---- C:\Program Files\Common Files\Adobe
2010-04-20 10:03:59 ----A---- C:\WINDOWS\system32\mdimon.dll
2010-04-20 10:03:43 ----A---- C:\WINDOWS\system32\msonpmon.dll
2010-04-20 10:02:56 ----D---- C:\Program Files\Microsoft Works
2010-04-20 10:02:32 ----D---- C:\Program Files\Common Files\DESIGNER
2010-04-20 10:01:58 ----D---- C:\Program Files\Microsoft.NET
2010-04-20 09:59:40 ----D---- C:\WINDOWS\SHELLNEW
2010-04-20 09:59:22 ----D---- C:\Program Files\Microsoft Office
2010-04-20 09:59:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-04-20 09:13:32 ----N---- C:\WINDOWS\system32\spmsg2.dll
2010-04-20 09:13:31 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$
2010-04-20 08:56:45 ----HDC---- C:\WINDOWS\$NtUninstallKB963093$
2010-04-20 08:55:43 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2010-04-20 08:55:25 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2010-04-20 08:55:22 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2010-04-20 08:54:59 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2010-04-20 08:49:05 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-04-20 08:49:04 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-04-19 17:54:05 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2010-04-19 17:51:22 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Windows Search
2010-04-19 17:48:58 ----A---- C:\WINDOWS\system32\igfxres.dll
2010-04-19 17:45:41 ----HDC---- C:\WINDOWS\$NtUninstallKB981349$
2010-04-19 17:45:32 ----D---- C:\Program Files\Microsoft Silverlight
2010-04-19 17:45:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971513$
2010-04-19 17:42:47 ----D---- C:\WINDOWS\ie8updates
2010-04-19 17:39:50 ----HDC---- C:\WINDOWS\ie8
2010-04-19 17:32:47 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-04-19 17:24:43 ----D---- C:\WINDOWS\system32\XPSViewer
2010-04-19 17:24:38 ----D---- C:\Program Files\MSBuild
2010-04-19 17:24:37 ----D---- C:\WINDOWS\system32\en-US
2010-04-19 17:24:31 ----D---- C:\Program Files\Reference Assemblies
2010-04-19 17:24:00 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-04-19 17:24:00 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-04-19 17:23:58 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-04-19 17:23:58 ----D---- C:\3ce7dfa89d9ca9d7ec31bd0d6a
2010-04-19 17:20:43 ----HDC---- C:\WINDOWS\$NtUninstallbasecsp$
2010-04-19 17:20:39 ----D---- C:\Program Files\LSI SoftModem
2010-04-19 17:20:13 ----D---- C:\WINDOWS\system32\x64
2010-04-19 17:20:13 ----A---- C:\WINDOWS\system32\igxpun.exe
2010-04-19 17:19:44 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-04-19 17:19:44 ----A---- C:\WINDOWS\system32\difxapi.dll
2010-04-19 17:19:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-04-19 17:18:57 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Windows Desktop Search
2010-04-19 17:18:31 ----D---- C:\Program Files\Windows Desktop Search
2010-04-19 17:18:30 ----D---- C:\WINDOWS\system32\GroupPolicy
2010-04-19 17:18:19 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2010-04-19 17:18:13 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2010-04-19 17:17:51 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-04-19 17:17:49 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2010-04-19 17:17:33 ----D---- C:\Program Files\Windows Media Connect 2
2010-04-19 17:17:22 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2010-04-19 17:16:32 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2010-04-19 17:15:57 ----D---- C:\WINDOWS\system32\LogFiles
2010-04-19 17:15:54 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2010-04-19 14:19:13 ----D---- C:\WINDOWS\Prefetch
2010-04-19 14:07:24 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-19 14:07:12 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-19 14:07:01 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-19 14:06:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-04-19 14:06:46 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-19 14:06:39 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-19 14:06:30 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-04-19 14:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-04-19 14:06:15 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-04-19 14:06:08 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-04-19 14:05:59 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-04-19 14:05:52 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-04-19 14:05:46 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-04-19 14:05:39 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-04-19 14:05:32 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-04-19 14:05:26 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-04-19 14:05:19 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-04-19 14:05:11 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-04-19 14:05:04 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-04-19 14:04:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-04-19 14:04:50 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-04-19 14:04:42 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-04-19 14:04:35 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-04-19 14:04:28 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-04-19 14:04:21 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-04-19 14:04:14 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-04-19 14:04:07 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-04-19 14:03:59 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-04-19 14:03:51 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-04-19 14:03:44 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-04-19 14:03:35 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-04-19 14:03:25 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-04-19 14:03:17 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-04-19 14:03:10 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-04-19 14:03:03 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-04-19 14:02:54 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-04-19 14:02:47 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-04-19 14:02:39 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-04-19 14:02:32 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-04-19 14:02:26 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-04-19 14:02:19 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-04-19 14:02:07 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-04-19 14:01:57 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-04-19 14:01:49 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-04-19 14:01:42 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-04-19 14:01:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-04-19 14:01:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-04-19 14:01:21 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-04-19 14:01:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-04-19 14:01:06 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-04-19 14:00:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-04-19 14:00:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-04-19 14:00:45 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-04-19 14:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-04-19 14:00:29 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-04-19 13:56:44 ----D---- C:\WINDOWS\l2schemas
2010-04-19 13:56:43 ----D---- C:\WINDOWS\system32\cs
2010-04-19 13:56:43 ----D---- C:\WINDOWS\system32\bits
2010-04-19 13:49:33 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-04-19 13:49:32 ----D---- C:\WINDOWS\EHome
2010-04-19 13:43:29 ----D---- C:\Program Files\Microsoft CAPICOM 2.1.0.2
2010-04-19 13:28:14 ----HDC---- C:\WINDOWS\$NtUninstallKB970430_0$
2010-04-19 13:27:46 ----D---- C:\WINDOWS\ie7updates
2010-04-19 13:27:19 ----D---- C:\WINDOWS\WBEM
2010-04-19 13:27:18 ----D---- C:\WINDOWS\system32\cs-cz
2010-04-19 13:26:56 ----HDC---- C:\WINDOWS\ie7
2010-04-19 13:26:45 ----HDC---- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
2010-04-19 13:26:30 ----HDC---- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
2010-04-19 13:26:10 ----HDC---- C:\WINDOWS\$NtUninstallKB915865$
2010-04-19 13:26:08 ----A---- C:\WINDOWS\system32\xmllite.dll
2010-04-19 13:24:33 ----D---- C:\WINDOWS\network diagnostic
2010-04-19 13:24:32 ----HDC---- C:\WINDOWS\$NtUninstallKB914440$
2010-04-19 13:16:09 ----HDC---- C:\WINDOWS\$NtUninstallKB971737_0$
2010-04-19 13:02:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\Windows Genuine Advantage
2010-04-18 20:58:49 ----HDC---- C:\WINDOWS\$NtUninstallKB978262$
2010-04-18 20:58:43 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2010-04-18 20:58:35 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2010-04-18 20:58:27 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2010-04-18 20:58:20 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2010-04-18 20:58:13 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2010-04-18 20:58:05 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2010-04-18 20:57:58 ----HDC---- C:\WINDOWS\$NtUninstallKB971468_0$
2010-04-18 20:57:46 ----HDC---- C:\WINDOWS\$NtUninstallKB979683_0$
2010-04-18 20:57:38 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2010-04-18 20:57:32 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2010-04-18 20:57:27 ----HDC---- C:\WINDOWS\$NtUninstallKB980232_0$
2010-04-18 20:57:20 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2010-04-18 20:57:11 ----HDC---- C:\WINDOWS\$NtUninstallKB955759_0$
2010-04-18 20:55:35 ----A---- C:\WINDOWS\system32\MRT.exe
2010-04-18 20:55:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974318_0$
2010-04-18 20:55:21 ----HDC---- C:\WINDOWS\$NtUninstallKB969059_0$
2010-04-18 20:51:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2010-04-18 20:50:57 ----HDC---- C:\WINDOWS\$NtUninstallKB978037_0$
2010-04-18 20:50:48 ----HDC---- C:\WINDOWS\$NtUninstallKB975713_0$
2010-04-18 20:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2010-04-18 20:50:32 ----HDC---- C:\WINDOWS\$NtUninstallKB978338_0$
2010-04-18 20:50:27 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2010-04-18 20:50:19 ----HDC---- C:\WINDOWS\$NtUninstallKB972270_0$
2010-04-18 20:50:12 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2010-04-18 20:50:05 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_1$
2010-04-18 20:49:58 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_1$
2010-04-18 20:49:38 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2010-04-18 20:49:27 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2010-04-18 20:49:20 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2010-04-18 20:49:14 ----HDC---- C:\WINDOWS\$NtUninstallKB968816_WM9$
2010-04-18 20:49:09 ----HDC---- C:\WINDOWS\$NtUninstallKB975561_0$
2010-04-18 20:49:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2010-04-18 20:48:56 ----HDC---- C:\WINDOWS\$NtUninstallKB973869_0$
2010-04-18 20:48:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975025_0$
2010-04-18 20:48:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2010-04-18 20:48:33 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2010-04-18 20:48:25 ----HDC---- C:\WINDOWS\$NtUninstallKB974571_0$
2010-04-18 20:48:17 ----HDC---- C:\WINDOWS\$NtUninstallKB975560_0$
2010-04-18 20:48:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973507_0$
2010-04-18 20:48:03 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2010-04-18 20:47:39 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-18 20:47:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_0$
2010-04-18 20:47:26 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2010-04-18 20:47:08 ----HDC---- C:\WINDOWS\$NtUninstallKB980182$
2010-04-18 20:46:58 ----HDC---- C:\WINDOWS\$NtUninstallKB978601_0$
2010-04-18 20:46:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2010-04-18 20:46:46 ----HDC---- C:\WINDOWS\$NtUninstallKB973354_0$
2010-04-18 20:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2010-04-18 20:46:25 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2010-04-18 20:46:19 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2010-04-18 20:46:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2010-04-18 20:46:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974392_0$
2010-04-18 20:45:03 ----HDC---- C:\WINDOWS\$NtUninstallKB977914_0$
2010-04-18 20:44:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2010-04-18 20:44:44 ----HDC---- C:\WINDOWS\$NtUninstallKB971961$
2010-04-18 20:44:38 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2010-04-18 20:44:32 ----HDC---- C:\WINDOWS\$NtUninstallKB979309_0$
2010-04-18 20:44:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978706_0$
2010-04-18 20:44:19 ----D---- C:\WINDOWS\ServicePackFiles
2010-04-18 20:44:15 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2010-04-18 20:44:08 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2010-04-18 20:44:01 ----HDC---- C:\WINDOWS\$NtUninstallKB973815_0$
2010-04-18 20:43:55 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2010-04-18 20:43:48 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2010-04-18 20:43:43 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2010-04-18 20:43:30 ----HDC---- C:\WINDOWS\$NtUninstallKB979306$
2010-04-18 20:43:27 ----HDC---- C:\WINDOWS\$NtUninstallKB944338-v2$
2010-04-18 20:43:13 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2010-04-18 20:43:08 ----HDC---- C:\WINDOWS\$NtUninstallKB975467_0$
2010-04-18 20:42:58 ----HDC---- C:\WINDOWS\$NtUninstallKB968389_0$
2010-04-18 20:42:48 ----HDC---- C:\WINDOWS\$NtUninstallKB969947_0$
2010-04-18 19:52:07 ----N---- C:\WINDOWS\system32\browserchoice.exe
2010-04-18 19:50:42 ----N---- C:\WINDOWS\system32\tzchange.exe
2010-04-18 16:55:40 ----D---- C:\WINDOWS\system32\PreInstall
2010-04-18 16:55:38 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2010-04-18 15:01:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\hps
2010-04-18 14:59:59 ----D---- C:\Program Files\Fotolab
2010-04-18 11:15:27 ----HD---- C:\$AVG
2010-04-18 11:15:14 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-04-18 11:14:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVG Security Toolbar
2010-04-18 11:14:35 ----D---- C:\Program Files\AVG
2010-04-18 11:14:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\avg9
2010-04-18 11:05:42 ----A---- C:\WINDOWS\system32\LuResult.txt
2010-04-18 10:18:19 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2010-04-18 06:07:23 ----D---- C:\WINDOWS\i386
2010-04-18 05:45:55 ----D---- C:\My Backup -- 17-04-10 2045
2010-04-17 21:28:03 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Adobe
2010-04-17 21:23:18 ----D---- C:\Program Files\WIDCOMM
2010-04-17 21:22:58 ----D---- C:\Program Files\Google
2010-04-17 21:21:40 ----A---- C:\WINDOWS\system32\IVIresizeW7.dll
2010-04-17 21:21:40 ----A---- C:\WINDOWS\system32\IVIresizePX.dll
2010-04-17 21:21:39 ----A---- C:\WINDOWS\system32\IVIresizeP6.dll
2010-04-17 21:21:39 ----A---- C:\WINDOWS\system32\IVIresizeM6.dll
2010-04-17 21:21:39 ----A---- C:\WINDOWS\system32\IVIresizeA6.dll
2010-04-17 21:21:39 ----A---- C:\WINDOWS\system32\IVIresize.dll
2010-04-17 21:21:18 ----D---- C:\Program Files\InterVideo
2010-04-17 21:20:22 ----ASH---- C:\Documents and Settings\Olga Gajdová\Data aplikací\desktop.ini
2010-04-17 21:20:20 ----SD---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Microsoft
2010-04-17 21:20:20 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\SampleView
2010-04-17 21:20:20 ----D---- C:\Documents and Settings\Olga Gajdová\Data aplikací\Identities
2010-04-17 21:19:22 ----D---- C:\Program Files\Zástupci programů

======List of files/folders modified in the last 1 months======

2010-04-22 08:41:44 ----D---- C:\WINDOWS\SMINST
2010-04-22 08:41:39 ----D---- C:\WINDOWS\system32
2010-04-21 15:24:10 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-21 15:23:09 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-21 15:04:37 ----D---- C:\Windows
2010-04-21 15:01:14 ----D---- C:\WINDOWS\system32\drivers
2010-04-21 15:01:14 ----D---- C:\WINDOWS\AppPatch
2010-04-21 15:01:10 ----D---- C:\Program Files\Common Files
2010-04-21 14:40:43 ----D---- C:\WINDOWS\system32\config
2010-04-21 14:21:02 ----RASH---- C:\boot.ini
2010-04-20 14:32:55 ----RD---- C:\Program Files
2010-04-20 12:21:52 ----D---- C:\totalcmd
2010-04-20 12:19:16 ----SHD---- C:\Config.Msi
2010-04-20 12:17:59 ----SHD---- C:\WINDOWS\Installer
2010-04-20 12:17:14 ----D---- C:\Program Files\Adobe
2010-04-20 12:15:19 ----HD---- C:\WINDOWS\inf
2010-04-20 12:04:56 ----RSD---- C:\WINDOWS\assembly
2010-04-20 11:07:47 ----RSD---- C:\WINDOWS\Fonts
2010-04-20 11:07:32 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-04-20 10:02:50 ----D---- C:\WINDOWS\WinSxS
2010-04-20 10:01:58 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-04-20 09:55:29 ----D---- C:\WINDOWS\Microsoft.NET
2010-04-20 09:47:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-04-20 09:02:34 ----A---- C:\WINDOWS\imsins.BAK
2010-04-20 09:02:31 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-04-20 09:02:21 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-20 08:57:55 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-19 17:47:53 ----D---- C:\WINDOWS\Media
2010-04-19 17:47:53 ----D---- C:\Program Files\Internet Explorer
2010-04-19 17:47:52 ----D---- C:\WINDOWS\Help
2010-04-19 17:47:10 ----D---- C:\WINDOWS\security
2010-04-19 17:24:14 ----D---- C:\WINDOWS\system32\spool
2010-04-19 17:22:33 ----D---- C:\WINDOWS\pchealth
2010-04-19 17:20:39 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-04-19 17:18:30 ----D---- C:\WINDOWS\system32\wbem
2010-04-19 17:17:39 ----A---- C:\WINDOWS\win.ini
2010-04-19 17:17:32 ----D---- C:\Program Files\Windows Media Player
2010-04-19 17:15:32 ----D---- C:\Program Files\Windows Media Connect
2010-04-19 14:20:17 ----A---- C:\WINDOWS\OEWABLog.txt
2010-04-19 14:19:53 ----A---- C:\WINDOWS\setuplog.txt
2010-04-19 14:18:47 ----D---- C:\WINDOWS\system32\Setup
2010-04-19 14:06:09 ----D---- C:\Program Files\Movie Maker
2010-04-19 14:04:44 ----D---- C:\Program Files\Outlook Express
2010-04-19 14:00:38 ----D---- C:\Program Files\Messenger
2010-04-19 13:56:56 ----D---- C:\WINDOWS\ime
2010-04-19 13:56:45 ----D---- C:\WINDOWS\system32\usmt
2010-04-19 13:56:43 ----D---- C:\WINDOWS\PeerNet
2010-04-19 13:53:56 ----D---- C:\WINDOWS\system32\Restore
2010-04-19 13:53:56 ----D---- C:\WINDOWS\system32\npp
2010-04-19 13:53:55 ----D---- C:\WINDOWS\msagent
2010-04-19 13:53:53 ----D---- C:\WINDOWS\srchasst
2010-04-19 13:53:53 ----D---- C:\Program Files\NetMeeting
2010-04-19 13:53:51 ----D---- C:\WINDOWS\system32\Com
2010-04-19 13:53:49 ----D---- C:\Program Files\Windows NT
2010-04-19 13:53:47 ----D---- C:\Program Files\Common Files\System
2010-04-19 13:53:36 ----D---- C:\WINDOWS\system32\oobe
2010-04-19 13:53:34 ----D---- C:\WINDOWS\system
2010-04-19 12:20:38 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-04-19 12:14:39 ----D---- C:\WINDOWS\SoftwareDistribution
2010-04-18 20:06:22 ----D---- C:\WINDOWS\Debug
2010-04-18 11:10:49 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-04-18 11:10:49 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-04-18 11:05:18 ----SD---- C:\WINDOWS\Tasks
2010-04-18 05:59:36 ----RD---- C:\WINDOWS\Web
2010-04-18 05:59:36 ----D---- C:\WINDOWS\twain_32
2010-04-18 05:59:28 ----D---- C:\WINDOWS\system32\URTTemp
2010-04-18 05:59:20 ----D---- C:\WINDOWS\system32\ras
2010-04-18 05:59:18 ----D---- C:\WINDOWS\system32\mui
2010-04-18 05:59:16 ----D---- C:\WINDOWS\system32\MsDtc
2010-04-18 05:59:15 ----SD---- C:\WINDOWS\system32\Microsoft
2010-04-18 05:59:15 ----D---- C:\WINDOWS\system32\Macromed
2010-04-18 05:59:15 ----D---- C:\WINDOWS\system32\IME
2010-04-18 05:59:15 ----D---- C:\WINDOWS\system32\icsxml
2010-04-18 05:59:15 ----D---- C:\WINDOWS\system32\ias
2010-04-18 05:59:07 ----D---- C:\WINDOWS\system32\DLA
2010-04-18 05:59:06 ----D---- C:\WINDOWS\system32\DirectX
2010-04-18 05:58:58 ----D---- C:\WINDOWS\system32\1033
2010-04-18 05:58:58 ----D---- C:\WINDOWS\system32\1029
2010-04-18 05:57:15 ----D---- C:\WINDOWS\Resources
2010-04-18 05:57:15 ----D---- C:\WINDOWS\repair
2010-04-18 05:57:04 ----D---- C:\WINDOWS\RegisteredPackages
2010-04-18 05:57:04 ----D---- C:\WINDOWS\Provisioning
2010-04-18 05:55:58 ----RD---- C:\WINDOWS\Offline Web Pages
2010-04-18 05:55:57 ----D---- C:\WINDOWS\msapps
2010-04-18 05:55:46 ----D---- C:\WINDOWS\java
2010-04-18 05:55:16 ----D---- C:\WINDOWS\Hewlett-Packard
2010-04-18 05:54:44 ----D---- C:\WINDOWS\Driver Cache
2010-04-18 05:54:44 ----D---- C:\WINDOWS\Cursors
2010-04-18 05:54:43 ----D---- C:\WINDOWS\CREATOR
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB912919$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB892559$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB885855$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB885464$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB884575$
2010-04-18 05:54:32 ----HD---- C:\WINDOWS\$NtUninstallKB883667$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB910728$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB908519$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB896727$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB896358$
2010-04-18 05:54:31 ----HD---- C:\WINDOWS\$NtUninstallKB888239$
2010-04-18 05:54:29 ----HD---- C:\WINDOWS\$NtUninstallKB911927$
2010-04-18 05:54:29 ----HD---- C:\WINDOWS\$NtUninstallKB904706$
2010-04-18 05:54:29 ----HD---- C:\WINDOWS\$NtUninstallKB885884$
2010-04-18 05:54:28 ----HD---- C:\WINDOWS\$NtUninstallKB912436$
2010-04-18 05:54:28 ----HD---- C:\WINDOWS\$NtUninstallKB896256$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB913446$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB896423$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB893066$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB889673$
2010-04-18 05:54:27 ----HD---- C:\WINDOWS\$NtUninstallKB886185$
2010-04-18 05:54:25 ----HD---- C:\WINDOWS\$NtUninstallKB915326$
2010-04-18 05:54:25 ----HD---- C:\WINDOWS\$NtUninstallKB911565$
2010-04-18 05:54:25 ----HD---- C:\WINDOWS\$NtUninstallKB891781$
2010-04-18 05:54:25 ----HD---- C:\WINDOWS\$NtUninstallKB887472$
2010-04-18 05:54:24 ----HD---- C:\WINDOWS\$NtUninstallKB888402$
2010-04-18 05:54:24 ----HD---- C:\WINDOWS\$NtUninstallKB873333$
2010-04-18 05:54:23 ----HD---- C:\WINDOWS\$NtUninstallKB909095$
2010-04-18 05:54:23 ----HD---- C:\WINDOWS\$NtUninstallKB901214$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB911564$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB903235$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB896422$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB896243$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB888113$
2010-04-18 05:54:20 ----HD---- C:\WINDOWS\$NtUninstallKB885250$
2010-04-18 05:54:19 ----HD---- C:\WINDOWS\$NtUninstallKB913580$
2010-04-18 05:54:19 ----HD---- C:\WINDOWS\$NtUninstallKB894391$
2010-04-18 05:54:18 ----HD---- C:\WINDOWS\$NtUninstallKB901190$
2010-04-18 05:54:18 ----HD---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2010-04-18 05:54:01 ----D---- C:\SwSetup
2010-04-18 05:54:01 ----D---- C:\Program Files\xerox
2010-04-18 05:53:53 ----D---- C:\Program Files\Synaptics
2010-04-18 05:52:52 ----D---- C:\Program Files\Sonic
2010-04-18 05:52:51 ----D---- C:\Program Files\Online Services
2010-04-18 05:52:36 ----D---- C:\Program Files\MSN Gaming Zone
2010-04-18 05:52:35 ----D---- C:\Program Files\microsoft frontpage
2010-04-18 05:52:20 ----D---- C:\Program Files\Java
2010-04-18 05:52:04 ----D---- C:\Program Files\Hp
2010-04-18 05:51:55 ----D---- C:\Program Files\Hewlett-Packard
2010-04-18 05:51:55 ----D---- C:\Program Files\Fingerprint Sensor
2010-04-18 05:51:55 ----D---- C:\Program Files\Common Files\TiVo Shared
2010-04-18 05:51:33 ----D---- C:\Program Files\Common Files\SureThing Shared
2010-04-18 05:51:33 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-04-18 05:51:29 ----D---- C:\Program Files\Common Files\Sonic Shared
2010-04-18 05:51:29 ----D---- C:\Program Files\Common Files\Services
2010-04-18 05:51:29 ----D---- C:\Program Files\Common Files\ODBC
2010-04-18 05:51:29 ----D---- C:\Program Files\Common Files\MSSoap
2010-04-18 05:51:27 ----D---- C:\Program Files\Common Files\LightScribe
2010-04-18 05:51:21 ----D---- C:\Program Files\Common Files\Java
2010-04-18 05:51:17 ----D---- C:\Program Files\Common Files\InstallShield
2010-04-18 05:51:16 ----D---- C:\Program Files\Analog Devices
2010-04-18 05:50:35 ----D---- C:\I386
2010-04-18 05:48:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\InstallShield
2010-04-18 05:48:38 ----D---- C:\Documents and Settings\All Users\Data aplikací\hpqLog
2010-04-18 05:47:18 ----D---- C:\WinXP
2010-04-17 21:24:42 ----D---- C:\System.sav
2010-04-17 21:21:28 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-17 21:20:18 ----D---- C:\Documents and Settings
2010-04-17 21:19:30 ----SHD---- C:\System Volume Information
2010-04-17 21:18:15 ----D---- C:\WINDOWS\Registration
2010-04-17 21:13:50 ----D---- C:\Program Files\HPQ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-04-18 216200]
R1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-04-18 29512]
R1 AvgTdiX;AVG Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-04-20 242896]
R1 DLACDBHM;DLACDBHM; C:\WINDOWS\System32\Drivers\DLACDBHM.SYS [2005-08-25 5628]
R1 DLARTL_N;DLARTL_N; C:\WINDOWS\System32\Drivers\DLARTL_N.SYS [2005-08-25 22684]
R1 eabfiltr;eabfiltr; C:\WINDOWS\system32\DRIVERS\eabfiltr.sys [2005-09-19 7808]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-13 8832]
R2 DLABOIOM;DLABOIOM; C:\WINDOWS\System32\DLA\DLABOIOM.SYS [2005-08-31 25628]
R2 DLADResN;DLADResN; C:\WINDOWS\System32\DLA\DLADResN.SYS [2005-08-31 2496]
R2 DLAIFS_M;DLAIFS_M; C:\WINDOWS\System32\DLA\DLAIFS_M.SYS [2005-08-31 86524]
R2 DLAOPIOM;DLAOPIOM; C:\WINDOWS\System32\DLA\DLAOPIOM.SYS [2005-08-31 14684]
R2 DLAPoolM;DLAPoolM; C:\WINDOWS\System32\DLA\DLAPoolM.SYS [2005-08-31 6364]
R2 DLAUDF_M;DLAUDF_M; C:\WINDOWS\System32\DLA\DLAUDF_M.SYS [2005-08-31 87036]
R2 DLAUDFAM;DLAUDFAM; C:\WINDOWS\System32\DLA\DLAUDFAM.SYS [2005-08-31 94332]
R2 DRVNDDM;DRVNDDM; C:\WINDOWS\System32\Drivers\DRVNDDM.SYS [2005-08-12 40544]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-10-01 281600]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-07-13 94976]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys [2008-11-21 1204128]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 bcm4sbxp;Broadcom 440x 10/100 Integrated Controller; C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys [2006-02-06 45312]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2006-02-15 1342570]
R3 CmBatt;Microsoft AC Adapter Driver; C:\WINDOWS\system32\DRIVERS\CmBatt.sys [2008-04-13 13952]
R3 HBtnKey;HBtnKey; C:\WINDOWS\system32\DRIVERS\cpqbttn.sys [2008-04-28 9344]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-02-15 5854752]
R3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-11-17 3636864]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-09-15 213696]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2006-02-16 57096]
S3 catchme;catchme; \??\C:\DOCUME~1\OLGAGA~1\LOCALS~1\Temp\catchme.sys []
S3 eabusb;eabusb; C:\WINDOWS\system32\DRIVERS\eabusb.sys [2005-09-19 5760]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
S3 SMCIRDA;SMC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2001-10-24 35913]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2006-01-19 1428096]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2008-08-26 14336]
R2 ASChannel;Local Communication Channel; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 avg9emc;AVG E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-04-18 916760]
R2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-04-18 308064]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2006-02-15 258103]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-01-12 98304]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-06-20 49152]
R2 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 PCA;PC Angel; C:\WINDOWS\SMINST\PCAngel.exe [2006-01-12 294912]
S2 PEVSystemStart;PEVSystemStart; C:\ComboFix\PEV.cfxxe [2010-03-12 261632]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-02-23 369920]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: viry, trojany

#12 Příspěvek od Caroprd111 »

Obrázek Podle návodu http://www.viry.cz/forum/viewtopic.php?f=15&t=72743 aplikujte tento skript.

Kód: Vybrat vše

:Reg
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]
[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

:Services
PEVSystemStart

:Commands
[PURITY] 
[EMPTYTEMP] 
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[CREATERESTOREPOINT]
Obrázek
Nahoru
cpt
5. stupeň - BAN
Příspěvky: 39
Registrován: 23 dub 2008 14:39

Re: viry, trojany

#13 Příspěvek od cpt »

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart\ deleted successfully.
========== SERVICES/DRIVERS ==========
Service PEVSystemStart stopped successfully!
Service PEVSystemStart deleted successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32768 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Olga Gajdová
->Temp folder emptied: 123775 bytes
->Temporary Internet Files folder emptied: 1908901 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 2,00 mb


Restore points cleared and new OTM Restore Point set!
Error starting restore point: System Restore is disabled.
Error closing restore point: System Restore is disabled.

OTM by OldTimer - Version 3.1.10.2 log created on 04222010_150348
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: viry, trojany

#14 Příspěvek od Caroprd111 »

Obrázek Stáhněte MBAM http://www.viry.cz/forum/viewtopic.php?f=29&t=67229
  • Podle návodu v odkazu nainstalujte, poté dejte úplný sken.
  • Nic nemažte :!: MBAM má občas falešné detekce a mohl by smazat např. systémové soubory.
  • Log vložte sem.
Obrázek
Nahoru
cpt
5. stupeň - BAN
Příspěvky: 39
Registrován: 23 dub 2008 14:39

Re: viry, trojany

#15 Příspěvek od cpt »

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 4021

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

22.4.2010 18:50:42
mbam-log-2010-04-22 (18-50-42).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 294086
Uplynulý čas: 1 hodina(y), 58 minuta(y), 28 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“