VIRY.CZ

Zdravim
Pls o kontrolu, pc se občas vypne, internet je šnekovní vzhledem k rychlosti připojení a pingům, občas se mi ozve odněkud "zvukový klik"-typický win zvuk - přitom nemám spuštěný žádný program. Používám spíš firefox než IE.

Díky TIVL

Logfile of HijackThis v1.99.1
Scan saved at 22:50:20, on 29.5.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\totalcmd\TOTALCMD.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webteh\BSplayer\bsplayer.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
c:\Program Files\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [RGSC] C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - Startup: outicon.lnk = C:\WINDOWS\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS4\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS8\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS9\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS10\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS11\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate1ca406cfe5be984) (gupdate1ca406cfe5be984) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe" /svc (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

zdravím
z mého podpisu stáhněte RSIT, spusťte, nechte proběhnout sken a výsledný log mi sem vložte

OK tady je.

Logfile of random's system information tool 1.07 (written by random/random)
Run by Tomáš at 2010-05-29 23:21:54
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 13 GB (17%) free of 76 GB
Total RAM: 3070 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:22:11, on 29.5.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\totalcmd\TOTALCMD.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webteh\BSplayer\bsplayer.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows NT\Accessories\WORDPAD.EXE
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
C:\Documents and Settings\Tomáš\Plocha\RSIT.exe
C:\Program Files\trend micro\Tomáš.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [RGSC] C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Startup: outicon.lnk = C:\WINDOWS\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS4\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS8\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS9\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS10\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS11\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate1ca406cfe5be984) (gupdate1ca406cfe5be984) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

--
End of file - 8922 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-12 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurDisc"=C:\Program Files\Nero\Nero8\InCD\NBHGui.exe [2007-10-15 2045224]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2004-10-14 1404928]
"IntelliPoint"=c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2006-11-21 842584]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"CursorFX"=C:\Program Files\Stardock\CursorFX\CursorFX.exe [2008-07-07 416768]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-10-23 202024]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"RGSC"=C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe [2008-11-14 305064]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

C:\Documents and Settings\Tomáš\Nabídka Start\Programy\Po spuštění
outicon.lnk - C:\WINDOWS\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-03-03 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"MaxRecentDocs"=11
"GreyMSIAds"=1
"NoUserNameInStartMenu"=1
"NoDrives"=0x00000000

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\gamezone\Fallout Tactics\BOS.exe"="C:\gamezone\Fallout Tactics\BOS.exe:*:Enabled:BOS"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\programy\K800i\updateservice\Update Service\Update Service.exe"="C:\programy\K800i\updateservice\Update Service\Update Service.exe:*:Enabled:Update Service"
"C:\Program Files\RelevantKnowledge\rlvknlg.exe"="C:\Program Files\RelevantKnowledge\rlvknlg.exe:*:Enabled:rlvknlg.exe"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\CesarFTP\Server.exe"="C:\Program Files\CesarFTP\Server.exe:*:Enabled:Server"
"C:\Program Files\Miranda IM\miranda32.exe"="C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe"="C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\gamezone\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe"="C:\gamezone\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{6168f2bd-2b07-11df-b9b2-806d6172696f}]
shell\AutoRun\command - E:\setuppls.exe /AUTORUN
shell\configure\command - E:\setuppls.exe
shell\install\command - E:\setuppls.exe


======List of files/folders created in the last 1 months======

2010-05-29 23:21:55 ----D---- C:\Program Files\trend micro
2010-05-29 23:21:54 ----D---- C:\rsit
2010-05-26 18:32:59 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\vlc
2010-05-21 00:55:23 ----A---- C:\WINDOWS\mickey32.dll
2010-05-21 00:55:23 ----A---- C:\WINDOWS\Matrix Code.exe
2010-05-16 21:28:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\GoldWave
2010-05-16 15:28:45 ----D---- C:\Program Files\GoldWave
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTWMAFile2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTTextToAudio2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTAudioVisualization2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTAudioTransform2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTAudioRecord2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTAudioPlayer2.dll
2010-05-16 10:51:00 ----A---- C:\WINDOWS\system32\NCTAudioInformation2.dll
2010-05-16 10:51:00 ----A---- C:\WINDOWS\system32\NCTAudioFile2.dll
2010-05-16 10:51:00 ----A---- C:\WINDOWS\system32\NCTAudioEditor2.dll
2010-05-16 10:51:00 ----A---- C:\WINDOWS\system32\NCTAudioCDGrabber2.dll
2010-05-15 20:53:53 ----D---- C:\Program Files\NCH Swift Sound
2010-05-15 20:53:53 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\NCH Swift Sound
2010-05-15 20:51:15 ----A---- C:\WINDOWS\system32\msvcr70.dll
2010-05-13 18:18:34 ----A---- C:\WINDOWS\gswin32.ini
2010-05-13 18:18:27 ----D---- C:\Program Files\gs
2010-05-13 18:12:25 ----D---- C:\Program Files\WordToPDF
2010-05-13 18:10:17 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\WordToPDF
2010-05-13 14:03:02 ----D---- C:\Program Files\Common Files\Skype
2010-05-13 01:14:32 ----D---- C:\Program Files\Common Files\DESIGNER
2010-05-13 01:14:08 ----D---- C:\Program Files\Microsoft.NET
2010-05-12 22:03:43 ----D---- C:\Program Files\Microsoft Visual Studio
2010-05-09 22:03:34 ----D---- C:\WINDOWS\system32\AGEIA
2010-05-09 22:03:32 ----D---- C:\Program Files\AGEIA Technologies
2010-05-08 11:38:42 ----D---- C:\Program Files\DAEMON Tools Lite
2010-05-06 23:12:56 ----D---- C:\Program Files\Webteh
2010-05-06 21:14:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-05-06 21:14:41 ----D---- C:\Program Files\Common Files\Java
2010-05-06 21:11:04 ----A---- C:\WINDOWS\system32\javaws.exe
2010-05-06 21:11:04 ----A---- C:\WINDOWS\system32\javaw.exe
2010-05-06 21:11:04 ----A---- C:\WINDOWS\system32\java.exe
2010-05-06 21:11:04 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-05-04 11:26:29 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\DivX
2010-05-02 12:54:13 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\dvdcss

======List of files/folders modified in the last 1 months======

2010-05-29 23:21:59 ----D---- C:\WINDOWS\Prefetch
2010-05-29 23:21:55 ----D---- C:\Program Files
2010-05-29 22:50:20 ----D---- C:\Program Files\HijackThis
2010-05-29 14:30:36 ----A---- C:\WINDOWS\WINCMD.INI
2010-05-29 10:33:27 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-29 03:27:27 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-05-29 03:26:57 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\uTorrent
2010-05-28 23:39:30 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Skype
2010-05-28 23:34:16 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\skypePM
2010-05-27 00:44:31 ----D---- C:\gamezone
2010-05-26 21:23:30 ----RD---- C:\programy
2010-05-26 18:31:24 ----D---- C:\Program Files\VideoLAN
2010-05-24 23:42:08 ----A---- C:\WINDOWS\NeroDigital.ini
2010-05-24 00:25:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-05-24 00:25:24 ----SHD---- C:\WINDOWS\Installer
2010-05-22 20:40:23 ----HD---- C:\Program Files\InstallShield Installation Information
2010-05-22 17:06:31 ----D---- C:\Program Files\Miranda IM
2010-05-21 23:04:48 ----D---- C:\Program Files\FreeRapid-0.83u1
2010-05-21 21:37:34 ----D---- C:\WINDOWS
2010-05-21 00:55:23 ----A---- C:\WINDOWS\system.ini
2010-05-20 23:27:33 ----D---- C:\WINDOWS\system32
2010-05-19 23:01:53 ----D---- C:\WINDOWS\system32\config
2010-05-16 22:05:32 ----HD---- C:\WINDOWS\inf
2010-05-13 14:03:02 ----RD---- C:\Program Files\Skype
2010-05-13 14:03:02 ----D---- C:\Program Files\Common Files
2010-05-13 14:02:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-05-13 01:18:15 ----D---- C:\WINDOWS\system32\wbem
2010-05-13 01:18:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-05-13 01:16:50 ----A---- C:\WINDOWS\ODBC.INI
2010-05-13 01:16:09 ----RSD---- C:\WINDOWS\assembly
2010-05-13 01:15:58 ----A---- C:\WINDOWS\win.ini
2010-05-13 01:15:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-05-13 01:15:16 ----RSD---- C:\WINDOWS\Fonts
2010-05-13 01:15:06 ----HD---- C:\WINDOWS\ShellNew
2010-05-13 01:14:33 ----D---- C:\Program Files\Microsoft Office
2010-05-13 01:08:50 ----D---- C:\WINDOWS\system
2010-05-09 22:08:19 ----D---- C:\WINDOWS\system32\DirectX
2010-05-09 22:08:13 ----D---- C:\WINDOWS\Temp
2010-05-09 22:04:11 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-05-09 22:02:51 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-05-09 20:08:51 ----SD---- C:\Documents and Settings\Tomáš\Data aplikací\Microsoft
2010-05-08 20:38:25 ----D---- C:\Program Files\XTB-Trader 4
2010-05-08 13:09:22 ----A---- C:\WINDOWS\WORDPAD.INI
2010-05-08 13:05:20 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-05-08 00:27:24 ----D---- C:\Program Files\MetaTrader NordFX
2010-05-06 22:59:36 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-05-06 21:10:41 ----D---- C:\Program Files\Java
2010-05-04 11:35:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2010-05-04 11:26:43 ----D---- C:\Program Files\DivX
2010-05-04 11:25:48 ----D---- C:\WINDOWS\system32\drivers
2010-05-04 11:24:42 ----D---- C:\Program Files\Common Files\DivX Shared
2010-05-02 17:53:09 ----D---- C:\Program Files\Mozilla Firefox
2010-05-02 17:53:09 ----D---- C:\Program Files\Golden html editor
2010-05-02 17:53:09 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Xfire
2010-05-02 17:53:08 ----D---- C:\Program Files\TSO

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-05-06 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys [2007-10-15 38952]
R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys [2007-10-15 40488]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-04-14 225664]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-05-06 100432]
R2 cpuz133;cpuz133; \??\C:\WINDOWS\system32\drivers\cpuz133_x32.sys []
R2 MaVctrl;MaVctrl; C:\WINDOWS\system32\DRIVERS\MaVc2K.sys [2005-08-18 11473]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-05-06 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-03-03 4630016]
R3 b57w2k;Broadcom NetXtreme 57xx Gigabit Controller; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-08-23 121472]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2006-11-07 21760]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service; C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2010-03-07 27632]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2004-09-17 732928]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-01-27 260352]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-14 12288]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys [2007-10-15 125864]
S3 abelmp8a;abelmp8a; C:\WINDOWS\system32\drivers\abelmp8a.sys []
S3 ahew8yc4;ahew8yc4; C:\WINDOWS\system32\drivers\ahew8yc4.sys []
S3 mak800c;mak800c; C:\WINDOWS\System32\Drivers\mak800c.sys [2005-06-16 24784]
S3 mak800m;mak800m; C:\WINDOWS\System32\Drivers\mak800m.sys [2005-06-16 25044]
S3 mak800u;mak800u; C:\WINDOWS\System32\Drivers\mak800u.sys [2006-07-20 55552]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-03-03 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe [2007-10-15 1440552]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-19 322120]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-16 75064]
R2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-23 382248]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-12-20 593920]
S2 gupdate1ca406cfe5be984;Služba Google Update (gupdate1ca406cfe5be984); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-12-10 353280]
S3 TUWinStylerThemeSvc;TuneUp WinStyler Theme Service; C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe [2004-08-05 117760]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

stáhněte a uložte nejlépe na plochu ComboFix

spusťte aplikaci pod účtem s administrátorským oprávněním
po startu se zobrazí obrazovka s licenčními podmínkami, klikněte na tlačítko Ano:



může dojít k varování ohledně rezidentního štítu Vašeho antiviru a upozornění na nenainstalovanou konzoli pro zotavení; zatím jí neinstalujte

sken trvá cca 10 minut (může trvat i déle, podle množství souborů a rychlosti pc); během skenu nespouštějte žádné aplikace

během skenování může být Vaše pc restartováno, proto nepropadejte panice

upozornění: pokud používate antispyware s rezidentním štítem, deaktivujte jeho rezidentní štít, protože dochází při skenu a výmazu případného malware k nežádoucím kolizím Combofixu s rezidentem antispyware

po restartování vytvoří aplikace log, uložený na C:/Combofix.txt jeho obsah vložte sem

log z combofix

ComboFix 10-05-29.05 - Tomáš 30.05.2010 17:33:29.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2551 [GMT 2:00]
Spuštěný z: c:\programy\ComboFix.exe
AV: avast! Antivirus *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: Sunbelt Personal Firewall *enabled* {82B1150E-9B37-49FC-83EB-D52197D900D0}
* Vytvořen nový Bod Obnovení

VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Tomáš\Recent\Thumbs.db
c:\windows\d.ini
c:\windows\system32\Thumbs.db

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-04-28 do 2010-05-30 )))))))))))))))))))))))))))))))
.

2010-05-30 12:53 . 2008-04-14 07:52 390144 ----a-w- c:\windows\system32\CF23768.exe
2010-05-29 21:21 . 2010-05-29 21:22 -------- d-----w- c:\program files\trend micro
2010-05-29 21:21 . 2010-05-29 21:22 -------- d-----w- C:\rsit
2010-05-20 22:55 . 2010-05-20 22:55 29696 ----a-w- c:\windows\mickey32.dll
2010-05-20 22:55 . 2010-05-20 22:55 232784 ----a-w- c:\windows\Matrix Code.scr
2010-05-20 22:55 . 2010-05-20 22:55 2285222 ----a-w- c:\windows\Matrix Code.exe
2010-05-16 13:28 . 2010-05-16 13:29 -------- d-----w- c:\program files\GoldWave
2010-05-16 08:51 . 2005-04-25 11:01 458752 ----a-w- c:\windows\system32\NCTAudioRecord2.dll
2010-05-16 08:51 . 2005-04-25 11:01 458752 ----a-w- c:\windows\system32\NCTAudioPlayer2.dll
2010-05-16 08:51 . 2005-04-04 15:21 602112 ----a-w- c:\windows\system32\NCTAudioTransform2.dll
2010-05-16 08:51 . 2005-03-28 13:54 479232 ----a-w- c:\windows\system32\NCTAudioVisualization2.dll
2010-05-16 08:51 . 2005-03-28 13:52 417792 ----a-w- c:\windows\system32\NCTTextToAudio2.dll
2010-05-16 08:51 . 2005-02-24 09:51 348160 ----a-w- c:\windows\system32\NCTWMAFile2.dll
2010-05-16 08:51 . 2005-05-18 09:52 1212416 ----a-w- c:\windows\system32\NCTAudioInformation2.dll
2010-05-16 08:51 . 2005-05-17 10:37 1986560 ----a-w- c:\windows\system32\NCTAudioFile2.dll
2010-05-16 08:51 . 2005-04-15 10:08 880640 ----a-w- c:\windows\system32\NCTAudioEditor2.dll
2010-05-16 08:51 . 2004-11-04 11:31 835584 ----a-w- c:\windows\system32\NCTAudioCDGrabber2.dll
2010-05-15 18:53 . 2010-05-15 18:53 -------- d-----w- c:\program files\NCH Swift Sound
2010-05-15 18:51 . 2002-01-05 14:37 344064 ----a-w- c:\windows\system32\msvcr70.dll
2010-05-13 16:18 . 2010-05-13 16:18 -------- d-----w- c:\program files\gs
2010-05-13 16:12 . 2010-05-13 16:12 -------- d-----w- c:\program files\WordToPDF
2010-05-13 12:03 . 2010-05-13 12:03 -------- d-----w- c:\program files\Common Files\Skype
2010-05-12 23:14 . 2010-05-12 23:14 -------- d-----w- c:\program files\Microsoft.NET
2010-05-09 20:03 . 2010-05-09 20:03 -------- d-----w- c:\windows\system32\AGEIA
2010-05-09 20:03 . 2010-05-09 20:04 -------- d-----w- c:\program files\AGEIA Technologies
2010-05-08 09:38 . 2010-05-08 09:39 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-05-06 21:12 . 2010-05-06 21:12 -------- d-----w- c:\program files\Webteh
2010-05-06 19:14 . 2010-05-06 19:14 -------- d-----w- c:\program files\Common Files\Java
2010-05-06 19:11 . 2010-04-12 15:29 411368 ----a-w- c:\windows\system32\deployJava1.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-05-26 16:31 . 2010-04-26 20:59 -------- d-----w- c:\program files\VideoLAN
2010-05-22 18:40 . 2009-04-11 19:24 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-05-22 15:06 . 2009-09-25 22:06 -------- d-----w- c:\program files\Miranda IM
2010-05-21 21:04 . 2010-03-20 23:57 -------- d-----w- c:\program files\FreeRapid-0.83u1
2010-05-15 18:53 . 2010-05-15 18:53 -------- d-----w- c:\program files\NCH Swift Sound
2010-05-13 12:03 . 2009-05-10 19:37 -------- d-----r- c:\program files\Skype
2010-05-12 23:18 . 2001-10-25 14:00 79062 ----a-w- c:\windows\system32\perfc005.dat
2010-05-12 23:18 . 2001-10-25 14:00 432004 ----a-w- c:\windows\system32\perfh005.dat
2010-05-09 20:02 . 2009-05-10 19:33 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-05-08 18:38 . 2010-03-02 10:26 -------- d-----w- c:\program files\XTB-Trader 4
2010-05-08 11:05 . 2009-09-16 21:15 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2010-05-07 22:27 . 2010-04-29 11:25 -------- d-----w- c:\program files\MetaTrader NordFX
2010-05-06 20:59 . 2010-03-01 17:16 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-05-06 20:39 . 2010-03-01 17:16 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-05-06 20:39 . 2010-03-01 17:16 164048 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-05-06 20:34 . 2010-03-01 17:16 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-05-06 20:33 . 2010-03-01 17:16 100432 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-05-06 20:33 . 2010-03-01 17:16 94800 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-05-06 20:33 . 2010-03-01 17:16 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-05-06 20:33 . 2010-03-01 17:16 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-05-06 19:10 . 2009-05-11 03:58 -------- d-----w- c:\program files\Java
2010-05-04 09:26 . 2010-04-10 17:28 -------- d-----w- c:\program files\DivX
2010-05-04 09:24 . 2010-04-10 17:32 -------- d-----w- c:\program files\Common Files\DivX Shared
2010-05-02 15:53 . 2009-04-11 11:02 -------- d-----w- c:\program files\Golden html editor
2010-05-02 15:53 . 2010-03-11 21:06 -------- d-----w- c:\program files\TSO
2010-04-22 17:40 . 2010-04-22 17:40 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2010-04-18 12:05 . 2010-04-18 12:01 -------- d-----w- c:\program files\ATI
2010-04-14 16:47 . 2010-03-01 17:16 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-04-01 10:28 . 2010-04-01 10:25 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-03-31 01:58 . 2010-04-10 17:33 9200 ------w- c:\windows\system32\drivers\cdralw2k.sys
2010-03-31 01:58 . 2010-04-10 17:33 9072 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2010-03-31 01:58 . 2010-04-10 17:33 44944 ----a-w- c:\windows\system32\drivers\PxHelp20.sys
2010-03-31 01:58 . 2010-04-10 17:33 133616 ------w- c:\windows\system32\pxafs.dll
2010-03-31 01:58 . 2010-04-10 17:33 125424 ------w- c:\windows\system32\pxinsi64.exe
2010-03-31 01:58 . 2010-04-10 17:33 123888 ------w- c:\windows\system32\pxcpyi64.exe
2010-03-30 21:38 . 2010-04-07 08:45 20968 ----a-w- c:\windows\system32\drivers\cpuz133_x32.sys
2010-03-30 20:18 . 2009-09-27 09:28 138576 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-30 20:18 . 2009-09-27 09:27 215104 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-03-21 13:29 . 2009-04-11 19:51 1496576 ---h--w- c:\windows\system32\wodfamop.dll
2010-03-16 20:52 . 2009-09-27 09:27 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-03-08 17:59 . 2010-03-08 17:59 94208 ----a-w- c:\windows\system32\dpl100.dll
2010-03-07 20:50 . 2010-03-07 20:50 27632 ----a-w- c:\windows\system32\drivers\seehcri.sys
2010-03-03 04:21 . 2009-04-11 14:17 4630016 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2010-03-03 04:07 . 2009-04-11 23:29 311296 ----a-w- c:\windows\system32\atiiiexx.dll
2010-03-03 04:02 . 2010-04-18 12:04 45056 ----a-w- c:\windows\system32\aticalrt.dll
2010-03-03 04:02 . 2010-04-18 12:04 45056 ----a-w- c:\windows\system32\aticalcl.dll
2010-03-03 04:01 . 2010-04-18 12:04 3641344 ----a-w- c:\windows\system32\aticaldd.dll
2010-03-03 03:44 . 2010-04-18 12:04 14262272 ----a-w- c:\windows\system32\atioglxx.dll
2010-03-03 03:40 . 2009-04-11 23:29 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll
2010-03-03 03:40 . 2009-04-11 14:19 3616096 ----a-w- c:\windows\system32\ati3duag.dll
2010-03-03 03:39 . 2009-04-11 14:19 301056 ----a-w- c:\windows\system32\ati2dvag.dll
2010-03-03 03:24 . 2007-12-21 02:59 208896 ----a-w- c:\windows\system32\atipdlxx.dll
2010-03-03 03:24 . 2009-04-11 14:19 2232320 ----a-w- c:\windows\system32\ativvaxx.dll
2010-03-03 03:24 . 2007-12-21 02:59 155648 ----a-w- c:\windows\system32\Oemdspif.dll
2010-03-03 03:24 . 2009-04-11 23:29 887724 ----a-w- c:\windows\system32\ativva6x.dat
2010-03-03 03:24 . 2009-04-11 23:29 3 ----a-w- c:\windows\system32\ativva5x.dat
2010-03-03 03:24 . 2007-12-21 02:59 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe
2010-03-03 03:24 . 2007-12-21 02:59 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2010-03-03 03:23 . 2007-12-21 02:58 159744 ----a-w- c:\windows\system32\ati2evxx.dll
2010-03-03 03:22 . 2007-12-21 02:57 602112 ----a-w- c:\windows\system32\ati2evxx.exe
2010-03-03 03:21 . 2007-12-21 02:56 53248 ----a-w- c:\windows\system32\ATIDDC.DLL
2010-03-03 03:20 . 2010-04-18 12:04 143360 ----a-w- c:\windows\system32\atiapfxx.exe
2010-03-03 03:16 . 2007-12-21 02:20 565248 ----a-w- c:\windows\system32\atikvmag.dll
2010-03-03 03:15 . 2010-04-18 12:04 184320 ----a-w- c:\windows\system32\atiadlxx.dll
2010-03-03 03:14 . 2007-12-21 02:18 17408 ----a-w- c:\windows\system32\atitvo32.dll
2010-03-03 03:14 . 2007-12-21 02:15 393216 ----a-w- c:\windows\system32\atiok3x2.dll
2010-03-03 03:09 . 2009-04-11 14:19 638976 ----a-w- c:\windows\system32\ati2cqag.dll
2010-03-03 03:07 . 2007-12-21 02:17 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-03-03 03:07 . 2010-04-18 12:04 65024 ----a-w- c:\windows\system32\atimpc32.dll
2010-03-03 03:07 . 2007-12-21 02:24 65024 ----a-w- c:\windows\system32\amdpcom32.dll
2010-03-02 15:29 . 2009-04-11 21:44 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-03-01 16:16 . 2009-04-11 13:54 22976 ----a-w- c:\windows\system32\emptyregdb.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VirtualExpanderFile.1]
@="{E4000AC4-5E5F-4956-807A-C5854405D64F}"
[HKEY_CLASSES_ROOT\CLSID\{E4000AC4-5E5F-4956-807A-C5854405D64F}]
2009-08-06 11:03 73728 ----a-w- c:\windows\system32\VirtualExpander\VEShellExt.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CursorFX"="c:\program files\Stardock\CursorFX\CursorFX.exe" [2008-07-07 416768]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-10-23 202024]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480]
"RGSC"="c:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe" [2008-11-14 305064]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SecurDisc"="c:\program files\Nero\Nero8\InCD\NBHGui.exe" [2007-10-15 2045224]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2004-10-14 1404928]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2006-11-21 842584]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-17 44544]

c:\documents and settings\Tom ç\Nabˇdka Start\Programy\Po spuçtŘnˇ\
outicon.lnk - c:\windows\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe [2010-5-13 794624]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"MaxRecentDocs"= 11 (0xb)
"GreyMSIAds"= 1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0sprestrt

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"InCD"=c:\program files\Nero\Nero8\InCD\InCD.exe
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
"NeroFilterCheck"=c:\program files\Common Files\Nero\Lib\NeroCheck.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\programy\\K800i\\updateservice\\Update Service\\Update Service.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\CesarFTP\\Server.exe"=
"c:\\Program Files\\Miranda IM\\miranda32.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\gamezone\\GTA4\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\gamezone\\GTA4\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)

R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);c:\windows\system32\drivers\sfdrv01a.sys [5.7.2006 14:46 63352]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [1.3.2010 19:16 164048]
R1 SbFw;SbFw;c:\windows\system32\drivers\SbFw.sys [12.9.2009 21:40 270888]
R1 sbhips;Sunbelt HIPS Driver;c:\windows\system32\drivers\sbhips.sys [21.6.2008 4:54 66600]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [1.3.2010 19:16 19024]
R2 cpuz133;cpuz133;c:\windows\system32\drivers\cpuz133_x32.sys [7.4.2010 10:45 20968]
R2 SbPF.Launcher;SbPF.Launcher;c:\program files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [31.10.2008 7:24 95528]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [31.10.2008 7:24 1365288]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service;c:\windows\system32\drivers\SbFwIm.sys [12.9.2009 21:40 65576]
R3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\drivers\seehcri.sys [7.3.2010 22:50 27632]
S2 gupdate1ca406cfe5be984;Služba Google Update (gupdate1ca406cfe5be984);"c:\program files\Google\Update\GoogleUpdate.exe" /svc --> c:\program files\Google\Update\GoogleUpdate.exe [?]
S3 mak800c;mak800c;c:\windows\system32\drivers\mak800c.sys [15.4.2009 23:24 24784]
S3 mak800m;mak800m;c:\windows\system32\drivers\mak800m.sys [15.4.2009 23:24 25044]
S3 mak800u;mak800u;c:\windows\system32\drivers\mak800u.sys [15.4.2009 23:24 55552]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [11.4.2009 23:44 691696]
.
Obsah adresáře 'Naplánované úlohy'

2009-07-05 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2004\SystemOptimizer.exe [2004-11-09 20:11]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
TCP: {29AAB21E-4A94-46E1-9C0C-893D5A6F7326} = 10.120.65.1
FF - ProfilePath - c:\documents and settings\Tomáš\Data aplikací\Mozilla\Firefox\Profiles\f5n09thw.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - component: c:\program files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}\components\SkypeFfComponent.dll
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKU-Default-Run-Nokia.PCSync - c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe
HKU-Default-RunOnce-nltide3 - rundll32 advpack.dll
HKU-Default-RunOnce-nltide2 - rundll32 advpack.dll



**************************************************************************
skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory:

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-2025429265-287218729-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:f6,49,0c,ef,f5,5d,e9,31,7a,ca,9e,d5,ca,19,30,7b,12,cf,5a,38,7e,
a9,1b,85,a8,d8,0a,67,5c,b1,1a,ea,34,20,ae,9c,60,12,75,38,b7,c9,d3,9f,84,c8,\
"rkeysecu"=hex:12,4a,8b,bd,38,c6,8d,90,70,48,ca,da,d5,91,c6,9a
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(656)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2010-05-30 17:44:40
ComboFix-quarantined-files.txt 2010-05-30 15:43

Před spuštěním: Volných bajtů: 15 924 805 632
Po spuštění: Volných bajtů: 16 348 950 528

Current=4 Default=4 Failed=0 LastKnownGood=11 Sets=1,2,3,4,5,6,7,8,9,10,11
- - End Of File - - 7B348225B1B38ED45C174A1571147DDF

nějaké svinstvo jsme smazali

zde http://www.viry.cz/forum/viewtopic.php?t=51359 stáhněte SUPERAntiSpyware, nainstalujte a proveďte kompletní sken podle návodu, nahlašte výsledky

poté restartujte pc a vložte nový log z RSITu

novy log RSIT

Logfile of random's system information tool 1.07 (written by random/random)
Run by Tomáš at 2010-05-30 20:34:23
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 16 GB (20%) free of 76 GB
Total RAM: 3070 MB (81% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:34:29, on 30.5.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\wscntfy.exe
C:\totalcmd\TOTALCMD.EXE
C:\Documents and Settings\Tomáš\Plocha\RSIT.exe
C:\Program Files\trend micro\Tomáš.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero8\InCD\NBHGui.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [RGSC] C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'Default user')
O4 - Startup: outicon.lnk = C:\WINDOWS\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS4\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS8\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS9\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS10\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O17 - HKLM\System\CS11\Services\Tcpip\..\{29AAB21E-4A94-46E1-9C0C-893D5A6F7326}: NameServer = 10.120.65.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate1ca406cfe5be984) (gupdate1ca406cfe5be984) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe

--
End of file - 8782 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-04-04 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-04-12 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-04-12 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SecurDisc"=C:\Program Files\Nero\Nero8\InCD\NBHGui.exe [2007-10-15 2045224]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2004-10-14 1404928]
"IntelliPoint"=c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2006-11-21 842584]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-04-04 36272]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-03-24 952768]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CursorFX"=C:\Program Files\Stardock\CursorFX\CursorFX.exe [2008-07-07 416768]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe [2007-10-23 202024]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"RGSC"=C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe [2008-11-14 305064]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-05-18 2397424]

C:\Documents and Settings\Tomáš\Nabídka Start\Programy\Po spuštění
outicon.lnk - C:\WINDOWS\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2009-09-04 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-03-03 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"MaxRecentDocs"=11
"GreyMSIAds"=1
"NoUserNameInStartMenu"=1
"NoDrives"=0
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\programy\K800i\updateservice\Update Service\Update Service.exe"="C:\programy\K800i\updateservice\Update Service\Update Service.exe:*:Enabled:Update Service"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\CesarFTP\Server.exe"="C:\Program Files\CesarFTP\Server.exe:*:Enabled:Server"
"C:\Program Files\Miranda IM\miranda32.exe"="C:\Program Files\Miranda IM\miranda32.exe:*:Enabled:Miranda IM"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe"="C:\gamezone\GTA4\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club"
"C:\gamezone\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe"="C:\gamezone\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-05-30 19:47:17 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\SUPERAntiSpyware.com
2010-05-30 19:47:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2010-05-30 19:47:04 ----D---- C:\Program Files\SUPERAntiSpyware
2010-05-30 17:44:47 ----D---- C:\WINDOWS\temp
2010-05-30 17:44:43 ----A---- C:\ComboFix.txt
2010-05-30 17:10:26 ----A---- C:\WINDOWS\zip.exe
2010-05-30 17:10:26 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-05-30 17:10:26 ----A---- C:\WINDOWS\SWSC.exe
2010-05-30 17:10:26 ----A---- C:\WINDOWS\SWREG.exe
2010-05-30 17:10:26 ----A---- C:\WINDOWS\sed.exe
2010-05-30 17:10:26 ----A---- C:\WINDOWS\PEV.exe
2010-05-30 17:10:26 ----A---- C:\WINDOWS\NIRCMD.exe
2010-05-30 17:10:26 ----A---- C:\WINDOWS\MBR.exe
2010-05-30 17:10:26 ----A---- C:\WINDOWS\grep.exe
2010-05-30 17:08:14 ----D---- C:\WINDOWS\ERDNT
2010-05-30 15:03:58 ----D---- C:\ComboFix
2010-05-30 14:57:09 ----D---- C:\Qoobox
2010-05-30 14:53:35 ----A---- C:\WINDOWS\system32\CF23768.exe
2010-05-29 23:21:55 ----D---- C:\Program Files\trend micro
2010-05-29 23:21:54 ----D---- C:\rsit
2010-05-26 18:32:59 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\vlc
2010-05-21 00:55:23 ----A---- C:\WINDOWS\mickey32.dll
2010-05-21 00:55:23 ----A---- C:\WINDOWS\Matrix Code.exe
2010-05-16 21:28:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\GoldWave
2010-05-16 15:28:45 ----D---- C:\Program Files\GoldWave
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTWMAFile2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTTextToAudio2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTAudioVisualization2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTAudioTransform2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTAudioRecord2.dll
2010-05-16 10:51:01 ----A---- C:\WINDOWS\system32\NCTAudioPlayer2.dll
2010-05-16 10:51:00 ----A---- C:\WINDOWS\system32\NCTAudioInformation2.dll
2010-05-16 10:51:00 ----A---- C:\WINDOWS\system32\NCTAudioFile2.dll
2010-05-16 10:51:00 ----A---- C:\WINDOWS\system32\NCTAudioEditor2.dll
2010-05-16 10:51:00 ----A---- C:\WINDOWS\system32\NCTAudioCDGrabber2.dll
2010-05-15 20:53:53 ----D---- C:\Program Files\NCH Swift Sound
2010-05-15 20:53:53 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\NCH Swift Sound
2010-05-15 20:51:15 ----A---- C:\WINDOWS\system32\msvcr70.dll
2010-05-13 18:18:34 ----A---- C:\WINDOWS\gswin32.ini
2010-05-13 18:18:27 ----D---- C:\Program Files\gs
2010-05-13 18:12:25 ----D---- C:\Program Files\WordToPDF
2010-05-13 18:10:17 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\WordToPDF
2010-05-13 14:03:02 ----D---- C:\Program Files\Common Files\Skype
2010-05-13 01:14:32 ----D---- C:\Program Files\Common Files\DESIGNER
2010-05-13 01:14:08 ----D---- C:\Program Files\Microsoft.NET
2010-05-12 22:03:43 ----D---- C:\Program Files\Microsoft Visual Studio
2010-05-09 22:03:34 ----D---- C:\WINDOWS\system32\AGEIA
2010-05-09 22:03:32 ----D---- C:\Program Files\AGEIA Technologies
2010-05-08 11:38:42 ----D---- C:\Program Files\DAEMON Tools Lite
2010-05-06 23:12:56 ----D---- C:\Program Files\Webteh
2010-05-06 21:14:42 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-05-06 21:14:41 ----D---- C:\Program Files\Common Files\Java
2010-05-06 21:11:04 ----A---- C:\WINDOWS\system32\javaws.exe
2010-05-06 21:11:04 ----A---- C:\WINDOWS\system32\javaw.exe
2010-05-06 21:11:04 ----A---- C:\WINDOWS\system32\java.exe
2010-05-06 21:11:04 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-05-04 11:26:29 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\DivX
2010-05-02 12:54:13 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\dvdcss

======List of files/folders modified in the last 1 months======

2010-05-30 20:33:58 ----A---- C:\WINDOWS\WINCMD.INI
2010-05-30 20:33:27 ----D---- C:\WINDOWS\system32\CatRoot2
2010-05-30 20:24:17 ----D---- C:\WINDOWS\Prefetch
2010-05-30 20:21:35 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-05-30 19:47:04 ----D---- C:\Program Files
2010-05-30 19:41:59 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Skype
2010-05-30 18:54:27 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\skypePM
2010-05-30 17:44:47 ----D---- C:\WINDOWS
2010-05-30 17:43:01 ----SD---- C:\WINDOWS\Tasks
2010-05-30 17:41:14 ----A---- C:\WINDOWS\system.ini
2010-05-30 17:39:41 ----D---- C:\WINDOWS\system32
2010-05-30 17:36:52 ----D---- C:\WINDOWS\system32\drivers
2010-05-30 17:36:52 ----D---- C:\WINDOWS\AppPatch
2010-05-30 17:36:48 ----D---- C:\Program Files\Common Files
2010-05-30 14:56:25 ----RD---- C:\programy
2010-05-29 22:50:20 ----D---- C:\Program Files\HijackThis
2010-05-29 03:26:57 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\uTorrent
2010-05-27 00:44:31 ----D---- C:\gamezone
2010-05-26 18:31:24 ----D---- C:\Program Files\VideoLAN
2010-05-24 23:42:08 ----A---- C:\WINDOWS\NeroDigital.ini
2010-05-24 00:25:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2010-05-24 00:25:24 ----SHD---- C:\WINDOWS\Installer
2010-05-22 20:40:23 ----HD---- C:\Program Files\InstallShield Installation Information
2010-05-22 17:06:31 ----D---- C:\Program Files\Miranda IM
2010-05-21 23:04:48 ----D---- C:\Program Files\FreeRapid-0.83u1
2010-05-19 23:01:53 ----D---- C:\WINDOWS\system32\config
2010-05-16 22:05:32 ----HD---- C:\WINDOWS\inf
2010-05-13 14:03:02 ----RD---- C:\Program Files\Skype
2010-05-13 14:02:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2010-05-13 01:18:15 ----D---- C:\WINDOWS\system32\wbem
2010-05-13 01:18:14 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-05-13 01:16:50 ----A---- C:\WINDOWS\ODBC.INI
2010-05-13 01:16:09 ----RSD---- C:\WINDOWS\assembly
2010-05-13 01:15:58 ----A---- C:\WINDOWS\win.ini
2010-05-13 01:15:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-05-13 01:15:16 ----RSD---- C:\WINDOWS\Fonts
2010-05-13 01:15:06 ----HD---- C:\WINDOWS\ShellNew
2010-05-13 01:14:33 ----D---- C:\Program Files\Microsoft Office
2010-05-13 01:08:50 ----D---- C:\WINDOWS\system
2010-05-09 22:08:19 ----D---- C:\WINDOWS\system32\DirectX
2010-05-09 22:04:11 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-05-09 22:02:51 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-05-09 20:08:51 ----SD---- C:\Documents and Settings\Tomáš\Data aplikací\Microsoft
2010-05-08 20:38:25 ----D---- C:\Program Files\XTB-Trader 4
2010-05-08 13:09:22 ----A---- C:\WINDOWS\WORDPAD.INI
2010-05-08 13:05:20 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2010-05-08 00:27:24 ----D---- C:\Program Files\MetaTrader NordFX
2010-05-06 22:59:36 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-05-06 21:10:41 ----D---- C:\Program Files\Java
2010-05-04 11:35:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2010-05-04 11:26:43 ----D---- C:\Program Files\DivX
2010-05-04 11:24:42 ----D---- C:\Program Files\Common Files\DivX Shared
2010-05-02 17:53:09 ----D---- C:\Program Files\Mozilla Firefox
2010-05-02 17:53:09 ----D---- C:\Program Files\Golden html editor
2010-05-02 17:53:09 ----D---- C:\Documents and Settings\Tomáš\Data aplikací\Xfire
2010-05-02 17:53:08 ----D---- C:\Program Files\TSO

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-05-06 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys [2007-10-15 38952]
R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys [2007-10-15 40488]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; C:\WINDOWS\system32\DRIVERS\tcpip6.sys [2008-04-14 225664]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-05-06 100432]
R2 cpuz133;cpuz133; \??\C:\WINDOWS\system32\drivers\cpuz133_x32.sys []
R2 MaVctrl;MaVctrl; C:\WINDOWS\system32\DRIVERS\MaVc2K.sys [2005-08-18 11473]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-05-06 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-03-03 4630016]
R3 b57w2k;Broadcom NetXtreme 57xx Gigabit Controller; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-08-23 121472]
R3 HdAudAddService;ATI Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\AtiHdAud.sys [2006-12-28 84992]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\WINDOWS\system32\DRIVERS\point32.sys [2006-11-07 21760]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service; C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2010-03-07 27632]
R3 senfilt;senfilt; C:\WINDOWS\system32\drivers\senfilt.sys [2004-09-17 732928]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2005-01-27 260352]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; C:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-14 12288]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys [2007-10-15 125864]
S3 catchme;catchme; \??\C:\DOCUME~1\TOM~1\LOCALS~1\Temp\catchme.sys []
S3 mak800c;mak800c; C:\WINDOWS\System32\Drivers\mak800c.sys [2005-06-16 24784]
S3 mak800m;mak800m; C:\WINDOWS\System32\Drivers\mak800m.sys [2005-06-16 25044]
S3 mak800u;mak800u; C:\WINDOWS\System32\Drivers\mak800u.sys [2006-07-20 55552]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-03-02 691696]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 6to4;Pomocná služba protokolu IPv6; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-03-03 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero8\InCD\InCDsrv.exe [2007-10-15 1440552]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-06-19 322120]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2007-09-20 853288]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-16 75064]
R2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2007-10-23 382248]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-12-20 593920]
S2 gupdate1ca406cfe5be984;Služba Google Update (gupdate1ca406cfe5be984); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-12-10 353280]
S3 TUWinStylerThemeSvc;TuneUp WinStyler Theme Service; C:\Program Files\TuneUp Utilities 2004\WinStylerThemeSvc.exe [2004-08-05 117760]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

C:\WINDOWS\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe otestujte na VIRUSTOTALu

jednoduchý návod: po načtení stránky, kliknout na Procházet, najít cestu k výše zmíněnému souboru a kliknout na tlačítko Odeslat soubor; pokud vyskočí hláška, že soubor byl už testován, ignorujte to a proveďte sken znova; po ukončení skenu sem vložte výsledky buď zkopírováním textu nebo vložením odkazu

jo vlastně tenhle soubor mi taky hází nějakou hlášku při zapnutí outlooku, problem je že když chci najít soubor pro hledání - složku installer ---- mi to nenabídne.

výsledek testu.
http://www.virustotal.com/cs/analisis/3 ... 1275246753

to s tim outlookem je knihovna outbak.dll - outlook hlásí, že není platným doplňkem sady Office.
Nevím co to znamená, už jsem kvuli té hlášce přeinstaloval celé officy.

spusťte HJT odsud c:\Program Files\HijackThis\HijackThis.exe, nechte proběhnout sken, poté fixněte tento řádek O4 - Startup: outicon.lnk = C:\WINDOWS\Installer\{90110405-6000-11D3-8CFE-0150048383C9}\outicon.exe a klikněte na Fix checked
pak restartujte pc, zkuste spustit Outlook a nahlašte výsledky

vypadá to v klidu, akorát ta knihovna outbak.dll se stále hlásí.Internet už je celkem rychlý.

tak jsem našla toto, je to sice s takovým divokým překladem, ale za zkoušku nic nedáte

# Zaregistrujte soubor Outbak.dll. T Za tímto účelem:

1. Klepněte na tlačítko Start a potom na příkaz Spustit.
2. Do pole Otevřít zadejte jednu z následujících řádků, v závislosti na verzi aplikace Outlook, kterou používáte, a klepněte na tlačítko OK:
* regsvr32 " Drive :\program files\microsoft office\office10\addins\outbak.dll" regsvr32 "Jednotka: \ Program Files \ Microsoft Office \ Office10 \ Addins \ outbak.dll"
* regsvr32 " Drive :\program files\microsoft office\office11\addins\outbak.dll" regsvr32 "Jednotka: \ Program Files \ Microsoft Office \ Office11 \ Addins \ outbak.dll"
* regsvr32 " Drive :\program files\microsoft office\office12\addins\outbak.dll" regsvr32 "Jednotka: \ Program Files \ Microsoft Office \ Office12 \ Addins \ outbak.dll"
3. Klepněte na tlačítko OK, když se zobrazí zpráva, že operace byla úspěšně dokončena.

# Ověřte, zda je aplikace Outlook Zálohování osobních složek nástroj, který zní Outlook. Za tímto účelem:

1. V nabídce Nástroje klikněte na Možnosti.
2. Klepněte na kartu Jiné a potom na tlačítko Upřesnit nastavení.
3. V dialogovém okně Upřesnit nastavení, klepněte na tlačítko KOM přidat-ins.
4. Ověřte, zda je Outlook Backup Addin objeví v přidat-ins k dispozici seznam, a to zaškrtávací políčko, které je vedle Outlook Backup Addin je vybrána.

Vyřešil jsem to reinstalací souboru pfbackup.exe, vypadá to že zatím funguje.
díky za pomoc.

jste šikula
jinak nemáte zač