VIRY.CZ

Logfile of random's system information tool 1.06 (written by random/random)
Run by Jarka at 2010-05-01 20:38:37
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 15 GB (25%) free of 60 GB
Total RAM: 895 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:38:47, on 1.5.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ICQ7.0\ICQ.exe
C:\Documents and Settings\Jarka\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\Jarka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60347
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60347
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Alawar.com Toolbar - {511131f1-4629-4254-a85f-ed7b6d75dd3c} - C:\Program Files\Alawar.com\tbAla1.dll
O2 - BHO: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
O2 - BHO: PageRage Toolbar - {9565115d-c7d6-46d3-bd63-b67b481a4368} - C:\Program Files\PageRage\tbPag1.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Client\YontooIEClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: (no name) - {f592709f-ff4a-4862-b659-4afabda56312} - (no file)
O3 - Toolbar: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: Alawar.com Toolbar - {511131f1-4629-4254-a85f-ed7b6d75dd3c} - C:\Program Files\Alawar.com\tbAla1.dll
O3 - Toolbar: PageRage Toolbar - {9565115d-c7d6-46d3-bd63-b67b481a4368} - C:\Program Files\PageRage\tbPag1.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [SpywareTerminatorUpdate] "C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Stiahnuť &všetky odkazy pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Stiahnuť odkaz &pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stiahnuť všetky v&ideá pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Righteous Kill\Images\stg_drm.ocx
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file://C:\Program Files\Righteous Kill\Images\armhelper.ocx
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 11360 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Úklid 1 kliknutím.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2008-10-16 322864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\ctbr.dll [2009-12-14 1217896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll [2008-08-11 656696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-04-22 1615200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{511131f1-4629-4254-a85f-ed7b6d75dd3c}]
Alawar.com Toolbar - C:\Program Files\Alawar.com\tbAla1.dll [2010-04-12 2349080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{631ac2d4-57b3-42b0-a148-da33b462c1a3}]
Absolutist Games Toolbar - C:\Program Files\Absolutist_Games\tbAbso.dll [2007-07-31 1391640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9565115d-c7d6-46d3-bd63-b67b481a4368}]
PageRage Toolbar - C:\Program Files\PageRage\tbPag1.dll [2010-04-12 2349080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-30 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-06 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-12 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-05-20 1258808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}]
Ask Toolbar BHO - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL [2008-12-23 262144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo Layers - C:\Program Files\Yontoo Layers Client\YontooIEClient.dll [2009-10-14 195936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2008-10-16 505136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-01-03 1019128]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-05-20 1258808]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]
{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - Ask Toolbar - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL [2008-12-23 262144]
{f592709f-ff4a-4862-b659-4afabda56312}
{631ac2d4-57b3-42b0-a148-da33b462c1a3} - Absolutist Games Toolbar - C:\Program Files\Absolutist_Games\tbAbso.dll [2007-07-31 1391640]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{511131f1-4629-4254-a85f-ed7b6d75dd3c} - Alawar.com Toolbar - C:\Program Files\Alawar.com\tbAla1.dll [2010-04-12 2349080]
{9565115d-c7d6-46d3-bd63-b67b481a4368} - PageRage Toolbar - C:\Program Files\PageRage\tbPag1.dll [2010-04-12 2349080]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\ctbr.dll [2009-12-14 1217896]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-30 279664]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-04-22 2064736]
"PAC207_Monitor"=C:\WINDOWS\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"Monitor"=C:\WINDOWS\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2009-12-20 2166784]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SpywareTerminatorUpdate"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2009-12-20 3037696]
"DAEMON Tools"=C:\Program Files\DAEMON Tools\daemon.exe [2007-04-04 165784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2005-05-04 69632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2008-12-18 4608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
C:\Program Files\Ares\Ares.exe [2008-12-17 887808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
C:\Program Files\BitComet\BitComet.exe [2008-11-12 2511672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CnxDslTaskBar]
c:\program files\microcom\adsl deskporte usb\CnxDslTb.exe [2004-06-16 233472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
C:\Program Files\D-Tools\daemon.exe -lang 1033 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Monitor]
C:\WINDOWS\PixArt\PAC207\Monitor.exe [2006-11-03 319488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PAC207_Monitor]
C:\WINDOWS\PixArt\PAC207\Monitor.exe [2006-11-03 319488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2008-05-14 16862720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2010-04-06 26102056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Software Informer]
C:\Program Files\Software Informer\softinfo.exe [2009-11-25 2011205]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe [2009-12-20 2166784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorUpdate.exe [2009-12-20 3037696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe [2009-05-20 111928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-21 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2008-10-16 214360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office\OSA9.EXE [1999-02-17 65588]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-06-27 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-04-18 12464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskmgr"=0
"DisableChangePassword"=0
"DisableLockWorkstation"=0
"NoDispSettingsPage"=0
"NoDispAppearancePage"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoFolderOptions"=0
"NoFileUrl"=0
"NoRun"=0
"NoUpdateCheck"=0
"NoLogoff"=0
"NoClose"=0
"NoSetFolders"=0
"NoFind"=0
"NoDrives"=0
"NoDesktop"=0
"NoDriveTypeAutoRun"=95000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Ares\Ares.exe"="C:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae8fa998-db78-11de-b6c2-001333c222ae}]
shell\AutoRun\command - I:\USBAutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e77605bc-424b-11df-b876-001fe25158c7}]
shell\AutoRun\command - ey.exe
shell\open\command - ey.exe


======List of files/folders created in the last 1 months======

2010-05-01 20:35:38 ----D---- C:\Program Files\trend micro
2010-05-01 20:35:28 ----D---- C:\rsit
2010-05-01 16:28:27 ----D---- C:\Documents and Settings\Jarka\Application Data\Malwarebytes
2010-05-01 16:28:15 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-05-01 16:28:13 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-28 13:15:01 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-27 17:42:40 ----A---- C:\WINDOWS\system32\muweb.dll
2010-04-27 17:42:40 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-04-27 17:42:40 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-04-27 17:26:39 ----D---- C:\Program Files\Microsoft Works
2010-04-27 17:24:53 ----D---- C:\Program Files\Microsoft.NET
2010-04-26 18:58:54 ----A---- C:\Program Files\IE8-Setup-Full.exe
2010-04-26 16:55:24 ----D---- C:\Program Files\Microsoft Visual Studio
2010-04-25 19:12:42 ----RHD---- C:\MSOCache
2010-04-25 16:23:28 ----D---- C:\Program Files\Common Files\Designer
2010-04-25 14:50:02 ----D---- C:\Program Files\DAEMON Tools
2010-04-25 10:41:51 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-04-25 10:33:33 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-04-23 22:27:37 ----D---- C:\Program Files\Common Files\Skype
2010-04-18 15:29:46 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-04-18 15:29:31 ----D---- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-04-18 15:27:07 ----D---- C:\Program Files\AVG
2010-04-18 15:26:52 ----D---- C:\Documents and Settings\All Users\Application Data\avg9
2010-04-17 13:50:32 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-04-17 13:47:56 ----D---- C:\WINDOWS\CSC
2010-04-15 20:24:21 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-15 20:16:15 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-15 20:11:47 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-15 20:02:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-15 19:27:29 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-11 11:36:14 ----A---- C:\Program Files\DragonSetup.exe
2010-04-05 09:35:51 ----D---- C:\Documents and Settings\Jarka\Application Data\Magic3

======List of files/folders modified in the last 1 months======

2010-05-01 20:38:39 ----D---- C:\WINDOWS\Temp
2010-05-01 20:36:39 ----D---- C:\WINDOWS\Prefetch
2010-05-01 20:35:38 ----RD---- C:\Program Files
2010-05-01 20:07:19 ----D---- C:\Documents and Settings\Jarka\Application Data\Spyware Terminator
2010-05-01 19:26:02 ----D---- C:\Documents and Settings\Jarka\Application Data\ICQ
2010-05-01 18:31:49 ----D---- C:\WINDOWS
2010-05-01 17:48:47 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-05-01 17:47:35 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-01 16:28:17 ----D---- C:\WINDOWS\system32\drivers
2010-05-01 12:44:12 ----D---- C:\Documents and Settings\Jarka\Application Data\Skype
2010-05-01 11:52:45 ----D---- C:\Documents and Settings\Jarka\Application Data\skypePM
2010-05-01 08:05:55 ----SHD---- C:\Config.Msi
2010-05-01 08:05:50 ----D---- C:\WINDOWS\system32
2010-05-01 08:05:38 ----RSD---- C:\WINDOWS\assembly
2010-05-01 08:05:04 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-05-01 07:47:22 ----SHD---- C:\WINDOWS\Installer
2010-05-01 07:44:21 ----A---- C:\WINDOWS\win.ini
2010-04-30 17:15:12 ----D---- C:\Documents and Settings\Jarka\Application Data\HPAppData
2010-04-30 17:10:43 ----D---- C:\Program Files\Crawler
2010-04-30 16:50:36 ----D---- C:\WINDOWS\system32\config
2010-04-30 16:36:28 ----D---- C:\Program Files\TuneUp Utilities 2008
2010-04-30 16:24:25 ----D---- C:\Documents and Settings\Jarka\Application Data\Merscom
2010-04-30 15:22:39 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2010-04-28 16:14:36 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-04-28 16:14:35 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-28 13:17:47 ----HD---- C:\WINDOWS\inf
2010-04-28 13:15:14 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-28 13:12:58 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-27 19:48:50 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-04-27 19:17:47 ----AC---- C:\WINDOWS\DCheck95.ini
2010-04-27 19:17:32 ----D---- C:\WINDOWS\pss
2010-04-27 17:47:00 ----SD---- C:\Documents and Settings\Jarka\Application Data\Microsoft
2010-04-27 17:26:02 ----D---- C:\Program Files\Microsoft Office
2010-04-27 17:25:14 ----RSD---- C:\WINDOWS\Fonts
2010-04-27 17:24:40 ----D---- C:\WINDOWS\Media
2010-04-27 17:24:37 ----D---- C:\WINDOWS\ShellNew
2010-04-26 17:54:33 ----AC---- C:\WINDOWS\ODBC.INI
2010-04-26 17:54:26 ----AC---- C:\WINDOWS\vbaddin.ini
2010-04-26 17:54:05 ----D---- C:\Program Files\Common Files
2010-04-26 16:55:41 ----D---- C:\WINDOWS\system32\wbem
2010-04-26 16:55:40 ----D---- C:\WINDOWS\Registration
2010-04-26 16:08:32 ----D---- C:\WINDOWS\pchealth
2010-04-26 15:52:00 ----D---- C:\Program Files\MSBuild
2010-04-25 16:24:43 ----D---- C:\Program Files\The KMPlayer
2010-04-25 14:47:07 ----D---- C:\Program Files\D-Tools
2010-04-25 11:15:07 ----D---- C:\Program Files\MSECache
2010-04-25 10:41:13 ----RSHD---- C:\Program Files\Common Files\System
2010-04-25 10:00:34 ----D---- C:\Program Files\GoQ - NetRadio
2010-04-24 16:44:57 ----D---- C:\Documents and Settings\All Users\Application Data\Merscom
2010-04-20 14:32:56 ----D---- C:\Program Files\WinClamAVShield
2010-04-19 19:49:22 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-04-18 16:28:23 ----SD---- C:\WINDOWS\Tasks
2010-04-18 15:26:47 ----D---- C:\WINDOWS\WinSxS
2010-04-18 15:11:57 ----D---- C:\Documents and Settings\All Users\Application Data\Alwil Software
2010-04-18 15:05:31 ----SH---- C:\boot.ini
2010-04-18 15:05:31 ----A---- C:\WINDOWS\system.ini
2010-04-18 15:04:29 ----D---- C:\Documents and Settings\Jarka\Application Data\Software Informer
2010-04-15 19:49:58 ----D---- C:\WINDOWS\ie8updates
2010-04-11 20:01:11 ----A---- C:\WINDOWS\NeroDigital.ini
2010-04-11 14:12:01 ----D---- C:\WINDOWS\Minidump
2010-04-06 20:58:32 ----D---- C:\WINDOWS\security
2010-04-06 20:57:52 ----D---- C:\WINDOWS\system32\Restore
2010-04-06 19:25:56 ----SHD---- C:\System Volume Information
2010-04-06 19:07:49 ----D---- C:\Program Files\Alawar
2010-04-05 13:44:44 ----D---- C:\Documents and Settings\All Users\Application Data\AlawarWrapper
2010-04-05 13:28:09 ----D---- C:\Documents and Settings\Jarka\Application Data\Vso
2010-04-04 19:48:26 ----D---- C:\Program Files\FreeRapid-0.83U1
2010-04-04 19:22:45 ----D---- C:\Documents and Settings\All Users\Application Data\InterAction studios
2010-04-04 16:36:08 ----D---- C:\Documents and Settings\Jarka\Application Data\VSO_HWE
2010-04-03 09:59:25 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-04-18 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-04-18 29512]
R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-04-22 242896]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-01-26 52224]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-08-04 165376]
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-08-04 18048]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-06-27 2303488]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-23 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-05-15 4742144]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 PAC207;Eye 110; C:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-10-25 616064]
R3 pcouffin;Low level access layer for CD devices; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-12-20 47360]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-05-31 96896]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-04 17024]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848]
S3 agony;agony; \??\C:\DOCUME~1\Jarka\LOCALS~1\Temp\IXP001.TMP\agony.sys []
S3 akf7n9cx;akf7n9cx; C:\WINDOWS\system32\drivers\akf7n9cx.sys []
S3 awtqphbd;awtqphbd; C:\WINDOWS\system32\drivers\awtqphbd.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 CnxEtP;Conexant AccessRunner USB ADSL Adapter Filter Driver; C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2004-06-16 131072]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2004-06-16 614272]
S3 CnxTgNP;Conexant AccessRunner ADSL WAN PPPoE Adapter Driver; C:\WINDOWS\system32\DRIVERS\CnxTgNP.sys [2004-06-16 60416]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-07-09 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-07-09 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-07-09 21568]
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys []
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys []
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys []
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-04-18 308064]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-12-20 488960]
R2 UxTuneUp;TuneUp rozšíření vzhledu; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-02-23 369920]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-06-27 483328]
S4 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-29 520192]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06 135664]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-21 182768]
S4 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
S4 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-12 153376]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
S4 MyWebSearchService;My Web Search Service; C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwssvc.exe []
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S4 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S4 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-02-23 306432]
S4 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

Zdravím, návod jak na Mbam máš v mém podpisu.


Tohle fixni v HJT :

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60347
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60347
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL
O3 - Toolbar: (no name) - {f592709f-ff4a-4862-b659-4afabda56312} - (no file)
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

HJT najdeš zde :

C:\Program Files\trend micro\Jarka.exe

Fix znamená že spustíš HJT

v okně které se ti otevře klikneš na Do a system scan only

v dalším okně najdeš řádky které jsem ti vypsal,

vedle nich je čtvereček do kterého uděláš zatržítko,

pak klikneš na Fix checked které je vlevo dole,

program se ti zeptá zda opravdu ANO s tím samozřejmě souhlasíš a je hotovo.


Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

Čištění registru je třeba několikrát zopakovat !


Stáhni a ulož na plochu ComboFix,

spusť aplikaci pod účtem s administrátorským oprávněním a povol instalaci Konzole pro zotavení - Recovery Console.

Poté se zobrazí okno s licenčními podmínkami které potvrdíš kliknutím na ANO,

pak ještě jednou klik na ANO a už to jede.

Celá akce trvá okolo 10 minut ale může i déle, během skenu se nepokoušej spouštět nic jiného.

Při skenovaní může být PC i restartováno nelekat se.

Upozornění: po dobu skenu vypni rezidentní štít Antiviru a AntiSpy programu,

protože Combofix se pokouší napadené soubory smazat a tyto programy mu můžou bránit.

Po dokončení skenu nebo následném restartu aplikace vytvoří log, uložený na C:/Combofix.txt

(při opakovaném použití jsou logy číslovány Combofix2.txt atd.), jeho obsah zkopíruj sem.

ja sa ospravedlnujem za duplicitu,ale strasne mi to tu blbne...

Dobře, tak pokračuj podle návodu co jsem ti napsal.

Ahoj.Ja tu zmätkujem a zmätkujem!!!Prosim ta skontroloval by si mi to este raz?
Logfile of random's system information tool 1.06 (written by random/random)
Run by Jarka at 2010-05-02 12:17:28
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 15 GB (25%) free of 60 GB
Total RAM: 895 MB (20% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:17:34, on 2.5.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Program Files\Comodo\Dragon\dragon.exe
C:\Documents and Settings\Jarka\Desktop\PROGRAMY\RSIT.exe
C:\Program Files\trend micro\Jarka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Alawar.com Toolbar - {511131f1-4629-4254-a85f-ed7b6d75dd3c} - C:\Program Files\Alawar.com\tbAla1.dll
O2 - BHO: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
O2 - BHO: PageRage Toolbar - {9565115d-c7d6-46d3-bd63-b67b481a4368} - C:\Program Files\PageRage\tbPag1.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Client\YontooIEClient.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games\tbAbso.dll
O3 - Toolbar: Alawar.com Toolbar - {511131f1-4629-4254-a85f-ed7b6d75dd3c} - C:\Program Files\Alawar.com\tbAla1.dll
O3 - Toolbar: PageRage Toolbar - {9565115d-c7d6-46d3-bd63-b67b481a4368} - C:\Program Files\PageRage\tbPag1.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Stiahnuť &všetky odkazy pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Stiahnuť odkaz &pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Stiahnuť všetky v&ideá pomocou BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} (SpinTop DRM Control) - file://C:\Program Files\Righteous Kill\Images\stg_drm.ocx
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} (ArmHelper Control) - file://C:\Program Files\Righteous Kill\Images\armhelper.ocx
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - (no file)
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe

--
End of file - 8593 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Úklid 1 kliknutím.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}]
Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2008-10-16 322864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]
BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll [2008-08-11 656696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-04-22 1615200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{511131f1-4629-4254-a85f-ed7b6d75dd3c}]
Alawar.com Toolbar - C:\Program Files\Alawar.com\tbAla1.dll [2010-04-12 2349080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{631ac2d4-57b3-42b0-a148-da33b462c1a3}]
Absolutist Games Toolbar - C:\Program Files\Absolutist_Games\tbAbso.dll [2007-07-31 1391640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9565115d-c7d6-46d3-bd63-b67b481a4368}]
PageRage Toolbar - C:\Program Files\PageRage\tbPag1.dll [2010-04-12 2349080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-30 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-06 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-03-12 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-05-20 1258808]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo Layers - C:\Program Files\Yontoo Layers Client\YontooIEClient.dll [2009-10-14 195936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2008-10-16 505136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-05-20 1258808]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 440384]
{631ac2d4-57b3-42b0-a148-da33b462c1a3} - Absolutist Games Toolbar - C:\Program Files\Absolutist_Games\tbAbso.dll [2007-07-31 1391640]
{511131f1-4629-4254-a85f-ed7b6d75dd3c} - Alawar.com Toolbar - C:\Program Files\Alawar.com\tbAla1.dll [2010-04-12 2349080]
{9565115d-c7d6-46d3-bd63-b67b481a4368} - PageRage Toolbar - C:\Program Files\PageRage\tbPag1.dll [2010-04-12 2349080]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-01-30 279664]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2010-02-23 1664256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-21 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
C:\WINDOWS\ALCMTR.EXE [2005-05-04 69632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe [2008-12-18 4608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
C:\Program Files\Ares\Ares.exe [2008-12-17 887808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
C:\Program Files\BitComet\BitComet.exe [2008-11-12 2511672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CnxDslTaskBar]
c:\program files\microcom\adsl deskporte usb\CnxDslTb.exe [2004-06-16 233472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
C:\Program Files\DAEMON Tools\daemon.exe [2007-04-04 165784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
C:\Program Files\D-Tools\daemon.exe -lang 1033 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Monitor]
C:\WINDOWS\PixArt\PAC207\Monitor.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PAC207_Monitor]
C:\WINDOWS\PixArt\PAC207\Monitor.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
C:\WINDOWS\RTHDCPL.EXE [2008-05-14 16862720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2010-04-06 26102056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Software Informer]
C:\Program Files\Software Informer\softinfo.exe [2009-11-25 2011205]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate]
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorUpdate.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-01-11 246504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
C:\Program Files\SweetIM\Messenger\SweetIM.exe [2009-05-20 111928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-05-21 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2008-10-16 214360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office\OSA9.EXE [1999-02-17 65588]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-06-27 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-04-18 12464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableChangePassword"=0
"DisableLockWorkstation"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoFileUrl"=0
"NoUpdateCheck"=0
"NoLogoff"=0
"NoDrives"=0
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Ares\Ares.exe"="C:\Program Files\Ares\Ares.exe:*:Enabled:Ares p2p for windows"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Crawler Spyware Terminator"
"C:\Program Files\Electronic Arts\EADM\Core.exe"="C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-05-02 12:03:39 ----D---- C:\ComboFix
2010-05-02 11:58:06 ----A---- C:\Boot.bak
2010-05-02 11:57:59 ----RASHD---- C:\cmdcons
2010-05-02 09:14:55 ----A---- C:\WINDOWS\zip.exe
2010-05-02 09:14:55 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-05-02 09:14:55 ----A---- C:\WINDOWS\SWSC.exe
2010-05-02 09:14:55 ----A---- C:\WINDOWS\SWREG.exe
2010-05-02 09:14:55 ----A---- C:\WINDOWS\sed.exe
2010-05-02 09:14:55 ----A---- C:\WINDOWS\PEV.exe
2010-05-02 09:14:55 ----A---- C:\WINDOWS\NIRCMD.exe
2010-05-02 09:14:55 ----A---- C:\WINDOWS\MBR.exe
2010-05-02 09:14:55 ----A---- C:\WINDOWS\grep.exe
2010-05-02 09:14:49 ----D---- C:\WINDOWS\ERDNT
2010-05-02 09:09:42 ----D---- C:\Qoobox
2010-05-01 21:44:46 ----D---- C:\Documents and Settings\Jarka\Application Data\BlamGames
2010-05-01 20:35:38 ----D---- C:\Program Files\trend micro
2010-05-01 20:35:28 ----D---- C:\rsit
2010-05-01 16:28:27 ----D---- C:\Documents and Settings\Jarka\Application Data\Malwarebytes
2010-05-01 16:28:15 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-05-01 16:28:13 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-28 13:15:01 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-04-27 17:42:40 ----A---- C:\WINDOWS\system32\muweb.dll
2010-04-27 17:42:40 ----A---- C:\WINDOWS\system32\mucltui.dll.mui
2010-04-27 17:42:40 ----A---- C:\WINDOWS\system32\mucltui.dll
2010-04-27 17:26:39 ----D---- C:\Program Files\Microsoft Works
2010-04-27 17:24:53 ----D---- C:\Program Files\Microsoft.NET
2010-04-26 18:58:54 ----A---- C:\Program Files\IE8-Setup-Full.exe
2010-04-26 16:55:24 ----D---- C:\Program Files\Microsoft Visual Studio
2010-04-25 19:12:42 ----RD---- C:\MSOCache
2010-04-25 16:23:28 ----D---- C:\Program Files\Common Files\Designer
2010-04-25 14:50:02 ----D---- C:\Program Files\DAEMON Tools
2010-04-25 10:41:51 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-04-25 10:33:33 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-04-23 22:27:37 ----D---- C:\Program Files\Common Files\Skype
2010-04-18 15:29:46 ----A---- C:\WINDOWS\system32\avgrsstx.dll
2010-04-18 15:29:31 ----D---- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-04-18 15:27:07 ----D---- C:\Program Files\AVG
2010-04-18 15:26:52 ----D---- C:\Documents and Settings\All Users\Application Data\avg9
2010-04-17 13:50:32 ----A---- C:\WINDOWS\system32\hidserv.dll
2010-04-17 13:47:56 ----D---- C:\WINDOWS\CSC
2010-04-15 20:24:21 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-04-15 20:16:15 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-04-15 20:11:47 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2010-04-15 20:02:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-04-15 19:27:29 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-04-11 11:36:14 ----A---- C:\Program Files\DragonSetup.exe
2010-04-05 09:35:51 ----D---- C:\Documents and Settings\Jarka\Application Data\Magic3

======List of files/folders modified in the last 1 months======

2010-05-02 12:08:18 ----D---- C:\WINDOWS
2010-05-02 12:08:18 ----A---- C:\WINDOWS\system.ini
2010-05-02 12:07:40 ----D---- C:\WINDOWS\Temp
2010-05-02 12:06:35 ----D---- C:\WINDOWS\system32\drivers
2010-05-02 12:06:35 ----D---- C:\WINDOWS\system32
2010-05-02 12:06:34 ----D---- C:\WINDOWS\AppPatch
2010-05-02 12:06:29 ----D---- C:\Program Files\Common Files
2010-05-02 12:03:59 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-02 11:58:06 ----RASH---- C:\boot.ini
2010-05-02 11:57:16 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-05-02 11:18:40 ----D---- C:\Documents and Settings\Jarka\Application Data\HPAppData
2010-05-02 10:42:27 ----RD---- C:\Program Files
2010-05-02 10:42:09 ----HDC---- C:\WINDOWS\$NtUninstallKB925398_WMP64$
2010-05-02 10:23:08 ----D---- C:\Program Files\MagicISO
2010-05-02 10:20:09 ----SHD---- C:\WINDOWS\Installer
2010-05-02 10:20:05 ----D---- C:\Config.Msi
2010-05-02 10:16:46 ----D---- C:\Program Files\Alawar
2010-05-02 10:07:00 ----D---- C:\WINDOWS\pss
2010-05-02 10:07:00 ----A---- C:\WINDOWS\win.ini
2010-05-02 09:53:15 ----D---- C:\WINDOWS\pchealth
2010-05-02 09:53:14 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-05-02 09:21:17 ----D---- C:\WINDOWS\system32\config
2010-05-02 09:08:37 ----D---- C:\WINDOWS\Prefetch
2010-05-01 21:44:53 ----A---- C:\moduleName.txt
2010-05-01 21:11:06 ----D---- C:\Documents and Settings\Jarka\Application Data\Skype
2010-05-01 21:10:55 ----D---- C:\Documents and Settings\Jarka\Application Data\skypePM
2010-05-01 19:26:02 ----D---- C:\Documents and Settings\Jarka\Application Data\ICQ
2010-05-01 08:05:38 ----RSD---- C:\WINDOWS\assembly
2010-04-30 17:10:43 ----D---- C:\Program Files\Crawler
2010-04-30 16:36:28 ----D---- C:\Program Files\TuneUp Utilities 2008
2010-04-30 16:24:25 ----D---- C:\Documents and Settings\Jarka\Application Data\Merscom
2010-04-28 16:14:36 ----D---- C:\WINDOWS\system32\CatRoot_bak
2010-04-28 16:14:35 ----D---- C:\WINDOWS\system32\CatRoot
2010-04-28 13:17:47 ----HD---- C:\WINDOWS\inf
2010-04-28 13:15:14 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-28 13:12:58 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-27 19:48:50 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-04-27 19:17:47 ----AC---- C:\WINDOWS\DCheck95.ini
2010-04-27 17:47:00 ----SD---- C:\Documents and Settings\Jarka\Application Data\Microsoft
2010-04-27 17:26:02 ----D---- C:\Program Files\Microsoft Office
2010-04-27 17:25:14 ----RSD---- C:\WINDOWS\Fonts
2010-04-27 17:24:40 ----D---- C:\WINDOWS\Media
2010-04-27 17:24:37 ----D---- C:\WINDOWS\ShellNew
2010-04-26 17:54:33 ----AC---- C:\WINDOWS\ODBC.INI
2010-04-26 17:54:26 ----AC---- C:\WINDOWS\vbaddin.ini
2010-04-26 16:55:41 ----D---- C:\WINDOWS\system32\wbem
2010-04-26 16:55:40 ----D---- C:\WINDOWS\Registration
2010-04-26 15:52:00 ----D---- C:\Program Files\MSBuild
2010-04-25 16:24:43 ----D---- C:\Program Files\The KMPlayer
2010-04-25 14:47:07 ----D---- C:\Program Files\D-Tools
2010-04-25 11:15:07 ----D---- C:\Program Files\MSECache
2010-04-25 10:41:13 ----RSHD---- C:\Program Files\Common Files\System
2010-04-25 10:00:34 ----D---- C:\Program Files\GoQ - NetRadio
2010-04-24 16:44:57 ----D---- C:\Documents and Settings\All Users\Application Data\Merscom
2010-04-19 19:49:22 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-04-18 16:28:23 ----SD---- C:\WINDOWS\Tasks
2010-04-18 15:26:47 ----D---- C:\WINDOWS\WinSxS
2010-04-18 15:11:57 ----D---- C:\Documents and Settings\All Users\Application Data\Alwil Software
2010-04-18 15:04:29 ----D---- C:\Documents and Settings\Jarka\Application Data\Software Informer
2010-04-15 19:49:58 ----D---- C:\WINDOWS\ie8updates
2010-04-11 20:01:11 ----A---- C:\WINDOWS\NeroDigital.ini
2010-04-11 14:12:01 ----D---- C:\WINDOWS\Minidump
2010-04-06 20:58:32 ----D---- C:\WINDOWS\security
2010-04-06 20:57:52 ----D---- C:\WINDOWS\system32\Restore
2010-04-06 19:25:56 ----SHD---- C:\System Volume Information
2010-04-05 13:44:44 ----D---- C:\Documents and Settings\All Users\Application Data\AlawarWrapper
2010-04-05 13:28:09 ----D---- C:\Documents and Settings\Jarka\Application Data\Vso
2010-04-04 19:48:26 ----D---- C:\Program Files\FreeRapid-0.83U1
2010-04-04 19:22:45 ----D---- C:\Documents and Settings\All Users\Application Data\InterAction studios
2010-04-04 16:36:08 ----D---- C:\Documents and Settings\Jarka\Application Data\VSO_HWE
2010-04-03 09:59:25 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-04-18 216200]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-04-18 29512]
R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-04-22 242896]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-01-26 52224]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-08-04 165376]
R2 irda;IrDA Protocol; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-04 87424]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-08-04 18048]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-06-27 2303488]
R3 catchme;catchme; \??\C:\DOCUME~1\Jarka\LOCALS~1\Temp\catchme.sys []
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-23 9600]
R3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-07-09 49920]
R3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-07-09 16496]
R3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-07-09 21568]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-05-15 4742144]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 PAC207;Eye 110; C:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-10-25 616064]
R3 pcouffin;Low level access layer for CD devices; C:\WINDOWS\System32\Drivers\pcouffin.sys [2008-12-20 47360]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2007-05-31 96896]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Microsoft USB Standard Hub Driver; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbohci;Microsoft USB Open Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-04 17024]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-04 25856]
R3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S1 kbdhid;Keyboard HID Driver; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-03 14848]
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 CnxEtP;Conexant AccessRunner USB ADSL Adapter Filter Driver; C:\WINDOWS\system32\DRIVERS\CnxEtP.sys [2004-06-16 131072]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver; C:\WINDOWS\system32\DRIVERS\CnxEtU.sys [2004-06-16 614272]
S3 CnxTgNP;Conexant AccessRunner ADSL WAN PPPoE Adapter Driver; C:\WINDOWS\system32\DRIVERS\CnxTgNP.sys [2004-06-16 60416]
S3 mbr;mbr; \??\C:\DOCUME~1\Jarka\LOCALS~1\Temp\mbr.sys []
S3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-23 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINDOWS\system32\DRIVERS\lgusbbus.sys []
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINDOWS\system32\DRIVERS\lgusbdiag.sys []
S3 USBModem;LGE Mobile USB Modem; C:\WINDOWS\system32\DRIVERS\lgusbmodem.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-04-18 308064]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R2 Irmon;Infrared Monitor; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
R2 UxTuneUp;TuneUp rozšíření vzhledu; C:\WINDOWS\System32\svchost.exe [2004-08-04 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2010-02-23 369920]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S4 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-06-27 483328]
S4 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-29 520192]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06 135664]
S4 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-21 182768]
S4 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
S4 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-03-12 153376]
S4 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-12-03 869672]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-12-13 447784]
S4 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2007-05-28 275968]
S4 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2010-02-23 306432]
S4 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

prikladam este combofix.txt



ComboFix 10-05-01.04 - Jarka 02.05.2010 12:04:09.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1033.18.895.445 [GMT 2:00]
Running from: C:\Documents and Settings\Jarka\Desktop\PROGRAMY\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\bin_streviews.spt
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\info.htm
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Addshield.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\AllowMode.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\bg01.gif
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\bg02.gif
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\bg07.gif
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\BHO_CLSID.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\BHO_File.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\BHO_Name.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Default_IE_Search.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\DenyMode.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Enhance_security.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Extension_change.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\GeneralHips.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\GeneralRtp.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\HipsWizard.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Hosts_file.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\IE_Home_Page.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\IE_Settings.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\info.ini
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\InstalDetected.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Install_wsg.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\language.inf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\language.ini
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\li.gif
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\li2.gif
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Library.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Listdate.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\ListShield.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\ListSource.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\ListType.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Modified_by.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\offlinehelp.html
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Process.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Registered_by.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\ReviewAction.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\ReviewProgram.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\ReviewShields.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\ScanAdvanced2.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\scancustom.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\scancustom2.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\ScanExtension2.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\scanfast.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\scanfast2.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\scanfull.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\scanfull2.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Scanfullvirus2.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\scansmart2.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Scanvirus2a.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Scanvirus2b.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Scanvirus2c.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\SecurityCheck.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Service_Driver.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\SetHipsReb.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\shieldRules.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Source.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Started_by.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Startup_Item.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\System_ini_file.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Target.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Tollbar_CLSID.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Toolbar_file.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Toolbar_name.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\top.gif
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\util01.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\util02.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\util03.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\util04.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\WBlistedItem.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\LanguageAct\Winsock_registry.rtf
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\Reports\reports.dat
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\Reports\scan_0001.dat
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\Reports\supportReport.txt
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\scanConfig.xml
C:\Documents and Settings\Jarka\Application Data\ezLife\ezLife\Spyware Terminator\shields.xml
C:\Documents and Settings\Jarka\Application Data\FunWebProducts\Data\Jarka\avatar.dat
C:\Documents and Settings\Jarka\Application Data\FunWebProducts\Data\Jarka\zbucks.dat
C:\Documents and Settings\Jarka\Application Data\inst.exe
C:\Documents and Settings\Jarka\Application Data\Messenger\Drivers\Aud32\ezu136.exe
C:\Documents and Settings\Jarka\Application Data\Messenger\Drivers\Aud32\msgasst84.dll
C:\Documents and Settings\Jarka\Application Data\Messenger\Drivers\conf.sys
C:\Documents and Settings\Jarka\Application Data\Messenger\Drivers\phuninst.dll
C:\Documents and Settings\Jarka\Application Data\Messenger\Drivers\pub.dll
C:\Documents and Settings\Jarka\Application Data\Messenger\Drivers\serial.sys
C:\Documents and Settings\Jarka\Application Data\Messenger\Sys\mu.dll
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\bin_streviews.spt
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\info.htm
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Addshield.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\AllowMode.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\bg01.gif
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\bg02.gif
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\bg07.gif
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\BHO_CLSID.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\BHO_File.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\BHO_Name.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Default_IE_Search.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\DenyMode.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Enhance_security.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Extension_change.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\GeneralHips.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\GeneralRtp.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\HipsWizard.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Hosts_file.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\IE_Home_Page.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\IE_Settings.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\info.ini
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\InstalDetected.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Install_wsg.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\language.inf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\language.ini
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\li.gif
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\li2.gif
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Library.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Listdate.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\ListShield.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\ListSource.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\ListType.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Modified_by.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\offlinehelp.html
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Process.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Registered_by.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\ReviewAction.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\ReviewProgram.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\ReviewShields.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\ScanAdvanced2.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\scancustom.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\scancustom2.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\ScanExtension2.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\scanfast.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\scanfast2.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\scanfull.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\scanfull2.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Scanfullvirus2.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\scansmart2.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Scanvirus2a.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Scanvirus2b.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Scanvirus2c.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\SecurityCheck.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Service_Driver.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\SetHipsReb.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\shieldRules.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Source.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Started_by.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Startup_Item.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\System_ini_file.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Target.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Tollbar_CLSID.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Toolbar_file.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Toolbar_name.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\top.gif
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\util01.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\util02.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\util03.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\util04.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\WBlistedItem.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\LanguageAct\Winsock_registry.rtf
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\Reports\reports.dat
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\Reports\scan_0001.dat
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\Reports\supportReport.txt
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\scanConfig.xml
C:\Documents and Settings\Jarka\Application Data\Smart-Ads-Solutions\SmartAds\Spyware Terminator\shields.xml
C:\Program Files\ezLife\ezLife\1.3.6.0\ezLifextra.dll
C:\Program Files\ezLife\ezLife\1.3.6.0\uninstall.exe
C:\Program Files\Smart-Ads-Solutions\SmartAds\1.3.6.0\SmartAdsxtra.dll
C:\Program Files\Smart-Ads-Solutions\SmartAds\1.3.6.0\uninstall.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MYWEBSEARCHSERVICE
-------\Service_MyWebSearchService


((((((((((((((((((((((((( Files Created from 2010-04-02 to 2010-05-02 )))))))))))))))))))))))))))))))
.

2010-05-01 19:44:46 . 2010-05-01 19:44:46 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\BlamGames
2010-05-01 18:35:38 . 2010-05-02 07:37:33 -------- d-----w- C:\Program Files\trend micro
2010-05-01 18:35:28 . 2010-05-01 18:36:47 -------- d-----w- C:\rsit
2010-05-01 14:28:27 . 2010-05-01 14:28:27 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Malwarebytes
2010-05-01 14:28:16 . 2010-04-29 13:39:38 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-05-01 14:28:15 . 2010-05-01 14:28:15 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2010-05-01 14:28:14 . 2010-04-29 13:39:26 20952 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2010-05-01 14:28:13 . 2010-05-01 14:28:21 -------- d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-28 11:10:48 . 2010-04-28 11:10:48 -------- d-----w- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft Help
2010-04-28 11:07:45 . 2010-04-28 11:07:45 -------- d-sh--w- C:\Documents and Settings\Default User\IETldCache
2010-04-28 11:06:42 . 2010-03-26 08:33:16 43008 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-04-28 11:06:41 . 2010-03-26 08:33:16 339456 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-04-28 11:06:41 . 2010-03-26 08:32:54 346112 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-04-28 11:06:37 . 2010-03-26 08:33:34 1496064 ----a-w- C:\Documents and Settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-04-27 15:42:40 . 2009-08-06 17:23:46 274288 ----a-w- C:\WINDOWS\system32\mucltui.dll
2010-04-27 15:42:40 . 2009-08-06 17:23:46 215920 ----a-w- C:\WINDOWS\system32\muweb.dll
2010-04-27 15:26:39 . 2010-05-02 07:53:13 -------- d-----w- C:\Program Files\Microsoft Works
2010-04-27 15:24:53 . 2010-04-27 15:24:53 -------- d-----w- C:\Program Files\Microsoft.NET
2010-04-26 16:58:54 . 2010-04-26 17:00:16 19458560 ----a-w- C:\Program Files\IE8-Setup-Full.exe
2010-04-26 14:55:40 . 2010-04-26 14:55:40 -------- d-----w- C:\WINDOWS\system32\wbem\Repository
2010-04-25 17:12:42 . 2010-04-25 17:12:42 -------- d-----r- C:\MSOCache
2010-04-25 12:50:02 . 2010-04-25 12:50:06 -------- d-----w- C:\Program Files\DAEMON Tools
2010-04-25 08:41:51 . 2010-04-25 08:41:52 -------- d-----w- C:\Program Files\Microsoft Visual Studio 8
2010-04-25 08:34:27 . 2010-04-25 08:34:27 -------- d-----w- C:\Documents and Settings\Jarka\Local Settings\Application Data\Microsoft Help
2010-04-25 08:33:33 . 2010-05-01 07:43:38 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Microsoft Help
2010-04-24 13:29:23 . 2010-02-23 12:04:10 1664256 ----a-w- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar\IEToolbar.dll
2010-04-23 20:27:37 . 2010-04-23 20:27:37 -------- d-----w- C:\Program Files\Common Files\Skype
2010-04-22 08:15:14 . 2010-04-22 08:15:14 242696 ----a-w- C:\Documents and Settings\All Users\Application Data\avg9\update\backup\avgtdix.sys
2010-04-22 08:13:44 . 2010-04-22 08:13:44 1689952 ----a-w- C:\Documents and Settings\All Users\Application Data\avg9\update\backup\avgupd.dll
2010-04-19 18:35:19 . 2010-04-19 18:35:19 -------- d-----w- C:\Documents and Settings\Jarka\Local Settings\Application Data\AVG Security Toolbar
2010-04-18 13:32:57 . 2010-04-18 13:32:57 1035032 ----a-w- C:\Documents and Settings\All Users\Application Data\avg9\update\backup\avgupd.exe
2010-04-18 13:29:46 . 2010-04-18 13:29:47 12464 ----a-w- C:\WINDOWS\system32\avgrsstx.dll
2010-04-18 13:29:44 . 2010-04-22 08:15:05 242896 ----a-w- C:\WINDOWS\system32\drivers\avgtdix.sys
2010-04-18 13:29:38 . 2010-04-18 13:29:39 216200 ----a-w- C:\WINDOWS\system32\drivers\avgldx86.sys
2010-04-18 13:29:37 . 2010-04-18 13:29:38 29512 ----a-w- C:\WINDOWS\system32\drivers\avgmfx86.sys
2010-04-18 13:29:33 . 2010-05-02 06:17:33 -------- d-----w- C:\WINDOWS\system32\drivers\Avg
2010-04-18 13:29:31 . 2010-04-24 13:29:23 -------- d-----w- C:\Documents and Settings\All Users\Application Data\AVG Security Toolbar
2010-04-18 13:27:07 . 2010-04-18 13:27:07 -------- d-----w- C:\Program Files\AVG
2010-04-18 13:26:52 . 2010-04-18 13:27:07 -------- d-----w- C:\Documents and Settings\All Users\Application Data\avg9
2010-04-17 11:50:32 . 2004-08-03 22:56:44 21504 ----a-w- C:\WINDOWS\system32\hidserv.dll
2010-04-17 11:50:31 . 2004-08-03 20:58:36 14848 ----a-w- C:\WINDOWS\system32\drivers\kbdhid.sys
2010-04-14 05:26:56 . 2010-03-10 06:15:52 420352 -c--a-w- C:\WINDOWS\system32\dllcache\vbscript.dll
2010-04-11 09:36:14 . 2010-04-11 09:37:29 22016192 ----a-w- C:\Program Files\DragonSetup.exe
2010-04-05 07:35:51 . 2010-04-05 10:33:06 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Magic3

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-02 09:18:40 . 2010-01-14 06:40:40 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\HPAppData
2010-05-02 08:23:08 . 2010-02-17 14:56:13 -------- d-----w- C:\Program Files\MagicISO
2010-05-02 08:16:46 . 2009-03-07 17:07:50 -------- d-----w- C:\Program Files\Alawar
2010-05-01 19:11:06 . 2009-02-24 17:03:08 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Skype
2010-05-01 19:10:55 . 2009-02-24 17:05:30 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\skypePM
2010-05-01 17:26:02 . 2008-12-18 16:36:18 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\ICQ
2010-04-30 15:10:43 . 2009-12-20 10:48:22 -------- d-----w- C:\Program Files\Crawler
2010-04-30 14:36:28 . 2009-12-19 16:29:20 -------- d-----w- C:\Program Files\TuneUp Utilities 2008
2010-04-30 14:24:25 . 2009-09-17 16:42:09 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Merscom
2010-04-27 15:48:50 . 2008-12-18 21:27:58 25752 ----a-w- C:\Documents and Settings\Jarka\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-04-26 15:54:26 . 2009-01-22 12:40:26 5058 -c--a-w- C:\WINDOWS\Help\hhcolreg.dat
2010-04-26 13:52:00 . 2009-08-06 06:58:19 -------- d-----w- C:\Program Files\MSBuild
2010-04-25 14:24:43 . 2010-02-15 16:45:53 -------- d-----w- C:\Program Files\The KMPlayer
2010-04-25 12:47:07 . 2009-04-25 17:56:29 -------- d-----w- C:\Program Files\D-Tools
2010-04-25 09:15:07 . 2009-06-14 17:18:32 -------- d-----w- C:\Program Files\MSECache
2010-04-25 08:00:34 . 2010-03-12 06:48:14 -------- d-----w- C:\Program Files\GoQ - NetRadio
2010-04-24 14:44:57 . 2009-09-17 16:42:09 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Merscom
2010-04-18 13:11:57 . 2010-03-10 18:00:07 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Alwil Software
2010-04-18 13:04:29 . 2009-12-09 14:45:10 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Software Informer
2010-04-05 11:44:44 . 2009-04-10 12:57:07 -------- d-----w- C:\Documents and Settings\All Users\Application Data\AlawarWrapper
2010-04-05 11:28:09 . 2008-12-20 17:29:21 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Vso
2010-04-04 17:48:26 . 2010-03-12 07:07:46 -------- d-----w- C:\Program Files\FreeRapid-0.83U1
2010-04-04 17:22:45 . 2009-04-15 09:32:13 -------- d-----w- C:\Documents and Settings\All Users\Application Data\InterAction studios
2010-04-04 14:36:08 . 2008-12-26 14:58:38 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\VSO_HWE
2010-03-31 16:15:33 . 2010-02-01 16:20:52 -------- d-----w- C:\Program Files\ICQ7.0
2010-03-29 17:24:01 . 2009-01-13 18:20:34 15 ----a-w- C:\WINDOWS\popcinfo.dat
2010-03-29 16:16:24 . 2010-02-15 15:35:19 -------- d-----w- C:\Program Files\FreeCommander
2010-03-24 18:17:47 . 2010-03-24 08:04:49 952768 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AdobeARM.exe
2010-03-24 18:17:47 . 2010-03-24 08:04:49 70584 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AdobeExtractFiles.dll
2010-03-24 18:17:47 . 2010-03-24 08:04:49 326056 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\ReaderUpdater.exe
2010-03-24 18:17:47 . 2010-03-24 08:04:49 326056 ----a-w- C:\Documents and Settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AcrobatUpdater.exe
2010-03-14 10:11:58 . 2010-01-02 10:18:53 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\Meridian93
2010-03-12 15:49:34 . 2010-03-12 15:48:38 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Trymedia
2010-03-12 13:57:18 . 2010-03-12 12:45:25 -------- d-----w- C:\Program Files\Windows_Media_Player_11.0.5721.5145_CZ
2010-03-12 12:53:21 . 2010-03-12 12:53:20 -------- d-----w- C:\Program Files\Windows Media Connect 2
2010-03-12 07:08:26 . 2010-03-12 07:08:26 -------- d-----w- C:\Documents and Settings\Jarka\Application Data\VitySoft
2010-03-12 06:47:30 . 2010-03-12 06:46:34 -------- d-----w- C:\Program Files\Java
2010-03-12 06:47:22 . 2010-03-12 06:47:22 -------- d-----w- C:\Program Files\Common Files\Java
2010-03-12 06:47:08 . 2010-03-12 06:47:08 503808 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\msvcp71.dll
2010-03-12 06:47:08 . 2010-03-12 06:47:08 348160 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\msvcr71.dll
2010-03-12 06:47:07 . 2010-03-12 06:47:07 499712 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\jmc.dll
2010-03-12 06:47:06 . 2010-03-12 06:47:06 61440 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-49e845f6-n\decora-sse.dll
2010-03-12 06:47:06 . 2010-03-12 06:47:06 12800 ----a-w- C:\Documents and Settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-49e845f6-n\decora-d3d.dll
2010-03-12 06:46:38 . 2010-03-12 06:46:57 411368 ----a-w- C:\WINDOWS\system32\deploytk.dll
2010-03-10 18:03:49 . 2009-01-16 15:11:36 -------- d-----w- C:\Program Files\Alwil Software
2010-03-10 17:26:48 . 2010-03-10 17:21:29 45942928 ----a-w- C:\Program Files\setup_av_free.exe
2010-03-10 06:15:52 . 2004-08-03 23:56:48 420352 ----a-w- C:\WINDOWS\system32\vbscript.dll
2010-03-05 13:48:52 . 2009-10-22 05:27:15 -------- d-----w- C:\Program Files\PageRage
2010-02-25 06:24:37 . 2004-08-03 23:56:48 916480 ----a-w- C:\WINDOWS\system32\wininet.dll
2010-02-24 12:31:30 . 2004-08-03 22:15:18 454016 ----a-w- C:\WINDOWS\system32\drivers\mrxsmb.sys
2010-02-23 16:28:43 . 2008-12-22 19:49:20 306432 ----a-w- C:\WINDOWS\system32\TuneUpDefragService.exe
2010-02-16 13:17:38 . 2004-08-03 22:18:32 2137088 ----a-w- C:\WINDOWS\system32\ntoskrnl.exe
2010-02-16 12:39:04 . 2004-08-03 22:59:02 2016768 ----a-w- C:\WINDOWS\system32\ntkrnlpa.exe
2010-02-12 10:03:03 . 2010-03-05 13:43:13 293376 ------w- C:\WINDOWS\system32\browserchoice.exe
2010-02-12 04:47:05 . 2004-08-03 23:56:42 100864 ----a-w- C:\WINDOWS\system32\6to4svc.dll
2010-02-11 12:01:43 . 2004-08-03 22:07:46 226880 ----a-w- C:\WINDOWS\system32\drivers\tcpip6.sys
2010-02-07 17:21:39 . 2010-02-07 17:22:11 737280 ----a-w- C:\WINDOWS\iun6002.exe
2009-11-09 19:42:57 . 2009-11-09 19:38:49 24772640 ----a-w- C:\Program Files\AdbeRdr90_sk_SK.exe
2009-08-05 14:54:02 . 2009-08-05 14:53:53 2427454 ----a-w- C:\Program Files\save2pc_light_setup.exe
2009-06-14 17:13:54 . 2009-06-14 17:13:53 28996120 ----a-w- C:\Program Files\FileFormatConverters.exe
2009-02-08 10:15:46 . 2009-02-08 10:15:46 7840 ----a-w- C:\Program Files\1029.dll
2008-12-20 07:00:12 . 2008-12-20 07:00:05 1886800 ----a-w- C:\Program Files\install_flash_player_10_active_x.exe
.

Ještě tohle fixni v HJT :

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

Jak na to už víš.

Pak bych rád ten log z Combo Fix celý, najdeš ho na C:/Combofix.txt

Ahoj prikladam :

ComboFix 10-05-01.04 - Jarka 03.05.2010 16:58:59.4.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1033.18.895.455 [GMT 2:00]
Running from: c:\documents and settings\Jarka\Desktop\PROGRAMY\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MYWEBSEARCHSERVICE
-------\Service_MyWebSearchService


((((((((((((((((((((((((( Files Created from 2010-04-03 to 2010-05-03 )))))))))))))))))))))))))))))))
.

2010-05-02 17:08 . 2008-11-10 09:41 32656 ----a-w- c:\windows\system32\msonpmon.dll
2010-05-02 17:08 . 2006-10-26 17:56 33104 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\msonpppr.dll
2010-05-01 19:44 . 2010-05-01 19:44 -------- d-----w- c:\documents and settings\Jarka\Application Data\BlamGames
2010-05-01 18:35 . 2010-05-02 17:31 -------- d-----w- c:\program files\trend micro
2010-05-01 18:35 . 2010-05-01 18:36 -------- d-----w- C:\rsit
2010-05-01 14:28 . 2010-05-01 14:28 -------- d-----w- c:\documents and settings\Jarka\Application Data\Malwarebytes
2010-05-01 14:28 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-05-01 14:28 . 2010-05-01 14:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-05-01 14:28 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-05-01 14:28 . 2010-05-02 11:01 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-04-28 11:10 . 2010-04-28 11:10 -------- d-----w- c:\documents and settings\Default User\Local Settings\Application Data\Microsoft Help
2010-04-28 11:07 . 2010-04-28 11:07 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2010-04-28 11:06 . 2010-03-26 08:33 43008 ----a-w- c:\documents and settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2010-04-28 11:06 . 2010-03-26 08:33 339456 ----a-w- c:\documents and settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2010-04-28 11:06 . 2010-03-26 08:32 346112 ----a-w- c:\documents and settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2010-04-28 11:06 . 2010-03-26 08:33 1496064 ----a-w- c:\documents and settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
2010-04-27 15:42 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-04-27 15:42 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-04-27 15:26 . 2010-05-03 12:55 -------- d-----w- c:\program files\Microsoft Works
2010-04-27 15:24 . 2010-04-27 15:24 -------- d-----w- c:\program files\Microsoft.NET
2010-04-26 16:58 . 2010-04-26 17:00 19458560 ----a-w- c:\program files\IE8-Setup-Full.exe
2010-04-26 14:55 . 2010-04-26 14:55 -------- d-----w- c:\windows\system32\wbem\Repository
2010-04-25 17:12 . 2010-04-25 17:12 -------- d-----r- C:\MSOCache
2010-04-25 12:50 . 2010-04-25 12:50 -------- d-----w- c:\program files\DAEMON Tools
2010-04-25 08:41 . 2010-04-25 08:41 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2010-04-25 08:34 . 2010-04-25 08:34 -------- d-----w- c:\documents and settings\Jarka\Local Settings\Application Data\Microsoft Help
2010-04-25 08:33 . 2010-05-03 13:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-04-24 13:29 . 2010-02-23 12:04 1664256 ----a-w- c:\documents and settings\All Users\Application Data\AVG Security Toolbar\IEToolbar.dll
2010-04-23 20:27 . 2010-04-23 20:27 -------- d-----w- c:\program files\Common Files\Skype
2010-04-22 08:15 . 2010-04-22 08:15 242696 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgtdix.sys
2010-04-22 08:13 . 2010-04-22 08:13 1689952 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.dll
2010-04-19 18:35 . 2010-04-19 18:35 -------- d-----w- c:\documents and settings\Jarka\Local Settings\Application Data\AVG Security Toolbar
2010-04-18 13:32 . 2010-04-18 13:32 1035032 ----a-w- c:\documents and settings\All Users\Application Data\avg9\update\backup\avgupd.exe
2010-04-18 13:29 . 2010-04-18 13:29 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-04-18 13:29 . 2010-04-22 08:15 242896 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-04-18 13:29 . 2010-04-18 13:29 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-04-18 13:29 . 2010-04-18 13:29 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-04-18 13:29 . 2010-05-03 12:54 -------- d-----w- c:\windows\system32\drivers\Avg
2010-04-18 13:29 . 2010-04-24 13:29 -------- d-----w- c:\documents and settings\All Users\Application Data\AVG Security Toolbar
2010-04-18 13:27 . 2010-04-18 13:27 -------- d-----w- c:\program files\AVG
2010-04-18 13:26 . 2010-04-18 13:27 -------- d-----w- c:\documents and settings\All Users\Application Data\avg9
2010-04-17 11:50 . 2004-08-03 22:56 21504 ----a-w- c:\windows\system32\hidserv.dll
2010-04-17 11:50 . 2004-08-03 20:58 14848 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2010-04-14 05:26 . 2010-03-10 06:15 420352 -c--a-w- c:\windows\system32\dllcache\vbscript.dll
2010-04-11 09:36 . 2010-04-11 09:37 22016192 ----a-w- c:\program files\DragonSetup.exe
2010-04-05 07:35 . 2010-04-05 10:33 -------- d-----w- c:\documents and settings\Jarka\Application Data\Magic3

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-02 17:47 . 2008-12-18 21:27 69296 ----a-w- c:\documents and settings\Jarka\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2010-05-02 17:07 . 2009-08-06 06:58 -------- d-----w- c:\program files\MSBuild
2010-05-02 12:01 . 2010-03-12 06:48 -------- d-----w- c:\program files\GoQ - NetRadio
2010-05-02 10:56 . 2010-01-14 06:40 -------- d-----w- c:\documents and settings\Jarka\Application Data\HPAppData
2010-05-02 08:23 . 2010-02-17 14:56 -------- d-----w- c:\program files\MagicISO
2010-05-02 08:16 . 2009-03-07 17:07 -------- d-----w- c:\program files\Alawar
2010-05-01 19:11 . 2009-02-24 17:03 -------- d-----w- c:\documents and settings\Jarka\Application Data\Skype
2010-05-01 19:10 . 2009-02-24 17:05 -------- d-----w- c:\documents and settings\Jarka\Application Data\skypePM
2010-05-01 17:26 . 2008-12-18 16:36 -------- d-----w- c:\documents and settings\Jarka\Application Data\ICQ
2010-04-30 15:10 . 2009-12-20 10:48 -------- d-----w- c:\program files\Crawler
2010-04-30 14:36 . 2009-12-19 16:29 -------- d-----w- c:\program files\TuneUp Utilities 2008
2010-04-30 14:24 . 2009-09-17 16:42 -------- d-----w- c:\documents and settings\Jarka\Application Data\Merscom
2010-04-26 15:54 . 2009-01-22 12:40 5058 -c--a-w- c:\windows\Help\hhcolreg.dat
2010-04-25 14:24 . 2010-02-15 16:45 -------- d-----w- c:\program files\The KMPlayer
2010-04-25 12:47 . 2009-04-25 17:56 -------- d-----w- c:\program files\D-Tools
2010-04-25 09:15 . 2009-06-14 17:18 -------- d-----w- c:\program files\MSECache
2010-04-24 14:44 . 2009-09-17 16:42 -------- d-----w- c:\documents and settings\All Users\Application Data\Merscom
2010-04-18 13:11 . 2010-03-10 18:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Alwil Software
2010-04-18 13:04 . 2009-12-09 14:45 -------- d-----w- c:\documents and settings\Jarka\Application Data\Software Informer
2010-04-05 11:44 . 2009-04-10 12:57 -------- d-----w- c:\documents and settings\All Users\Application Data\AlawarWrapper
2010-04-05 11:28 . 2008-12-20 17:29 -------- d-----w- c:\documents and settings\Jarka\Application Data\Vso
2010-04-04 17:48 . 2010-03-12 07:07 -------- d-----w- c:\program files\FreeRapid-0.83U1
2010-04-04 17:22 . 2009-04-15 09:32 -------- d-----w- c:\documents and settings\All Users\Application Data\InterAction studios
2010-04-04 14:36 . 2008-12-26 14:58 -------- d-----w- c:\documents and settings\Jarka\Application Data\VSO_HWE
2010-03-31 16:15 . 2010-02-01 16:20 -------- d-----w- c:\program files\ICQ7.0
2010-03-29 17:24 . 2009-01-13 18:20 15 ----a-w- c:\windows\popcinfo.dat
2010-03-29 16:16 . 2010-02-15 15:35 -------- d-----w- c:\program files\FreeCommander
2010-03-24 18:17 . 2010-03-24 08:04 952768 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AdobeARM.exe
2010-03-24 18:17 . 2010-03-24 08:04 70584 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AdobeExtractFiles.dll
2010-03-24 18:17 . 2010-03-24 08:04 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\ReaderUpdater.exe
2010-03-24 18:17 . 2010-03-24 08:04 326056 ----a-w- c:\documents and settings\All Users\Application Data\Adobe\Reader\9.3\ARM\24284\AcrobatUpdater.exe
2010-03-14 10:11 . 2010-01-02 10:18 -------- d-----w- c:\documents and settings\Jarka\Application Data\Meridian93
2010-03-12 15:49 . 2010-03-12 15:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Trymedia
2010-03-12 13:57 . 2010-03-12 12:45 -------- d-----w- c:\program files\Windows_Media_Player_11.0.5721.5145_CZ
2010-03-12 12:53 . 2010-03-12 12:53 -------- d-----w- c:\program files\Windows Media Connect 2
2010-03-12 07:08 . 2010-03-12 07:08 -------- d-----w- c:\documents and settings\Jarka\Application Data\VitySoft
2010-03-12 06:47 . 2010-03-12 06:46 -------- d-----w- c:\program files\Java
2010-03-12 06:47 . 2010-03-12 06:47 -------- d-----w- c:\program files\Common Files\Java
2010-03-12 06:47 . 2010-03-12 06:47 503808 ----a-w- c:\documents and settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\msvcp71.dll
2010-03-12 06:47 . 2010-03-12 06:47 348160 ----a-w- c:\documents and settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\msvcr71.dll
2010-03-12 06:47 . 2010-03-12 06:47 499712 ----a-w- c:\documents and settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-4b30833e-n\jmc.dll
2010-03-12 06:47 . 2010-03-12 06:47 61440 ----a-w- c:\documents and settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-49e845f6-n\decora-sse.dll
2010-03-12 06:47 . 2010-03-12 06:47 12800 ----a-w- c:\documents and settings\Jarka\Application Data\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-49e845f6-n\decora-d3d.dll
2010-03-12 06:46 . 2010-03-12 06:46 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-03-10 18:03 . 2009-01-16 15:11 -------- d-----w- c:\program files\Alwil Software
2010-03-10 17:26 . 2010-03-10 17:21 45942928 ----a-w- c:\program files\setup_av_free.exe
2010-03-10 06:15 . 2004-08-03 23:56 420352 ----a-w- c:\windows\system32\vbscript.dll
2010-03-05 13:48 . 2009-10-22 05:27 -------- d-----w- c:\program files\PageRage
2010-02-25 06:24 . 2004-08-03 23:56 916480 ----a-w- c:\windows\system32\wininet.dll
2010-02-24 12:31 . 2004-08-03 22:15 454016 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-02-23 16:28 . 2008-12-22 19:49 306432 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2010-02-16 13:17 . 2004-08-03 22:18 2137088 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-02-16 12:39 . 2004-08-03 22:59 2016768 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-02-12 10:03 . 2010-03-05 13:43 293376 ------w- c:\windows\system32\browserchoice.exe
2010-02-12 04:47 . 2004-08-03 23:56 100864 ----a-w- c:\windows\system32\6to4svc.dll
2010-02-11 12:01 . 2004-08-03 22:07 226880 ----a-w- c:\windows\system32\drivers\tcpip6.sys
2010-02-07 17:21 . 2010-02-07 17:22 737280 ----a-w- c:\windows\iun6002.exe
2009-11-09 19:42 . 2009-11-09 19:38 24772640 ----a-w- c:\program files\AdbeRdr90_sk_SK.exe
2009-08-05 14:54 . 2009-08-05 14:53 2427454 ----a-w- c:\program files\save2pc_light_setup.exe
2009-06-14 17:13 . 2009-06-14 17:13 28996120 ----a-w- c:\program files\FileFormatConverters.exe
2009-02-08 10:15 . 2009-02-08 10:15 7840 ----a-w- c:\program files\1029.dll
2008-12-20 07:00 . 2008-12-20 07:00 1886800 ----a-w- c:\program files\install_flash_player_10_active_x.exe
.

------- Sigcheck -------

[-] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\drivers\atapi.sys
[-] 2004-08-03 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0000\DriverFiles\i386\atapi.sys

[-] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\asyncmac.sys
[-] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\drivers\asyncmac.sys

[-] 2001-08-23 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-08-23 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-04-13 . 463C1EC80CD17420A542B7F36A36F128 . 24576 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\kbdclass.sys
[-] 2004-08-03 . EBDEE8A2EE5393890A1ACEE971C4C246 . 24576 . . [5.1.2600.2180] . . c:\windows\system32\drivers\kbdclass.sys

[-] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ndis.sys
[-] 2004-08-03 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\system32\drivers\ndis.sys

[-] 2001-08-23 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-08-23 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\system32\drivers\tcpip.sys
[-] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\tcpip.sys
[-] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748$\tcpip.sys

[-] 2008-04-14 . A06CE3399D16DB864F55FAEB1F1927A9 . 77824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\browser.dll
[-] 2004-08-03 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\system32\browser.dll
[-] 2004-08-03 . E3CFCCDDA4EDD1D0DC9168B2E18F27B8 . 77312 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\browser.dll

[-] 2008-04-14 . BF2466B3E18E970D8A976FB95FC1CA85 . 13312 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\lsass.exe
[-] 2004-08-03 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\system32\lsass.exe
[-] 2004-08-03 . 84885F9B82F4D55C6146EBF6065D75D2 . 13312 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\lsass.exe

[-] 2008-04-14 . 574738F61FCA2935F5265DC4E5691314 . 409088 . . [6.7.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\qmgr.dll
[-] 2004-08-03 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\system32\qmgr.dll
[-] 2004-08-03 . 2C69EC7E5A311334D10DD95F338FCCEA . 382464 . . [6.6.2600.2180] . . c:\windows\system32\dllcache\qmgr.dll

[-] 2009-02-09 . 6B27A5C03DFB94B4245739065431322C . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\rpcss.dll
[-] 2009-02-09 . 9222562D44021B988B9F9F62207FB6F2 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
[-] 2009-02-09 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520] . . c:\windows\system32\rpcss.dll
[-] 2009-02-09 . 01095FEBF33BEEA00C2A0730B9B3EC28 . 399360 . . [5.1.2600.3520] . . c:\windows\system32\dllcache\rpcss.dll
[-] 2009-02-09 . 24B5D53B9ACCC1E2EDCF0A878D6659D4 . 401408 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\rpcss.dll
[-] 2008-04-14 . 2589FE6015A316C0F5D5112B4DA7B509 . 399360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\rpcss.dll
[7] 2005-07-26 . CE94A2BD25E3E9F4D46A7373FF455C6D . 397824 . . [5.1.2600.2726] . . c:\windows\$NtUninstallKB956572$\rpcss.dll
[7] 2005-07-26 . C369DF215D352B6F3A0B8C3469AA34F8 . 398336 . . [5.1.2600.2726] . . c:\windows\$hf_mig$\KB902400\SP2QFE\rpcss.dll
[7] 2005-04-28 . DA383FB39A6F1C445F3AFC94B3EB1248 . 396288 . . [5.1.2600.2665] . . c:\windows\$hf_mig$\KB894391\SP2QFE\rpcss.dll
[7] 2005-04-28 . C8061F289E000703E7672916B7FE1571 . 395776 . . [5.1.2600.2665] . . c:\windows\$NtUninstallKB902400$\rpcss.dll
[-] 2004-08-03 . 5C83A4408604F737717AB96371201680 . 395776 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB894391$\rpcss.dll

[-] 2009-02-06 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520] . . c:\windows\system32\services.exe
[-] 2009-02-06 . 37561F8D4160D62DA86D24AE41FAE8DE . 110592 . . [5.1.2600.3520] . . c:\windows\system32\dllcache\services.exe
[-] 2009-02-06 . 65DF52F5B8B6E9BBD183505225C37315 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\services.exe
[-] 2009-02-06 . 020CEAAEDC8EB655B6506B8C70D53BB6 . 110592 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2009-02-06 . 4712531AB7A01B7EE059853CA17D39BD . 110592 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\services.exe
[-] 2008-04-14 . 0E776ED5F7CC9F94299E70461B7B8185 . 108544 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\services.exe
[-] 2004-08-03 . C6CE6EEC82F187615D1002BB3BB50ED4 . 108032 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB956572$\services.exe

[-] 2008-04-14 . ED0EF0A136DEC83DF69F04118870003E . 507904 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\winlogon.exe
[-] 2004-08-03 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\system32\winlogon.exe
[-] 2004-08-03 . 01C3346C241652F43AED8E2149881BFE . 502272 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\winlogon.exe

[-] 2008-04-14 . 3D4E199942E29207970E04315D02AD3B . 62464 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\cryptsvc.dll
[-] 2004-08-03 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\system32\cryptsvc.dll
[-] 2004-08-03 . 10654F9DDCEA9C46CFB77554231BE73B . 60416 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\cryptsvc.dll

[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\system32\es.dll
[-] 2008-07-07 20:32 . 60D1A6342238378BFB7545C81EE3606C . 253952 . . [2001.12.4414.320] . . c:\windows\system32\dllcache\es.dll
[-] 2008-07-07 20:26 . D4991D98F2DB73C60D042F1AEF79EFAE . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
[-] 2008-07-07 20:23 . F17F6226BDC0CD5F0BEF0DAF84D29BEC . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
[-] 2008-07-07 20:06 . A4AB3DCA4A383F0DF4988ABDEB84F9A4 . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
[-] 2008-04-14 00:11 . 19A799805B24990867B00C120D300C3A . 246272 . . [2001.12.4414.701] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\es.dll
[7] 2005-07-26 04:20 . 95F5FEA4C6DE2C3F28784D0DCC8F0DD3 . 243200 . . [2001.12.4414.308] . . c:\windows\$hf_mig$\KB902400\SP2QFE\es.dll
[-] 2004-08-03 23:56 . ACD36A2DD7D1E9D8A060AA651DC07E63 . 243200 . . [2001.12.4414.258] . . c:\windows\$NtUninstallKB950974$\es.dll

[-] 2008-04-14 . 0DA85218E92526972A821587E6A8BF8F . 110080 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\imm32.dll
[-] 2004-08-03 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\system32\imm32.dll
[-] 2004-08-03 . 87CA7CE6469577F059297B9D6556D66D . 110080 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\imm32.dll

[-] 2009-03-21 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541] . . c:\windows\system32\kernel32.dll
[-] 2009-03-21 . B6ACAED7588295129791E0E6A2B0FADE . 986112 . . [5.1.2600.3541] . . c:\windows\system32\dllcache\kernel32.dll
[-] 2009-03-21 . B921FB870C9AC0D509B2CCABBBBE95F3 . 989696 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3GDR\kernel32.dll
[-] 2009-03-21 . DA11D9D6ECBDF0F93436A4B7C13F7BEC . 991744 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
[-] 2009-03-21 . 80202858D245FF07DAA1739C57A3E19B . 989184 . . [5.1.2600.3541] . . c:\windows\$hf_mig$\KB959426\SP2QFE\kernel32.dll
[-] 2008-04-14 . C24B983D211C34DA8FCC1AC38477971D . 989696 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\kernel32.dll
[7] 2007-04-16 . 09F7CB3687F86EDAA4CA081F7AB66C03 . 986112 . . [5.1.2600.3119] . . c:\windows\$hf_mig$\KB935839\SP2QFE\kernel32.dll
[7] 2007-04-16 . A01F9CA902A88F7CED06884174D6419D . 984576 . . [5.1.2600.3119] . . c:\windows\$NtUninstallKB959426$\kernel32.dll
[-] 2004-08-03 . 888190E31455FAD793312F8D087146EB . 983552 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB935839$\kernel32.dll

[-] 2008-04-14 . 012DF358CEBAA23ACB26D82077820817 . 22016 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\lpk.dll
[-] 2004-08-03 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\system32\lpk.dll
[-] 2004-08-03 . 74D66B3DE265E8789153414E75175F26 . 22016 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\lpk.dll

[-] 2010-02-25 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904] . . c:\windows\system32\mshtml.dll
[-] 2010-02-25 . 7054F6ADC9B670887659F1561603B0D0 . 5944832 . . [8.00.6001.18904] . . c:\windows\system32\dllcache\mshtml.dll
[-] 2010-02-25 . 974772C74DA7C7A8E7C813A9908A845F . 5946880 . . [8.00.6001.22995] . . c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\mshtml.dll
[-] 2009-12-22 . BD1365D9400C3DB84D76AE77318E1A8D . 3063808 . . [6.00.2900.3660] . . c:\windows\ie8\mshtml.dll
[-] 2009-12-22 . 5747867041C33E26DA5CC893C9532DB8 . 3071488 . . [6.00.2900.3660] . . c:\windows\$hf_mig$\KB978207\SP2QFE\mshtml.dll
[-] 2009-12-22 . A758F0891A87EE005848A0BC740A5B96 . 3071488 . . [6.00.2900.5921] . . c:\windows\$hf_mig$\KB978207\SP3GDR\mshtml.dll
[-] 2009-12-22 . AD17006339C1934D86449F335C241FF1 . 3073536 . . [6.00.2900.5921] . . c:\windows\$hf_mig$\KB978207\SP3QFE\mshtml.dll
[-] 2009-12-21 . BE6EEBEF636773A8E7A82214E81C563A . 5942784 . . [8.00.6001.18876] . . c:\windows\ie8updates\KB980182-IE8\mshtml.dll
[-] 2009-12-21 . E6B64C6C729BBC38AB7CC92CE33F97A5 . 5945856 . . [8.00.6001.22967] . . c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\mshtml.dll
[-] 2009-10-29 . D1CF72C34BAF70C52797D1CB78D6EE92 . 3070976 . . [6.00.2900.5897] . . c:\windows\$hf_mig$\KB976325\SP3GDR\mshtml.dll
[-] 2009-10-29 . C0F9AC6FAB2C788FFEE3E69585A0E93F . 5944320 . . [8.00.6001.22945] . . c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\mshtml.dll
[-] 2009-10-29 . CBB1EF54B86EDB78649909DD1699E5CA . 5940736 . . [8.00.6001.18854] . . c:\windows\ie8updates\KB978207-IE8\mshtml.dll
[-] 2009-10-29 . 6CAFAA3E8C37CDD0D7441AF82807F70C . 3063296 . . [6.00.2900.3640] . . c:\windows\$NtUninstallKB978207$\mshtml.dll
[-] 2009-10-29 . DA551BFEC150760A38A9AD0C95A8A71C . 3073024 . . [6.00.2900.5897] . . c:\windows\$hf_mig$\KB976325\SP3QFE\mshtml.dll
[-] 2009-10-29 . F3A9E882DF2F155C9395979FF9D7B0A7 . 3070976 . . [6.00.2900.3640] . . c:\windows\$hf_mig$\KB976325\SP2QFE\mshtml.dll
[-] 2009-10-20 . 4FDC6E7E9B2683EA263CDC9A6203D898 . 3063296 . . [6.00.2900.3636] . . c:\windows\$NtUninstallKB976325$\mshtml.dll
[-] 2009-10-20 . 57B9895B3720587DE96B70FD0F15270A . 3070976 . . [6.00.2900.3636] . . c:\windows\$hf_mig$\KB976749\SP2QFE\mshtml.dll
[-] 2009-10-19 . 4D1EAA7E0B845D1B2E8D711AE754D0F2 . 3070976 . . [6.00.2900.5890] . . c:\windows\$hf_mig$\KB976749\SP3GDR\mshtml.dll
[-] 2009-10-19 . 6C1B3294BCD1A38FDE6D965A96612756 . 3072512 . . [6.00.2900.5890] . . c:\windows\$hf_mig$\KB976749\SP3QFE\mshtml.dll
[-] 2009-09-25 . 299423DFB7E8D8E179F685371C88A6A8 . 3063296 . . [6.00.2900.3627] . . c:\windows\$NtUninstallKB976749$\mshtml.dll
[-] 2009-09-25 . 431D4C38E47AE0CAC1A52A185395A5F5 . 3070976 . . [6.00.2900.3627] . . c:\windows\$hf_mig$\KB974455\SP2QFE\mshtml.dll
[-] 2009-09-25 . 601E18A9A8F0D0ED39692B593212378F . 3070976 . . [6.00.2900.5880] . . c:\windows\$hf_mig$\KB974455\SP3GDR\mshtml.dll
[-] 2009-09-25 . 37F578776552FA076EA6085F0365209C . 3072512 . . [6.00.2900.5880] . . c:\windows\$hf_mig$\KB974455\SP3QFE\mshtml.dll
[-] 2009-07-18 . 108F212B0E1B4439B014497EEC407981 . 3062272 . . [6.00.2900.3603] . . c:\windows\$NtUninstallKB974455$\mshtml.dll
[-] 2009-07-18 . 7467941BE64DFC5F8E9F3DC1DE920806 . 3069440 . . [6.00.2900.5848] . . c:\windows\$hf_mig$\KB972260\SP3GDR\mshtml.dll
[-] 2009-07-18 . 9A878C4D12BE5598B598B27BFEA1B3C2 . 3069440 . . [6.00.2900.3603] . . c:\windows\$hf_mig$\KB972260\SP2QFE\mshtml.dll
[-] 2009-07-18 . F3EE47F296295D08A97CB50EF57244D9 . 3069952 . . [6.00.2900.5848] . . c:\windows\$hf_mig$\KB972260\SP3QFE\mshtml.dll
[-] 2009-04-29 . 04AB92BFDDF275D50E3D42CDB4BF110E . 3060736 . . [6.00.2900.3562] . . c:\windows\$NtUninstallKB972260$\mshtml.dll
[-] 2009-04-29 . ABD8093E43E53AEA5898D2214B92E9BA . 3068928 . . [6.00.2900.5803] . . c:\windows\$hf_mig$\KB969897\SP3GDR\mshtml.dll
[-] 2009-04-29 . 7BB862F4CBB8361551C34674291BA5EC . 3068928 . . [6.00.2900.3562] . . c:\windows\$hf_mig$\KB969897\SP2QFE\mshtml.dll
[-] 2009-04-29 . 06CF679E3D24C3DF270556456A0F1EDA . 3069440 . . [6.00.2900.5803] . . c:\windows\$hf_mig$\KB969897\SP3QFE\mshtml.dll
[-] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB976325-IE8\mshtml.dll
[-] 2009-02-20 . 03D98EB3F7BBD1FA14C650597F1989BC . 3067904 . . [6.00.2900.3527] . . c:\windows\$hf_mig$\KB963027\SP2QFE\mshtml.dll
[-] 2009-02-20 . B20FEE1734EF152AAA8D6C5A938DA902 . 3059712 . . [6.00.2900.3527] . . c:\windows\$NtUninstallKB969897$\mshtml.dll
[-] 2009-02-20 . 2F70F2F74C40397D031016FA162981C2 . 3068416 . . [6.00.2900.5764] . . c:\windows\$hf_mig$\KB963027\SP3GDR\mshtml.dll
[-] 2009-02-20 . 1618A4A2C5DD8164B8295190C8EA6544 . 3068416 . . [6.00.2900.5764] . . c:\windows\$hf_mig$\KB963027\SP3QFE\mshtml.dll
[-] 2008-12-12 . C8169B4320AC0CB8D1ED20454322E839 . 3060224 . . [6.00.2900.3492] . . c:\windows\$NtUninstallKB963027$\mshtml.dll
[-] 2008-12-12 . 6D1D493622EA050DBAABD0C4C1DFADB5 . 3067392 . . [6.00.2900.3492] . . c:\windows\$hf_mig$\KB960714\SP2QFE\mshtml.dll
[-] 2008-12-12 . B6DAA74E2ED36C71B502945589A683AE . 3067904 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3QFE\mshtml.dll
[-] 2008-12-12 . C828AA1C5469E72251F3D367005E589F . 3067904 . . [6.00.2900.5726] . . c:\windows\$hf_mig$\KB960714\SP3GDR\mshtml.dll
[-] 2008-10-16 . C99D8B48FC245D98E1A2BAB6594458C9 . 3067392 . . [6.00.2900.3462] . . c:\windows\$hf_mig$\KB958215\SP2QFE\mshtml.dll
[-] 2008-10-16 . CC5A2205D37AE67CE23AB7FD3E1FDACA . 3067904 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\mshtml.dll
[-] 2008-10-16 . B846C2DE341CF32B42AD297437233742 . 3067904 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3GDR\mshtml.dll
[-] 2008-04-14 . A706E122B398FE1AB85CB9B75D044223 . 3066880 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\mshtml.dll

[-] 2008-04-14 . D7075E95AA599EE77B7A89D39296BD3D . 343040 . . [7.0.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\asms\70\msft\windows\mswincrt\msvcrt.dll
[-] 2008-04-14 . 355EDBB4D412B01F1740C17E3F50FA00 . 343040 . . [7.0.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\msvcrt.dll
[-] 2004-08-03 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\system32\msvcrt.dll
[-] 2004-08-03 . B0FEFA816D61EC66AA765DDF534EAB5E . 343040 . . [7.0.2600.2180] . . c:\windows\system32\dllcache\msvcrt.dll

[-] 2008-06-20 . 832E4DD8964AB7ACC880B2837CB1ED20 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
[-] 2008-06-20 . FCEE5FCB99F7C724593365C706D28388 . 245248 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\system32\mswsock.dll
[-] 2008-06-20 . 097722F235A1FB698BF9234E01B52637 . 245248 . . [5.1.2600.3394] . . c:\windows\system32\dllcache\mswsock.dll
[-] 2008-06-20 . 1DFCA7713EA5A70D5D93B436AEA0317A . 245248 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
[-] 2008-04-14 . B4138E99236F0F57D4CF49BAE98A0746 . 245248 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\mswsock.dll
[-] 2004-08-03 . 4E74AF063C3271FBEA20DD940CFD1184 . 245248 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748$\mswsock.dll

[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[-] 2009-02-06 . 6C476D33D82F1054849790181E8F7772 . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[-] 2008-04-14 . 1B7F071C51B77C272875C3A23E1E4550 . 407040 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\netlogon.dll
[-] 2004-08-03 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\system32\netlogon.dll
[-] 2004-08-03 . 96353FCECBA774BB8DA74A1C6507015A . 407040 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\netlogon.dll

[-] 2008-04-14 . 50A166237A0FA771261275A405646CC0 . 17408 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\powrprof.dll
[-] 2004-08-03 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\system32\powrprof.dll
[-] 2004-08-03 . 1B5F6923ABB450692E9FE0672C897AED . 17408 . . [6.00.2900.2180] . . c:\windows\system32\dllcache\powrprof.dll

[-] 2008-04-14 . A86BB5E61BF3E39B62AB4C7E7085A084 . 181248 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\scecli.dll
[-] 2004-08-03 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\system32\scecli.dll
[-] 2004-08-03 . 0F78E27F563F2AAF74B91A49E2ABF19A . 180224 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\scecli.dll

[-] 2008-04-14 . 96E1C926F22EE1BFBAE82901A35F6BF3 . 5120 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\sfc.dll
[-] 2004-08-03 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\system32\sfc.dll
[-] 2004-08-03 . E8A12A12EA9088B4327D49EDCA3ADD3E . 5120 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\sfc.dll

[-] 2008-04-14 . 27C6D03BCDB8CFEB96B716F3D8BE3E18 . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\svchost.exe
[-] 2004-08-03 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\svchost.exe
[-] 2004-08-03 . 8F078AE4ED187AAABC0A305146DE6716 . 14336 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\svchost.exe

[-] 2008-04-14 . A93AEE1928A9D7CE3E16D24EC7380F89 . 26112 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\userinit.exe
[-] 2004-08-03 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\system32\userinit.exe
[-] 2004-08-03 . 39B1FFB03C2296323832ACBAE50D2AFF . 24576 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\userinit.exe

[-] 2010-02-25 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904] . . c:\windows\system32\wininet.dll
[-] 2010-02-25 . 7A42CFED96CDA7F2FB1A26D1F9F65775 . 916480 . . [8.00.6001.18904] . . c:\windows\system32\dllcache\wininet.dll
[-] 2010-02-25 . 4458D59F2B0369F4D3B137541D284041 . 919040 . . [8.00.6001.22995] . . c:\windows\$hf_mig$\KB980182-IE8\SP3QFE\wininet.dll
[-] 2009-12-22 . A59054653A2DA13132BE377A650971C9 . 662016 . . [6.00.2900.3660] . . c:\windows\ie8\wininet.dll
[-] 2009-12-22 . 3E617A36A895363FBBE6D1D0405D7E12 . 668672 . . [6.00.2900.3660] . . c:\windows\$hf_mig$\KB978207\SP2QFE\wininet.dll
[-] 2009-12-22 . 814C265012ED921443C515A591D5BFE1 . 667136 . . [6.00.2900.5921] . . c:\windows\$hf_mig$\KB978207\SP3GDR\wininet.dll
[-] 2009-12-22 . BD27AF5C72D2FBFE491D3A3A8429B974 . 668672 . . [6.00.2900.5921] . . c:\windows\$hf_mig$\KB978207\SP3QFE\wininet.dll
[-] 2009-12-21 . FF4241C74E0C0A5AFFFE05F584213ECB . 916480 . . [8.00.6001.18876] . . c:\windows\ie8updates\KB980182-IE8\wininet.dll
[-] 2009-12-21 . 5E1F666B8955FD77E65D65C4C4D882A3 . 916480 . . [8.00.6001.22967] . . c:\windows\$hf_mig$\KB978207-IE8\SP3QFE\wininet.dll
[-] 2009-10-29 . 6AF52998B90F72FF2325D84D90EDA1CC . 916480 . . [8.00.6001.22945] . . c:\windows\$hf_mig$\KB976325-IE8\SP3QFE\wininet.dll
[-] 2009-10-29 . 75240F6EDBCE7B85DF66874407D38A4F . 916480 . . [8.00.6001.18854] . . c:\windows\ie8updates\KB978207-IE8\wininet.dll
[-] 2009-10-29 . 228ECFDD44D2D9234BDC6E3FA749AE99 . 662016 . . [6.00.2900.3640] . . c:\windows\$NtUninstallKB978207$\wininet.dll
[-] 2009-10-29 . 3839BD07F2C693EFE995F96BAAB7F4BF . 667136 . . [6.00.2900.5897] . . c:\windows\$hf_mig$\KB976325\SP3GDR\wininet.dll
[-] 2009-10-29 . 6AC4AA42CC9AAEFAB1D5E4E2AF2E3D2B . 668672 . . [6.00.2900.5897] . . c:\windows\$hf_mig$\KB976325\SP3QFE\wininet.dll
[-] 2009-10-29 . DF1F2953B7983F9630CD658899826344 . 668672 . . [6.00.2900.3640] . . c:\windows\$hf_mig$\KB976325\SP2QFE\wininet.dll
[-] 2009-09-25 . C48F75D1733A4725C0F90430D44F56E2 . 662016 . . [6.00.2900.3627] . . c:\windows\$NtUninstallKB976325$\wininet.dll
[-] 2009-09-25 . AE710BE3F4A9F9B0948C3183D49717A0 . 668672 . . [6.00.2900.3627] . . c:\windows\$hf_mig$\KB974455\SP2QFE\wininet.dll
[-] 2009-09-25 . 178CF0F58C9907633AAB633860B68973 . 667136 . . [6.00.2900.5880] . . c:\windows\$hf_mig$\KB974455\SP3GDR\wininet.dll
[-] 2009-09-25 . 406D33F9B30FFC0EEFC7C55562839931 . 668672 . . [6.00.2900.5880] . . c:\windows\$hf_mig$\KB974455\SP3QFE\wininet.dll
[-] 2009-06-26 . 70FFEA4793D7139A447B169CB0E500BC . 666624 . . [6.00.2900.5835] . . c:\windows\$hf_mig$\KB972260\SP3GDR\wininet.dll
[-] 2009-06-26 . 8553E6D4EC1563277323E6B2D6FBB954 . 668160 . . [6.00.2900.5835] . . c:\windows\$hf_mig$\KB972260\SP3QFE\wininet.dll
[-] 2009-06-26 . ED97493090DA8871F4EB76E1FF3F6A78 . 659456 . . [6.00.2900.3592] . . c:\windows\$NtUninstallKB974455$\wininet.dll
[-] 2009-06-26 . CF0B7B2738BEF0EB87673393CB7EA06E . 668160 . . [6.00.2900.3592] . . c:\windows\$hf_mig$\KB972260\SP2QFE\wininet.dll
[-] 2009-04-29 . 9D6E5AEB8F237E03D5892951EB3D6A7E . 659456 . . [6.00.2900.3562] . . c:\windows\$NtUninstallKB972260$\wininet.dll
[-] 2009-04-29 . 6002073519FA478BF89977369CDFD156 . 666624 . . [6.00.2900.5803] . . c:\windows\$hf_mig$\KB969897\SP3GDR\wininet.dll
[-] 2009-04-29 . 9E36A148748C5DE4EA1F47B9B625F412 . 668160 . . [6.00.2900.3562] . . c:\windows\$hf_mig$\KB969897\SP2QFE\wininet.dll
[-] 2009-04-29 . 04BCB4F87B35502568F6CF33433543A5 . 668160 . . [6.00.2900.5803] . . c:\windows\$hf_mig$\KB969897\SP3QFE\wininet.dll
[-] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\ie8updates\KB976325-IE8\wininet.dll
[-] 2009-02-20 . F1DBF177AA0DB2150E626595D0EFF604 . 659456 . . [6.00.2900.3527] . . c:\windows\$NtUninstallKB969897$\wininet.dll
[-] 2009-02-20 . 1EA0E6DD74199209D60991FD46CE8643 . 668160 . . [6.00.2900.3527] . . c:\windows\$hf_mig$\KB963027\SP2QFE\wininet.dll
[-] 2009-02-20 . 5B6A3EB7BB2F338BC2CB9F2FA4AAEA9E . 666112 . . [6.00.2900.5764] . . c:\windows\$hf_mig$\KB963027\SP3GDR\wininet.dll
[-] 2009-02-20 . 711FEABED387B29FF7ED61BC6806A06C . 667648 . . [6.00.2900.5764] . . c:\windows\$hf_mig$\KB963027\SP3QFE\wininet.dll
[-] 2008-10-16 . 6F1E4BFD78C4E0D05FF3725D59B72925 . 659456 . . [6.00.2900.3462] . . c:\windows\$NtUninstallKB963027$\wininet.dll
[-] 2008-10-16 . 93C9D0A216498EE14EB9B26119BB95EE . 667648 . . [6.00.2900.3462] . . c:\windows\$hf_mig$\KB958215\SP2QFE\wininet.dll
[-] 2008-10-16 . E8FCE58A470999350F64C591557F9E42 . 667136 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3QFE\wininet.dll
[-] 2008-10-16 . 1576318BF08D28CC61D1278114AD8D5B . 666112 . . [6.00.2900.5694] . . c:\windows\$hf_mig$\KB958215\SP3GDR\wininet.dll
[-] 2008-04-14 . 7A4F775ABB2F1C97DEF3E73AFA2FAEDD . 666112 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\wininet.dll

[-] 2008-04-14 . 2CCC474EB85CEAA3E1FA1726580A3E5A . 82432 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ws2_32.dll
[-] 2004-08-03 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\system32\ws2_32.dll
[-] 2004-08-03 . 2ED0B7F12A60F90092081C50FA0EC2B2 . 82944 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ws2_32.dll

[-] 2008-04-14 . 3805DF0AC4296A34BA4BF93B346CC378 . 171008 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\srsvc.dll
[-] 2004-08-03 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\system32\srsvc.dll
[-] 2004-08-03 . 92BDF74F12D6CBEC43C94D4B7F804838 . 170496 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\srsvc.dll

[-] 2008-04-14 . F92E1076C42FCD6DB3D72D8CFE9816D5 . 13824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\wscntfy.exe
[-] 2004-08-03 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\system32\wscntfy.exe
[-] 2004-08-03 . 49911DD39E023BB6C45E4E436CFBD297 . 13824 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\wscntfy.exe

[-] 2008-04-14 . 295D21F14C335B53CB8154E5B1F892B9 . 129024 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\xmlprov.dll
[-] 2004-08-03 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\system32\xmlprov.dll
[-] 2004-08-03 . EEF46DAB68229A14DA3D8E73C99E2959 . 129536 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\xmlprov.dll

[-] 2008-04-14 . 6D4FEB43EE538FC5428CC7F0565AA656 . 56320 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\eventlog.dll
[-] 2004-08-03 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\system32\eventlog.dll
[-] 2004-08-03 . 82B24CB70E5944E6E34662205A2A5B78 . 55808 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\eventlog.dll

[-] 2008-04-14 . 9DD07AF82244867CA36681EA2D29CE79 . 1614848 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\sfcfiles.dll
[-] 2004-08-03 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\system32\sfcfiles.dll
[-] 2004-08-03 . 30A609E00BD1D4FFC49D6B5A432BE7F2 . 1580544 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\sfcfiles.dll

[-] 2008-04-14 . 5F1D5F88303D4A4DBC8E5F97BA967CC3 . 15360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ctfmon.exe
[-] 2004-08-03 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\system32\ctfmon.exe
[-] 2004-08-03 . 24232996A38C0B0CF151C2140AE29FC8 . 15360 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ctfmon.exe

[-] 2008-04-14 . 5B19B557B0C188210A56A6B699D90B8F . 59904 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\regsvc.dll
[-] 2004-08-03 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\system32\regsvc.dll
[-] 2004-08-03 . 3151427DB7D87107D1C5BE58FAC53960 . 59904 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\regsvc.dll

[-] 2008-04-14 . 0A9A7365A1CA4319AA7C1D6CD8E4EAFA . 192512 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\schedsvc.dll
[-] 2004-08-03 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\system32\schedsvc.dll
[-] 2004-08-03 . 92360854316611F6CC471612213C3D92 . 190976 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\schedsvc.dll

[-] 2008-04-14 . 0A5679B3714EDAB99E357057EE88FCA6 . 71680 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ssdpsrv.dll
[-] 2004-08-03 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\system32\ssdpsrv.dll
[-] 2004-08-03 . 4B8D61792F7175BED48859CC18CE4E38 . 71680 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ssdpsrv.dll

[-] 2008-04-14 . FF3477C03BE7201C294C35F684B3479F . 295424 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\termsrv.dll
[-] 2004-08-03 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\system32\termsrv.dll
[-] 2004-08-03 . B60C877D16D9C880B952FDA04ADF16E6 . 295424 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\termsrv.dll

[-] 2008-04-14 . D8849F77C0B66226335A59D26CB4EDC6 . 167936 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\appmgmts.dll
[-] 2004-08-03 . 9C3C12975C97119412802B181FBEEFFE . 167936 . . [5.1.2600.2180] . . c:\windows\system32\appmgmts.dll
[-] 2004-08-03 . 9C3C12975C97119412802B181FBEEFFE . 167936 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\appmgmts.dll

[-] 2001-08-23 . 9859C0F6936E723E4892D7141B1327D5 . 11648 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\ip6fw.sys
[-] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\system32\drivers\ip6fw.sys

[-] 2008-04-14 . 986B1FF5814366D71E0AC5755C88F2D3 . 33792 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\msgsvc.dll
[-] 2004-08-03 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\system32\msgsvc.dll
[-] 2004-08-03 . 95FD808E4AC22ABA025A7B3EAC0375D2 . 33792 . . [5.1.2600.2180] . . c:\windows\system32\dllcache\msgsvc.dll

[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2006-10-18 20:47 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll
[-] 2004-08-11 00:45 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
[-] 2004-08-11 00:45 . A477391B7A8B0A0DAABADB17CF533A4B . 25088 . . [10.0.3790.3646] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
[7] 2004-08-03 23:56 . C086483E3DBA8C1C0A687EC8D5B3D4C1 . 52224 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll

[-] 2008-04-14 00:12 . 156F64A3345BD23C600655FB4D10BC08 . 435200 . . [5.1.2400.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\ntmssvc.dll
[-] 2004-08-03 23:56 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\system32\ntmssvc.dll
[-] 2004-08-03 23:56 . B62F29C00AC55A761B2E45877D85EA0F . 435200 . . [5.1.2400.2180] . . c:\windows\system32\dllcache\ntmssvc.dll

[-] 2008-04-14 . 4D83ED8BDDEC431FC8AD907B47CFB6E3 . 367616 . . [5.3.2600.5512] . . c:\windows\SoftwareDistribution\Download\79123dd72d0f61d4ed8c7a816ed338d7\dsound.dll
[-] 2004-08-03 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180] . . c:\windows\system32\dsound.dll
[-] 2004-08-03 . 55E148C01296696588EAFA425782C3E8 . 367616 . . [5.3.2600.2180] . . c:\windows\system32\dllcache\dsound.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-02-23 1664256]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2009-05-20 177464]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{511131f1-4629-4254-a85f-ed7b6d75dd3c}]
2010-04-12 17:49 2349080 ----a-w- c:\program files\Alawar.com\tbAla1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{631ac2d4-57b3-42b0-a148-da33b462c1a3}]
2007-07-31 15:33 1391640 ----a-w- c:\program files\Absolutist_Games\tbAbso.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9565115d-c7d6-46d3-bd63-b67b481a4368}]
2010-04-12 17:49 2349080 ----a-w- c:\program files\PageRage\tbPag1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-02-23 12:04 1664256 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2009-05-20 12:36 1258808 ----a-w- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
2009-10-13 22:55 195936 ------w- c:\program files\Yontoo Layers Client\YontooIEClient.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-05-20 1258808]
"{631ac2d4-57b3-42b0-a148-da33b462c1a3}"= "c:\program files\Absolutist_Games\tbAbso.dll" [2007-07-31 1391640]
"{511131f1-4629-4254-a85f-ed7b6d75dd3c}"= "c:\program files\Alawar.com\tbAla1.dll" [2010-04-12 2349080]
"{9565115d-c7d6-46d3-bd63-b67b481a4368}"= "c:\program files\PageRage\tbPag1.dll" [2010-04-12 2349080]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-02-23 1664256]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CLASSES_ROOT\clsid\{631ac2d4-57b3-42b0-a148-da33b462c1a3}]

[HKEY_CLASSES_ROOT\clsid\{511131f1-4629-4254-a85f-ed7b6d75dd3c}]

[HKEY_CLASSES_ROOT\clsid\{9565115d-c7d6-46d3-bd63-b67b481a4368}]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2009-05-20 1258808]
"{631AC2D4-57B3-42B0-A148-DA33B462C1A3}"= "c:\program files\Absolutist_Games\tbAbso.dll" [2007-07-31 1391640]
"{511131F1-4629-4254-A85F-ED7B6D75DD3C}"= "c:\program files\Alawar.com\tbAla1.dll" [2010-04-12 2349080]
"{9565115D-C7D6-46D3-BD63-B67B481A4368}"= "c:\program files\PageRage\tbPag1.dll" [2010-04-12 2349080]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2010-02-23 1664256]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CLASSES_ROOT\clsid\{631ac2d4-57b3-42b0-a148-da33b462c1a3}]

[HKEY_CLASSES_ROOT\clsid\{511131f1-4629-4254-a85f-ed7b6d75dd3c}]

[HKEY_CLASSES_ROOT\clsid\{9565115d-c7d6-46d3-bd63-b67b481a4368}]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoFileUrl"= 0 (0x0)
"NoUpdateCheck"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-04-18 13:29 12464 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CnxDslTaskBar]
c:\program files\microcom\adsl deskporte usb\CnxDslTb.exe Microcom\ADSL DeskPorte USB [X]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-03-24 18:17 952768 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-22 00:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2005-05-04 01:43 69632 ----a-w- c:\windows\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
2008-12-18 11:05 4608 ----a-w- c:\program files\Alcohol Soft\Alcohol 120\AxCmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
2008-12-17 02:08 887808 ----a-w- c:\program files\Ares\Ares.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitComet]
2008-11-12 09:30 2511672 ----a-w- c:\program files\BitComet\BitComet.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
2004-08-03 23:56 15360 ----a-w- c:\windows\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
2007-04-03 22:29 165784 ----a-w- c:\program files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-08 15:24 54840 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 13:57 153136 ----a-w- c:\program files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2008-05-14 01:50 16862720 ----a-w- c:\windows\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2010-04-06 00:27 26102056 ----a-r- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Software Informer]
2009-11-25 17:50 2011205 ----a-w- c:\program files\Software Informer\softinfo.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
2006-11-10 11:35 90112 ----a-w- c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-01-11 14:21 246504 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM]
2009-05-20 13:11 111928 ----a-r- c:\program files\SweetIM\Messenger\SweetIM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-05-21 18:14 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ares"="c:\program files\Ares\Ares.exe" -h
"IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" -silent
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Ares\\Ares.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\ICQ7.0\\ICQ.exe"=
"c:\\Program Files\\ICQ7.0\\aolload.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7554:TCP"= 7554:TCP:BitComet 7554 TCP
"7554:UDP"= 7554:UDP:BitComet 7554 UDP
"14227:TCP"= 14227:TCP:BitComet 14227 TCP
"14227:UDP"= 14227:UDP:BitComet 14227 UDP

R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [18.4.2010 15:29 216200]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [18.4.2010 15:29 242896]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [18.4.2010 15:28 308064]
R3 PAC207;Eye 110;c:\windows\system32\drivers\PFC027.SYS [13.1.2010 17:02 616064]
S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18.12.2008 12:13 717296]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [18.4.2010 15:29 369920]
S3 CnxEtP;Conexant AccessRunner USB ADSL Adapter Filter Driver;c:\windows\system32\drivers\CnxEtP.sys [18.12.2008 16:20 131072]
S3 CnxEtU;Conexant AccessRunner USB ADSL Interface Device Driver;c:\windows\system32\drivers\CnxEtU.sys [18.12.2008 16:20 614272]
S3 CnxTgNP;Conexant AccessRunner ADSL WAN PPPoE Adapter Driver;c:\windows\system32\drivers\CnxTgNP.sys [18.12.2008 16:20 60416]
S4 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [6.2.2010 14:35 135664]
S4 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [18.12.2008 18:37 246520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
HPService REG_MULTI_SZ HPSLPSVC

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder

2010-04-30 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2008\OneClick.exe [2007-12-21 12:49]

2010-05-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 12:34]

2010-05-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 12:34]

2010-05-02 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2008\OneClick.exe [2007-12-21 12:49]
.
.
------- Supplementary Scan -------
.
uStart Page = about:NoAdd-ons
mWindow Title = Microsoft Internet Explorer
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
IE: Stiahnuť &všetky odkazy pomocou BitComet - c:\program files\BitComet\BitComet.exe/AddAllLink.htm
IE: Stiahnuť odkaz &pomocou BitComet - c:\program files\BitComet\BitComet.exe/AddLink.htm
IE: Stiahnuť všetky v&ideá pomocou BitComet - c:\program files\BitComet\BitComet.exe/AddVideo.htm
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab
FF - ProfilePath - c:\documents and settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2418376&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Yahoo! Search
FF - prefs.js: browser.startup.homepage - hxxp://www.bonprixshop.eu/sk/shop.htm?cat=1.10
FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avgb&type=yahoo_avg_hs2-tb-web_us&p=
FF - component: c:\documents and settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\program files\AVG\AVG9\Firefox\components\avgssff.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils2.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils3.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\IGeared_tavgp_xputils35.dll
FF - component: c:\program files\AVG\AVG9\Toolbar\Firefox\avg@igeared\components\xpavgtbapi.dll
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\documents and settings\All Users\Application Data\RealArcade\npraclient.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\NPAskSBr.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.interval - 600000
FF - user.js: content.switch.threshold - 1000000
FF - user.js: nglayout.initialpaint.delay - 600
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{A057A204-BACC-4D26-C39E-35F1D2A32EC8} - (no file)
WebBrowser-{F592709F-FF4A-4862-B659-4AFABDA56312} - (no file)
MSConfigStartUp-DAEMON Tools-1033 - c:\program files\D-Tools\daemon.exe
MSConfigStartUp-Monitor - c:\windows\PixArt\PAC207\Monitor.exe
MSConfigStartUp-PAC207_Monitor - c:\windows\PixArt\PAC207\Monitor.exe
MSConfigStartUp-SpywareTerminator - c:\progra~1\SPYWAR~1\SpywareTerminatorShield.exe
MSConfigStartUp-SpywareTerminatorUpdate - c:\progra~1\SPYWAR~1\SpywareTerminatorUpdate.exe



**************************************************************************
scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(744)
c:\windows\system32\Ati2evxx.dll
.
Completion time: 2010-05-03 17:05:34
ComboFix-quarantined-files.txt 2010-05-03 15:05

Pre-Run: 15 048 470 528 bytes free
Post-Run: 14 adresárov, 15 022 129 152 voľných bajtov

- - End Of File - - 8B162D102EDEF4CDA6BC9BE0D30BB29E

Než budeme pokračovat tohle :

c:\windows\system32\drivers\atapi.sys
c:\windows\system32\drivers\beep.sys
c:\windows\system32\services.exe
c:\windows\system32\svchost.exe

postupně otestuj na VIRUSTOTAL

(po načtení stránky klikni na tlačítko Procházet, najdi cestu k výše zmíněnému souboru a klikni na tlačítko Odeslat soubor

trvá to okolo deseti minut pak mi sem zkopíruj link, to je ten řádek nahoře v prohlížeči)

http://www.virustotal.com/cs/analisis/0 ... 1272976462

http://www.virustotal.com/cs/analisis/5 ... 1272976786

http://www.virustotal.com/cs/analisis/d ... 1272977011

http://www.virustotal.com/cs/analisis/1 ... 1272977149



.....neviem,takto som to mala urobit? Inac vidim obrovske zlepsenie PC,zatial neseka a ani uz nezamrza.Dakujem! Inac ste super "radcovia" !

Ano tak je to správně, už jen doladíme.


Pokud jsi tak ještě neučinila, přesuň Combofix na plochu

otevři si Poznámkový blok

do něj zkopíruj skript z následujícího okna:
ulož Tebou vytvořený TXT soubor jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým myšítkem a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Po aplikaci na Tebe vypadne další log, zkopíruj ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou,

v tom případě znovu restartuj a přitom mačkej F8 poté zvol Poslední známou funkční konfiguraci

tak toto asi nie je dobre,na ploche som nasla tento log.Mne sa to zda rovnake ako ten co som kopirovala predtym.



c:\program files\setup_av_free.exe

Folder::
c:\program files\Alwil Software
c:\program files\Crawler
c:\program files\ICQ6Toolbar

Driver::
ICQ Service

FireFox::
FF - ProfilePath - c:\documents and settings\Jarka\Application Data\Mozilla\Firefox\Profiles\mqcai72h.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}

Tohle opravde nee.

Zkus ještě jednou podle návodu, ulož skript jako CFScript.txt na plochu,

po uložení uchop vytvořený skript levým tlačítkem myši a přesuň ho nad ikonu Combofixu, kde ho upustíš:



Jen pozor musí tam být vše do poslední tečky, jinak to nefuguje.

ComboFix se znovu spustí, proběhne sken a udělá zase ten dlouhý log.

Ahoj.Len sa chcem spytat:toto musim urobit?Lebo vcera mi po tom vsetkom horko tazko nabehol Windows aj ked som mackala F8.