VIRY.CZ

Logfile of random's system information tool 1.08 (written by random/random)
Run by Majkl at 2010-11-22 23:25:39
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 90 GB (61%) free of 148 GB
Total RAM: 1976 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:26, on 2010-11-22
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.7930.16406)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Windows\WindowsMobile\wmdcBase.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Apoint2K\Apntex.exe
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Users\Majkl\AppData\Local\Temp\RtkBtMnt.exe
C:\Windows\system32\wbem\unsecapp.exe
c:\PROGRA~1\mcafee\msc\mcuimgr.exe
C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Majkl\Downloads\RSIT.exe
C:\Program Files\trend micro\Majkl.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKLM\..\Run: [Nokia FastStart] "C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe" /command:faststart
O4 - HKLM\..\Run: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [hooceziv] C:\Users\Majkl\AppData\Roaming\Microsoft\jovymma.exe
O4 - HKCU\..\Run: [MSConfig] C:\Users\Majkl\dke.exe \u
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: 0ccx1sm.exe
O4 - Startup: 0shhxxs.exe
O4 - Startup: 5c1rmcc.exe
O4 - Startup: bwm0g0bww.exe
O4 - Startup: chsshhmchc.exe
O4 - Startup: cxr9m0hccx1.exe
O4 - Startup: e0zu0o0j.exe
O4 - Startup: ezoojz98.exe
O4 - Startup: ff1ppkkfuup.exe
O4 - Startup: hc7xs1smmhx.exe
O4 - Startup: jue5e2oj.exe
O4 - Startup: mmggbrrmb9.exe
O4 - Startup: mmhxx1hh.exe
O4 - Startup: mxmhcchx.exe
O4 - Startup: ojjeu0o0eoo.exe
O4 - Startup: pffzp9kk.exe
O4 - Startup: pk32ppkzzuu.exe
O4 - Startup: ppffzp9kk.exe
O4 - Startup: rg4brrmbbww.exe
O4 - Startup: rmmhxmcc1m.exe
O4 - Startup: smccx1sm.exe
O4 - Startup: ue2eezoo.exe
O4 - Startup: uejeeo3oo.exe
O4 - Startup: uu1z1uoojz9.exe
O4 - Startup: w0rm0g0rmm.exe
O4 - Startup: xs1cxxc7cxc.exe
O4 - Startup: xshhccxm.exe
O4 - Startup: zoojz98j2ez.exe
O4 - Global Startup: Nokia Ovi Suite.lnk = C:\Program Files\Nokia\Ovi\Suite\RunLauncher.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - (no file)
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - (no file)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.co ... 1.66.0.cab
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll (file missing)
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll (file missing)
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HASP License Manager (hasplms) - Aladdin Knowledge Systems Ltd. - C:\Windows\system32\hasplms.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TwonkyMedia - PacketVideo - C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe

--
End of file - 11271 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\McDefragTask.job
C:\Windows\tasks\McQcTask.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2008-01-25 159744]
"ePower_DMC"=C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [2008-04-30 397312]
"eRecoveryService"= []
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles []
"Nokia FastStart"=C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe [2008-10-17 2323680]
"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdcBase.exe [2007-05-31 648072]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2010-02-20 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2010-02-20 175640]
"Persistence"=C:\Windows\system32\igfxpers.exe [2010-02-20 167960]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-05-21 6144000]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2008-07-24 490952]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe []
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2010-02-18 2012912]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-10-23 68856]
"AdobeUpdater"=C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe [2008-09-26 2356088]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]
"hooceziv"=C:\Users\Majkl\AppData\Roaming\Microsoft\jovymma.exe []
"MSConfig"=C:\Users\Majkl\dke.exe \u []
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BkupTray]
C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe [2008-04-06 34040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-12-15 30192]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ6.5\ICQ.exe [2010-11-16 172856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
C:\PROGRA~1\LAUNCH~1\LManager.exe [2008-06-10 870920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mcagent_exe]
C:\Program Files\McAfee.com\Agent\mcagent.exe [2007-08-03 582992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-10-23 68856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WarReg_PopUp]
C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe [2008-01-29 303104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe [2008-02-12 723496]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Nokia Ovi Suite.lnk - C:\Program Files\Nokia\Ovi\Suite\RunLauncher.exe

C:\Users\Majkl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
0ccx1sm.exe
0shhxxs.exe
5c1rmcc.exe
bwm0g0bww.exe
chsshhmchc.exe
cxr9m0hccx1.exe
e0zu0o0j.exe
ezoojz98.exe
ff1ppkkfuup.exe
hc7xs1smmhx.exe
jue5e2oj.exe
mmggbrrmb9.exe
mmhxx1hh.exe
mxmhcchx.exe
ojjeu0o0eoo.exe
pffzp9kk.exe
pk32ppkzzuu.exe
ppffzp9kk.exe
rg4brrmbbww.exe
rmmhxmcc1m.exe
smccx1sm.exe
ue2eezoo.exe
uejeeo3oo.exe
uu1z1uoojz9.exe
w0rm0g0rmm.exe
xs1cxxc7cxc.exe
xshhccxm.exe
zoojz98j2ez.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2010-02-20 227328]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ablrilhy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ablrilhy.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PSEXESVC]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-11-22 23:25:39 ----D---- C:\rsit
2010-11-22 21:28:53 ----D---- C:\ProgramData\Spybot - Search & Destroy
2010-11-22 21:28:53 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-11-22 17:28:26 ----A---- C:\Windows\system32\drivers\aswSP.sys
2010-11-22 17:28:26 ----A---- C:\Windows\system32\drivers\aswFsBlk.sys
2010-11-22 17:28:24 ----A---- C:\Windows\system32\drivers\aswRdr.sys
2010-11-22 17:28:22 ----A---- C:\Windows\system32\drivers\aswTdi.sys
2010-11-22 17:28:19 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2010-11-22 17:26:40 ----A---- C:\Windows\system32\aswBoot.exe
2010-11-22 17:26:17 ----D---- C:\ProgramData\Alwil Software
2010-11-22 17:26:17 ----D---- C:\Program Files\Alwil Software
2010-11-21 22:43:59 ----A---- C:\Windows\system32\msfeeds.dll
2010-11-21 22:43:59 ----A---- C:\Windows\system32\licmgr10.dll
2010-11-21 22:43:59 ----A---- C:\Windows\system32\jsproxy.dll
2010-11-21 22:43:58 ----A---- C:\Windows\system32\mshta.exe
2010-11-21 22:43:58 ----A---- C:\Windows\system32\msfeedssync.exe
2010-11-21 22:43:58 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-11-21 22:43:58 ----A---- C:\Windows\system32\jscript9.dll
2010-11-21 22:43:58 ----A---- C:\Windows\system32\jscript.dll
2010-11-21 22:43:58 ----A---- C:\Windows\system32\inseng.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\webcheck.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\vbscript.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\urlmon.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\url.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2010-11-21 22:43:57 ----A---- C:\Windows\system32\SetDepNx.exe
2010-11-21 22:43:57 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2010-11-21 22:43:57 ----A---- C:\Windows\system32\pngfilt.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\msls31.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\mshtmler.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\mshtmled.dll
2010-11-21 22:43:57 ----A---- C:\Windows\system32\admparse.dll
2010-11-21 22:43:56 ----A---- C:\Windows\system32\occache.dll
2010-11-21 22:43:56 ----A---- C:\Windows\system32\msrating.dll
2010-11-21 22:43:56 ----A---- C:\Windows\system32\mshtml.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\iedkcs32.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\ieapfltr.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\ieakui.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\ieaksie.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\ieakeng.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\IEAdvpack.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\dxtrans.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\dxtmsft.dll
2010-11-21 22:43:55 ----A---- C:\Windows\system32\advpack.dll
2010-11-21 22:43:54 ----A---- C:\Windows\system32\imgutil.dll
2010-11-21 22:43:54 ----A---- C:\Windows\system32\ieUnatt.exe
2010-11-21 22:43:54 ----A---- C:\Windows\system32\ieui.dll
2010-11-21 22:43:54 ----A---- C:\Windows\system32\iesysprep.dll
2010-11-21 22:43:54 ----A---- C:\Windows\system32\ie4uinit.exe
2010-11-21 22:43:54 ----A---- C:\Windows\system32\icardie.dll
2010-11-21 22:43:53 ----A---- C:\Windows\system32\iexpress.exe
2010-11-21 22:43:52 ----A---- C:\Windows\system32\wininet.dll
2010-11-21 22:43:52 ----A---- C:\Windows\system32\wextract.exe
2010-11-21 22:43:52 ----A---- C:\Windows\system32\iesetup.dll
2010-11-21 22:43:52 ----A---- C:\Windows\system32\iertutil.dll
2010-11-21 22:43:52 ----A---- C:\Windows\system32\iernonce.dll
2010-11-21 22:43:52 ----A---- C:\Windows\system32\iepeers.dll
2010-11-21 22:43:52 ----A---- C:\Windows\system32\ieframe.dll
2010-11-21 22:42:21 ----A---- C:\Windows\system32\XpsRasterService.dll
2010-11-21 22:42:21 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2010-11-21 22:42:21 ----A---- C:\Windows\system32\d3d10_1core.dll
2010-11-21 22:42:21 ----A---- C:\Windows\system32\d3d10_1.dll
2010-11-21 22:42:20 ----A---- C:\Windows\system32\mfreadwrite.dll
2010-11-21 22:42:20 ----A---- C:\Windows\system32\mfmp4src.dll
2010-11-21 22:42:20 ----A---- C:\Windows\system32\MFHEAACdec.dll
2010-11-21 22:42:20 ----A---- C:\Windows\system32\MFH264Dec.dll
2010-11-21 22:42:20 ----A---- C:\Windows\system32\FntCache.dll
2010-11-21 22:42:20 ----A---- C:\Windows\system32\DWrite.dll
2010-11-21 22:42:20 ----A---- C:\Windows\system32\d3d10warp.dll
2010-11-21 22:42:19 ----A---- C:\Windows\system32\d2d1.dll
2010-11-21 22:40:30 ----A---- C:\Windows\system32\WMPhoto.dll
2010-11-21 22:40:26 ----A---- C:\Windows\system32\cdd.dll
2010-11-21 22:40:25 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-11-21 22:40:20 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2010-11-21 22:40:19 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2010-11-21 22:40:19 ----A---- C:\Windows\system32\WindowsCodecs.dll
2010-11-21 22:40:18 ----A---- C:\Windows\system32\XpsPrint.dll
2010-11-21 22:40:18 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2010-11-21 22:40:18 ----A---- C:\Windows\system32\PhotoMetadataHandler.dll
2010-11-21 22:40:18 ----A---- C:\Windows\system32\OpcServices.dll
2010-11-21 22:40:18 ----A---- C:\Windows\system32\dxdiagn.dll
2010-11-21 22:40:18 ----A---- C:\Windows\system32\dxdiag.exe
2010-11-21 22:40:17 ----A---- C:\Windows\system32\xpsservices.dll
2010-11-21 22:40:17 ----A---- C:\Windows\system32\d3d10level9.dll
2010-11-21 22:40:17 ----A---- C:\Windows\system32\d3d10core.dll
2010-11-21 22:40:16 ----A---- C:\Windows\system32\dxgi.dll
2010-11-21 22:40:16 ----A---- C:\Windows\system32\d3d11.dll
2010-11-21 22:40:16 ----A---- C:\Windows\system32\d3d10.dll
2010-11-21 22:38:46 ----D---- C:\Program Files\Feedback Tool
2010-11-21 21:39:05 ----D---- C:\Windows\system32\eu-ES
2010-11-21 21:39:05 ----D---- C:\Windows\system32\ca-ES
2010-11-21 21:39:01 ----D---- C:\Windows\system32\vi-VN
2010-11-21 20:10:54 ----D---- C:\Windows\system32\EventProviders
2010-11-21 17:51:40 ----A---- C:\Windows\zip.exe
2010-11-21 17:51:40 ----A---- C:\Windows\VFIND.exe
2010-11-21 17:51:40 ----A---- C:\Windows\SWXCACLS.exe
2010-11-21 17:51:40 ----A---- C:\Windows\SWSC.exe
2010-11-21 17:51:40 ----A---- C:\Windows\SWREG.exe
2010-11-21 17:51:40 ----A---- C:\Windows\sed.exe
2010-11-21 17:51:40 ----A---- C:\Windows\NIRCMD.exe
2010-11-21 17:51:40 ----A---- C:\Windows\grep.exe
2010-11-21 17:51:40 ----A---- C:\Windows\fdsv.exe
2010-11-21 17:51:10 ----D---- C:\ComboFix
2010-11-21 17:51:09 ----A---- C:\Windows\system32\CF31677.exe
2010-11-21 14:27:40 ----RSHD---- C:\RECYCLER
2010-11-21 14:27:07 ----RA---- C:\Users\Majkl\AppData\Roaming\BG0Ai.txt
2010-11-21 14:26:04 ----RSH---- C:\Users\Majkl\AppData\Roaming\juzjf.exe
2010-10-27 17:00:48 ----A---- C:\Windows\system32\gameux.dll
2010-10-27 17:00:45 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-10-27 17:00:45 ----A---- C:\Windows\system32\Apphlpdm.dll

======List of files/folders modified in the last 1 months======

2010-11-22 23:26:34 ----D---- C:\Program Files\Trend Micro
2010-11-22 23:25:48 ----AD---- C:\Windows\Temp
2010-11-22 23:21:13 ----D---- C:\Windows\System32
2010-11-22 23:21:13 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-22 23:21:12 ----D---- C:\Windows\inf
2010-11-22 23:21:11 ----D---- C:\Program Files\Mozilla Firefox
2010-11-22 23:14:52 ----SD---- C:\Users\Majkl\AppData\Roaming\Microsoft
2010-11-22 23:09:55 ----D---- C:\Users\Majkl\AppData\Roaming\ICQ
2010-11-22 23:09:30 ----D---- C:\Windows\system32\drivers
2010-11-22 21:28:53 ----RD---- C:\Program Files
2010-11-22 21:28:53 ----HD---- C:\ProgramData
2010-11-22 17:28:12 ----SHD---- C:\Windows\Installer
2010-11-22 17:28:08 ----D---- C:\Windows\winsxs
2010-11-22 17:26:41 ----D---- C:\Windows
2010-11-22 17:26:18 ----D---- C:\Windows\system32\catroot2
2010-11-22 17:26:07 ----SHD---- C:\System Volume Information
2010-11-22 16:55:21 ----D---- C:\Windows\system32\catroot
2010-11-21 23:26:11 ----D---- C:\Windows\rescache
2010-11-21 22:50:05 ----D---- C:\Windows\system32\cs-CZ
2010-11-21 22:50:04 ----D---- C:\Program Files\Internet Explorer
2010-11-21 22:50:01 ----RD---- C:\Windows\Offline Web Pages
2010-11-21 22:50:01 ----D---- C:\Windows\system32\wbem
2010-11-21 22:50:01 ----D---- C:\Windows\system32\migration
2010-11-21 22:50:01 ----D---- C:\Windows\system32\en-US
2010-11-21 22:50:01 ----D---- C:\Windows\PolicyDefinitions
2010-11-21 22:49:39 ----SD---- C:\Windows\Downloaded Program Files
2010-11-21 22:49:35 ----D---- C:\Windows\system32\drivers\cs-CZ
2010-11-21 22:48:11 ----D---- C:\Windows\Microsoft.NET
2010-11-21 22:47:48 ----RSD---- C:\Windows\assembly
2010-11-21 22:38:23 ----D---- C:\Windows\Logs
2010-11-21 21:50:31 ----SHD---- C:\Boot
2010-11-21 21:40:54 ----D---- C:\Program Files\Windows Mail
2010-11-21 21:40:54 ----D---- C:\Program Files\Windows Calendar
2010-11-21 21:40:54 ----D---- C:\Program Files\Movie Maker
2010-11-21 21:40:53 ----D---- C:\Program Files\Windows Sidebar
2010-11-21 21:40:53 ----D---- C:\Program Files\Windows Media Player
2010-11-21 21:40:52 ----D---- C:\Program Files\Windows Journal
2010-11-21 21:40:52 ----D---- C:\Program Files\Windows Collaboration
2010-11-21 21:40:50 ----D---- C:\Program Files\Windows Photo Gallery
2010-11-21 21:40:50 ----D---- C:\Program Files\Common Files\System
2010-11-21 21:40:45 ----D---- C:\Windows\servicing
2010-11-21 21:40:45 ----D---- C:\Windows\ehome
2010-11-21 21:40:45 ----D---- C:\Program Files\Windows Defender
2010-11-21 21:40:28 ----D---- C:\Windows\IME
2010-11-21 21:40:27 ----D---- C:\Windows\system32\XPSViewer
2010-11-21 21:40:27 ----D---- C:\Windows\system32\sk-SK
2010-11-21 21:40:27 ----D---- C:\Windows\system32\lv-LV
2010-11-21 21:40:27 ----D---- C:\Windows\system32\ko-KR
2010-11-21 21:40:27 ----D---- C:\Windows\system32\hr-HR
2010-11-21 21:40:27 ----D---- C:\Windows\system32\et-EE
2010-11-21 21:40:27 ----D---- C:\Windows\system32\da-DK
2010-11-21 21:40:26 ----D---- C:\Windows\system32\oobe
2010-11-21 21:40:26 ----D---- C:\Windows\system32\it-IT
2010-11-21 21:40:26 ----D---- C:\Windows\system32\el-GR
2010-11-21 21:40:26 ----D---- C:\Windows\system32\de-DE
2010-11-21 21:40:21 ----D---- C:\Windows\system32\sv-SE
2010-11-21 21:40:21 ----D---- C:\Windows\system32\setup
2010-11-21 21:40:21 ----D---- C:\Windows\system32\ru-RU
2010-11-21 21:40:21 ----D---- C:\Windows\system32\he-IL
2010-11-21 21:40:21 ----D---- C:\Windows\system32\fr-FR
2010-11-21 21:40:21 ----D---- C:\Windows\system32\fi-FI
2010-11-21 21:40:21 ----D---- C:\Windows\system32\cs
2010-11-21 21:40:21 ----D---- C:\Windows\system32\AdvancedInstallers
2010-11-21 21:40:16 ----D---- C:\Windows\system32\SLUI
2010-11-21 21:40:16 ----D---- C:\Windows\system32\pt-PT
2010-11-21 21:40:16 ----D---- C:\Windows\system32\hu-HU
2010-11-21 21:40:14 ----D---- C:\Windows\system32\zh-CN
2010-11-21 21:40:14 ----D---- C:\Windows\system32\sr-Latn-CS
2010-11-21 21:40:14 ----D---- C:\Windows\system32\manifeststore
2010-11-21 21:40:13 ----D---- C:\Windows\system32\zh-TW
2010-11-21 21:40:13 ----D---- C:\Windows\system32\uk-UA
2010-11-21 21:40:13 ----D---- C:\Windows\system32\sl-SI
2010-11-21 21:40:13 ----D---- C:\Windows\system32\ro-RO
2010-11-21 21:40:13 ----D---- C:\Windows\system32\pl-PL
2010-11-21 21:40:13 ----D---- C:\Windows\system32\ja-JP
2010-11-21 21:40:13 ----D---- C:\Windows\system32\es-ES
2010-11-21 21:40:13 ----D---- C:\Windows\system32\bg-BG
2010-11-21 21:40:12 ----D---- C:\Windows\system32\th-TH
2010-11-21 21:40:10 ----D---- C:\Windows\system32\tr-TR
2010-11-21 21:40:07 ----D---- C:\Windows\system32\nl-NL
2010-11-21 21:40:07 ----D---- C:\Windows\system32\nb-NO
2010-11-21 21:40:07 ----D---- C:\Windows\system32\lt-LT
2010-11-21 21:40:06 ----D---- C:\Windows\system32\migwiz
2010-11-21 21:40:06 ----D---- C:\Windows\system32\ar-SA
2010-11-21 21:40:05 ----D---- C:\Windows\system32\pt-BR
2010-11-21 21:39:13 ----RSD---- C:\Windows\Fonts
2010-11-21 21:39:12 ----D---- C:\Windows\AppPatch
2010-11-21 21:39:01 ----D---- C:\Windows\system32\Boot
2010-11-21 21:25:55 ----D---- C:\Windows\system32\drivers\UMDF
2010-11-21 21:22:28 ----D---- C:\Windows\system32\RTCOM
2010-11-21 20:42:54 ----A---- C:\Windows\fonts\GlobalUserInterface.CompositeFont
2010-11-21 17:49:11 ----D---- C:\Windows\system32\drivers\etc
2010-11-21 17:40:52 ----D---- C:\Program Files\Ask.com
2010-11-21 17:07:03 ----D---- C:\Windows\Prefetch
2010-11-18 20:31:06 ----D---- C:\Program Files\ICQ6.5
2010-11-11 03:02:45 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2008-10-28 717296]
R0 UBHelper;UBHelper; C:\Windows\system32\drivers\UBHelper.sys [2008-01-31 13824]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 mfehidk;McAfee Inc. mfehidk; C:\Windows\system32\drivers\mfehidk.sys [2007-11-22 201320]
R1 MPFP;MPFP; C:\Windows\System32\Drivers\Mpfp.sys [2007-07-13 125728]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [2010-02-17 66632]
R2 aksfridge;HASP Fridge; C:\Windows\system32\DRIVERS\aksfridge.sys [2008-03-27 350720]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
R2 Hardlock;Hardlock; C:\Windows\system32\drivers\hardlock.sys [2008-02-11 586240]
R2 int15;int15; \??\C:\Windows\system32\drivers\int15.sys [2008-03-21 15392]
R2 irda;IrDA Protocol; C:\Windows\system32\DRIVERS\irda.sys [2008-01-21 95744]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 regi;regi; C:\Windows\system32\drivers\regi.sys [2007-04-17 11032]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-29 8192]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2008-02-01 166448]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-04-27 909824]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2008-03-28 210432]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\Windows\system32\DRIVERS\DKbFltr.sys [2006-11-03 21264]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-22 985600]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-22 207360]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2010-02-20 8726528]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-05-21 2143136]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2009-12-14 126976]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\Windows\system32\drivers\mfeavfk.sys [2007-11-22 79304]
R3 mfebopk;McAfee Inc. mfebopk; C:\Windows\system32\drivers\mfebopk.sys [2007-11-22 35240]
R3 mfesmfk;McAfee Inc. mfesmfk; C:\Windows\system32\drivers\mfesmfk.sys [2007-12-02 40488]
R3 NTIDrvr;Upper Class Filter Driver; C:\Windows\system32\DRIVERS\NTIDrvr.sys [2008-01-31 14848]
R3 O2MDRDR;O2MDRDR; C:\Windows\system32\DRIVERS\o2media.sys [2008-04-15 51160]
R3 O2SDRDR;O2SDRDR; C:\Windows\system32\DRIVERS\o2sd.sys [2008-04-08 43736]
R3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2010-02-17 12872]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-22 659968]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]
S0 ablrilhy;ablrilhy; C:\Windows\System32\Drivers\ablrilhy.sys []
S1 prodrv03;Star Force copy protection driver v3; C:\Windows\System32\drivers\prodrv03.sys [2009-01-12 115968]
S3 a72hcfjf;a72hcfjf; C:\Windows\system32\drivers\a72hcfjf.sys []
S3 akshasp;Aladdin HASP Key; C:\Windows\system32\DRIVERS\akshasp.sys [2008-09-16 239744]
S3 akshhl;Aladdin HASP HL Key; C:\Windows\system32\DRIVERS\akshhl.sys [2007-07-23 46336]
S3 aksusb;Aladdin USB Key; C:\Windows\system32\DRIVERS\aksusb.sys [2008-09-16 19968]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-02-14 80424]
S3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2007-07-16 80936]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2007-07-16 16168]
S3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys [2009-12-18 11336]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys [2007-09-25 15152]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2008-01-21 200704]
S3 mferkdk;McAfee Inc. mferkdk; C:\Windows\system32\drivers\mferkdk.sys [2007-11-22 33832]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 NSCIRDA;NSC Infrared Device Driver; C:\Windows\system32\DRIVERS\nscirda.sys [2008-01-21 30720]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-01-21 88576]
S3 TpChoice;Touch Pad Detection Filter driver; C:\Windows\system32\DRIVERS\TpChoice.sys [2007-12-26 17968]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2008-01-21 15872]
S3 usbser;Nokia USB Serial Port; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [2008-03-03 16384]
R2 ETService;Empowering Technology Service; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [2008-03-21 24576]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-06-01 222968]
R2 Irmon;@%SystemRoot%\System32\irmon.dll,-2000; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\McAfee\SiteAdvisor\McSACore.exe [2010-04-16 93320]
R2 mcmscsvc;McAfee Services; C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe [2008-01-09 767976]
R2 McNASvc;McAfee Network Agent; c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe [2008-01-25 2458128]
R2 McProxy;McAfee Proxy Service; c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe [2007-08-15 359248]
R2 McShield;McAfee Real-time Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe [2007-07-24 144704]
R2 MobilityService;MobilityService; C:\Acer\Mobility Center\MobilityService.exe [2007-12-06 110592]
R2 MpfService;McAfee Personal Firewall Service; C:\Program Files\McAfee\MPF\MPFSrv.exe [2007-07-18 856864]
R2 MSK80Service;McAfee Anti-Spam Service; C:\Program Files\McAfee\MSK\MskSrver.exe [2007-11-26 23880]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-04-06 50424]
R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-04-04 131072]
R2 o2flash;O2Micro Flash Memory Card Service; C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe [2007-02-13 65536]
R2 PSI_SVC_2;Protexis Licensing V2; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2007-07-24 185632]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R3 McSysmon;McAfee SystemGuards; C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe [2007-12-05 695624]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06 135664]
S2 hasplms;HASP License Manager; C:\Windows\system32\hasplms.exe [2008-07-17 2549248]
S2 TwonkyMedia;TwonkyMedia; C:\Program Files\Nokia\Nokia Home Media Server\Media Server\TwonkyMedia.exe [2008-10-20 102400]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2009-01-16 85096]
S3 GoogleDesktopManager-110309-193829;Google Desktop Manager 5.9.911.3589; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2009-12-15 30192]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-04-24 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 McODS;McAfee Scanner; C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe [2007-11-07 378184]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2006-04-14 87840]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S4 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-29 386560]

-----------------EOF-----------------

na zaciatok - FIXni v HijackThis:
O4 - HKCU\..\Run: [hooceziv] C:\Users\Majkl\AppData\Roaming\Microsoft\jovymma.exe
O4 - HKCU\..\Run: [MSConfig] C:\Users\Majkl\dke.exe \u
O4 - Startup: 0ccx1sm.exe
O4 - Startup: 0shhxxs.exe
O4 - Startup: 5c1rmcc.exe
O4 - Startup: bwm0g0bww.exe
O4 - Startup: chsshhmchc.exe
O4 - Startup: cxr9m0hccx1.exe
O4 - Startup: e0zu0o0j.exe
O4 - Startup: ezoojz98.exe
O4 - Startup: ff1ppkkfuup.exe
O4 - Startup: hc7xs1smmhx.exe
O4 - Startup: jue5e2oj.exe
O4 - Startup: mmggbrrmb9.exe
O4 - Startup: mmhxx1hh.exe
O4 - Startup: mxmhcchx.exe
O4 - Startup: ojjeu0o0eoo.exe
O4 - Startup: pffzp9kk.exe
O4 - Startup: pk32ppkzzuu.exe
O4 - Startup: ppffzp9kk.exe
O4 - Startup: rg4brrmbbww.exe
O4 - Startup: rmmhxmcc1m.exe
O4 - Startup: smccx1sm.exe
O4 - Startup: ue2eezoo.exe
O4 - Startup: uejeeo3oo.exe
O4 - Startup: uu1z1uoojz9.exe
O4 - Startup: w0rm0g0rmm.exe
O4 - Startup: xs1cxxc7cxc.exe
O4 - Startup: xshhccxm.exe
O4 - Startup: zoojz98j2ez.exe
+ restart a vycisti s CureIT

vypadá to snad dobře,děkuju moc