Velmi zpomalené nabíhání NOD32 při startu
Napsal: 29 dub 2010 12:26
Zdravím. Eset nabíhá dobře 5 minut. Celkové zpomalení systému.
Prosím o kontrolu logu.
Logfile of random's system information tool 1.06 (written by random/random)
Run by Admin at 2010-04-29 13:25:54
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 203 GB (67%) free of 305 GB
Total RAM: 3070 MB (83% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:25:58, on 29.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Epos\epos-2.4.85\src\epos.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Documents and Settings\Admin\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Admin.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = About:Blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.speedapps.com/search.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.divx.com/divx/webplayerdemo/en
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [IDTSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [AsioReg] REGSVR32 /S CTASIO.DLL
O4 - HKLM\..\Run: [CtxfiReg] CTXFIREG.exe /FAIL1
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... oader5.cab
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/stati ... 0.53.0.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Zvuk systému Windows (AudioSrv) - Unknown owner - net.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OZOUJZBKZFIZ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\Admin\LOCALS~1\Temp\OZOUJZBKZFIZ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\WINDOWS\system32\STacSV.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: Text-to-Speech system Epos (ttscp) - Unknown owner - C:\Program Files\Epos\epos-2.4.85\src\epos.exe
--
End of file - 7142 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-07 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-07 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-02-09 13680640]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-02-09 86016]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-07 149280]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-10-25 652624]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-06 1848648]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]
"IDTSysTrayApp"=C:\WINDOWS\sttray.exe [2007-09-05 405504]
"SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2006-03-20 282624]
"AsioReg"=REGSVR32 /S CTASIO.DLL []
"CtxfiReg"=CTXFIREG.exe /FAIL1 []
"CTHelper"=C:\WINDOWS\CTHELPER.EXE [2005-11-08 16384]
"CTxfiHlp"=C:\WINDOWS\system32\CTXFIHLP.EXE [2006-03-02 18944]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SetDefaultMIDI"=C:\WINDOWS\MIDIDef.exe [2005-11-08 25600]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ImagePath]
C:\windows\system_32.bat [2010-04-24 22]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe"="C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe:*:Enabled:Sunbelt Kerio Personal Firewall 4 - GUI"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe"="C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe:*:Enabled:Call of Juarez - Bound in Blood"
"C:\Program Files\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat"="C:\Program Files\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\Program Files\Electronic Arts\The Lord of the Rings, The Rise of the Witch-king\game.dat"="C:\Program Files\Electronic Arts\The Lord of the Rings, The Rise of the Witch-king\game.dat:*:Enabled:The Lord of the Rings, The Rise of the Witch-king"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\FlatOut2\FlatOut2.exe"="C:\Program Files\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut2"
"C:\Program Files\Metin2_TESTER\metin2.bin"="C:\Program Files\Metin2_TESTER\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Dragon Age\bin_ship\daorigins.exe"="C:\Program Files\Dragon Age\bin_ship\daorigins.exe:*:Enabled:Dragon Age Prameny Hra"
"C:\Program Files\Dragon Age\DAOriginsLauncher.exe"="C:\Program Files\Dragon Age\DAOriginsLauncher.exe:*:Enabled:Dragon Age Prameny Spustit"
"C:\Program Files\Metin2_TESTER\metin2client.bin"="C:\Program Files\Metin2_TESTER\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Metin2_CZ\metin2.bin"="C:\Program Files\Metin2_CZ\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Metin2_CZ\metin2client.bin"="C:\Program Files\Metin2_CZ\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe"="C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe:*:Enabled:Dragon Age Origins Aktualizovat"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\EA Sports\FIFA 09\FIFA09.exe"="C:\Program Files\EA Sports\FIFA 09\FIFA09.exe:*:Enabled:FIFA09"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5695b63e-56bb-11de-b685-0019d129dbcf}]
shell\AutoRun\command - setupSNK.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a52e8648-e323-11de-b81e-0019d129dbcf}]
shell\AutoRun\command - K:\InstallTomTomHOME.exe
======List of files/folders created in the last 1 months======
2010-04-29 13:15:15 ----A---- C:\WINDOWS\system32\ctzapxx.ini
2010-04-29 13:15:15 ----A---- C:\WINDOWS\system32\claptn.ini
2010-04-29 13:15:15 ----A---- C:\WINDOWS\CTDCRES.DLL
2010-04-29 12:48:15 ----D---- C:\WINDOWS\SxsCaPendDel
2010-04-29 12:36:51 ----A---- C:\WINDOWS\stsystra.exe
2010-04-29 12:35:12 ----D---- C:\Program Files\SigmaTel
2010-04-29 12:26:02 ----A---- C:\WINDOWS\system32\WRAP_OAL.DLL
2010-04-29 12:26:02 ----A---- C:\WINDOWS\system32\KILL.INI
2010-04-29 12:26:02 ----A---- C:\WINDOWS\system32\CTPRES.DLL
2010-04-29 12:26:01 ----A---- C:\WINDOWS\system32\SFMS32.DLL
2010-04-29 12:26:01 ----A---- C:\WINDOWS\system32\sfman32.dll
2010-04-29 12:26:01 ----A---- C:\WINDOWS\system32\REGPLIB.EXE
2010-04-29 12:26:01 ----A---- C:\WINDOWS\READREG.EXE
2010-04-29 12:26:00 ----A---- C:\WINDOWS\system32\piaproxy.dll
2010-04-29 12:26:00 ----A---- C:\WINDOWS\system32\OpenAL32.DLL
2010-04-29 12:26:00 ----A---- C:\WINDOWS\PSCONV.EXE
2010-04-29 12:26:00 ----A---- C:\WINDOWS\MIDIDEF.EXE
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\KILLAPPS.EXE
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\EAXAC3.DLL
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\DEVREG.DLL
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\CTXFISPK.DLL
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\CT_OAL.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTXFIREG.EXE
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTXFIBTN.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTTHXCAL.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTSPKHLP.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTSCAL.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\ctsblfx.dll
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTPCMCIA.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTMMEP.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTHWIUT.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTEXFIFX.dll
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\ctemupia.dll
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTEDASIO.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\cteapsfx.dll
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\ctdproxy.dll
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTDCIFCE.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTDC0001.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTDC0000.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\CTHELPER.EXE
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\CTBURST.DLL
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\ctaudfx.dll
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\CTASIO.DLL
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\CT20XUT.DLL
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\commonfx.dll
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\AC3API.DLL
2010-04-29 12:06:17 ----A---- C:\WINDOWS\system32\stlang.dll
2010-04-29 12:06:17 ----A---- C:\WINDOWS\system32\stacsv.exe
2010-04-29 12:06:17 ----A---- C:\WINDOWS\sttray.exe
2010-04-29 11:55:14 ----D---- C:\Program Files\IDT
2010-04-28 12:53:17 ----D---- C:\Install
2010-04-28 12:47:18 ----D---- C:\rsit
2010-04-28 12:47:18 ----D---- C:\Program Files\trend micro
2010-04-28 12:36:54 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-26 17:13:39 ----D---- C:\WINDOWS\pss
2010-04-25 16:09:07 ----A---- C:\WINDOWS\system32\lsdelete.exe
2010-04-25 14:15:29 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-04-25 14:12:55 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-04-25 14:12:28 ----D---- C:\Program Files\Lavasoft
2010-04-25 14:12:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-04-24 21:43:32 ----D---- C:\WINDOWS\system32\NtmsData
2010-04-24 20:10:27 ----A---- C:\WINDOWS\system_32.bat
2010-04-23 17:34:02 ----D---- C:\Program Files\Common Files\Skype
2010-04-23 16:54:21 ----D---- C:\Documents and Settings\Admin\Data aplikací\Hamachi
2010-04-23 16:53:58 ----D---- C:\Program Files\Hamachi
2010-04-15 17:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-15 17:05:00 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-15 17:03:36 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-15 17:03:29 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-15 16:17:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-15 16:17:03 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-11 14:14:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2010-04-11 14:14:32 ----D---- C:\Documents and Settings\Admin\Data aplikací\Ubisoft
2010-04-11 13:08:12 ----D---- C:\Documents and Settings\Admin\Data aplikací\WinRAR
2010-04-10 19:44:40 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2010-04-10 19:44:40 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2010-04-10 19:44:40 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2010-04-10 19:44:39 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2010-04-10 19:44:38 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2010-04-10 19:44:37 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2010-04-10 19:44:36 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2010-04-10 19:44:35 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2010-04-10 19:44:34 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2010-04-10 19:44:33 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2010-04-10 19:44:32 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2010-04-10 19:43:48 ----HD---- C:\WINDOWS\msdownld.tmp
2010-04-10 18:35:56 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-04-10 18:31:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-04-10 18:31:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2010-04-10 18:31:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2010-04-10 18:30:12 ----D---- C:\WINDOWS\system32\Adobe
2010-04-10 17:10:25 ----D---- C:\Program Files\iZ3D Driver
2010-04-10 16:35:16 ----D---- C:\Program Files\JDownloader
2010-04-06 19:15:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Aliasworlds
2010-04-06 19:13:52 ----D---- C:\Program Files\Restaurace Medvěda Míši
2010-04-02 17:41:01 ----A---- C:\WINDOWS\system32\d3dx9.dll
2010-04-02 17:41:00 ----A---- C:\WINDOWS\system32\D3DX81ab.dll
2010-04-02 17:40:56 ----D---- C:\Program Files\Cheat Engine
2010-04-02 16:44:38 ----D---- C:\Program Files\Epos
======List of files/folders modified in the last 1 months======
2010-04-29 13:24:28 ----D---- C:\WINDOWS\Temp
2010-04-29 13:19:56 ----D---- C:\WINDOWS
2010-04-29 13:16:02 ----D---- C:\WINDOWS\system32
2010-04-29 13:15:50 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-29 13:15:50 ----HD---- C:\WINDOWS\inf
2010-04-29 13:15:48 ----D---- C:\WINDOWS\system32\drivers
2010-04-29 13:15:45 ----D---- C:\WINDOWS\system32\Data
2010-04-29 13:15:28 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-29 13:15:01 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-29 12:50:56 ----D---- C:\Documents and Settings\Admin\Data aplikací\Creative
2010-04-29 12:50:35 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-29 12:50:09 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2010-04-29 12:49:44 ----RD---- C:\Program Files
2010-04-29 12:49:36 ----SHD---- C:\WINDOWS\Installer
2010-04-29 12:49:35 ----RD---- C:\Program Files\Skype
2010-04-29 12:48:25 ----D---- C:\Program Files\DivX
2010-04-29 12:43:39 ----SD---- C:\WINDOWS\Tasks
2010-04-29 12:28:47 ----D---- C:\WINDOWS\Prefetch
2010-04-29 12:02:51 ----D---- C:\Program Files\Messenger
2010-04-28 12:29:07 ----D---- C:\WINDOWS\Debug
2010-04-27 19:54:02 ----D---- C:\Documents and Settings\Admin\Data aplikací\Skype
2010-04-27 19:50:10 ----D---- C:\Documents and Settings\Admin\Data aplikací\ICQ
2010-04-27 15:43:20 ----D---- C:\Program Files\Metin2_CZ
2010-04-26 17:16:07 ----SH---- C:\boot.ini
2010-04-26 17:16:06 ----A---- C:\WINDOWS\win.ini
2010-04-26 17:16:06 ----A---- C:\WINDOWS\system.ini
2010-04-25 14:13:01 ----D---- C:\WINDOWS\WinSxS
2010-04-25 13:59:38 ----D---- C:\Documents and Settings\Admin\Data aplikací\skypePM
2010-04-25 13:48:15 ----D---- C:\WINDOWS\SoftwareDistribution
2010-04-24 21:45:16 ----D---- C:\WINDOWS\repair
2010-04-24 21:45:11 ----SHD---- C:\System Volume Information
2010-04-24 21:45:09 ----D---- C:\WINDOWS\Registration
2010-04-24 21:43:31 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-04-24 21:43:16 ----D---- C:\Program Files\AVI ReComp
2010-04-24 21:33:27 ----D---- C:\Documents and Settings\Admin\Data aplikací\BitTorrent
2010-04-24 21:09:17 ----D---- C:\Documents and Settings\Admin\Data aplikací\Winamp
2010-04-24 21:09:00 ----D---- C:\Documents and Settings\Admin\Data aplikací\My The Lord of the Rings, The Rise of the Witch-king Files
2010-04-24 21:08:56 ----D---- C:\Documents and Settings\Admin\Data aplikací\My Battle for Middle-earth(tm) II Files
2010-04-24 21:07:46 ----D---- C:\Documents and Settings\Admin\Data aplikací\Facebook
2010-04-24 21:02:30 ----D---- C:\Program Files\Ubisoft
2010-04-24 20:18:03 ----D---- C:\divx
2010-04-24 20:17:57 ----D---- C:\b4b74201a31006c134a7d3398e
2010-04-24 20:17:57 ----D---- C:\ATF
2010-04-24 20:17:56 ----D---- C:\aplikace
2010-04-24 20:17:56 ----D---- C:\9b6d819c060b97d172773ec4
2010-04-24 20:17:56 ----D---- C:\3e265f021c3b4579e224dfdf4b3a84
2010-04-23 18:40:04 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-04-23 18:28:17 ----D---- C:\Program Files\GameSpy Arcade
2010-04-23 18:00:10 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-04-23 18:00:00 ----A---- C:\WINDOWS\system32\pbsvc_heroes.exe
2010-04-23 17:47:28 ----D---- C:\Program Files\EA GAMES
2010-04-23 17:34:02 ----D---- C:\Program Files\Common Files
2010-04-23 16:53:03 ----D---- C:\Temp
2010-04-15 17:05:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-11 14:08:14 ----RSD---- C:\WINDOWS\assembly
2010-04-11 14:07:36 ----D---- C:\WINDOWS\system32\DirectX
2010-04-11 13:11:35 ----A---- C:\WINDOWS\system32\CmdLineExt03.dll
2010-04-10 19:18:35 ----D---- C:\WINDOWS\system32\Macromed
2010-04-10 17:15:59 ----D---- C:\Program Files\Dragon Age
2010-04-09 14:54:59 ----D---- C:\Program Files\Mozilla Firefox
2010-04-06 19:52:54 ----A---- C:\WINDOWS\system32\MRT.exe
2010-03-31 22:23:34 ----D---- C:\Program Files\Internet Explorer
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 fwdrv;Firewall Driver; C:\WINDOWS\system32\drivers\fwdrv.sys [2005-12-15 274432]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 khips;Kerio HIPS Driver; C:\WINDOWS\system32\drivers\khips.sys [2005-12-15 81920]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-08-09 53920]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-08-30 242320]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-04-23 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-02-09 6307328]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2006-03-20 1156648]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2005-11-08 502272]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2005-07-13 340704]
S3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2005-11-08 7168]
S3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2005-11-08 143360]
S3 efipsk;efipsk; \??\C:\DOCUME~1\Admin\LOCALS~1\Temp\efipsk.sys []
S3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2005-11-08 77824]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2005-02-15 6300]
S3 Nokia USB Modem;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2005-02-15 9021]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2005-02-17 140619]
S3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2005-11-08 114688]
S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\Sandra.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-07 153376]
R2 KPF4;Sunbelt Kerio Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe [2005-12-19 1368064]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-02-09 163908]
R2 ttscp;Text-to-Speech system Epos; C:\Program Files\Epos\epos-2.4.85\src\epos.exe [2010-02-09 384000]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 STacSV;Audio Service; C:\WINDOWS\system32\STacSV.exe [2007-09-05 204800]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-04-25 1265264]
S3 OZOUJZBKZFIZ;OZOUJZBKZFIZ; C:\DOCUME~1\Admin\LOCALS~1\Temp\OZOUJZBKZFIZ.exe [2010-04-28 486272]
S3 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-11-21 75064]
S3 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-04-23 189248]
S3 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2009-11-13 92008]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; C:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832]
S4 gupdate1caadaa971de0e6;Služba Google Update (gupdate1caadaa971de0e6); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-14 133104]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------
Prosím o kontrolu logu.
Logfile of random's system information tool 1.06 (written by random/random)
Run by Admin at 2010-04-29 13:25:54
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 203 GB (67%) free of 305 GB
Total RAM: 3070 MB (83% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:25:58, on 29.4.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\stsystra.exe
C:\WINDOWS\CTHELPER.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Epos\epos-2.4.85\src\epos.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Documents and Settings\Admin\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Admin.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = About:Blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.speedapps.com/search.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.divx.com/divx/webplayerdemo/en
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [IDTSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [AsioReg] REGSVR32 /S CTASIO.DLL
O4 - HKLM\..\Run: [CtxfiReg] CTXFIREG.exe /FAIL1
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SetDefaultMIDI] MIDIDef.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... oader5.cab
O16 - DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} (Battlefield Heroes Updater) - https://www.battlefieldheroes.com/stati ... 0.53.0.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Zvuk systému Windows (AudioSrv) - Unknown owner - net.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OZOUJZBKZFIZ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\Admin\LOCALS~1\Temp\OZOUJZBKZFIZ.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\WINDOWS\system32\STacSV.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: Text-to-Speech system Epos (ttscp) - Unknown owner - C:\Program Files\Epos\epos-2.4.85\src\epos.exe
--
End of file - 7142 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-01-07 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-01-07 73728]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98}
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-02-09 13680640]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-02-09 86016]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe [2010-01-07 149280]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-10-25 652624]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-06 1848648]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-11-16 2054360]
"IDTSysTrayApp"=C:\WINDOWS\sttray.exe [2007-09-05 405504]
"SigmatelSysTrayApp"=C:\WINDOWS\stsystra.exe [2006-03-20 282624]
"AsioReg"=REGSVR32 /S CTASIO.DLL []
"CtxfiReg"=CTXFIREG.exe /FAIL1 []
"CTHelper"=C:\WINDOWS\CTHELPER.EXE [2005-11-08 16384]
"CTxfiHlp"=C:\WINDOWS\system32\CTXFIHLP.EXE [2006-03-02 18944]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"SetDefaultMIDI"=C:\WINDOWS\MIDIDef.exe [2005-11-08 25600]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ImagePath]
C:\windows\system_32.bat [2010-04-24 22]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe"="C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe:*:Enabled:Sunbelt Kerio Personal Firewall 4 - GUI"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe"="C:\Program Files\Ubisoft\Techland\Call of Juarez - Bound in Blood\CoJBiBGame_x86.exe:*:Enabled:Call of Juarez - Bound in Blood"
"C:\Program Files\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat"="C:\Program Files\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\Program Files\Electronic Arts\The Lord of the Rings, The Rise of the Witch-king\game.dat"="C:\Program Files\Electronic Arts\The Lord of the Rings, The Rise of the Witch-king\game.dat:*:Enabled:The Lord of the Rings, The Rise of the Witch-king"
"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\FlatOut2\FlatOut2.exe"="C:\Program Files\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut2"
"C:\Program Files\Metin2_TESTER\metin2.bin"="C:\Program Files\Metin2_TESTER\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Dragon Age\bin_ship\daorigins.exe"="C:\Program Files\Dragon Age\bin_ship\daorigins.exe:*:Enabled:Dragon Age Prameny Hra"
"C:\Program Files\Dragon Age\DAOriginsLauncher.exe"="C:\Program Files\Dragon Age\DAOriginsLauncher.exe:*:Enabled:Dragon Age Prameny Spustit"
"C:\Program Files\Metin2_TESTER\metin2client.bin"="C:\Program Files\Metin2_TESTER\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Metin2_CZ\metin2.bin"="C:\Program Files\Metin2_CZ\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Metin2_CZ\metin2client.bin"="C:\Program Files\Metin2_CZ\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe"="C:\Program Files\Dragon Age\bin_ship\daupdatersvc.service.exe:*:Enabled:Dragon Age Origins Aktualizovat"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\EA Sports\FIFA 09\FIFA09.exe"="C:\Program Files\EA Sports\FIFA 09\FIFA09.exe:*:Enabled:FIFA09"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5695b63e-56bb-11de-b685-0019d129dbcf}]
shell\AutoRun\command - setupSNK.exe
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a52e8648-e323-11de-b81e-0019d129dbcf}]
shell\AutoRun\command - K:\InstallTomTomHOME.exe
======List of files/folders created in the last 1 months======
2010-04-29 13:15:15 ----A---- C:\WINDOWS\system32\ctzapxx.ini
2010-04-29 13:15:15 ----A---- C:\WINDOWS\system32\claptn.ini
2010-04-29 13:15:15 ----A---- C:\WINDOWS\CTDCRES.DLL
2010-04-29 12:48:15 ----D---- C:\WINDOWS\SxsCaPendDel
2010-04-29 12:36:51 ----A---- C:\WINDOWS\stsystra.exe
2010-04-29 12:35:12 ----D---- C:\Program Files\SigmaTel
2010-04-29 12:26:02 ----A---- C:\WINDOWS\system32\WRAP_OAL.DLL
2010-04-29 12:26:02 ----A---- C:\WINDOWS\system32\KILL.INI
2010-04-29 12:26:02 ----A---- C:\WINDOWS\system32\CTPRES.DLL
2010-04-29 12:26:01 ----A---- C:\WINDOWS\system32\SFMS32.DLL
2010-04-29 12:26:01 ----A---- C:\WINDOWS\system32\sfman32.dll
2010-04-29 12:26:01 ----A---- C:\WINDOWS\system32\REGPLIB.EXE
2010-04-29 12:26:01 ----A---- C:\WINDOWS\READREG.EXE
2010-04-29 12:26:00 ----A---- C:\WINDOWS\system32\piaproxy.dll
2010-04-29 12:26:00 ----A---- C:\WINDOWS\system32\OpenAL32.DLL
2010-04-29 12:26:00 ----A---- C:\WINDOWS\PSCONV.EXE
2010-04-29 12:26:00 ----A---- C:\WINDOWS\MIDIDEF.EXE
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\KILLAPPS.EXE
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\EAXAC3.DLL
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\DEVREG.DLL
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\CTXFISPK.DLL
2010-04-29 12:25:59 ----A---- C:\WINDOWS\system32\CT_OAL.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTXFIREG.EXE
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTXFIBTN.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTTHXCAL.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTSPKHLP.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTSCAL.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\ctsblfx.dll
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTPCMCIA.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTMMEP.DLL
2010-04-29 12:25:58 ----A---- C:\WINDOWS\system32\CTHWIUT.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTEXFIFX.dll
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\ctemupia.dll
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTEDASIO.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\cteapsfx.dll
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\ctdproxy.dll
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTDCIFCE.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTDC0001.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\system32\CTDC0000.DLL
2010-04-29 12:25:57 ----A---- C:\WINDOWS\CTHELPER.EXE
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\CTBURST.DLL
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\ctaudfx.dll
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\CTASIO.DLL
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\CT20XUT.DLL
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\commonfx.dll
2010-04-29 12:25:56 ----A---- C:\WINDOWS\system32\AC3API.DLL
2010-04-29 12:06:17 ----A---- C:\WINDOWS\system32\stlang.dll
2010-04-29 12:06:17 ----A---- C:\WINDOWS\system32\stacsv.exe
2010-04-29 12:06:17 ----A---- C:\WINDOWS\sttray.exe
2010-04-29 11:55:14 ----D---- C:\Program Files\IDT
2010-04-28 12:53:17 ----D---- C:\Install
2010-04-28 12:47:18 ----D---- C:\rsit
2010-04-28 12:47:18 ----D---- C:\Program Files\trend micro
2010-04-28 12:36:54 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-26 17:13:39 ----D---- C:\WINDOWS\pss
2010-04-25 16:09:07 ----A---- C:\WINDOWS\system32\lsdelete.exe
2010-04-25 14:15:29 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-04-25 14:12:55 ----HDC---- C:\Documents and Settings\All Users\Data aplikací\{74D08EB8-01D1-4BAE-91E3-F30C1B031AC6}
2010-04-25 14:12:28 ----D---- C:\Program Files\Lavasoft
2010-04-25 14:12:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Lavasoft
2010-04-24 21:43:32 ----D---- C:\WINDOWS\system32\NtmsData
2010-04-24 20:10:27 ----A---- C:\WINDOWS\system_32.bat
2010-04-23 17:34:02 ----D---- C:\Program Files\Common Files\Skype
2010-04-23 16:54:21 ----D---- C:\Documents and Settings\Admin\Data aplikací\Hamachi
2010-04-23 16:53:58 ----D---- C:\Program Files\Hamachi
2010-04-15 17:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-15 17:05:00 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-15 17:03:36 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-15 17:03:29 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-15 16:17:17 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-15 16:17:03 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-11 14:14:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ubisoft
2010-04-11 14:14:32 ----D---- C:\Documents and Settings\Admin\Data aplikací\Ubisoft
2010-04-11 13:08:12 ----D---- C:\Documents and Settings\Admin\Data aplikací\WinRAR
2010-04-10 19:44:40 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2010-04-10 19:44:40 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2010-04-10 19:44:40 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2010-04-10 19:44:39 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2010-04-10 19:44:38 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2010-04-10 19:44:37 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2010-04-10 19:44:36 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2010-04-10 19:44:35 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2010-04-10 19:44:34 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2010-04-10 19:44:33 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2010-04-10 19:44:32 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2010-04-10 19:43:48 ----HD---- C:\WINDOWS\msdownld.tmp
2010-04-10 18:35:56 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-04-10 18:31:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Symantec
2010-04-10 18:31:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2010-04-10 18:31:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\NortonInstaller
2010-04-10 18:30:12 ----D---- C:\WINDOWS\system32\Adobe
2010-04-10 17:10:25 ----D---- C:\Program Files\iZ3D Driver
2010-04-10 16:35:16 ----D---- C:\Program Files\JDownloader
2010-04-06 19:15:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Aliasworlds
2010-04-06 19:13:52 ----D---- C:\Program Files\Restaurace Medvěda Míši
2010-04-02 17:41:01 ----A---- C:\WINDOWS\system32\d3dx9.dll
2010-04-02 17:41:00 ----A---- C:\WINDOWS\system32\D3DX81ab.dll
2010-04-02 17:40:56 ----D---- C:\Program Files\Cheat Engine
2010-04-02 16:44:38 ----D---- C:\Program Files\Epos
======List of files/folders modified in the last 1 months======
2010-04-29 13:24:28 ----D---- C:\WINDOWS\Temp
2010-04-29 13:19:56 ----D---- C:\WINDOWS
2010-04-29 13:16:02 ----D---- C:\WINDOWS\system32
2010-04-29 13:15:50 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-29 13:15:50 ----HD---- C:\WINDOWS\inf
2010-04-29 13:15:48 ----D---- C:\WINDOWS\system32\drivers
2010-04-29 13:15:45 ----D---- C:\WINDOWS\system32\Data
2010-04-29 13:15:28 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-29 13:15:01 ----HD---- C:\Program Files\InstallShield Installation Information
2010-04-29 12:50:56 ----D---- C:\Documents and Settings\Admin\Data aplikací\Creative
2010-04-29 12:50:35 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-29 12:50:09 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2010-04-29 12:49:44 ----RD---- C:\Program Files
2010-04-29 12:49:36 ----SHD---- C:\WINDOWS\Installer
2010-04-29 12:49:35 ----RD---- C:\Program Files\Skype
2010-04-29 12:48:25 ----D---- C:\Program Files\DivX
2010-04-29 12:43:39 ----SD---- C:\WINDOWS\Tasks
2010-04-29 12:28:47 ----D---- C:\WINDOWS\Prefetch
2010-04-29 12:02:51 ----D---- C:\Program Files\Messenger
2010-04-28 12:29:07 ----D---- C:\WINDOWS\Debug
2010-04-27 19:54:02 ----D---- C:\Documents and Settings\Admin\Data aplikací\Skype
2010-04-27 19:50:10 ----D---- C:\Documents and Settings\Admin\Data aplikací\ICQ
2010-04-27 15:43:20 ----D---- C:\Program Files\Metin2_CZ
2010-04-26 17:16:07 ----SH---- C:\boot.ini
2010-04-26 17:16:06 ----A---- C:\WINDOWS\win.ini
2010-04-26 17:16:06 ----A---- C:\WINDOWS\system.ini
2010-04-25 14:13:01 ----D---- C:\WINDOWS\WinSxS
2010-04-25 13:59:38 ----D---- C:\Documents and Settings\Admin\Data aplikací\skypePM
2010-04-25 13:48:15 ----D---- C:\WINDOWS\SoftwareDistribution
2010-04-24 21:45:16 ----D---- C:\WINDOWS\repair
2010-04-24 21:45:11 ----SHD---- C:\System Volume Information
2010-04-24 21:45:09 ----D---- C:\WINDOWS\Registration
2010-04-24 21:43:31 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-04-24 21:43:16 ----D---- C:\Program Files\AVI ReComp
2010-04-24 21:33:27 ----D---- C:\Documents and Settings\Admin\Data aplikací\BitTorrent
2010-04-24 21:09:17 ----D---- C:\Documents and Settings\Admin\Data aplikací\Winamp
2010-04-24 21:09:00 ----D---- C:\Documents and Settings\Admin\Data aplikací\My The Lord of the Rings, The Rise of the Witch-king Files
2010-04-24 21:08:56 ----D---- C:\Documents and Settings\Admin\Data aplikací\My Battle for Middle-earth(tm) II Files
2010-04-24 21:07:46 ----D---- C:\Documents and Settings\Admin\Data aplikací\Facebook
2010-04-24 21:02:30 ----D---- C:\Program Files\Ubisoft
2010-04-24 20:18:03 ----D---- C:\divx
2010-04-24 20:17:57 ----D---- C:\b4b74201a31006c134a7d3398e
2010-04-24 20:17:57 ----D---- C:\ATF
2010-04-24 20:17:56 ----D---- C:\aplikace
2010-04-24 20:17:56 ----D---- C:\9b6d819c060b97d172773ec4
2010-04-24 20:17:56 ----D---- C:\3e265f021c3b4579e224dfdf4b3a84
2010-04-23 18:40:04 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-04-23 18:28:17 ----D---- C:\Program Files\GameSpy Arcade
2010-04-23 18:00:10 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-04-23 18:00:00 ----A---- C:\WINDOWS\system32\pbsvc_heroes.exe
2010-04-23 17:47:28 ----D---- C:\Program Files\EA GAMES
2010-04-23 17:34:02 ----D---- C:\Program Files\Common Files
2010-04-23 16:53:03 ----D---- C:\Temp
2010-04-15 17:05:08 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-11 14:08:14 ----RSD---- C:\WINDOWS\assembly
2010-04-11 14:07:36 ----D---- C:\WINDOWS\system32\DirectX
2010-04-11 13:11:35 ----A---- C:\WINDOWS\system32\CmdLineExt03.dll
2010-04-10 19:18:35 ----D---- C:\WINDOWS\system32\Macromed
2010-04-10 17:15:59 ----D---- C:\Program Files\Dragon Age
2010-04-09 14:54:59 ----D---- C:\Program Files\Mozilla Firefox
2010-04-06 19:52:54 ----A---- C:\WINDOWS\system32\MRT.exe
2010-03-31 22:23:34 ----D---- C:\Program Files\Internet Explorer
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-11-16 108792]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-11-16 96408]
R1 fwdrv;Firewall Driver; C:\WINDOWS\system32\drivers\fwdrv.sys [2005-12-15 274432]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 khips;Kerio HIPS Driver; C:\WINDOWS\system32\drivers\khips.sys [2005-12-15 81920]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-08-09 53920]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-11-16 116520]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-08-30 242320]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-04-23 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-02-09 6307328]
R3 STHDA;SigmaTel High Definition Audio CODEC; C:\WINDOWS\system32\drivers\sthda.sys [2006-03-20 1156648]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Ovladač standardního rozbočovače USB; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ctac32k;Creative AC3 Software Decoder; C:\WINDOWS\system32\drivers\ctac32k.sys [2005-11-08 502272]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\WINDOWS\system32\drivers\ctdvda2k.sys [2005-07-13 340704]
S3 ctprxy2k;Creative Proxy Driver; C:\WINDOWS\system32\drivers\ctprxy2k.sys [2005-11-08 7168]
S3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\drivers\ctsfm2k.sys [2005-11-08 143360]
S3 efipsk;efipsk; \??\C:\DOCUME~1\Admin\LOCALS~1\Temp\efipsk.sys []
S3 emupia;E-mu Plug-in Architecture Driver; C:\WINDOWS\system32\drivers\emupia2k.sys [2005-11-08 77824]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-12 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 Nokia USB Generic;Nokia USB Generic; C:\WINDOWS\system32\drivers\nmwcdc.sys [2005-02-15 6300]
S3 Nokia USB Modem;Nokia USB Modem; C:\WINDOWS\system32\drivers\nmwcdcm.sys [2005-02-15 9021]
S3 Nokia USB Phone Parent;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\nmwcd.sys [2005-02-17 140619]
S3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\drivers\ctoss2k.sys [2005-11-08 114688]
S3 SANDRA;SANDRA; \??\C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\Sandra.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-11-16 735960]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-01-07 153376]
R2 KPF4;Sunbelt Kerio Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe [2005-12-19 1368064]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-02-09 163908]
R2 ttscp;Text-to-Speech system Epos; C:\Program Files\Epos\epos-2.4.85\src\epos.exe [2010-02-09 384000]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 STacSV;Audio Service; C:\WINDOWS\system32\STacSV.exe [2007-09-05 204800]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-11-16 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2010-04-25 1265264]
S3 OZOUJZBKZFIZ;OZOUJZBKZFIZ; C:\DOCUME~1\Admin\LOCALS~1\Temp\OZOUJZBKZFIZ.exe [2010-04-28 486272]
S3 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2009-11-21 75064]
S3 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-04-23 189248]
S3 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2009-11-13 92008]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; C:\Program Files\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-12-15 25832]
S4 gupdate1caadaa971de0e6;Služba Google Update (gupdate1caadaa971de0e6); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-14 133104]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
-----------------EOF-----------------