Buffer overrun :/

[FiXator]

Dobry den, mam problem se spoustenim programu. Vypis je zde...predem dekuji za pomoc

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:50:00, on 13.9.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS.0\Explorer.EXE
C:\WINDOWS.0\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS.0\RTHDCPL.EXE
C:\WINDOWS.0\system32\ctfmon.exe
C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
C:\Program Files\Xfire\Xfire.exe
C:\WINDOWS.0\system32\wscntfy.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Honza.USER\Dokumenty\Stažené soubory\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "C:\WINDOWS.0\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper_3004.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS.0\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

--
End of file - 4197 bytes

[Rudy]

Dejte log z RSIT: http://viry.cz/forum/viewtopic.php?f=24&t=81939 . Je podrobnější, než HijackThis. O jaký program se jedná?

[FiXator]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Honza at 2010-09-13 20:06:31
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 97 GB (94%) free of 103 GB
Total RAM: 2047 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:06:32, on 13.9.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS.0\Explorer.EXE
C:\WINDOWS.0\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS.0\RTHDCPL.EXE
C:\WINDOWS.0\system32\ctfmon.exe
C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
C:\Program Files\Xfire\Xfire.exe
C:\WINDOWS.0\system32\wscntfy.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Honza.USER\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Honza.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "C:\WINDOWS.0\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper_3004.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.0\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.0\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS.0\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

--
End of file - 4499 bytes

======Registry dump======


jedna se o hru...Call of Duty...

[Rudy]

Log není kompletní.

[FiXator]

info.txt logfile of random's system information tool 1.08 2010-09-13 20:06:34

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS.0\INF\PCHealth.inf
Adobe Download Manager-->"C:\WINDOWS.0\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper_3004.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1
Adobe Flash Player 10 Plugin-->C:\WINDOWS.0\system32\Macromed\Flash\FlashUtil10i_Plugin.exe -maintain plugin
ATI Catalyst Registration-->MsiExec.exe /X{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}
avast! Free Antivirus-->C:\Program Files\Alwil Software\Avast5\aswRunDll.exe "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup
Belkin Wireless USB Utility-->C:\Program Files\InstallShield Installation Information\{A6359CCF-215D-43D9-8366-479D231F2A72}\setup.exe -runfromtemp -l0x0409
Catalyst Control Center - Branding-->MsiExec.exe /I{DDA34038-89BD-4804-B0B8-DC48D5DFB463}
Conduit Engine-->C:\PROGRA~1\CONDUI~1\ConduitEngineUninstall.exe
DAEMON Tools Toolbar-->C:\Program Files\DAEMON Tools Toolbar\uninst.exe
GamePark-->"C:\Program Files\GamePark\unins000.exe"
HijackThis 2.0.2-->"C:\Documents and Settings\Honza.USER\Dokumenty\Stažené soubory\HijackThis.exe" /uninstall
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Mozilla Firefox (3.6.9)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
REALTEK GbE & FE Ethernet PCI-E NIC Driver-->C:\Program Files\InstallShield Installation Information\{C9BED750-1211-4480-B1A5-718A3BE15525}\SETUP.EXE -runfromtemp -l0x0005 -removeonly
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\SETUP.EXE" -l0x5 -removeonly
TeamSpeak 3 Client-->"C:\Program Files\TeamSpeak 3 Client\uninstall.exe"
The Lord of the Rings FREE Trial -->MsiExec.exe /X{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}
Xfire (remove only)-->"C:\Program Files\Xfire\uninst.exe"
XfireXO Toolbar-->C:\PROGRA~1\XfireXO\UNWISE.EXE /U C:\PROGRA~1\XfireXO\INSTALL.LOG

======Security center information======

AV: avast! Antivirus

======System event log======

Computer Name: USER
Event Code: 6011
Message: Název tohoto počítače v systémech DNS a NetBIOS byl změněn z MACHINENAME na USER.

Record Number: 5
Source Name: EventLog
Time Written: 20100913173733.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Během prověřování, zda \Device\Serial0 je skutečně sériový port, byl zjištěn zásobník typu FIFO. Bude použit tento zásobník.

Record Number: 4
Source Name: Serial
Time Written: 20100913192859.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 2
Message: Během prověřování, zda \Device\Serial1 je skutečně sériový port, byl zjištěn zásobník typu FIFO. Bude použit tento zásobník.

Record Number: 3
Source Name: Serial
Time Written: 20100913192859.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 6005
Message: Služba Event Log byla spuštěna.

Record Number: 2
Source Name: EventLog
Time Written: 20100913192840.000000+120
Event Type: Informace
User:

Computer Name: MACHINENAME
Event Code: 6009
Message: Microsoft (R) Windows (R) 5.01. 2600 Service Pack 3 Multiprocessor Free.

Record Number: 1
Source Name: EventLog
Time Written: 20100913192840.000000+120
Event Type: Informace
User:

=====Application event log=====

Computer Name: USER
Event Code: 1000
Message: Čítače výkonu pro službu MSDTC (MSDTC) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 5
Source Name: LoadPerf
Time Written: 20100913173922.000000+120
Event Type: Informace
User:

Computer Name: USER
Event Code: 1000
Message: Čítače výkonu pro službu TermService (Terminálová služba) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 4
Source Name: LoadPerf
Time Written: 20100913173918.000000+120
Event Type: Informace
User:

Computer Name: USER
Event Code: 1000
Message: Čítače výkonu pro službu RemoteAccess (Směrování a vzdálený přístup) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 3
Source Name: LoadPerf
Time Written: 20100913173818.000000+120
Event Type: Informace
User:

Computer Name: USER
Event Code: 1000
Message: Čítače výkonu pro službu PSched (PSched) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 2
Source Name: LoadPerf
Time Written: 20100913173801.000000+120
Event Type: Informace
User:

Computer Name: USER
Event Code: 1000
Message: Čítače výkonu pro službu RSVP (QoS RSVP) byly úspěšně načteny.
Data záznamu obsahují nové indexové hodnoty přiřazené
této službě.

Record Number: 1
Source Name: LoadPerf
Time Written: 20100913173741.000000+120
Event Type: Informace
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 6, GenuineIntel
"PROCESSOR_REVISION"=0f06
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------


Omlouvam se, nejsem moc zbehly v tomto...

[Rudy]

Potřebuji log, který vypadá takto: http://www.viry.cz/forum/viewtopic.php?f=30&t=104611 .

[FiXator]

Logfile of random's system information tool 1.08 (written by random/random)
Run by Honza at 2010-09-13 20:53:13
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 97 GB (94%) free of 103 GB
Total RAM: 2047 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:53:13, on 13.9.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\WINDOWS.0\system32\svchost.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS.0\Explorer.EXE
C:\WINDOWS.0\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS.0\RTHDCPL.EXE
C:\WINDOWS.0\system32\ctfmon.exe
C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
C:\Program Files\Xfire\Xfire.exe
C:\WINDOWS.0\system32\wscntfy.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Honza.USER\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Honza.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O3 - Toolbar: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Program Files\XfireXO\tbXfir.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\RunOnce: [Uninstall Adobe Download Manager] "C:\WINDOWS.0\system32\rundll32.exe" "C:\Program Files\NOS\bin\getPlus_Helper_3004.dll",Uninstall /IE2883E8F-472F-4fb0-9522-AC9BF37916A7 /Get1noarp
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.0\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.0\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS.0\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

--
End of file - 4499 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5e5ab302-7f65-44cd-8211-c1d4caaccea3}]
XfireXO Toolbar - C:\Program Files\XfireXO\tbXfir.dll [2010-09-12 3863136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - XfireXO Toolbar - C:\Program Files\XfireXO\tbXfir.dll [2010-09-12 3863136]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-09-12 3863136]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-08-03 98304]
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"RTHDCPL"=C:\WINDOWS.0\RTHDCPL.EXE [2006-11-14 16270848]
"SkyTel"=C:\WINDOWS.0\SkyTel.EXE [2006-05-16 2879488]
"Alcmtr"=C:\WINDOWS.0\ALCMTR.EXE [2005-05-03 69632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uninstall Adobe Download Manager"=C:\Program Files\NOS\bin\getPlus_Helper_3004.dll [2010-08-13 66112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS.0\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

C:\Documents and Settings\All Users.WINDOWS.0\Nabídka Start\Programy\Po spuštění
Belkin Wireless USB Utility.lnk - C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe

C:\Documents and Settings\Honza.USER\Nabídka Start\Programy\Po spuštění
Xfire.lnk - C:\Program Files\Xfire\Xfire.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS.0\system32\Ati2evxx.dll [2010-08-04 159744]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Xfire\Xfire.exe"="C:\Program Files\Xfire\Xfire.exe:*:Enabled:Xfire"
"C:\WINDOWS.0\system32\dpvsetup.exe"="C:\WINDOWS.0\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS.0\system32\rundll32.exe"="C:\WINDOWS.0\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"D:\Hry\Call of Duty Game of the Year Edition\CoDMP.exe"="D:\Hry\Call of Duty Game of the Year Edition\CoDMP.exe:*:Enabled:CoDMP"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-09-13 20:06:31 ----D---- C:\rsit
2010-09-13 20:06:31 ----D---- C:\Program Files\trend micro
2010-09-13 19:35:42 ----A---- C:\WINDOWS.0\system32\h323log.txt
2010-09-13 19:35:36 ----A---- C:\WINDOWS.0\system32\drivers\audstub.sys
2010-09-13 19:35:14 ----A---- C:\WINDOWS.0\system32\hidserv.dll
2010-09-13 19:34:41 ----A---- C:\WINDOWS.0\system32\drivers\redbook.sys
2010-09-13 19:34:22 ----A---- C:\WINDOWS.0\system32\drivers\i8042prt.sys
2010-09-13 19:33:33 ----A---- C:\WINDOWS.0\system32\usbui.dll
2010-09-13 19:32:17 ----A---- C:\WINDOWS.0\system32\PerfStringBackup.INI
2010-09-13 19:32:16 ----SHD---- C:\WINDOWS.0\Installer
2010-09-13 19:32:16 ----A---- C:\WINDOWS.0\ODBCINST.INI
2010-09-13 19:32:12 ----RA---- C:\WINDOWS.0\system32\kbdtuq.dll
2010-09-13 19:32:12 ----RA---- C:\WINDOWS.0\system32\kbdtuf.dll
2010-09-13 19:32:12 ----RA---- C:\WINDOWS.0\system32\kbdazel.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdycc.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbduzb.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdur.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdtat.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdru1.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdru.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdmon.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdkyr.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdkaz.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdbu.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdblr.dll
2010-09-13 19:32:10 ----RA---- C:\WINDOWS.0\system32\kbdaze.dll
2010-09-13 19:32:09 ----RA---- C:\WINDOWS.0\system32\kbdhept.dll
2010-09-13 19:32:08 ----RA---- C:\WINDOWS.0\system32\kbdhela3.dll
2010-09-13 19:32:08 ----RA---- C:\WINDOWS.0\system32\kbdhela2.dll
2010-09-13 19:32:08 ----RA---- C:\WINDOWS.0\system32\kbdhe319.dll
2010-09-13 19:32:08 ----RA---- C:\WINDOWS.0\system32\kbdhe220.dll
2010-09-13 19:32:08 ----RA---- C:\WINDOWS.0\system32\kbdhe.dll
2010-09-13 19:32:08 ----RA---- C:\WINDOWS.0\system32\kbdgkl.dll
2010-09-13 19:32:07 ----RA---- C:\WINDOWS.0\system32\kbdlv1.dll
2010-09-13 19:32:07 ----RA---- C:\WINDOWS.0\system32\kbdlv.dll
2010-09-13 19:32:07 ----RA---- C:\WINDOWS.0\system32\kbdlt1.dll
2010-09-13 19:32:07 ----RA---- C:\WINDOWS.0\system32\kbdlt.dll
2010-09-13 19:32:07 ----RA---- C:\WINDOWS.0\system32\kbdest.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdycl.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdsl1.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdsl.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdro.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdpl1.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdpl.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdhu1.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdhu.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\kbdcr.dll
2010-09-13 19:32:01 ----RA---- C:\WINDOWS.0\system32\KBDAL.DLL
2010-09-13 19:31:56 ----A---- C:\WINDOWS.0\system32\spxcoins.dll
2010-09-13 19:31:56 ----A---- C:\WINDOWS.0\system32\irclass.dll
2010-09-13 19:31:56 ----A---- C:\WINDOWS.0\system32\EqnClass.Dll
2010-09-13 19:31:56 ----A---- C:\WINDOWS.0\system32\dgsetup.dll
2010-09-13 19:31:56 ----A---- C:\WINDOWS.0\system32\dgrpsetu.dll
2010-09-13 19:31:54 ----N---- C:\WINDOWS.0\system32\CONFIG.TMP
2010-09-13 19:31:54 ----A---- C:\WINDOWS.0\TASKMAN.EXE
2010-09-13 19:31:53 ----A---- C:\WINDOWS.0\system32\drivers\irenum.sys
2010-09-13 19:31:53 ----A---- C:\WINDOWS.0\system32\batt.dll
2010-09-13 19:31:53 ----A---- C:\WINDOWS.0\NOTEPAD.EXE
2010-09-13 19:31:50 ----A---- C:\WINDOWS.0\system32\storprop.dll
2010-09-13 19:31:44 ----ASH---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\desktop.ini
2010-09-13 19:30:03 ----RA---- C:\WINDOWS.0\SET8.tmp
2010-09-13 19:30:02 ----RA---- C:\WINDOWS.0\SET4.tmp
2010-09-13 19:30:01 ----RA---- C:\WINDOWS.0\SET3.tmp
2010-09-13 19:29:56 ----D---- C:\WINDOWS.0\system32\CatRoot2
2010-09-13 19:29:56 ----D---- C:\WINDOWS.0\system32\CatRoot
2010-09-13 19:29:51 ----SD---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Microsoft
2010-09-13 19:29:38 ----A---- C:\WINDOWS.0\setuplog.txt
2010-09-13 19:29:12 ----RA---- C:\WINDOWS.0\system32\drivers\Rtenicxp.sys
2010-09-13 19:25:29 ----RSHDC---- C:\WINDOWS.0\system32\dllcache
2010-09-13 19:25:29 ----RSD---- C:\WINDOWS.0\Fonts
2010-09-13 19:25:29 ----RD---- C:\WINDOWS.0\Web
2010-09-13 19:25:29 ----HD---- C:\WINDOWS.0\inf
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\WinSxS
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\twain_32
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Temp
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\wins
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\wbem
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\usmt
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\spool
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\ShellExt
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\Setup
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\ras
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\oobe
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\npp
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\mui
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\inetsrv
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\IME
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\icsxml
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\ias
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\export
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\drivers\etc
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\drivers\disdn
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\drivers
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\dhcp
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\cs-cz
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\cs
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\config
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\3com_dmi
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\3076
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\2052
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1054
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1042
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1041
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1037
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1033
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1031
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1029
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1028
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32\1025
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system32
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\system
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\security
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Resources
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\repair
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Provisioning
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\pchealth
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\PeerNet
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Network Diagnostic
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\mui
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\msapps
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\msagent
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Media
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\L2Schemas
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\java
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\ime
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Help
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\ehome
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Driver Cache
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Debug
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Cursors
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Connection Wizard
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\Config
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\AppPatch
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0\addins
2010-09-13 19:25:29 ----D---- C:\WINDOWS.0
2010-09-13 19:25:29 ----ASH---- C:\pagefile.sys
2010-09-13 19:21:40 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-09-13 19:21:39 ----A---- C:\WINDOWS.0\system32\drivers\sptd.sys
2010-09-13 19:21:27 ----D---- C:\Program Files\DAEMON Tools Lite
2010-09-13 19:21:14 ----D---- C:\Documents and Settings\Honza.USER\Data aplikací\DAEMON Tools Lite
2010-09-13 19:21:13 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\DAEMON Tools Lite
2010-09-13 19:05:29 ----D---- C:\Documents and Settings\Honza.USER\Data aplikací\Macromedia
2010-09-13 19:05:29 ----D---- C:\Documents and Settings\Honza.USER\Data aplikací\Adobe
2010-09-13 19:01:45 ----D---- C:\Program Files\NOS
2010-09-13 19:01:45 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\NOS
2010-09-13 18:33:25 ----D---- C:\Documents and Settings\Honza.USER\Data aplikací\TS3Client
2010-09-13 18:30:22 ----D---- C:\WINDOWS.0\system32\Lang
2010-09-13 18:28:42 ----R---- C:\WINDOWS.0\system32\ChCfg.exe
2010-09-13 18:28:41 ----A---- C:\WINDOWS.0\system32\drivers\splitter.sys
2010-09-13 18:28:40 ----A---- C:\WINDOWS.0\system32\drivers\wdmaud.sys
2010-09-13 18:28:38 ----A---- C:\WINDOWS.0\system32\drivers\DMusic.sys
2010-09-13 18:28:37 ----A---- C:\WINDOWS.0\system32\drivers\swmidi.sys
2010-09-13 18:28:35 ----A---- C:\WINDOWS.0\system32\drivers\aec.sys
2010-09-13 18:28:34 ----A---- C:\WINDOWS.0\system32\drivers\kmixer.sys
2010-09-13 18:28:33 ----A---- C:\WINDOWS.0\system32\drivers\drmkaud.sys
2010-09-13 18:28:32 ----A---- C:\WINDOWS.0\system32\drivers\sysaudio.sys
2010-09-13 18:28:31 ----A---- C:\WINDOWS.0\system32\drivers\MSKSSRV.sys
2010-09-13 18:28:30 ----A---- C:\WINDOWS.0\system32\drivers\MSPQM.sys
2010-09-13 18:28:28 ----A---- C:\WINDOWS.0\system32\drivers\MSPCLOCK.sys
2010-09-13 18:28:23 ----D---- C:\WINDOWS.0\system32\RTCOM
2010-09-13 18:28:21 ----A---- C:\WINDOWS.0\system32\drivers\portcls.sys
2010-09-13 18:28:20 ----A---- C:\WINDOWS.0\system32\ksuser.dll
2010-09-13 18:28:20 ----A---- C:\WINDOWS.0\system32\drivers\drmk.sys
2010-09-13 18:27:54 ----D---- C:\WINDOWS.0\OPTIONS
2010-09-13 18:27:35 ----D---- C:\Documents and Settings\Honza.USER\Data aplikací\InstallShield
2010-09-13 18:27:24 ----R---- C:\WINDOWS.0\RtlExUpd.dll
2010-09-13 18:24:21 ----A---- C:\WINDOWS.0\gdrv.sys
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\Oemdspif.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\drivers\ati2mtag.sys
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\drivers\ati2erec.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ativvaxx.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ativcoxx.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atitvo32.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atipdlxx.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atiok3x2.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atioglxx.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ATIODE.exe
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ATIODCLI.exe
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atimpc32.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atikvmag.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atiiiexx.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ATIDEMGX.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ATIDDC.DLL
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\aticalrt.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\aticaldd.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\aticalcl.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atibtmon.exe
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atiapfxx.exe
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\atiadlxx.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ati3duag.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\Ati2mdxx.exe
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ati2evxx.exe
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ati2evxx.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ati2edxx.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ati2dvag.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\ati2cqag.dll
2010-09-13 18:14:46 ----A---- C:\WINDOWS.0\system32\amdpcom32.dll
2010-09-13 18:14:45 ----DC---- C:\WINDOWS.0\system32\DRVSTORE
2010-09-13 18:12:27 ----D---- C:\Program Files\Conduit
2010-09-13 18:12:26 ----D---- C:\Program Files\ConduitEngine
2010-09-13 18:12:24 ----D---- C:\Program Files\XfireXO
2010-09-13 18:12:16 ----D---- C:\Documents and Settings\Honza.USER\Data aplikací\Xfire
2010-09-13 18:12:13 ----D---- C:\Program Files\Xfire
2010-09-13 18:12:11 ----D---- C:\Documents and Settings\Honza.USER\Data aplikací\Mozilla
2010-09-13 18:10:58 ----A---- C:\WINDOWS.0\system32\drivers\aswFsBlk.sys
2010-09-13 18:10:57 ----A---- C:\WINDOWS.0\system32\drivers\aswSP.sys
2010-09-13 18:10:56 ----A---- C:\WINDOWS.0\system32\drivers\aswTdi.sys
2010-09-13 18:10:56 ----A---- C:\WINDOWS.0\system32\drivers\aswRdr.sys
2010-09-13 18:10:54 ----A---- C:\WINDOWS.0\system32\drivers\aswmon2.sys
2010-09-13 18:10:54 ----A---- C:\WINDOWS.0\system32\drivers\aswmon.sys
2010-09-13 18:10:54 ----A---- C:\WINDOWS.0\system32\drivers\aavmker4.sys
2010-09-13 18:10:47 ----A---- C:\WINDOWS.0\system32\aswBoot.exe
2010-09-13 18:10:43 ----D---- C:\Documents and Settings\All Users.WINDOWS.0\Data aplikací\Alwil Software
2010-09-13 18:06:50 ----D---- C:\WINDOWS.0\{9044EB87-7F7C-4801-9A35-1481E1017EAE}
2010-09-13 17:46:25 ----D---- C:\Documents and Settings\Honza.USER\Data aplikací\Identities
2010-09-13 17:45:48 ----ASH---- C:\Documents and Settings\Honza.USER\Data aplikací\desktop.ini
2010-09-13 17:45:47 ----SD---- C:\Documents and Settings\Honza.USER\Data aplikací\Microsoft
2010-09-13 17:45:10 ----D---- C:\WINDOWS.0\SoftwareDistribution
2010-09-13 17:45:01 ----D---- C:\WINDOWS.0\Prefetch
2010-09-13 17:45:00 ----SD---- C:\WINDOWS.0\system32\Microsoft
2010-09-13 17:45:00 ----A---- C:\WINDOWS.0\SchedLgU.Txt
2010-09-13 17:42:25 ----D---- C:\WINDOWS.0\system32\xircom
2010-09-13 17:42:07 ----A---- C:\WINDOWS.0\control.ini
2010-09-13 17:41:58 ----A---- C:\WINDOWS.0\OEWABLog.txt
2010-09-13 17:41:54 ----A---- C:\WINDOWS.0\system32\mapi32.dll
2010-09-13 17:41:09 ----SD---- C:\WINDOWS.0\Downloaded Program Files
2010-09-13 17:41:09 ----RD---- C:\WINDOWS.0\Offline Web Pages
2010-09-13 17:41:09 ----RAH---- C:\WINDOWS.0\system32\logonui.exe.manifest
2010-09-13 17:41:04 ----RAH---- C:\WINDOWS.0\system32\cdplayer.exe.manifest
2010-09-13 17:40:45 ----D---- C:\WINDOWS.0\system32\DirectX
2010-09-13 17:40:40 ----A---- C:\WINDOWS.0\system32\atrace.dll
2010-09-13 17:40:38 ----A---- C:\WINDOWS.0\system32\desktop.ini
2010-09-13 17:40:38 ----A---- C:\WINDOWS.0\desktop.ini
2010-09-13 17:40:33 ----A---- C:\WINDOWS.0\system32\nmevtmsg.dll
2010-09-13 17:40:33 ----A---- C:\WINDOWS.0\system32\acctres.dll
2010-09-13 17:40:32 ----SD---- C:\WINDOWS.0\Tasks
2010-09-13 17:40:32 ----A---- C:\WINDOWS.0\system32\icfgnt5.dll
2010-09-13 17:40:30 ----D---- C:\WINDOWS.0\system32\Macromed
2010-09-13 17:40:30 ----D---- C:\WINDOWS.0\srchasst
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wuweb.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wups.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wucltui.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wuauserv.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wuaueng1.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wuaueng.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wuauclt1.exe
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wuauclt.exe
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\wuapi.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\bitsprx4.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\bitsprx3.dll
2010-09-13 17:40:29 ----A---- C:\WINDOWS.0\system32\bitsprx2.dll
2010-09-13 17:40:28 ----A---- C:\WINDOWS.0\system32\qmgrprxy.dll
2010-09-13 17:40:28 ----A---- C:\WINDOWS.0\system32\qmgr.dll
2010-09-13 17:40:16 ----A---- C:\WINDOWS.0\system32\safrslv.dll
2010-09-13 17:40:16 ----A---- C:\WINDOWS.0\system32\safrdm.dll
2010-09-13 17:40:16 ----A---- C:\WINDOWS.0\system32\safrcdlg.dll
2010-09-13 17:40:16 ----A---- C:\WINDOWS.0\system32\racpldlg.dll
2010-09-13 17:40:13 ----D---- C:\WINDOWS.0\system32\Restore
2010-09-13 17:40:13 ----A---- C:\WINDOWS.0\system32\srsvc.dll
2010-09-13 17:40:13 ----A---- C:\WINDOWS.0\system32\srrstr.dll
2010-09-13 17:40:13 ----A---- C:\WINDOWS.0\system32\srclient.dll
2010-09-13 17:40:13 ----A---- C:\WINDOWS.0\system32\fltMc.exe
2010-09-13 17:40:13 ----A---- C:\WINDOWS.0\system32\fltlib.dll
2010-09-13 17:40:13 ----A---- C:\WINDOWS.0\system32\drivers\sr.sys
2010-09-13 17:40:13 ----A---- C:\WINDOWS.0\system32\drivers\fltMgr.sys
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\nmmkcert.dll
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\msoert2.dll
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\msoeacct.dll
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\msconf.dll
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\mnmsrvc.exe
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\mnmdd.dll
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\isrdbg32.dll
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\inetres.dll
2010-09-13 17:40:12 ----A---- C:\WINDOWS.0\system32\ils.dll
2010-09-13 17:40:11 ----A---- C:\WINDOWS.0\system32\schedsvc.dll
2010-09-13 17:40:11 ----A---- C:\WINDOWS.0\system32\mstinit.exe
2010-09-13 17:40:11 ----A---- C:\WINDOWS.0\system32\mstask.dll
2010-09-13 17:40:11 ----A---- C:\WINDOWS.0\system32\inetcomm.dll
2010-09-13 17:40:10 ----A---- C:\WINDOWS.0\system32\isign32.dll
2010-09-13 17:40:10 ----A---- C:\WINDOWS.0\system32\inetcfg.dll
2010-09-13 17:40:10 ----A---- C:\WINDOWS.0\system32\icwphbk.dll
2010-09-13 17:40:10 ----A---- C:\WINDOWS.0\system32\icwdial.dll
2010-09-13 17:39:31 ----A---- C:\WINDOWS.0\vbaddin.ini
2010-09-13 17:39:31 ----A---- C:\WINDOWS.0\vb.ini
2010-09-13 17:39:26 ----D---- C:\WINDOWS.0\Registration
2010-09-13 17:39:10 ----A---- C:\WINDOWS.0\system32\write.exe
2010-09-13 17:39:03 ----A---- C:\WINDOWS.0\system32\sndvol32.exe
2010-09-13 17:39:03 ----A---- C:\WINDOWS.0\system32\hticons.dll
2010-09-13 17:39:03 ----A---- C:\WINDOWS.0\system32\avwav.dll
2010-09-13 17:39:03 ----A---- C:\WINDOWS.0\system32\avtapi.dll
2010-09-13 17:39:03 ----A---- C:\WINDOWS.0\system32\avmeter.dll
2010-09-13 17:39:02 ----A---- C:\WINDOWS.0\system32\winchat.exe
2010-09-13 17:38:57 ----A---- C:\WINDOWS.0\system32\charmap.exe
2010-09-13 17:38:57 ----A---- C:\WINDOWS.0\system32\getuname.dll
2010-09-13 17:38:56 ----A---- C:\WINDOWS.0\system32\winmine.exe
2010-09-13 17:38:56 ----A---- C:\WINDOWS.0\system32\usrlogon.cmd
2010-09-13 17:38:56 ----A---- C:\WINDOWS.0\system32\sol.exe
2010-09-13 17:38:56 ----A---- C:\WINDOWS.0\system32\reset.exe
2010-09-13 17:38:56 ----A---- C:\WINDOWS.0\system32\mshearts.exe
2010-09-13 17:38:56 ----A---- C:\WINDOWS.0\system32\freecell.exe
2010-09-13 17:38:56 ----A---- C:\WINDOWS.0\system32\calc.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\tsshutdn.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\tslabels.ini
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\tskill.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\tsdiscon.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\tscon.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\shadow.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\rwinsta.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\regini.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\rdpcfgex.dll
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\qwinsta.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\qappsrv.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\msg.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\msdtcprf.ini
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\logoff.exe
2010-09-13 17:38:55 ----A---- C:\WINDOWS.0\system32\cdmodem.dll
2010-09-13 17:38:50 ----A---- C:\WINDOWS.0\system32\wmimgmt.msc
2010-09-13 17:38:50 ----A---- C:\WINDOWS.0\system32\sndrec32.exe
2010-09-13 17:38:50 ----A---- C:\WINDOWS.0\system32\accwiz.exe
2010-09-13 17:38:49 ----A---- C:\WINDOWS.0\system32\mspaint.exe
2010-09-13 17:38:49 ----A---- C:\WINDOWS.0\system32\mplay32.exe
2010-09-13 17:38:49 ----A---- C:\WINDOWS.0\system32\hypertrm.dll
2010-09-13 17:38:49 ----A---- C:\WINDOWS.0\system32\clipbrd.exe
2010-09-13 17:38:48 ----A---- C:\WINDOWS.0\system32\tsgqec.dll
2010-09-13 17:38:48 ----A---- C:\WINDOWS.0\system32\tscfgwmi.dll
2010-09-13 17:38:48 ----A---- C:\WINDOWS.0\system32\spider.exe
2010-09-13 17:38:48 ----A---- C:\WINDOWS.0\system32\drivers\tdtcp.sys
2010-09-13 17:38:48 ----A---- C:\WINDOWS.0\system32\drivers\tdpipe.sys
2010-09-13 17:38:48 ----A---- C:\WINDOWS.0\system32\drivers\rdpwd.sys
2010-09-13 17:38:47 ----A---- C:\WINDOWS.0\system32\rhttpaa.dll
2010-09-13 17:38:47 ----A---- C:\WINDOWS.0\system32\remotepg.dll
2010-09-13 17:38:47 ----A---- C:\WINDOWS.0\system32\rdshost.exe
2010-09-13 17:38:47 ----A---- C:\WINDOWS.0\system32\rdsaddin.exe
2010-09-13 17:38:47 ----A---- C:\WINDOWS.0\system32\mstscax.dll
2010-09-13 17:38:47 ----A---- C:\WINDOWS.0\system32\mstsc.exe
2010-09-13 17:38:47 ----A---- C:\WINDOWS.0\system32\aaclient.dll
2010-09-13 17:38:46 ----D---- C:\WINDOWS.0\system32\MsDtc
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\termsrv.dll
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\sessmgr.exe
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\rdpwsx.dll
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\rdpsnd.dll
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\rdpclip.exe
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\rdchost.dll
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\qprocess.exe
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\mtxoci.dll
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\msdtcuiu.dll
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\icaapi.dll
2010-09-13 17:38:46 ----A---- C:\WINDOWS.0\system32\cfgbkend.dll
2010-09-13 17:38:45 ----A---- C:\WINDOWS.0\system32\xolehlp.dll
2010-09-13 17:38:45 ----A---- C:\WINDOWS.0\system32\msdtctm.dll
2010-09-13 17:38:45 ----A---- C:\WINDOWS.0\system32\msdtcprx.dll
2010-09-13 17:38:45 ----A---- C:\WINDOWS.0\system32\msdtclog.dll
2010-09-13 17:38:45 ----A---- C:\WINDOWS.0\system32\msdtc.exe
2010-09-13 17:38:44 ----D---- C:\WINDOWS.0\system32\Com
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\stclient.dll
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\mtxlegih.dll
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\mtxex.dll
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\mtxdm.dll
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\dcomcnfg.exe
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\comrepl.dll
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\comaddin.dll
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\colbact.dll
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\clbcatex.dll
2010-09-13 17:38:44 ----A---- C:\WINDOWS.0\system32\catsrvps.dll
2010-09-13 17:38:43 ----A---- C:\WINDOWS.0\system32\comuid.dll
2010-09-13 17:38:43 ----A---- C:\WINDOWS.0\system32\comsvcs.dll
2010-09-13 17:38:43 ----A---- C:\WINDOWS.0\system32\comsnap.dll
2010-09-13 17:38:43 ----A---- C:\WINDOWS.0\system32\clbcatq.dll
2010-09-13 17:38:43 ----A---- C:\WINDOWS.0\system32\catsrvut.dll
2010-09-13 17:38:43 ----A---- C:\WINDOWS.0\system32\catsrv.dll
2010-09-13 17:38:34 ----A---- C:\WINDOWS.0\system32\servdeps.dll
2010-09-13 17:38:34 ----A---- C:\WINDOWS.0\system32\mmfutil.dll
2010-09-13 17:38:34 ----A---- C:\WINDOWS.0\system32\licwmi.dll
2010-09-13 17:38:34 ----A---- C:\WINDOWS.0\system32\cmprops.dll
2010-09-13 17:38:31 ----A---- C:\WINDOWS.0\system32\drivers\termdd.sys
2010-09-13 17:38:31 ----A---- C:\WINDOWS.0\system32\drivers\rdpdr.sys
2010-09-13 17:28:50 ----D---- C:\Program Files\Common Files\ODBC
2010-09-13 17:28:47 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-09-13 17:28:46 ----RD---- C:\Program Files
2010-09-13 17:28:46 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-09-13 17:28:46 ----D---- C:\Program Files\Common Files
2010-09-13 17:25:07 ----SHD---- C:\System Volume Information
2010-09-13 17:25:07 ----D---- C:\Documents and Settings
2010-09-13 17:24:23 ----SH---- C:\boot.ini
2010-09-13 17:22:06 ----D---- C:\WINDOWS
2010-09-13 17:14:18 ----D---- C:\Avenger
2010-09-13 17:14:18 ----A---- C:\avenger.txt
2010-09-13 17:12:24 ----A---- C:\zip.exe
2010-09-13 17:12:24 ----A---- C:\cleanup.exe
2010-09-13 17:12:24 ----A---- C:\cleanup.bat
2010-09-13 16:48:29 ----D---- C:\Program Files\Prevx
2010-09-13 16:34:12 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-09-13 16:18:57 ----SHD---- C:\RECYCLER
2010-09-13 16:14:40 ----D---- C:\Program Files\TeamSpeak 3 Client
2010-09-13 16:14:31 ----D---- C:\Program Files\Alwil Software
2010-09-13 16:10:11 ----D---- C:\Program Files\ATI Technologies
2010-09-13 16:10:08 ----D---- C:\Program Files\ATI
2010-09-13 16:09:27 ----D---- C:\ATI
2010-09-13 16:09:05 ----D---- C:\Program Files\QIP
2010-09-13 16:08:23 ----D---- C:\Program Files\Belkin
2010-09-13 16:06:54 ----D---- C:\Program Files\GamePark
2010-09-13 15:52:58 ----R---- C:\WINDOWS.0\SoundMan.exe
2010-09-13 15:52:57 ----R---- C:\WINDOWS.0\SkyTel.exe
2010-09-13 15:52:56 ----R---- C:\WINDOWS.0\RtlUpd.exe
2010-09-13 15:52:55 ----R---- C:\WINDOWS.0\system32\drivers\RtkHDAud.Sys
2010-09-13 15:52:51 ----R---- C:\WINDOWS.0\RTLCPL.exe
2010-09-13 15:52:33 ----R---- C:\WINDOWS.0\RTHDCPL.exe
2010-09-13 15:52:32 ----R---- C:\WINDOWS.0\MicCal.exe
2010-09-13 15:52:30 ----R---- C:\WINDOWS.0\Alcmtr.exe
2010-09-13 15:52:29 ----R---- C:\WINDOWS.0\alcwzrd.exe
2010-09-13 15:52:28 ----D---- C:\Program Files\Realtek
2010-09-13 15:52:26 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-13 15:52:20 ----D---- C:\Program Files\Common Files\InstallShield
2010-09-13 15:50:54 ----D---- C:\Program Files\Intel
2010-09-13 15:47:55 ----D---- C:\Program Files\Mozilla Firefox
2010-09-13 15:41:25 ----HD---- C:\Program Files\Uninstall Information
2010-09-13 15:37:04 ----D---- C:\Program Files\xerox
2010-09-13 15:37:04 ----D---- C:\Program Files\microsoft frontpage
2010-09-13 15:36:46 ----RASH---- C:\MSDOS.SYS
2010-09-13 15:36:46 ----RASH---- C:\IO.SYS
2010-09-13 15:36:46 ----A---- C:\CONFIG.SYS
2010-09-13 15:36:46 ----A---- C:\AUTOEXEC.BAT
2010-09-13 15:35:43 ----HD---- C:\Program Files\WindowsUpdate
2010-09-13 15:35:40 ----D---- C:\Program Files\Online Services
2010-09-13 15:35:15 ----D---- C:\Program Files\Common Files\Services
2010-09-13 15:35:12 ----D---- C:\Program Files\Common Files\MSSoap
2010-09-13 15:35:04 ----D---- C:\Program Files\Movie Maker
2010-09-13 15:34:45 ----D---- C:\Program Files\NetMeeting
2010-09-13 15:34:43 ----D---- C:\Program Files\Outlook Express
2010-09-13 15:34:39 ----D---- C:\Program Files\Common Files\System
2010-09-13 15:34:34 ----D---- C:\Program Files\Internet Explorer
2010-09-13 15:34:04 ----D---- C:\Program Files\ComPlus Applications
2010-09-13 15:33:50 ----D---- C:\Program Files\Windows Media Player
2010-09-13 15:33:46 ----D---- C:\Program Files\Messenger
2010-09-13 15:33:43 ----D---- C:\Program Files\MSN Gaming Zone
2010-09-13 15:33:23 ----D---- C:\Program Files\Windows NT

======List of files/folders modified in the last 1 months======

2010-09-13 19:32:13 ----A---- C:\WINDOWS.0\system.ini
2010-09-13 17:42:07 ----A---- C:\WINDOWS.0\win.ini
2010-09-13 17:41:44 ----ASH---- C:\WINDOWS.0\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS.0\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS.0\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS.0\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS.0\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS.0\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS.0\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS.0\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 aswRdr;aswRdr; C:\WINDOWS.0\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS.0\system32\DRIVERS\ati2mtag.sys [2010-08-04 5243392]
R3 BLKWGU(Belkin);Belkin Wireless G USB Network Adapter(Belkin); C:\WINDOWS.0\system32\DRIVERS\BLKWGU.sys [2005-11-09 402944]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS.0\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS.0\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS.0\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS.0\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS.0\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS.0\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 ZDPSp50;ZDPSp50 NDIS Protocol Driver; C:\WINDOWS.0\System32\Drivers\ZDPSp50.sys [2004-10-24 17664]
S0 sptd;sptd; C:\WINDOWS.0\System32\Drivers\sptd.sys [2010-09-13 691696]
S3 gdrv;gdrv; \??\C:\WINDOWS.0\gdrv.sys []
S3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS.0\system32\DRIVERS\Rtenicxp.sys [2006-08-14 83200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS.0\system32\Ati2evxx.exe [2010-08-04 606208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 nosGetPlusHelper;getPlus(R) Helper 3004; C:\WINDOWS.0\System32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

Tak nakonec snad toto ....Jeste jednou se omlouvam a dekuji

[Rudy]

Nic nebezpečného nevidím. Poprosím ještě o kompletní sken MBAM: http://www.malwarebytes.org/mbam.php . Dejte log a předem nic nemažte.

[FiXator]

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4610

Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

13.9.2010 22:40:11
mbam-log-2010-09-13 (22-40-11).txt

Typ skenu: Úplný sken (C:\|D:\|)
Skenované objekty: 404357
Uplynulý čas: 1 hodina(y), 19 minuta(y), 33 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)



Tak bohuzel, nic nebylo nalezeno ...Vubec netusim tedy proc me to pise tuto hlasku...

[Rudy]

Pravděpodobně je to problém té hry. Já mohu poradit jen reinstal CoD. Hry tady neřešíme, jsme bezpečnostní fórum.

[FiXator]

jojo to chapu, prave co jsem hledal po netu, tak tuhle hlasku casto zpusoboval vir. A mockrat dekuji jeste jednou za pomoc

[Rudy]

Vir to nejspíše nebude, určitě by MBAM alespoň něco našel. Nemáte zač!