Mrznouci system, neschopnost pripojit k netu

[Pener32]

Zdravim,
par dni zpet jsem zacal registrovat problemy s netem, nepovazoval jsem to za nic vazneho. Dva dny zpet jsem vsechno projel mwaw (identifikoval jeden soubor, ktery je ale proverezny na virustotal.com), eset online scannerem(0 infiltraci) a S&D(0 infiltraci), Spyware terminatorem (1 nalezena).
Aktualne PC pri nabehnuti do systemu cca do 30s zmrzne, nereaguje, internet nefunkcni, spusteni jakehokoliv programu nejde. Reinstaloval jsem win (proto je to SP1), momentalne se dostanu aspon do nouzoveho rezimu.
Diky moc za pomoc.

Log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2010-12-03 19:53:16
Microsoft Windows XP Home Edition Service Pack 1
System drive C: has 22 GB (29%) free of 76 GB
Total RAM: 1023 MB (79% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:54:09, on 3.12.2010
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programy\Adobe\Acrobat 6.0 CE\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Solid Converter PDF - {259F616C-A300-44F5-B04A-ED001A26C85C} - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll
O3 - Toolbar: &Rádio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Programy\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programy\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B1F7B619-EB63-42E6-8F67-BFDBC4732986}: NameServer = 81.27.192.33,81.27.192.97
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: EBWOXHMVK - Sysinternals - www.sysinternals.com - C:\DOCUME~1\admin\LOCALS~1\Temp\EBWOXHMVK.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Programy\NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Programy\NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Printer Control - Unknown owner - C:\WINDOWS\system32\PrintCtrl.exe (file missing)
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Programy\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: SolidPDFConverterReadSpool (ScReadSpool) - VoyagerSoft, LLC - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Programy\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 6850 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{259F616C-A300-44F5-B04A-ED001A26C85C}]
Solid Converter PDF - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll [2006-11-02 259584]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Programy\Adobe\Acrobat 6.0 CE\Acrobat\AcroIEFavClient.dll [2003-05-12 147456]
{259F616C-A300-44F5-B04A-ED001A26C85C} - Solid Converter PDF - C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\ExploreExtPDF.dll [2006-11-02 259584]
{8E718888-423F-11D2-876E-00A0C9082467} - &Rádio - C:\WINDOWS\System32\msdxm.ocx [2002-09-23 844828]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe [2003-04-04 774144]
"UnlockerAssistant"=C:\Programy\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Reader Speed Launcher"=C:\Programy\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2008-03-25 49152]
"hpqSRMon"= []
"ATICustomerCare"=C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-09-10 98304]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\System32\CTFMON.EXE [2002-09-23 13312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Programy\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-09-23 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Programy\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui]
C:\Programy\NOD32 Antivirus\egui.exe [2009-02-06 2021400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2008-03-25 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]
C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2008-03-13 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSConfig]
C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2002-09-23 146432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\MSMSGS.EXE [2002-08-20 1511453]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PrintDisp]
C:\WINDOWS\system32\PrintDisp.exe [2009-08-21 878080]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAX]
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2003-04-04 577536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
c:\hry\steam\steam.exe [2010-08-18 1238352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TCASUTIEXE]
TCAUDIAG.exe -on []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Acrobat Assistant.lnk]
C:\Programy\Adobe\ACROBA~1.0CE\Distillr\acrotray.exe [2003-07-17 217180]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2008-03-25 214360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Panel zástupců Microsoft Office.lnk]
C:\PROGRA~1\MICROS~2\Office\MSOFFICE.EXE [1997-10-26 334848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Rychlé hledání Microsoft.lnk]
C:\PROGRA~1\MICROS~2\Office\FINDFAST.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
C:\PROGRA~1\WINDOW~4\WINDOW~1.EXE /startup []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-09-11 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Programy\uTorrent\utorrent.exe"="C:\Programy\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Hry\steam\steamapps\pener83\half-life\hl.exe"="C:\Hry\steam\steamapps\pener83\half-life\hl.exe:*:Enabled:Half-Life"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe"="C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe"="C:\Program Files\Common Files\HP\Digital Imaging\bin\hpqPhotoCrm.exe:*:Enabled:hpqphotocrm.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe"

======List of files/folders created in the last 1 months======

2010-12-03 19:49:57 ----A---- C:\WINDOWS\ntbtlog.txt
2010-12-03 19:34:57 ----D---- C:\WINDOWS\Prefetch
2010-12-03 19:25:09 ----D---- C:\WINDOWS\LastGood.Tmp
2010-12-03 19:23:58 ----RAH---- C:\WINDOWS\System32\logonui.exe.manifest
2010-12-03 19:21:54 ----A---- C:\WINDOWS\System32\wuauclt.exe
2010-12-03 19:21:53 ----A---- C:\WINDOWS\System32\wuaueng.dll
2010-12-03 19:14:35 ----RA---- C:\WINDOWS\SET52.tmp
2010-12-03 19:14:28 ----RA---- C:\WINDOWS\SET3C.tmp
2010-12-03 18:51:17 ----RA---- C:\WINDOWS\SET51.tmp
2010-12-03 18:51:12 ----RA---- C:\WINDOWS\SET3B.tmp
2010-12-03 17:39:00 ----ASH---- C:\pagefile.sys
2010-12-03 16:49:03 ----A---- C:\WINDOWS\System32\spxcoins.dll
2010-12-03 16:49:03 ----A---- C:\WINDOWS\System32\irclass.dll
2010-12-03 16:48:40 ----RA---- C:\WINDOWS\SET53.tmp
2010-12-03 16:48:34 ----RA---- C:\WINDOWS\SET3E.tmp
2010-12-02 22:00:39 ----D---- C:\Program Files\trend micro
2010-12-02 21:10:59 ----A---- C:\WINDOWS\OEWABLog.txt
2010-12-02 21:10:43 ----A---- C:\WINDOWS\System32\mapi32.dll
2010-12-02 21:08:52 ----A---- C:\WINDOWS\System32\safrslv.dll
2010-12-02 21:08:52 ----A---- C:\WINDOWS\System32\safrdm.dll
2010-12-02 21:08:52 ----A---- C:\WINDOWS\System32\safrcdlg.dll
2010-12-02 21:08:52 ----A---- C:\WINDOWS\System32\racpldlg.dll
2010-12-02 21:08:51 ----A---- C:\WINDOWS\System32\mnmsrvc.exe
2010-12-02 21:08:51 ----A---- C:\WINDOWS\System32\isrdbg32.dll
2010-12-02 21:08:50 ----A---- C:\WINDOWS\System32\inetres.dll
2010-12-02 21:08:49 ----A---- C:\WINDOWS\System32\isign32.dll
2010-12-02 21:08:49 ----A---- C:\WINDOWS\System32\icwphbk.dll
2010-12-02 21:08:49 ----A---- C:\WINDOWS\System32\icwdial.dll
2010-12-02 21:08:48 ----A---- C:\WINDOWS\System32\inetcfg.dll
2010-12-02 21:08:41 ----A---- C:\WINDOWS\System32\qmgrprxy.dll
2010-12-02 21:08:41 ----A---- C:\WINDOWS\System32\qmgr.dll
2010-12-02 21:08:36 ----A---- C:\WINDOWS\System32\srsvc.dll
2010-12-02 21:08:36 ----A---- C:\WINDOWS\System32\srrstr.dll
2010-12-02 21:08:35 ----A---- C:\WINDOWS\System32\srclient.dll
2010-12-02 21:08:35 ----A---- C:\WINDOWS\System32\ils.dll
2010-12-02 21:08:35 ----A---- C:\WINDOWS\System32\drivers\sr.sys
2010-12-02 21:08:34 ----A---- C:\WINDOWS\System32\nmmkcert.dll
2010-12-02 21:08:34 ----A---- C:\WINDOWS\System32\msconf.dll
2010-12-02 21:08:34 ----A---- C:\WINDOWS\System32\mnmdd.dll
2010-12-02 21:08:31 ----A---- C:\WINDOWS\System32\msoert2.dll
2010-12-02 21:08:31 ----A---- C:\WINDOWS\System32\msoeacct.dll
2010-12-02 21:08:30 ----A---- C:\WINDOWS\System32\inetcomm.dll
2010-12-02 21:08:29 ----A---- C:\WINDOWS\System32\schedsvc.dll
2010-12-02 21:08:29 ----A---- C:\WINDOWS\System32\mstinit.exe
2010-12-02 21:08:29 ----A---- C:\WINDOWS\System32\mstask.dll
2010-12-02 21:06:45 ----A---- C:\WINDOWS\System32\accwiz.exe
2010-12-02 21:06:44 ----A---- C:\WINDOWS\System32\sndrec32.exe
2010-12-02 21:06:44 ----A---- C:\WINDOWS\System32\hypertrm.dll
2010-12-02 21:06:44 ----A---- C:\WINDOWS\System32\drivers\tdtcp.sys
2010-12-02 21:06:44 ----A---- C:\WINDOWS\System32\drivers\tdpipe.sys
2010-12-02 21:06:43 ----A---- C:\WINDOWS\System32\rdshost.exe
2010-12-02 21:06:43 ----A---- C:\WINDOWS\System32\qprocess.exe
2010-12-02 21:06:43 ----A---- C:\WINDOWS\System32\mtxoci.dll
2010-12-02 21:06:43 ----A---- C:\WINDOWS\System32\msdtcuiu.dll
2010-12-02 21:06:43 ----A---- C:\WINDOWS\System32\msdtctm.dll
2010-12-02 21:06:42 ----A---- C:\WINDOWS\System32\xolehlp.dll
2010-12-02 21:06:42 ----A---- C:\WINDOWS\System32\msdtclog.dll
2010-12-02 21:06:42 ----A---- C:\WINDOWS\System32\msdtc.exe
2010-12-02 21:06:41 ----A---- C:\WINDOWS\System32\stclient.dll
2010-12-02 21:06:41 ----A---- C:\WINDOWS\System32\mtxlegih.dll
2010-12-02 21:06:41 ----A---- C:\WINDOWS\System32\mtxex.dll
2010-12-02 21:06:41 ----A---- C:\WINDOWS\System32\mtxdm.dll
2010-12-02 21:06:41 ----A---- C:\WINDOWS\System32\dcomcnfg.exe
2010-12-02 21:06:41 ----A---- C:\WINDOWS\System32\comrepl.dll
2010-12-02 21:06:41 ----A---- C:\WINDOWS\System32\comaddin.dll
2010-12-02 21:06:41 ----A---- C:\WINDOWS\System32\colbact.dll
2010-12-02 21:06:40 ----A---- C:\WINDOWS\System32\comuid.dll
2010-12-02 21:06:40 ----A---- C:\WINDOWS\System32\comsnap.dll
2010-12-02 21:06:40 ----A---- C:\WINDOWS\System32\clbcatq.dll
2010-12-02 21:06:40 ----A---- C:\WINDOWS\System32\clbcatex.dll
2010-12-02 21:06:40 ----A---- C:\WINDOWS\System32\catsrvps.dll
2010-12-02 21:06:40 ----A---- C:\WINDOWS\System32\catsrv.dll
2010-12-02 21:06:36 ----A---- C:\WINDOWS\System32\servdeps.dll
2010-12-02 21:06:36 ----A---- C:\WINDOWS\System32\mmfutil.dll
2010-12-02 21:06:36 ----A---- C:\WINDOWS\System32\cmprops.dll
2010-12-02 21:06:35 ----A---- C:\WINDOWS\System32\mspaint.exe
2010-12-02 21:06:35 ----A---- C:\WINDOWS\System32\mplay32.exe
2010-12-02 21:06:35 ----A---- C:\WINDOWS\System32\clipbrd.exe
2010-12-02 21:06:34 ----A---- C:\WINDOWS\System32\wuauserv.dll
2010-12-02 21:06:34 ----A---- C:\WINDOWS\System32\tscfgwmi.dll
2010-12-02 21:06:34 ----A---- C:\WINDOWS\System32\spider.exe
2010-12-02 21:06:34 ----A---- C:\WINDOWS\System32\drivers\rdpwd.sys
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\tscupgrd.exe
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\termsrv.dll
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\sessmgr.exe
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\remotepg.dll
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\rdsaddin.exe
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\rdpwsx.dll
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\rdpsnd.dll
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\rdpclip.exe
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\rdchost.dll
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\mstscax.dll
2010-12-02 21:06:33 ----A---- C:\WINDOWS\System32\mstsc.exe
2010-12-02 21:06:32 ----A---- C:\WINDOWS\System32\msdtcprx.dll
2010-12-02 21:06:32 ----A---- C:\WINDOWS\System32\icaapi.dll
2010-12-02 21:06:32 ----A---- C:\WINDOWS\System32\cfgbkend.dll
2010-12-02 21:06:32 ----A---- C:\WINDOWS\System32\catsrvut.dll
2010-12-02 21:06:31 ----A---- C:\WINDOWS\System32\comsvcs.dll
2010-12-02 21:06:26 ----A---- C:\WINDOWS\System32\licwmi.dll
2010-12-02 21:06:24 ----A---- C:\WINDOWS\System32\drivers\rdpdr.sys
2010-12-02 20:34:18 ----D---- C:\WINDOWS\msapps
2010-12-02 20:28:22 ----RA---- C:\WINDOWS\SET4F.tmp
2010-12-02 20:28:17 ----RA---- C:\WINDOWS\SET3A.tmp
2010-12-02 19:50:08 ----A---- C:\WINDOWS\System32\drivers\splitter.sys
2010-12-02 19:50:02 ----A---- C:\WINDOWS\System32\drivers\DMusic.sys
2010-12-02 19:49:19 ----A---- C:\WINDOWS\System32\drivers\redbook.sys
2010-12-02 19:46:13 ----A---- C:\WINDOWS\System32\drivers\termdd.sys
2010-12-02 19:44:43 ----A---- C:\WINDOWS\imsins.BAK
2010-12-02 19:44:26 ----A---- C:\WINDOWS\System32\drivers\irenum.sys
2010-12-02 19:44:25 ----A---- C:\WINDOWS\System32\storprop.dll
2010-12-02 19:44:03 ----RA---- C:\WINDOWS\SETEC.tmp
2010-12-02 19:43:57 ----RA---- C:\WINDOWS\SETD7.tmp
2010-12-02 19:41:42 ----A---- C:\WINDOWS\setuplog.txt
2010-12-01 18:57:31 ----A---- C:\WINDOWS\System32\drivers\aswSP.sys
2010-12-01 18:57:31 ----A---- C:\WINDOWS\System32\drivers\aswFsBlk.sys
2010-12-01 18:57:30 ----A---- C:\WINDOWS\System32\drivers\aswRdr.sys
2010-12-01 18:57:28 ----A---- C:\WINDOWS\System32\drivers\aswTdi.sys
2010-12-01 18:57:27 ----A---- C:\WINDOWS\System32\drivers\aswmon2.sys
2010-12-01 18:57:27 ----A---- C:\WINDOWS\System32\drivers\aswmon.sys
2010-12-01 18:57:26 ----A---- C:\WINDOWS\System32\drivers\aavmker4.sys
2010-12-01 18:57:03 ----A---- C:\WINDOWS\System32\aswBoot.exe
2010-12-01 18:56:50 ----D---- C:\Program Files\Alwil Software
2010-12-01 18:56:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-12-01 12:16:40 ----A---- C:\WINDOWS\System32\drivers\sp_rsdrv2.sys
2010-12-01 12:05:42 ----D---- C:\Program Files\Crawler
2010-12-01 12:05:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-12-01 12:05:12 ----D---- C:\Program Files\Spyware Terminator
2010-12-01 11:55:12 ----D---- C:\Program Files\Google
2010-11-28 01:52:13 ----A---- C:\WINDOWS\System32\drivers\hamachi.sys

======List of files/folders modified in the last 1 months======

2010-12-03 19:49:57 ----D---- C:\WINDOWS
2010-12-03 19:48:08 ----D---- C:\WINDOWS\Temp
2010-12-03 19:47:17 ----D---- C:\WINDOWS\Debug
2010-12-03 19:39:58 ----D---- C:\WINDOWS\Registration
2010-12-03 19:39:54 ----D---- C:\WINDOWS\System32\CatRoot2
2010-12-03 19:39:52 ----HD---- C:\WINDOWS\inf
2010-12-03 19:38:08 ----D---- C:\WINDOWS\system32
2010-12-03 19:38:06 ----A---- C:\WINDOWS\System32\PerfStringBackup.INI
2010-12-03 19:36:07 ----SHD---- C:\System Volume Information
2010-12-03 19:36:07 ----D---- C:\WINDOWS\System32\Restore
2010-12-03 19:32:50 ----RSHDC---- C:\WINDOWS\System32\dllcache
2010-12-03 19:32:50 ----D---- C:\WINDOWS\System32\config
2010-12-03 19:26:09 ----D---- C:\Program Files\Windows Media Player
2010-12-03 19:26:08 ----D---- C:\WINDOWS\System32\drivers
2010-12-03 19:25:11 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-12-03 19:25:07 ----A---- C:\WINDOWS\ODBCINST.INI
2010-12-03 19:24:40 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2010-12-03 19:24:01 ----RD---- C:\WINDOWS\Web
2010-12-03 19:24:01 ----RD---- C:\Program Files
2010-12-03 19:23:49 ----RAH---- C:\WINDOWS\System32\cdplayer.exe.manifest
2010-12-03 19:23:36 ----A---- C:\WINDOWS\win.ini
2010-12-03 19:23:29 ----D---- C:\WINDOWS\System32\oobe
2010-12-03 19:23:07 ----D---- C:\WINDOWS\System32\Com
2010-12-03 19:20:45 ----SH---- C:\boot.ini
2010-12-03 19:15:10 ----D---- C:\WINDOWS\security
2010-12-03 19:14:56 ----A---- C:\WINDOWS\system.ini
2010-12-03 19:14:39 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2010-12-03 19:14:36 ----D---- C:\WINDOWS\System32\CatRoot
2010-12-03 17:43:23 ----D---- C:\WINDOWS\System32\Setup
2010-12-03 17:43:22 ----D---- C:\WINDOWS\System32\usmt
2010-12-03 17:43:18 ----D---- C:\WINDOWS\AppPatch
2010-12-03 17:43:17 ----D---- C:\WINDOWS\ime
2010-12-03 17:43:16 ----D---- C:\WINDOWS\Help
2010-12-03 17:43:02 ----D---- C:\WINDOWS\System32\npp
2010-12-03 17:42:50 ----D---- C:\WINDOWS\System32\wbem
2010-12-03 17:42:43 ----RSD---- C:\WINDOWS\Fonts
2010-12-03 17:42:01 ----D---- C:\WINDOWS\system
2010-12-03 17:41:39 ----D---- C:\WINDOWS\System32\1029
2010-12-03 17:41:35 ----D---- C:\WINDOWS\Media
2010-12-03 17:41:30 ----D---- C:\WINDOWS\twain_32
2010-12-03 17:41:07 ----D---- C:\WINDOWS\System32\icsxml
2010-12-03 17:40:51 ----D---- C:\WINDOWS\msagent
2010-12-03 17:40:23 ----D---- C:\WINDOWS\System32\ias
2010-12-03 17:40:17 ----D---- C:\WINDOWS\System32\1033
2010-12-03 17:39:00 ----D---- C:\WINDOWS\Driver Cache
2010-12-02 22:07:59 ----SHD---- C:\WINDOWS\Installer
2010-12-02 22:06:30 ----HD---- C:\Config.Msi
2010-12-02 21:28:49 ----HD---- C:\Program Files\WindowsUpdate
2010-12-02 21:08:59 ----D---- C:\WINDOWS\srchasst
2010-12-02 21:08:51 ----D---- C:\Program Files\NetMeeting
2010-12-02 21:08:50 ----D---- C:\Program Files\Outlook Express
2010-12-02 21:08:50 ----D---- C:\Program Files\Common Files\System
2010-12-02 21:08:41 ----D---- C:\Program Files\Movie Maker
2010-12-02 21:08:20 ----D---- C:\Program Files\Internet Explorer
2010-12-02 21:06:46 ----D---- C:\Program Files\Messenger
2010-12-02 21:06:44 ----D---- C:\Program Files\Windows NT
2010-12-02 20:34:18 ----D---- C:\WINDOWS\WinSxS
2010-12-01 13:18:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-12-01 12:01:17 ----D---- C:\stazene_soubory
2010-12-01 12:00:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2010-12-01 11:55:24 ----SD---- C:\WINDOWS\Tasks
2010-11-30 20:27:13 ----A---- C:\WINDOWS\NeroDigital.ini
2010-11-28 21:58:38 ----D---- C:\ad7
2010-11-28 01:52:12 ----D---- C:\Programy
2010-11-28 01:25:56 ----D---- C:\Hry
2010-11-11 00:21:43 ----A---- C:\WINDOWS\System32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\System32\DRIVERS\agp440.sys [2002-09-23 25472]
R1 epfwtdir;epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [2009-02-06 93336]
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R3 EL2000;3Com 3C2000x EtherLink XL Adapter; C:\WINDOWS\System32\DRIVERS\EL2K_XP.sys [2003-04-16 147200]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-11-28 25280]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Service; C:\WINDOWS\System32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2002-09-23 19328]
S0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-10-11 721904]
S1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\System32\drivers\Aavmker4.sys [2010-09-07 28880]
S1 aswSP;aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [2010-09-07 165584]
S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\System32\drivers\aswTdi.sys [2010-09-07 46672]
S1 ehdrv;ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [2009-02-06 106208]
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-14 40192]
S1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
S1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
S2 adfs;adfs; C:\WINDOWS\System32\drivers\adfs.sys [2008-08-14 74720]
S2 aswFsBlk;aswFsBlk; C:\WINDOWS\System32\drivers\aswFsBlk.sys [2010-09-07 17744]
S2 aswMon2;aswMon2; C:\WINDOWS\System32\drivers\aswMon2.sys [2010-09-07 100176]
S2 eamon;eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [2009-02-06 113448]
S2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [2002-09-23 84864]
S2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [2002-09-23 63232]
S2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [2002-09-23 55936]
S2 tcaicchg;tcaicchg; \??\C:\WINDOWS\System32\tcaicchg.sys []
S2 TCAITDI;TCAITDI Protocol; C:\WINDOWS\System32\DRIVERS\TCAITDI.sys []
S3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2003-02-26 100032]
S3 aswRdr;aswRdr; C:\WINDOWS\System32\drivers\aswRdr.sys [2010-09-07 23376]
S3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2002-09-20 450176]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2008-04-16 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2008-04-16 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2008-04-16 21568]
S3 MidiSyn;MidiSyn; C:\WINDOWS\system32\drivers\MidiSyn.sys [2002-09-20 235100]
S3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-03-21 555264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2002-09-23 28160]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2002-08-29 24960]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2002-08-29 14208]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2002-09-23 21760]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2010-04-14 73728]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-09-11 606208]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-03-17 593920]
S2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 ekrn;ESET Service; C:\Programy\NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-12-01 136176]
S2 hpqddsvc;Služba HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe [2002-09-23 12800]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
S2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-02-17 73728]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2002-09-23 12800]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2002-09-23 12800]
S2 Printer Control;Printer Control; C:\WINDOWS\system32\PrintCtrl.exe []
S2 SbPF.Launcher;SbPF.Launcher; C:\Programy\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
S2 ScReadSpool;SolidPDFConverterReadSpool; C:\Program Files\SolidDocuments\SolidConverterPDF\SCPDF\SolidPdfService.exe [2006-11-02 184320]
S2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
S2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-12-01 496128]
S2 SPF4;Sunbelt Personal Firewall 4; C:\Programy\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EBWOXHMVK;EBWOXHMVK; C:\DOCUME~1\admin\LOCALS~1\Temp\EBWOXHMVK.exe [2010-12-01 592768]
S3 EhttpSrv;ESET HTTP Server; C:\Programy\NOD32 Antivirus\EHttpSrv.exe [2009-02-06 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-04-24 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2002-09-23 12800]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2002-09-23 12800]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Log vypadá čistý. V PC máte 2 antiviry, což může způsobovat sw kolizi. Jeden odinstalujte.

[Pener32]

Odinstaloval jsem avast, momentalne jsem schopen se pripojit i v beznem rezimu.
Problem bych ale videl v tom, ze avast jsem instaloval v momente, kdy jsem nebyl schopen uz spustit NOD (tj. jeho graficke rozhrani, v procesech jsem ho videl bezet).

[Rudy]

Měl jste NOD přeinstalovat. Inastalací dalšího antiviru dojde ke kolizi rez. štítů a v našem případě i k zablokování přístupu na internet.

[Pener32]

Zatim vse vypada ok, dekuji.

[Rudy]

Nemáte zač!

[Pener32]

Tak internety momentalne uz jakymsi zpusobem jedou.
S cim mam ale problem je celkova funkce systemu, vsechno strasne dlouho trva(cemuz bych po reinstalu rozumel) a pri pokusu o instalaci SP 2 se mi instalator sekne ve fazi pred instalaci (tusim kontrola CBA? zkusim a poznacim presne) a dal nepokracuje. Soubezne s tim se objevi instalacni okno mne neznameho programu, ktere me vyzyva, abych hledal soubor status.msi na disku, ze tento neni nalezen. Pri vypnuti se opet zaktivuje a pozaduje to same.

Prikladam vypis z Rootkit Revealeru:

HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ParseAutoexec 4. 12. 2010 13:48 5 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-21-1482476501-1580818891-682003330-1004\Software\Spyware Terminator\UpdAnnounceStatus 4. 12. 2010 13:46 290 bytes Data mismatch between Windows API and raw hive data.
HKU\S-1-5-18\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ParseAutoexec 4. 12. 2010 13:49 5 bytes Data mismatch between Windows API and raw hive data.
HKLM\SECURITY\Policy\Secrets\SAC* 27. 5. 2009 20:42 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 27. 5. 2009 20:42 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed 4. 12. 2010 13:49 80 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\InProgress\ 4. 12. 2010 13:49 62 bytes Data mismatch between Windows API and raw hive data.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7404D2C904E0a994CAA74C9BBB21EF30\Usage\TrayApp 4. 12. 2010 13:45 4 bytes Data mismatch between Windows API and raw hive data.

[Rudy]

.....a pri pokusu o instalaci SP 2 se mi instalator sekne ve fazi pred instalaci (tusim kontrola CBA? zkusim a poznacim presne) a dal nepokracuje.

Máte legální WinXP? Jinak log z RR vypadá čistý.

[Pener32]

Ano, OEM zakoupene s PC...mam zkusit pripadne jeste combofix?

JEste me napadlo, ale to je asi blbost...mohl by ten problem s instalaci SP souviset s routerem, pripadne jeho nastavenim? Podle me spis ne, ale jisty si nejsem.

Presne zneni chybove hlasky toho, co se pokousi spustit instalator:
An installation package for the product Status cannot be found. Try the installation again using a valid copy of the installation package "status.msi".
Proces aktualizace se kousne ve fazi Spousteni procesu pred instalovanim, vytvareni souboru CAB.

[Rudy]

Aha. Hláška znamená, že nemáte korektní instalační balíček (SP2) a proto nemáže instalace pokračovat. Zkuste z webu MS stáhnout a uložit na disk (nejlépe SP3) a zkuste instalaci znovu. Na legalitu jsem se ptal, protože jsem neznal obsah té hlášky.