Při startu počítač na 10min zamrzne, pak je ok.

Zpráva

gp50 · #1 Příspěvek od **gp50** » 06 říj 2010 12:08

Logfile of random's system information tool 1.08 (written by random/random)
Run by UserXP at 2010-10-06 13:05:17
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 79 GB (52%) free of 153 GB
Total RAM: 1791 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:05:30, on 6. 10. 2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ACEngSvr.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\QIP Infium\infium.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\totalcmd\TOTALCMD.EXE
C:\Documents and Settings\UserXP\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\UserXP\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\UserXP\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\UserXP\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\UserXP\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\UserXP\Dokumenty\Downloads\RSIT (1).exe
C:\Program Files\trend micro\UserXP.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKLM\..\RunOnce: [mwavscan] "C:\DOCUME~1\UserXP\LOCALS~1\Temp\mexe.com" /s /AUTORUNBOOT
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetupo.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetupo.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetupo.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetupo.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.google.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 1454566781
O17 - HKLM\System\CCS\Services\Tcpip\..\{F1F41006-2820-451B-A40A-93B77D6B0644}: NameServer = 192.168.1.254
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

--
End of file - 6167 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-113007714-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-117609710-113007714-682003330-1003UA.job
C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-08-28 1557800]
"HControl"=C:\WINDOWS\ATK0100\HControl.exe [2006-08-23 110592]
"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-05-16 53248]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2007-06-15 1826816]
"ACMON"=C:\Program Files\ASUS\Splendid\ACMON.exe [2006-05-30 811008]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-07-05 16380416]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 171008]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]
"mwavscan"=C:\DOCUME~1\UserXP\LOCALS~1\Temp\mexe.com [2008-05-12 469568]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-12-17 110592]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=181
"NoDriveAutoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\StrongDC++\StrongDC.exe"="C:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\QIP Infium\infium.exe"="C:\Program Files\QIP Infium\infium.exe:*:Enabled:QIP Infium"
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe"="C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2010-10-06 13:01:43 ----D---- C:\rsit
2010-10-06 13:01:43 ----D---- C:\Program Files\trend micro
2010-10-06 12:43:28 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-10-06 12:43:25 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-10-06 12:01:20 ----AD---- C:\WINDOWS\VDLL.DLL
2010-10-06 12:01:20 ----AD---- C:\WINDOWS\system32\runouce.exe
2010-10-06 12:01:20 ----AD---- C:\WINDOWS\rundll16.exe
2010-10-06 12:01:20 ----AD---- C:\WINDOWS\RUNDL132.EXE
2010-10-06 12:01:20 ----AD---- C:\WINDOWS\logo1_.exe
2010-10-06 12:01:20 ----AD---- C:\WINDOWS\logo_1.exe
2010-10-06 11:49:47 ----D---- C:\Program Files\CCleaner
2010-10-06 11:42:27 ----A---- C:\WINDOWS\system32\TASKMGR.COM
2010-10-06 11:42:27 ----A---- C:\WINDOWS\system32\T.COM
2010-10-06 11:42:27 ----A---- C:\WINDOWS\REGEDIT.COM
2010-10-06 11:42:27 ----A---- C:\WINDOWS\R.COM
2010-10-06 11:12:17 ----D---- C:\Documents and Settings\UserXP\Data aplikací\Avira
2010-10-06 11:05:28 ----D---- C:\WINDOWS\system32\NtmsData
2010-10-06 11:02:01 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2010-10-06 11:01:59 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2010-10-06 11:01:59 ----A---- C:\WINDOWS\system32\drivers\avgntmgr.sys
2010-10-06 11:01:59 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2010-10-06 11:01:59 ----A---- C:\WINDOWS\system32\drivers\avgntdd.sys
2010-10-06 11:01:58 ----D---- C:\Program Files\Avira
2010-10-06 11:01:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2010-10-06 10:42:29 ----D---- C:\WINDOWS\pss
2010-10-06 07:29:26 ----D---- C:\music
2010-10-01 10:11:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-10-01 10:11:01 ----D---- C:\Program Files\Common Files\Adobe
2010-10-01 10:11:01 ----D---- C:\Program Files\Adobe
2010-09-30 19:20:45 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-09-30 19:20:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-09-29 23:22:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2158563$
2010-09-28 19:56:23 ----D---- C:\Documents and Settings\UserXP\Data aplikací\Malwarebytes
2010-09-28 19:32:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-09-28 19:32:24 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-09-28 18:50:32 ----D---- C:\Program Files\xerox
2010-09-28 17:27:02 ----SHD---- C:\WINDOWS\CSC
2010-09-28 16:21:03 ----D---- C:\Documents and Settings\UserXP\Data aplikací\1660C2150841F31D5169408A41734799
2010-09-28 16:14:34 ----A---- C:\WINDOWS\system32\drivers\lbrtfdc.sys
2010-09-28 16:14:34 ----A---- C:\WINDOWS\system32\drivers\i2omgmt.sys
2010-09-28 16:14:33 ----A---- C:\WINDOWS\system32\drivers\changer.sys
2010-09-28 16:14:13 ----A---- C:\Documents and Settings\UserXP\Data aplikací\jsdfgs.bat
2010-09-28 16:14:11 ----D---- C:\Documents and Settings\UserXP\Data aplikací\8C6B7A10D56ABD90350F1A5783379881
2010-09-28 16:06:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Drivers HeadQuarters
2010-09-28 15:45:09 ----A---- C:\WINDOWS\WirelessFTP.INI
2010-09-17 09:03:02 ----A---- C:\WINDOWS\system32\drivers\hidusb.sys
2010-09-16 17:30:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2259922$
2010-09-16 17:30:09 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2010-09-16 17:30:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2010-09-16 17:29:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2121546$
2010-09-16 17:29:50 ----HDC---- C:\WINDOWS\$NtUninstallKB982802$
2010-09-16 17:29:43 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2010-09-16 17:29:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2141007$
2010-09-12 17:01:58 ----D---- C:\Documents and Settings\UserXP\Data aplikací\Google
2010-09-12 17:01:03 ----D---- C:\Program Files\Google
2010-09-12 15:34:02 ----D---- C:\Documents and Settings\UserXP\Data aplikací\QIP
2010-09-12 15:33:35 ----D---- C:\Program Files\QIP Infium

======List of files/folders modified in the last 1 months======

2010-10-06 13:01:43 ----RD---- C:\Program Files
2010-10-06 12:43:28 ----D---- C:\WINDOWS\system32\drivers
2010-10-06 12:01:20 ----D---- C:\WINDOWS\system32
2010-10-06 12:01:20 ----D---- C:\WINDOWS
2010-10-06 11:51:14 ----D---- C:\WINDOWS\Temp
2010-10-06 11:51:14 ----D---- C:\WINDOWS\Debug
2010-10-06 11:32:14 ----SHD---- C:\System Volume Information
2010-10-06 11:13:55 ----D---- C:\WINDOWS\Registration
2010-10-06 11:12:01 ----D---- C:\dc
2010-10-06 11:09:06 ----D---- C:\WINDOWS\system32\CatRoot2
2010-10-06 11:07:57 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-10-06 11:05:41 ----RASH---- C:\boot.ini
2010-10-06 11:05:41 ----A---- C:\WINDOWS\win.ini
2010-10-06 11:05:41 ----A---- C:\WINDOWS\system.ini
2010-10-06 11:05:28 ----D---- C:\WINDOWS\repair
2010-10-06 11:03:11 ----D---- C:\WINDOWS\Prefetch
2010-10-05 21:51:29 ----D---- C:\Documents and Settings\UserXP\Data aplikací\AIMP
2010-10-01 10:15:16 ----D---- C:\Documents and Settings\UserXP\Data aplikací\Adobe
2010-10-01 10:11:49 ----SHD---- C:\WINDOWS\Installer
2010-10-01 10:11:49 ----SHD---- C:\Config.Msi
2010-10-01 10:11:19 ----D---- C:\WINDOWS\WinSxS
2010-10-01 10:11:01 ----D---- C:\Program Files\Common Files
2010-09-30 19:24:31 ----D---- C:\WINDOWS\system32\drivers\etc
2010-09-29 23:22:31 ----HD---- C:\WINDOWS\inf
2010-09-28 20:35:24 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2010-09-28 19:55:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-09-28 18:52:10 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-09-28 16:50:10 ----SHD---- C:\RECYCLER
2010-09-28 16:06:08 ----RSD---- C:\WINDOWS\assembly
2010-09-28 16:04:39 ----D---- C:\WINDOWS\system32\config
2010-09-18 14:36:16 ----A---- C:\WINDOWS\system32\MRT.exe
2010-09-16 17:30:14 ----HD---- C:\WINDOWS\$hf_mig$
2010-09-12 17:01:08 ----SD---- C:\WINDOWS\Tasks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-08-16 691696]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 avgio;avgio; \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys []
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2006-12-05 529344]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\ATK0100\ASNDIS5.SYS []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-12-17 1918464]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2005-10-21 36352]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-07-10 4449280]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2005-11-16 28928]
R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-11-01 51584]
R3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-08-28 228784]
R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2006-04-19 47488]
R3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-05-18 110976]
R3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2006-03-16 37632]
R3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-05-09 62848]
R3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
R3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-05-09 40192]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 ajrfxmzg;ajrfxmzg; C:\WINDOWS\system32\drivers\ajrfxmzg.sys []
S3 cpuz132;cpuz132; \??\C:\DOCUME~1\UserXP\LOCALS~1\Temp\cpuz132\cpuz132_x32.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-04-01 267432]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-12-17 434176]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-10 136176]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

gp50 · #2 Příspěvek od **gp50** » 06 říj 2010 12:09

Jen bych dodal, že to trvá od chvíle, kdy jsem odstranil Antimalvare doctor. Předtím bylo vše ok.

#3 Příspěvek od **JaRon** » 06 říj 2010 12:40

pouzi obnovu systemu k datumu, ked bolo vsetko OK

gp50 · #4 Příspěvek od **gp50** » 06 říj 2010 12:50

Obnovení systému mám vypnutý.

#5 Příspěvek od **JaRon** » 06 říj 2010 12:52

stiahni a uloz na plochu ComboFix

potom spust pod uctom s administratorskym opravnenim

akcia trva cca. 5-10 minut, niekedy i dlhsie -, Pocas scanu nespustaj ziadne ine aplikacie

Nie je dovod na paniku ak stroj bude restartovany
upozornenie: ak pouzivas antispyware s rezidentnim stitem, ten pred scanom vypni.

po restarte aplikacie vytvori log, ulozeny na C:\Combofix.txt (jeho obsah vloz sem)

gp50 · #6 Příspěvek od **gp50** » 06 říj 2010 13:09

ComboFix 10-10-05.04 - UserXP . 10. 2010 14:02:42.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.1.1029.18.1791.1276 [GMT 2:00]
Spuštěný z: c:\documents and settings\UserXP\Plocha\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\UserXP\Data aplikací\8C6B7A10D56ABD90350F1A5783379881
c:\documents and settings\UserXP\Data aplikací\8C6B7A10D56ABD90350F1A5783379881\enemies-names.txt
c:\documents and settings\UserXP\Data aplikací\8C6B7A10D56ABD90350F1A5783379881\local.ini
c:\documents and settings\UserXP\Data aplikací\8C6B7A10D56ABD90350F1A5783379881\lsrslt.ini
c:\documents and settings\UserXP\Dokumenty\cc_20101006_115136.reg
c:\documents and settings\UserXP\Dokumenty\cc_20101006_115201.reg
c:\documents and settings\UserXP\Nabídka Start\Programy\Antimalware Doctor
c:\documents and settings\UserXP\Nabídka Start\Programy\Antimalware Doctor\Antimalware Doctor.lnk
c:\documents and settings\UserXP\Nabídka Start\Programy\Antimalware Doctor\Uninstall.lnk
c:\windows\regedit.com
c:\windows\system32\taskmgr.com

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-09-06 do 2010-10-06 )))))))))))))))))))))))))))))))
.

2010-10-06 11:01 . 2010-10-06 11:05 -------- d-----w- c:\program files\trend micro
2010-10-06 11:01 . 2010-10-06 11:02 -------- d-----w- C:\rsit
2010-10-06 10:43 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-06 10:43 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-06 10:01 . 2010-10-06 10:01 -------- d---a-w- c:\windows\VDLL.DLL
2010-10-06 10:01 . 2010-10-06 10:01 -------- d---a-w- c:\windows\system32\runouce.exe
2010-10-06 10:01 . 2010-10-06 10:01 -------- d---a-w- c:\windows\rundll16.exe
2010-10-06 10:01 . 2010-10-06 10:01 -------- d---a-w- c:\windows\RUNDL132.EXE
2010-10-06 10:01 . 2010-10-06 10:01 -------- d---a-w- c:\windows\logo1_.exe
2010-10-06 10:01 . 2010-10-06 10:01 -------- d---a-w- c:\windows\logo_1.exe
2010-10-06 09:49 . 2010-10-06 09:49 -------- d-----w- c:\program files\CCleaner
2010-10-06 09:46 . 2010-10-06 09:46 -------- d-sh--w- c:\documents and settings\UserXP\IECompatCache
2010-10-06 09:42 . 2008-04-14 03:22 137216 ----a-w- c:\windows\system32\T.COM
2010-10-06 09:42 . 2008-04-14 03:22 147968 ----a-w- c:\windows\R.COM
2010-10-06 09:05 . 2010-10-06 09:31 -------- d-----w- c:\windows\system32\NtmsData
2010-10-06 09:03 . 2010-10-06 09:03 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2010-10-06 09:01 . 2010-03-01 08:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-10-06 09:01 . 2010-02-16 12:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-10-06 09:01 . 2009-05-11 10:49 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-10-06 09:01 . 2009-05-11 10:49 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-10-06 09:01 . 2010-10-06 09:01 -------- d-----w- c:\program files\Avira
2010-10-06 05:29 . 2010-10-06 09:12 -------- d-----w- C:\music
2010-10-01 08:11 . 2010-10-01 08:11 -------- d-----w- c:\program files\Common Files\Adobe
2010-09-30 17:20 . 2010-10-06 09:08 -------- d-----w- c:\program files\Spybot - Search & Destroy
2010-09-28 17:32 . 2010-10-06 10:43 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-09-28 14:48 . 2010-09-28 14:48 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2010-09-28 14:14 . 2008-04-13 18:41 8576 -c--a-w- c:\windows\system32\dllcache\i2omgmt.sys
2010-09-28 14:14 . 2008-04-13 18:41 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2010-09-28 14:14 . 2008-04-13 18:40 34688 -c--a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2010-09-28 14:14 . 2008-04-13 18:40 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2010-09-28 14:14 . 2008-04-13 18:40 8192 -c--a-w- c:\windows\system32\dllcache\changer.sys
2010-09-28 14:14 . 2008-04-13 18:40 8192 ----a-w- c:\windows\system32\drivers\changer.sys
2010-09-28 14:14 . 2010-09-28 14:14 135 ----a-w- c:\documents and settings\UserXP\Data aplikací\jsdfgs.bat
2010-09-21 18:37 . 2010-09-21 18:37 932288 ----a-w- c:\documents and settings\All Users\Data aplikací\Adobe\Reader\9.3\ARM\24183\AdobeARM.exe
2010-09-21 18:37 . 2010-09-21 18:37 70584 ----a-w- c:\documents and settings\All Users\Data aplikací\Adobe\Reader\9.3\ARM\24183\AdobeExtractFiles.dll
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\documents and settings\All Users\Data aplikací\Adobe\Reader\9.3\ARM\24183\ReaderUpdater.exe
2010-09-21 18:37 . 2010-09-21 18:37 338856 ----a-w- c:\documents and settings\All Users\Data aplikací\Adobe\Reader\9.3\ARM\24183\AcrobatUpdater.exe
2010-09-17 07:03 . 2008-04-13 18:45 10368 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2010-09-17 07:03 . 2008-04-13 18:45 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2010-09-12 15:01 . 2010-09-12 15:01 -------- d-----w- c:\program files\Google
2010-09-12 13:33 . 2010-09-12 13:33 -------- d-----w- c:\program files\QIP Infium
2010-09-09 19:52 . 2010-09-09 19:52 -------- d-sh--w- c:\documents and settings\UserXP\PrivacIE

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-21 11:47 . 2010-08-10 13:02 429262 ----a-w- c:\windows\system32\perfh005.dat
2010-08-21 11:47 . 2010-08-10 13:02 78250 ----a-w- c:\windows\system32\perfc005.dat
2010-08-19 10:17 . 2010-08-10 14:20 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-08-19 10:17 . 2010-08-10 14:20 2740 ----a-w- c:\windows\pchealth\helpctr\PackageStore\SkuStore.bin
2010-08-17 13:17 . 2010-08-10 13:03 58880 ----a-w- c:\windows\system32\spoolsv.exe
2010-08-16 05:08 . 2010-08-16 05:07 -------- d-----w- c:\program files\Euro Truck Simulator
2010-08-16 04:13 . 2010-08-16 04:13 -------- d-----w- c:\program files\Common Files\DirectX
2010-08-16 04:12 . 2010-08-16 04:12 -------- d-----w- c:\program files\Buka
2010-08-16 04:09 . 2010-08-16 04:03 -------- d-----w- c:\program files\DAEMON Tools Lite
2010-08-16 04:06 . 2010-08-16 04:06 -------- d-----w- c:\program files\MSBuild
2010-08-16 04:06 . 2010-08-16 04:06 -------- d-----w- c:\program files\Reference Assemblies
2010-08-16 04:03 . 2010-08-16 04:03 691696 ----a-w- c:\windows\system32\drivers\sptd.sys.13640062
2010-08-15 19:02 . 2010-08-15 19:02 -------- d-----w- c:\program files\MSXML 6.0
2010-08-15 17:15 . 2010-08-15 17:15 -------- d-----w- c:\program files\uTorrent
2010-08-10 21:49 . 2010-08-10 21:49 -------- d-----w- c:\program files\StrongDC++
2010-08-10 21:05 . 2010-08-10 21:04 -------- d-----w- c:\program files\AIMP2
2010-08-10 20:56 . 2010-08-10 20:56 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01009.Wdf
2010-08-10 20:55 . 2010-08-10 20:55 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
2010-08-10 20:50 . 2010-08-10 20:49 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-08-10 16:43 . 2010-08-10 16:09 -------- d-----w- c:\program files\Realtek
2010-08-10 16:28 . 2010-08-10 14:40 -------- d-----w- c:\program files\ASUS
2010-08-10 16:11 . 2010-08-10 14:40 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-08-10 16:09 . 2010-08-10 16:09 315392 ----a-w- c:\windows\HideWin.exe
2010-08-10 15:58 . 2010-08-10 15:52 -------- d-----w- c:\program files\ATI Technologies
2010-08-10 15:57 . 2010-08-10 14:56 -------- d-----w- c:\program files\Common Files\InstallShield
2010-08-10 15:35 . 2010-08-10 14:20 8972 ----a-w- c:\windows\pchealth\helpctr\Config\Cntstore.bin
2010-08-10 15:32 . 2010-08-10 15:32 -------- d-----w- c:\program files\DIFX
2010-08-10 15:27 . 2010-08-10 15:27 -------- d-----w- c:\program files\Toshiba
2010-08-10 15:22 . 2010-08-10 15:22 -------- d-----w- c:\program files\Synaptics
2010-08-10 15:15 . 2010-08-10 15:15 -------- d-----w- c:\program files\Alwil Software
2010-08-10 14:23 . 2010-08-10 14:23 -------- d-----w- c:\program files\microsoft frontpage
2010-08-10 14:18 . 2010-08-10 14:18 21812 ----a-w- c:\windows\system32\emptyregdb.dat
2010-07-22 15:46 . 2010-08-10 13:02 590848 ----a-w- c:\windows\system32\rpcrt4.dll
2010-07-22 06:19 . 2008-05-05 05:25 5632 ----a-w- c:\windows\system32\xpsp4res.dll
2010-07-14 08:00 . 2010-08-10 20:49 108032 ----a-w- c:\windows\system32\ff_vfw.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-08-28 1557800]
"HControl"="c:\windows\ATK0100\HControl.exe" [2006-08-23 110592]
"ATKMEDIA"="c:\program files\ASUS\ATK Media\DMEDIA.EXE" [2006-05-16 53248]
"SkyTel"="SkyTel.EXE" [2007-06-15 1826816]
"ACMON"="c:\program files\ASUS\Splendid\ACMON.exe" [2006-05-30 811008]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 16380416]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="move" [X]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-17 44544]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2006-5-24 49152]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-21 18:37 932288 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2009-12-21 23:57 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"Google Update"="c:\documents and settings\UserXP\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\StrongDC++\\StrongDC.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QIP Infium\\infium.exe"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=

R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [6. 10. 2010 11:02 135336]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [10. 8. 2010 17:07 36352]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [12. 9. 2010 17:01 136176]
S4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
.
Obsah adresáře 'Naplánované úlohy'

2010-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-12 20:58]

2010-10-06 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-12 20:58]

2010-10-06 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2010-08-10 20:18]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
TCP: {F1F41006-2820-451B-A40A-93B77D6B0644} = 192.168.1.254
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

AddRemove-HijackThis - c:\program files\HijakcThis\HijackThis.exe

.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(936)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2010-10-06 14:07:09
ComboFix-quarantined-files.txt 2010-10-06 12:07

Před spuštěním: Volných bajtů: 82 913 296 384
Po spuštění: Volných bajtů: 83 247 702 016

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[Boot Loader]
timeout=2
Default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS /usepmtimer
[Operating Systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /usepmtimer /NoExecute=OptIn
multi(0)disk(0)rdisk(1)partition(1)\WINDOWS="USB Repair NOT to Start Microsoft Windows XP Professional"=optin /fastdetect

- - End Of File - - 005BC5B0901CF47353E928DCD356AD6A

#7 Příspěvek od **JaRon** » 06 říj 2010 13:31

OKi
odinstaluj SpyBot + zmaz adresar c:\program files\Alwil Software
+
vycisti PC s CCleanerom + restart a napis ako sa sprava PC

gp50 · #8 Příspěvek od **gp50** » 06 říj 2010 13:48

Spybota jsem odinstaloval už předtím. Zbyla po něm akorát aložku v program files, tak jsem jí smazal taky. CC cleaner, restart. Možná už nezmrzne na tak dlouho, ale dělá to pořád. Naběhne windows a konec, na liště stojí hodiny. Cokoliv udělám se projeví až rozmrzne..

#9 Příspěvek od **JaRon** » 06 říj 2010 13:53

zbehni este PC s HP http://www.viry.cz/forum/viewtopic.php?f=29&t=101984

gp50 · #10 Příspěvek od **gp50** » 06 říj 2010 14:07

- <Log computer="PRIVE-FA3D69025" scan="Normal" version="3.5.6.115" date="2010-10-06T15:02:57" timeSpentInSecs="115" filesProcessed="4951">
- <Item type="Suspicious" score="24.0" status="None">
<File path="C:\Documents and Settings\Administrator\Plocha\iExplore.exe" hash="FB05EA93ED6318E6DE53DAE32B6D62B35D67719BD4359483772973AC1F28E38D" />
</Item>
- <Item type="Malware" malwareName="Malware" score="117.0" status="None">
- <Scanners>
<Scanner id="DrWeb" name="Infected" />
</Scanners>
<File path="C:\Documents and Settings\UserXP\Plocha\ComboFix.exe" hash="F74702692AEA4BEDC0F16DFF4E83E358682567EE87829FC631B27382B7773635" />
- <References>
<Key path="HKU\S-1-5-21-117609710-113007714-682003330-1003\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\Documents and Settings\UserXP\Plocha\ComboFix.exe" />
</References>
</Item>
- <Item type="Suspicious" score="24.0" status="None">
<File path="C:\Documents and Settings\UserXP\Plocha\iExplore.exe" hash="FB05EA93ED6318E6DE53DAE32B6D62B35D67719BD4359483772973AC1F28E38D" />
</Item>
</Log>

#11 Příspěvek od **JaRon** » 07 říj 2010 06:37

prescanuj PC este s AVPTool

gp50 · #12 Příspěvek od **gp50** » 07 říj 2010 14:51

Tady je report. Vůbec nic..

Autoscan: completed 2 minutes ago (events: 2, objects: 80965, time: 00:45:45)
7. 10. 2010 15:01:18 Task started
7. 10. 2010 15:47:03 Task completed

#13 Příspěvek od **motji** » 08 říj 2010 15:48

Hezké odpoledne, záskok za kolegu

Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
-uložte ho na plochu a spustte soubor OTL.exe.
-do bílého okna dole skopírujte tento skript:

Kód: Vybrat vše

netsvcs
drivers32
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s
c:\windows\*.* /U
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
nvrd32.sys
symmpi.sys
adp3132.sys
mv61xx.sys
nvraid.sys
ndis.sys
winlogon.exe
explorer.exe
userinit.exe
lsass.exe
svchost.exe
smss.exe
hal.dll
ws2_32.dll
tcpip.sys
cryptsvc.dll
Changer.sys
JakNDis.sys
isapnp.sys
cdrom.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
%systemroot%\system32\drivers\*.sys /3
%systemroot%\system32\*.* /3
CREATERESTOREPOINT

- zaškrtněte okénko Pro všechny uživatele.
-označte okénka Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
- Klikněte na tlačítko Prohledat
-po dokončení skenu se objeví logy OTL.Txt a Extras.txt, vložte je zde

gp50 · #14 Příspěvek od **gp50** » 10 říj 2010 08:37

Chvíli mi to trvalo, nebyl jsem u počítače. Předem děkuji, tady je OTL.Txt

OTL logfile created on: 10. 10. 2010 9:23:57 - Run 1
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\UserXP\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d. M. yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 71,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 89,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 68,81 Gb Free Space | 46,17% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PRIVE-FA3D69025
Current User Name: UserXP
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.10.10 09:22:26 | 000,576,512 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\UserXP\Plocha\OTL.exe
PRC - [2010.09.21 07:40:50 | 000,977,976 | ---- | M] (Google Inc.) -- C:\Documents and Settings\UserXP\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
PRC - [2010.04.01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2010.03.02 11:28:31 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.02.24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2010.01.14 22:11:00 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008.04.14 05:22:53 | 000,196,608 | ---- | M] () -- \\?\C:\WINDOWS\System32\WBEM\WMIADAP.EXE
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2006.08.23 22:22:00 | 000,110,592 | ---- | M] () -- C:\WINDOWS\ATK0100\HControl.exe
PRC - [2006.08.10 22:08:00 | 002,379,776 | ---- | M] () -- C:\WINDOWS\ATK0100\ATKOSD.exe
PRC - [2006.05.30 10:28:20 | 000,811,008 | ---- | M] (ATK) -- C:\Program Files\ASUS\Splendid\ACMON.exe
PRC - [2006.05.16 16:29:36 | 000,053,248 | ---- | M] (ASUSTeK Computer INC.) -- C:\Program Files\ASUS\ATK Media\DMedia.exe
PRC - [2006.05.16 11:42:52 | 001,777,664 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
PRC - [2006.05.10 08:22:00 | 002,134,016 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
PRC - [2006.04.07 17:36:46 | 000,290,816 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
PRC - [2006.02.06 23:00:20 | 000,311,296 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosOBEX.exe
PRC - [2006.01.27 18:17:50 | 000,221,184 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHSP.exe
PRC - [2006.01.23 21:47:32 | 000,073,728 | ---- | M] (TOSHIBA CORPORATION.) -- C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
PRC - [2005.07.06 15:43:42 | 000,155,648 | ---- | M] (ASUSTeK) -- C:\WINDOWS\system32\ACEngSvr.exe

========== Modules (SafeList) ==========

MOD - [2010.10.10 09:22:26 | 000,576,512 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\UserXP\Plocha\OTL.exe
MOD - [2008.04.14 05:21:51 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\netui1.dll
MOD - [2008.04.14 05:21:51 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\netui0.dll
MOD - [2008.04.14 05:21:51 | 000,044,032 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ntlanman.dll
MOD - [2008.04.14 05:21:50 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\netrap.dll
MOD - [2008.04.14 05:21:39 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\davclnt.dll
MOD - [2008.04.14 05:21:39 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\drprov.dll
MOD - [2008.04.14 05:19:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ)
SRV - [2010.04.01 13:33:19 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.02.24 10:28:09 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2008.07.29 19:16:38 | 000,132,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -- (NetTcpPortSharing)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Disabled | Stopped] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\UserXP\LOCALS~1\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\DOCUME~1\UserXP\LOCALS~1\Temp\catchme.sys -- (catchme)
DRV - File not found [Kernel | System | Stopped] -- C:\WINDOWS\System32\DRIVERS\63152311.sys -- (63152311)
DRV - [2010.03.01 10:05:24 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010.02.16 14:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.10.22 13:54:18 | 000,037,392 | ---- | M] (Kaspersky Lab) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\63152312.sys -- (63152312)
DRV - [2009.10.09 23:31:10 | 000,315,408 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\WINDOWS\system32\drivers\6315231.sys -- (setup_9.0.0.722_07.10.2010_12-34drv)
DRV - [2009.08.28 10:33:50 | 000,228,784 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SynTP.sys -- (SynTP)
DRV - [2009.05.11 12:49:19 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2009.05.11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\changer.sys -- (Changer)
DRV - [2008.04.13 20:40:26 | 000,034,688 | ---- | M] (Toshiba Corp.) [Kernel | System | Stopped] -- C:\WINDOWS\System32\drivers\lbrtfdc.sys -- (lbrtfdc)
DRV - [2008.04.13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007.07.10 09:56:00 | 004,449,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006.12.17 10:50:00 | 001,918,464 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2006.12.05 17:36:58 | 000,529,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ar5211.sys -- (AR5211)
DRV - [2006.07.01 22:42:58 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2006.05.18 21:46:16 | 000,110,976 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfbd.sys -- (Tosrfbd)
DRV - [2006.05.09 11:21:54 | 000,040,192 | ---- | M] (TOSHIBA CORPORATION) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfusb.sys -- (Tosrfusb)
DRV - [2006.05.09 10:33:54 | 000,062,848 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfhid.sys -- (Tosrfhid)
DRV - [2006.04.19 13:57:44 | 000,047,488 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2006.03.16 10:45:12 | 000,037,632 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfbnp.sys -- (Tosrfbnp)
DRV - [2005.11.16 20:28:32 | 000,028,928 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2005.11.01 17:54:50 | 000,051,584 | ---- | M] (REDC) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2005.10.21 11:19:00 | 000,036,352 | ---- | M] (Infineon Technologies AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ifxtpm.sys -- (IFXTPM)
DRV - [2005.08.01 16:45:08 | 000,064,896 | ---- | M] (TOSHIBA Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2005.02.17 23:07:00 | 000,005,632 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ATKACPI.sys -- (MTsensor)
DRV - [2005.01.06 13:42:42 | 000,018,612 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tosrfnds.sys -- (tosrfnds)
DRV - [2004.05.28 10:13:00 | 000,016,269 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Running] -- C:\WINDOWS\ATK0100\ASNDIS5.sys -- (ASNDIS5)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-117609710-113007714-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-117609710-113007714-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

O1 HOSTS File: ([2010.10.07 18:07:43 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [ACMON] C:\Program Files\ASUS\Splendid\ACMON.exe (ATK)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe (ASUSTeK Computer INC.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe ()
O4 - HKLM..\Run: [SkyTel] C:\WINDOWS\SkyTel.exe (Realtek Semiconductor Corp.)
O4 - HKU\.DEFAULT..\RunOnce: [nlsf] C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [tscuninstall] C:\WINDOWS\system32\tscupgrd.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [nlsf] C:\WINDOWS\System32\cmd.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [tscuninstall] C:\WINDOWS\system32\tscupgrd.exe (Microsoft Corporation)
O4 - Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth Manager.lnk = C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe ()
O4 - Startup: C:\Documents and Settings\UserXP\Nabídka Start\Programy\Po spuštění\setup_9.0.0.722_07.10.2010_12-34.lnk = C:\Documents and Settings\UserXP\Plocha\Virus Removal Tool\setup_9.0.0.722_07.10.2010_12-34\startup.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 181
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = E0 FF FF 03 [binary data]
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 181
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = E0 FF FF 03 [binary data]
O7 - HKU\S-1-5-21-117609710-113007714-682003330-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-117609710-113007714-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-117609710-113007714-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-117609710-113007714-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupda ... 1454566781 (WUWebControl Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab (Shockwave Flash Object)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Nebe.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.08.10 16:20:57 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

Drivers32: msacm.ac3acm - C:\WINDOWS\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3fhg - C:\WINDOWS\System32\mp3fhg.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.DIVX - C:\WINDOWS\System32\divx.dll (DivX, Inc.)
Drivers32: VIDC.FFDS - C:\WINDOWS\System32\ff_vfw.dll ()
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
Drivers32: VIDC.MP42 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation)
Drivers32: VIDC.MPG4 - C:\WINDOWS\System32\mpg4c32.dll (Microsoft Corporation)
Drivers32: VIDC.XVID - C:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: VIDC.YV12 - C:\WINDOWS\System32\yv12vfw.dll (www.helixcommunity.org)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point (56027131116781568)

========== Files/Folders - Created Within 30 Days ==========

[2010.10.10 09:22:24 | 000,576,512 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\UserXP\Plocha\OTL.exe
[2010.10.07 18:15:07 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010.10.07 18:09:50 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2010.10.07 18:03:33 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.10.07 14:57:32 | 000,315,408 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\6315231.sys
[2010.10.07 14:57:32 | 000,037,392 | ---- | C] (Kaspersky Lab) -- C:\WINDOWS\System32\drivers\63152312.sys
[2010.10.07 14:57:31 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Plocha\Virus Removal Tool
[2010.10.07 14:55:58 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\UserXP\Recent
[2010.10.06 15:02:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Hitman Pro
[2010.10.06 15:00:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Plocha\HP
[2010.10.06 13:59:41 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.10.06 13:59:40 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010.10.06 13:59:40 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010.10.06 13:59:40 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010.10.06 13:59:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.10.06 13:56:31 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.10.06 13:01:43 | 000,000,000 | ---D | C] -- C:\Program Files\trend micro
[2010.10.06 13:01:43 | 000,000,000 | ---D | C] -- C:\rsit
[2010.10.06 12:43:28 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.10.06 12:43:25 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.10.06 12:01:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\VDLL.DLL
[2010.10.06 12:01:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\runouce.exe
[2010.10.06 12:01:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\rundll16.exe
[2010.10.06 12:01:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\RUNDL132.EXE
[2010.10.06 12:01:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\logo1_.exe
[2010.10.06 12:01:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\logo_1.exe
[2010.10.06 11:49:47 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2010.10.06 11:46:25 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\UserXP\IECompatCache
[2010.10.06 11:42:27 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\R.COM
[2010.10.06 11:42:27 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\T.COM
[2010.10.06 11:12:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Data aplikací\Avira
[2010.10.06 11:05:28 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010.10.06 11:02:01 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2010.10.06 11:01:59 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010.10.06 11:01:59 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2010.10.06 11:01:59 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2010.10.06 11:01:59 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2010.10.06 11:01:58 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2010.10.06 11:01:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Avira
[2010.10.06 10:42:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010.10.06 07:29:26 | 000,000,000 | ---D | C] -- C:\music
[2010.10.01 10:15:17 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Local Settings\Data aplikací\Adobe
[2010.10.01 10:11:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Adobe
[2010.10.01 10:11:01 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe
[2010.10.01 10:11:01 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe
[2010.09.30 19:20:45 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
[2010.09.28 19:56:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Data aplikací\Malwarebytes
[2010.09.28 19:32:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
[2010.09.28 19:32:24 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2010.09.28 18:50:32 | 000,000,000 | ---D | C] -- C:\Program Files\xerox
[2010.09.28 17:27:02 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2010.09.28 16:21:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Data aplikací\1660C2150841F31D5169408A41734799
[2010.09.28 16:14:34 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\drivers\lbrtfdc.sys
[2010.09.28 16:14:34 | 000,034,688 | ---- | C] (Toshiba Corp.) -- C:\WINDOWS\System32\dllcache\lbrtfdc.sys
[2010.09.28 16:14:34 | 000,008,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\i2omgmt.sys
[2010.09.28 16:14:33 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\changer.sys
[2010.09.28 16:14:33 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\changer.sys
[2010.09.28 16:06:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Data aplikací\PC Drivers HeadQuarters
[2010.09.17 09:03:02 | 000,010,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\hidusb.sys
[2010.09.17 09:00:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Plocha\TIM
[2010.09.12 17:06:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Google
[2010.09.12 17:01:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Data aplikací\Google
[2010.09.12 17:01:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Local Settings\Data aplikací\Google
[2010.09.12 17:01:03 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2010.09.12 15:34:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\UserXP\Data aplikací\QIP
[2010.09.12 15:33:35 | 000,000,000 | ---D | C] -- C:\Program Files\QIP Infium
[62 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.10.10 09:22:26 | 000,576,512 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\UserXP\Plocha\OTL.exe
[2010.10.10 09:21:06 | 000,000,260 | ---- | M] () -- C:\WINDOWS\tasks\WGASetup.job
[2010.10.10 09:20:30 | 000,979,652 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.10.10 09:20:30 | 000,432,690 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.10.10 09:20:30 | 000,429,262 | ---- | M] () -- C:\WINDOWS\System32\perfh005.dat
[2010.10.10 09:20:30 | 000,078,250 | ---- | M] () -- C:\WINDOWS\System32\perfc005.dat
[2010.10.10 09:20:30 | 000,067,646 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.10.10 09:14:25 | 000,000,936 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.10.10 09:14:24 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.10.10 09:14:23 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.10.10 09:14:21 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.10.07 22:32:05 | 007,077,888 | -H-- | M] () -- C:\Documents and Settings\UserXP\NTUSER.DAT
[2010.10.07 22:32:05 | 000,000,178 | -HS- | M] () -- C:\Documents and Settings\UserXP\ntuser.ini
[2010.10.07 22:06:00 | 000,000,940 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.10.07 18:23:27 | 005,854,268 | -H-- | M] () -- C:\Documents and Settings\UserXP\Local Settings\Data aplikací\IconCache.db
[2010.10.07 18:07:53 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.10.07 18:07:43 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2010.10.07 18:03:37 | 000,000,474 | RHS- | M] () -- C:\boot.ini
[2010.10.07 18:01:52 | 003,875,070 | R--- | M] () -- C:\Documents and Settings\UserXP\Plocha\ComboFix.exe
[2010.10.07 17:58:50 | 000,000,050 | ---- | M] () -- C:\WINDOWS\Lic.xxx
[2010.10.07 17:57:31 | 000,448,912 | ---- | M] () -- C:\Documents and Settings\UserXP\Dokumenty\pinfect.zip
[2010.10.07 14:59:45 | 000,002,218 | ---- | M] () -- C:\Documents and Settings\UserXP\Nabídka Start\Programy\Po spuštění\setup_9.0.0.722_07.10.2010_12-34.lnk
[2010.10.07 14:56:21 | 000,000,378 | ---- | M] () -- C:\Documents and Settings\UserXP\Dokumenty\cc_20101007_145616.reg
[2010.10.06 15:06:07 | 000,002,024 | ---- | M] () -- C:\HitmanLog.xml
[2010.10.06 15:02:58 | 000,016,968 | ---- | M] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys
[2010.10.06 14:01:42 | 000,000,474 | ---- | M] () -- C:\Boot.bak
[2010.10.06 12:43:31 | 000,000,696 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.10.06 12:18:13 | 000,000,000 | ---- | M] () -- C:\23990098.$$$
[2010.10.06 11:52:30 | 000,000,164 | ---- | M] () -- C:\Documents and Settings\UserXP\Dokumenty\cc_20101006_115225.reg
[2010.10.06 11:49:48 | 000,001,548 | ---- | M] () -- C:\Documents and Settings\UserXP\Plocha\CCleaner.lnk
[2010.10.06 11:41:55 | 028,878,048 | ---- | M] () -- C:\Documents and Settings\UserXP\Plocha\mwav.exe
[2010.10.06 11:05:41 | 000,000,477 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.10.06 11:02:19 | 000,001,707 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Avira AntiVir Control Center.lnk
[2010.10.06 10:58:44 | 000,002,504 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010.10.06 10:41:38 | 000,002,266 | ---- | M] () -- C:\Documents and Settings\UserXP\Plocha\Google Chrome.lnk
[2010.10.01 10:11:25 | 000,001,729 | ---- | M] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.09.28 19:26:04 | 000,363,520 | ---- | M] () -- C:\Documents and Settings\UserXP\Plocha\iExplore.exe
[2010.09.28 19:18:14 | 000,363,520 | ---- | M] () -- C:\Documents and Settings\UserXP\Plocha\rkill.com
[2010.09.28 15:45:09 | 000,000,098 | ---- | M] () -- C:\WINDOWS\WirelessFTP.INI
[2010.09.28 15:32:47 | 131,673,132 | ---- | M] () -- C:\Documents and Settings\UserXP\Plocha\SONG01.WAV.wav
[2010.09.12 15:33:54 | 000,000,676 | ---- | M] () -- C:\Documents and Settings\UserXP\Plocha\QIP Infium.lnk
[62 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.10.07 14:59:45 | 000,002,218 | ---- | C] () -- C:\Documents and Settings\UserXP\Nabídka Start\Programy\Po spuštění\setup_9.0.0.722_07.10.2010_12-34.lnk
[2010.10.07 14:56:19 | 000,000,378 | ---- | C] () -- C:\Documents and Settings\UserXP\Dokumenty\cc_20101007_145616.reg
[2010.10.06 17:16:06 | 000,448,912 | ---- | C] () -- C:\Documents and Settings\UserXP\Dokumenty\pinfect.zip
[2010.10.06 15:06:07 | 000,002,024 | ---- | C] () -- C:\HitmanLog.xml
[2010.10.06 15:02:58 | 000,016,968 | ---- | C] () -- C:\WINDOWS\System32\drivers\hitmanpro35.sys
[2010.10.06 14:01:42 | 000,000,474 | ---- | C] () -- C:\Boot.bak
[2010.10.06 14:01:39 | 000,261,312 | RHS- | C] () -- C:\cmldr
[2010.10.06 13:59:41 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.10.06 13:59:41 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.10.06 13:59:40 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.10.06 13:59:40 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.10.06 13:59:40 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.10.06 13:54:00 | 003,875,070 | R--- | C] () -- C:\Documents and Settings\UserXP\Plocha\ComboFix.exe
[2010.10.06 12:43:31 | 000,000,696 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Malwarebytes' Anti-Malware.lnk
[2010.10.06 12:18:13 | 000,000,000 | ---- | C] () -- C:\23990098.$$$
[2010.10.06 11:52:28 | 000,000,164 | ---- | C] () -- C:\Documents and Settings\UserXP\Dokumenty\cc_20101006_115225.reg
[2010.10.06 11:49:48 | 000,001,548 | ---- | C] () -- C:\Documents and Settings\UserXP\Plocha\CCleaner.lnk
[2010.10.06 11:42:49 | 000,000,050 | ---- | C] () -- C:\WINDOWS\Lic.xxx
[2010.10.06 11:40:02 | 028,878,048 | ---- | C] () -- C:\Documents and Settings\UserXP\Plocha\mwav.exe
[2010.10.06 11:02:19 | 000,001,707 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Avira AntiVir Control Center.lnk
[2010.10.06 10:41:38 | 000,002,266 | ---- | C] () -- C:\Documents and Settings\UserXP\Plocha\Google Chrome.lnk
[2010.10.01 10:11:25 | 000,001,729 | ---- | C] () -- C:\Documents and Settings\All Users\Plocha\Adobe Reader 9.lnk
[2010.09.28 20:06:11 | 000,363,520 | ---- | C] () -- C:\Documents and Settings\UserXP\Plocha\iExplore.exe
[2010.09.28 19:27:24 | 000,363,520 | ---- | C] () -- C:\Documents and Settings\UserXP\Plocha\rkill.com
[2010.09.28 15:45:09 | 000,000,098 | ---- | C] () -- C:\WINDOWS\WirelessFTP.INI
[2010.09.28 15:31:40 | 131,673,132 | ---- | C] () -- C:\Documents and Settings\UserXP\Plocha\SONG01.WAV.wav
[2010.09.12 17:01:08 | 000,000,940 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.09.12 17:01:08 | 000,000,936 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.09.12 15:33:54 | 000,000,676 | ---- | C] () -- C:\Documents and Settings\UserXP\Plocha\QIP Infium.lnk
[2010.08.10 22:50:02 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010.08.10 22:50:01 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010.08.10 22:49:55 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010.08.10 22:49:55 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010.08.10 22:49:55 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010.08.10 22:49:55 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2010.08.10 17:29:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\tosOBEX.INI
[2010.08.10 17:10:22 | 000,000,621 | ---- | C] () -- C:\WINDOWS\System32\drivers\AW1012d.ini
[2010.08.10 17:08:14 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATKACPI.sys
[2005.09.02 14:44:08 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2005.07.22 21:30:20 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
[2004.07.20 17:04:02 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\TosBtHcrpAPI.dll
[2004.01.15 14:43:28 | 000,114,688 | ---- | C] () -- C:\WINDOWS\System32\TBTMonUI.dll

========== LOP Check ==========

[2010.08.10 18:05:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrator\Data aplikací\Infineon
[2010.08.10 17:15:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
[2010.08.16 06:02:33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
[2010.10.06 15:02:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Hitman Pro
[2010.08.10 18:05:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\Infineon
[2010.09.28 16:06:12 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Data aplikací\PC Drivers HeadQuarters
[2010.09.28 16:21:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\1660C2150841F31D5169408A41734799
[2010.10.07 22:31:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\AIMP
[2010.08.16 06:11:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\DAEMON Tools Lite
[2010.08.10 23:04:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\GHISLER
[2010.08.10 18:05:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\Infineon
[2010.09.12 15:34:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\QIP
[2010.08.15 19:34:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\uTorrent
[2010.10.10 09:21:06 | 000,000,260 | ---- | M] () -- C:\WINDOWS\Tasks\WGASetup.job

========== Purity Check ==========

========== Custom Scans ==========

< HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s >

< c:\windows\*.* /U >
[62 c:\windows\*.tmp files -> c:\windows\*.tmp -> ]

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*. >

< %ALLUSERSPROFILE%\Application Data\*.exe /s >

< %APPDATA%\*. >
[2010.09.28 16:21:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\1660C2150841F31D5169408A41734799
[2010.10.01 10:15:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\Adobe
[2010.10.07 22:31:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\AIMP
[2010.10.06 11:12:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\Avira
[2010.08.16 06:11:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\DAEMON Tools Lite
[2010.08.10 23:04:01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\GHISLER
[2010.09.12 17:01:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\Google
[2010.08.10 16:33:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\Identities
[2010.08.10 18:05:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\Infineon
[2010.08.10 17:09:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\InstallShield
[2010.08.10 22:59:42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\Macromedia
[2010.09.28 19:56:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\Malwarebytes
[2010.08.10 23:18:10 | 000,000,000 | --SD | M] -- C:\Documents and Settings\UserXP\Data aplikací\Microsoft
[2010.09.12 15:34:02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\QIP
[2010.08.15 19:34:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\UserXP\Data aplikací\uTorrent

< %APPDATA%\*.exe /s >

< MD5 for: AGP440.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ERDNT\cache\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys
[2004.08.03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- C:\WINDOWS\$NtServicePackUninstall$\agp440.sys

< MD5 for: ATAPI.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ERDNT\cache\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004.08.04 00:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0002\DriverFiles\i386\atapi.sys

< MD5 for: CDROM.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:cdrom.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:cdrom.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:cdrom.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\ServicePackFiles\i386\cdrom.sys
[2008.04.13 20:40:46 | 000,062,976 | ---- | M] (Microsoft Corporation) MD5=1F4260CC5B42272D71F79E570A27A4FE -- C:\WINDOWS\system32\drivers\cdrom.sys
[2004.08.04 00:59:54 | 000,049,536 | ---- | M] (Microsoft Corporation) MD5=AF9C19B3100FE010496B1A27181FBF72 -- C:\WINDOWS\$NtServicePackUninstall$\cdrom.sys

< MD5 for: CRYPTSVC.DLL >
[2004.08.17 17:49:04 | 000,060,416 | ---- | M] (Microsoft Corporation) MD5=70D2A1756F4B2067658A186C963FCABD -- C:\WINDOWS\$NtServicePackUninstall$\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ERDNT\cache\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\ServicePackFiles\i386\cryptsvc.dll
[2008.04.14 05:21:38 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=F3AB0933CBD166D271992F411C27CCAF -- C:\WINDOWS\system32\cryptsvc.dll

< MD5 for: EVENTLOG.DLL >
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ERDNT\cache\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 05:21:41 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2EE99F67C930931EB404DADCE57E976E -- C:\WINDOWS\system32\eventlog.dll
[2004.08.17 17:49:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=6EB66066D5C0175320CFEA0A4C74C88F -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

< MD5 for: EXPLORER.EXE >
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ERDNT\cache\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\explorer.exe
[2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) MD5=27AFD587C462E280EE046B8CCA3C2CD1 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2004.08.17 17:49:24 | 001,032,704 | ---- | M] (Microsoft Corporation) MD5=53114D57AB73A406AC7F602227781A99 -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

< MD5 for: HAL.DLL >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:hal.dll
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:hal.dll
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:hal.dll
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:hal.dll
[2008.04.13 20:31:28 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=4329EE7D502C9113EBA0F9570392F5EE -- C:\WINDOWS\system32\HAL.DLL
[2008.04.13 20:31:32 | 000,105,344 | ---- | M] (Microsoft Corporation) MD5=6DB1E72AD3B372DFC451B7F54BA08AA7 -- C:\WINDOWS\ServicePackFiles\i386\hal.dll
[2004.08.04 00:59:14 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=DFCE51FD96909D1B97D4A1A72D060D77 -- C:\WINDOWS\$NtUninstallKB896256_0$\hal.dll
[2006.10.30 11:50:16 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=E40F822C7D487671FED2CAAF533FB4B6 -- C:\WINDOWS\$NtUninstallKB896256$\hal.dll
[2006.10.30 13:27:30 | 000,134,400 | ---- | M] (Microsoft Corporation) MD5=E8C837F0AA77FF8B74F5C5167CD06B89 -- C:\WINDOWS\$NtServicePackUninstall$\hal.dll

< MD5 for: CHANGER.SYS >
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:Changer.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:Changer.sys
[2004.08.17 15:57:28 | 018,786,869 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:Changer.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:Changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\ServicePackFiles\i386\changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\system32\dllcache\changer.sys
[2008.04.13 20:40:58 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=2A5815CA6FFF24B688C01F828B96819C -- C:\WINDOWS\system32\drivers\changer.sys
[2004.08.03 23:00:14 | 000,008,192 | ---- | M] (Microsoft Corporation) MD5=DAF1A8193B6CAF0FB858CADCC5C4AF4A -- C:\WINDOWS\$NtServicePackUninstall$\changer.sys

< MD5 for: ISAPNP.SYS >
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:isapnp.sys
[2010.08.19 12:00:29 | 023,890,583 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:isapnp.sys
[2001.10.25 14:00:00 | 000,035,840 | ---- | M] (Microsoft Corporation) MD5=1091528512E4DD7ED5FDDCC4DF1C53D7 -- C:\WINDOWS\$NtServicePackUninstall$\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\ServicePackFiles\i386\isapnp.sys
[2008.04.14 04:27:53 | 000,037,248 | ---- | M] (Microsoft Corporation) MD5=CC9F8A2D60AED1A51A3AC34C59B987AE -- C:\WINDOWS\system32\drivers\isapnp.sys

< MD5 for: LSASS.EXE >
[2004.08.17 17:49:24 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=82A362FE1D4980B71B588D9C10748511 -- C:\WINDOWS\$NtServicePackUninstall$\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ERDNT\cache\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\ServicePackFiles\i386\lsass.exe
[2008.04.14 05:22:29 | 000,013,312 | ---- | M] (Microsoft Corporation) MD5=ED0A176354487CEED65B80A7148AB739 -- C:\WINDOWS\system32\lsass.exe

< MD5 for: NDIS.SYS >
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ERDNT\cache\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\ServicePackFiles\i386\ndis.sys
[2008.04.13 21:20:37 | 000,182,656 | ---- | M] (Microsoft Corporation) MD5=1DF7F42665C94B825322FAE71721130D -- C:\WINDOWS\system32\drivers\ndis.sys
[2004.08.04 01:14:30 | 000,182,912 | ---- | M] (Microsoft Corporation) MD5=558635D3AF1C7546D26067D5D9B6959E -- C:\WINDOWS\$NtServicePackUninstall$\ndis.sys

< MD5 for: NETLOGON.DLL >
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB968389\SP2QFE\netlogon.dll
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$hf_mig$\KB975467\SP2QFE\netlogon.dll
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2009.02.06 20:47:20 | 000,408,064 | ---- | M] (Microsoft Corporation) MD5=1F43B8C0F4C767FBED89711C30E704D9 -- C:\WINDOWS\$NtUninstallKB975467_1$\netlogon.dll
[2004.08.17 17:49:14 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=2591CADAEF7D2242039255028E577688 -- C:\WINDOWS\$NtUninstallKB968389_1$\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ERDNT\cache\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 05:21:50 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=C2ED0E3408F50BBC149D4F0936E67832 -- C:\WINDOWS\system32\netlogon.dll

< MD5 for: SCECLI.DLL >
[2004.08.17 17:49:18 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=07119058D451CB7EA4317BCFDA8599A6 -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ERDNT\cache\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 05:21:54 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=830CE8951C71F361D7D2F38416CC8BC1 -- C:\WINDOWS\system32\scecli.dll

< MD5 for: SMSS.EXE >
[2004.08.17 17:49:28 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=04B69D49D7FC3358A372E97DB6D39447 -- C:\WINDOWS\$NtServicePackUninstall$\smss.exe
[2004.08.17 15:49:28 | 000,164,864 | ---- | M] (Microsoft Corporation) MD5=3C100B7FDB179B63829103DF6541337F -- C:\cmdcons\SYSTEM32\SMSS.EXE
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\ServicePackFiles\i386\smss.exe
[2008.04.14 05:22:47 | 000,050,688 | ---- | M] (Microsoft Corporation) MD5=9B08A8C6331C2DA9C30377BCB4262721 -- C:\WINDOWS\system32\smss.exe

< MD5 for: SVCHOST.EXE >
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ERDNT\cache\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008.04.14 05:22:48 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BE4A520E29B6391F49E79CCC52044D93 -- C:\WINDOWS\system32\svchost.exe
[2004.08.17 17:49:28 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=DFBA2915B0BF58ABB288CD4C9318CB3F -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

< MD5 for: TCPIP.SYS >
[2008.06.20 12:45:13 | 000,360,320 | ---- | M] (Microsoft Corporation) MD5=2A5554FC5B1E04E131230E3CE035C3F9 -- C:\WINDOWS\$NtServicePackUninstall$\tcpip.sys
[2005.05.25 21:07:12 | 000,359,936 | ---- | M] (Microsoft Corporation) MD5=63FDFEA54EB53DE2D863EE454937CE1E -- C:\WINDOWS\$hf_mig$\KB893066\SP2QFE\tcpip.sys
[2008.06.20 12:44:42 | 000,360,960 | ---- | M] (Microsoft Corporation) MD5=744E57C99232201AE98C49168B918F48 -- C:\WINDOWS\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[2005.05.25 21:04:02 | 000,359,808 | ---- | M] (Microsoft Corporation) MD5=88763A98A4C26C409741B4AA162720C9 -- C:\WINDOWS\$NtUninstallKB951748_0$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\$NtUninstallKB951748$\tcpip.sys
[2008.04.13 21:20:16 | 000,361,344 | ---- | M] (Microsoft Corporation) MD5=93EA8D04EC73A85DB02EB8805988F733 -- C:\WINDOWS\ServicePackFiles\i386\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\ERDNT\cache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\dllcache\tcpip.sys
[2008.06.20 13:51:12 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=9AEFA14BD6B182D61E3119FA5F436D3D -- C:\WINDOWS\system32\drivers\tcpip.sys
[2008.06.20 13:59:02 | 000,361,600 | ---- | M] (Microsoft Corporation) MD5=AD978A1B783B5719720CFF204B666C8E -- C:\WINDOWS\$hf_mig$\KB951748\SP3QFE\tcpip.sys

< MD5 for: USERINIT.EXE >
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ERDNT\cache\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 05:22:50 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=7DC1830F22E7D275B438127B68030239 -- C:\WINDOWS\system32\userinit.exe
[2004.08.17 17:49:28 | 000,024,576 | ---- | M] (Microsoft Corporation) MD5=836F7960362FF95C5D49E40B891F2CFC -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004.08.17 17:49:28 | 000,502,272 | ---- | M] (Microsoft Corporation) MD5=221C29AE1B4CC61D11D8B27DE78B2307 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ERDNT\cache\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 05:22:53 | 000,507,904 | ---- | M] (Microsoft Corporation) MD5=CDDB1F8E1AEA356F3AD106F2CF9B7FEA -- C:\WINDOWS\system32\winlogon.exe

< MD5 for: WS2_32.DLL >
[2004.08.17 17:49:22 | 000,082,944 | ---- | M] (Microsoft Corporation) MD5=382E9B87F1282E697C67AF84E34E35E2 -- C:\WINDOWS\$NtServicePackUninstall$\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ERDNT\cache\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\ServicePackFiles\i386\ws2_32.dll
[2008.04.14 05:22:06 | 000,082,432 | ---- | M] (Microsoft Corporation) MD5=951D473917C51F21496D914CF6E5DDD1 -- C:\WINDOWS\system32\ws2_32.dll

< %systemroot%\*. /mp /s >

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< %systemroot%\Tasks\*.job /lockedfiles >

< %systemroot%\system32\drivers\*.sys /lockedfiles >

< %systemroot%\System32\config\*.sav >
[2010.08.10 16:40:02 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\config\default.sav
[2010.08.10 16:40:02 | 000,663,552 | ---- | M] () -- C:\WINDOWS\system32\config\software.sav
[2010.08.10 16:40:02 | 000,454,656 | ---- | M] () -- C:\WINDOWS\system32\config\system.sav

< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

< reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\WUAUSERV
IMAGEPATH REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs

< reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c >
! REG.EXE VERSION 3.0
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BITS
IMAGEPATH REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs

< %systemroot%\system32\drivers\*.sys /3 >

< %systemroot%\system32\*.* /3 >
[2010.10.10 09:20:30 | 000,078,250 | ---- | M] () -- C:\WINDOWS\system32\perfc005.dat
[2010.10.10 09:20:30 | 000,067,646 | ---- | M] () -- C:\WINDOWS\system32\perfc009.dat
[2010.10.10 09:20:30 | 000,429,262 | ---- | M] () -- C:\WINDOWS\system32\perfh005.dat
[2010.10.10 09:20:30 | 000,432,690 | ---- | M] () -- C:\WINDOWS\system32\perfh009.dat
[2010.10.10 09:20:30 | 000,979,652 | ---- | M] () -- C:\WINDOWS\system32\PerfStringBackup.INI
[2010.10.10 09:14:23 | 000,002,206 | ---- | M] () -- C:\WINDOWS\system32\wpa.dbl
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< End of report >

gp50 · #15 Příspěvek od **gp50** » 10 říj 2010 08:40

A tady Extras.Txt

OTL Extras logfile created on: 10. 10. 2010 9:23:57 - Run 1
OTL by OldTimer - Version 3.2.14.1 Folder = C:\Documents and Settings\UserXP\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d. M. yyyy

2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 71,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 89,00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 149,05 Gb Total Space | 68,81 Gb Free Space | 46,17% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: PRIVE-FA3D69025
Current User Name: UserXP
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: All users
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

[HKEY_USERS\S-1-5-21-117609710-113007714-682003330-1003\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Command Prompt Here] -- cmd.exe /k cd %1 (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\StrongDC++\StrongDC.exe" = C:\Program Files\StrongDC++\StrongDC.exe:*:Enabled:StrongDC++ -- ()
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\QIP Infium\infium.exe" = C:\Program Files\QIP Infium\infium.exe:*:Enabled:QIP Infium -- ()
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe" = C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth -- (Google)

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{139B0FFA-187E-4BA1-BCA6-6B56B2B6AB8C}" = ATK Media
"{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{4462AD13-F2AA-4CBD-9F95-293C38EED870}" = Power4 Gear
"{56780980-C930-4775-88B8-85301EDBEBE6}_is1" = Hard Truck Tycoon
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1029-7B44-A93000000001}" = Adobe Reader 9.3 - Czech
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C0FC1C14-4824-4A73-87A6-9E888C9C3102}" = ASUS Splendid Video Enhancement Technology
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}" = Bluetooth Stack for Windows
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"3FA1705966809259F916AF817C59B4F389F4572C" = Balíček ovladače systému Windows - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"AIMP2" = AIMP2
"All ATI Software" = Softarová utilita ATI - Odinstalovat
"ATI Display Driver" = ATI Display Driver
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"CCleaner" = CCleaner (remove only)
"Euro Truck Simulator" = Euro Truck Simulator
"HControl" = ATK0100 ACPI UTILITY
"ie8" = Windows Internet Explorer 8
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 6.2.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"StrongDC++" = StrongDC++ 2.41
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Totalcmd" = Total Commander (Remove or Repair)
"uTorrent" = µTorrent
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Windows XP Service Pack" = Windows XP Service Pack 3

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-117609710-113007714-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"QIP Infium" = QIP Infium 3.0.9040

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 10. 8. 2010 12:17:40 | Computer Name = PRIVE-FA3D69025 | Source = Application Error | ID = 1000
Description = Chybující aplikace lifeframe.exe, verze 2.0.5.0, chybující modul camera.dll,
verze 0.0.0.0, adresa chyby 0x00007bf5.

Error - 16. 8. 2010 0:03:06 | Computer Name = PRIVE-FA3D69025 | Source = Google Update | ID = 20
Description =

Error - 16. 8. 2010 0:04:50 | Computer Name = PRIVE-FA3D69025 | Source = MsiInstaller | ID = 11705
Description = Produkt: Microsoft .NET Framework 2.0 Service Pack 2 - Error 1705.Probíhá
předcházející instalace tohoto produktu. Chcete-li pokračovat, je nutné vrátit
zpět změny provedené při této předchozí instalaci. Chcete tyto změny vrátit zpět?

Error - 16. 8. 2010 6:03:05 | Computer Name = PRIVE-FA3D69025 | Source = Google Update | ID = 20
Description =

Error - 16. 8. 2010 7:03:05 | Computer Name = PRIVE-FA3D69025 | Source = Google Update | ID = 20
Description =

Error - 16. 8. 2010 8:03:05 | Computer Name = PRIVE-FA3D69025 | Source = Google Update | ID = 20
Description =

Error - 16. 8. 2010 9:03:05 | Computer Name = PRIVE-FA3D69025 | Source = Google Update | ID = 20
Description =

Error - 16. 8. 2010 10:03:05 | Computer Name = PRIVE-FA3D69025 | Source = Google Update | ID = 20
Description =

Error - 16. 8. 2010 11:03:05 | Computer Name = PRIVE-FA3D69025 | Source = Google Update | ID = 20
Description =

Error - 19. 8. 2010 3:44:18 | Computer Name = PRIVE-FA3D69025 | Source = Google Update | ID = 20
Description =

[ System Events ]
Error - 29. 9. 2010 12:41:03 | Computer Name = PRIVE-FA3D69025 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: Aavmker4 AFD AmdK8 aswSP aswTdi Fips IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss
sptd
Tcpip
Tosrfcom

Error - 29. 9. 2010 12:55:54 | Computer Name = PRIVE-FA3D69025 | Source = DCOM | ID = 10005
Description = Služba DCOM zjistila chybu %1084 při pokusu o spuštění služby EventSystem
s argumenty za účelem spuštění serveru: {1BE1F766-5536-11D1-B726-00C04FB926AF}

Error - 6. 10. 2010 7:59:01 | Computer Name = PRIVE-FA3D69025 | Source = SRService | ID = 104
Description = Proces inicializace nástroje Obnovení systému se nezdařil.

Error - 6. 10. 2010 7:59:11 | Computer Name = PRIVE-FA3D69025 | Source = Service Control Manager | ID = 7023
Description = Služba Služba obnovení systému byla ukončena s následující chybou:
%%2

Error - 7. 10. 2010 11:49:13 | Computer Name = PRIVE-FA3D69025 | Source = sr | ID = 1
Description = Filtr nástroje Obnovení systému zjistil neočekávanou chybu 0xC0000001
při zpracování souboru na svazku HarddiskVolume1. Sledování svazku bylo ukončeno.

Error - 7. 10. 2010 11:49:19 | Computer Name = PRIVE-FA3D69025 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: 63152311

Error - 7. 10. 2010 12:11:37 | Computer Name = PRIVE-FA3D69025 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: 63152311

Error - 7. 10. 2010 12:48:14 | Computer Name = PRIVE-FA3D69025 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: 63152311

Error - 7. 10. 2010 13:57:57 | Computer Name = PRIVE-FA3D69025 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: 63152311

Error - 10. 10. 2010 3:14:38 | Computer Name = PRIVE-FA3D69025 | Source = Service Control Manager | ID = 7026
Description = Zavedení následujícího ovladače pro spouštění počítače nebo systému
se nezdařilo: 63152311

< End of report >

VIRY.CZ

Při startu počítač na 10min zamrzne, pak je ok.

Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.

Re: Při startu počítač na 10min zamrzne, pak je ok.