VIRY.CZ

proces System.exe mi využívá 114 000 kb paměti, myslím že dřív mnohem míň (je to v pořádku?), dávám log z RSIT:

Logfile of random's system information tool 1.08 (written by random/random)
Run by Uzivatel at 2010-12-29 14:15:15
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 110 GB (72%) free of 153 GB
Total RAM: 1534 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:15:20, on 29.12.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\windows\system32\oodtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\windows\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Uzivatel\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O17 - HKLM\System\CCS\Services\Tcpip\..\{1D03707C-780E-4FBD-A93A-82602A84CE14}: NameServer = 90.183.115.6,90.183.115.11
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\windows\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe

--
End of file - 6081 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2010-11-25 1623392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-27 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-27 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2010-11-25 2069344]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-11-25 98304]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 171008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe /background []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
C:\windows\system32\oodtray.exe [2009-04-08 2553088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\Steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
C:\PROGRA~1\WI459E~1\WINDOW~1.EXE [2008-05-26 123904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Uzivatel^Nabídka Start^Programy^Po spuštění^OpenOffice.org 2.3.lnk]
C:\PROGRA~1\OPENOF~1.3\program\QUICKS~1.EXE [2007-09-11 393216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-11-26 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2010-07-18 12536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2009-03-08 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG9\avgemc.exe"="C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\EA GAMES\Need for Speed Underground 2\speed2.exe"="C:\Program Files\EA GAMES\Need for Speed Underground 2\speed2.exe:*:Disabled:speed2"
"C:\Program Files\Codemasters\DiRT\DiRT.exe"="C:\Program Files\Codemasters\DiRT\DiRT.exe:*:Disabled:DiRT Executable"
"C:\Program Files\F1 Delux 2010\F1 DELUX 2010.exe.exe"="C:\Program Files\F1 Delux 2010\F1 DELUX 2010.exe.exe:*:Enabled:F1 DELUX 2010"
"C:\Program Files\Codemasters\DiRT2\dirt2_game.exe"="C:\Program Files\Codemasters\DiRT2\dirt2_game.exe:*:Enabled:DiRT2"
"C:\Program Files\2K Sports\MLB 2K10\mlb2k10.exe"="C:\Program Files\2K Sports\MLB 2K10\mlb2k10.exe:*:Disabled:2K Sports Major League Baseball 2K10"
"C:\Program Files\EA SPORTS\F1 2002\f1_2002.exe"="C:\Program Files\EA SPORTS\F1 2002\f1_2002.exe:*:Disabled:F1 2002"
"C:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe"="C:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe:*:Disabled:Test Drive Unlimited"
"C:\Program Files\MotoGP2\motogp2.exe"="C:\Program Files\MotoGP2\motogp2.exe:*:Disabled:motogp2"
"C:\Documents and Settings\Uzivatel\Plocha\utorrent.exe"="C:\Documents and Settings\Uzivatel\Plocha\utorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Uzivatel\Data aplikací\uTorrent\utorrent.exe"="C:\Documents and Settings\Uzivatel\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe"="C:\Program Files\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010"
"C:\Program Files\EA SPORTS\FIFA 11 Demo\Game\fifa.exe"="C:\Program Files\EA SPORTS\FIFA 11 Demo\Game\fifa.exe:*:Disabled:FIFA 11"
"C:\Program Files\Sports Interactive\Football Manager 2010\fm.exe"="C:\Program Files\Sports Interactive\Football Manager 2010\fm.exe:*:Disabled:Football Manager 2010"
"C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe"="C:\Program Files\Sports Interactive\Football Manager 2008\fm.exe:*:Disabled:Football Manager 2008"
"C:\Program Files\Codemasters\F1 2010\F1_2010_game.exe"="C:\Program Files\Codemasters\F1 2010\F1_2010_game.exe:*:Enabled:F1 2010"
"C:\Program Files\Pro Evolution Soccer 2008\PES2008.exe"="C:\Program Files\Pro Evolution Soccer 2008\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008"
"C:\Documents and Settings\Uzivatel\Plocha\PES 2009\pes2009.exe"="C:\Documents and Settings\Uzivatel\Plocha\PES 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009"
"C:\Program Files\Bethesda Softworks\PBA Bowling 2001\BowlingR.exe"="C:\Program Files\Bethesda Softworks\PBA Bowling 2001\BowlingR.exe:*:Enabled:PBA Bowling 2"
"C:\Program Files\rFactor\rFactor.exe"="C:\Program Files\rFactor\rFactor.exe:*:Disabled:rFactor"
"C:\Program Files\Sports Interactive\Football Manager 2011 Russian\fm.exe"="C:\Program Files\Sports Interactive\Football Manager 2011 Russian\fm.exe:*:Disabled:Football Manager 2011"
"C:\Program Files\Electronic Arts\Need for Speed(TM) Hot Pursuit\Launcher.exe"="C:\Program Files\Electronic Arts\Need for Speed(TM) Hot Pursuit\Launcher.exe:*:Enabled:Need for Speed(TM) Hot Pursuit"
"C:\Program Files\EA GAMES\Need For Speed Hot Pursuit 2\NfsHP2.ori"="C:\Program Files\EA GAMES\Need For Speed Hot Pursuit 2\NfsHP2.ori:*:Disabled:NfsHP2"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Infogrames\Grand Prix 4\GP4.exe"="C:\Program Files\Infogrames\Grand Prix 4\GP4.exe:*:Disabled:GP4"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Codemasters\GRID\GRID.exe"="C:\Program Files\Codemasters\GRID\GRID.exe:*:Enabled:GRID"
"C:\Program Files\Electronic Arts\Need for Speed Carbon\NFSC.exe"="C:\Program Files\Electronic Arts\Need for Speed Carbon\NFSC.exe:*:Enabled:NFSC"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Disabled:Java(TM) Platform SE binary"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 3 months======

2010-12-29 14:10:56 ----D---- C:\rsit
2010-12-29 14:10:56 ----D---- C:\Program Files\trend micro
2010-12-29 12:48:46 ----AH---- C:\boot.ini
2010-12-29 08:44:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2010-12-29 08:32:44 ----A---- C:\WINDOWS\system32\atibtmon.exe
2010-12-29 08:32:37 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2010-12-29 08:31:32 ----D---- C:\Program Files\ATI Technologies
2010-12-29 08:30:43 ----SHD---- C:\Config.Msi
2010-12-29 08:30:26 ----A---- C:\WINDOWS\system32\ATIODE.exe
2010-12-29 08:30:26 ----A---- C:\WINDOWS\system32\ATIODCLI.exe
2010-12-29 08:30:25 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2010-12-29 08:30:22 ----A---- C:\WINDOWS\system32\atioglxx.dll
2010-12-29 08:30:20 ----A---- C:\WINDOWS\system32\atiok3x2.dll
2010-12-29 08:30:20 ----A---- C:\WINDOWS\system32\aticalrt.dll
2010-12-29 08:30:20 ----A---- C:\WINDOWS\system32\aticalcl.dll
2010-12-29 08:30:19 ----A---- C:\WINDOWS\system32\ATIDEMGX.dll
2010-12-29 08:30:19 ----A---- C:\WINDOWS\system32\aticaldd.dll
2010-12-29 08:30:18 ----A---- C:\WINDOWS\system32\atikvmag.dll
2010-12-29 08:30:16 ----A---- C:\WINDOWS\system32\Oemdspif.dll
2010-12-29 08:30:16 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2010-12-29 08:30:15 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2010-12-29 08:30:14 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2010-12-29 08:30:13 ----A---- C:\WINDOWS\system32\atitvo32.dll
2010-12-29 08:30:13 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2010-12-29 08:30:12 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2010-12-29 08:30:12 ----A---- C:\WINDOWS\system32\atiapfxx.exe
2010-12-29 08:30:11 ----A---- C:\WINDOWS\system32\atimpc32.dll
2010-12-29 08:30:11 ----A---- C:\WINDOWS\system32\atiadlxx.dll
2010-12-29 08:30:11 ----A---- C:\WINDOWS\system32\amdpcom32.dll
2010-12-29 08:30:06 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2010-12-29 08:30:01 ----A---- C:\WINDOWS\system32\ati3duag.dll
2010-12-29 08:30:01 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2010-12-29 08:29:59 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2010-12-29 08:29:57 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2010-12-29 08:29:57 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2010-12-29 08:29:56 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2010-12-28 18:55:35 ----D---- C:\WINDOWS\system32\oodag
2010-12-28 18:52:56 ----D---- C:\Program Files\OO Software
2010-12-28 17:35:18 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\uTorrent
2010-12-28 17:17:18 ----RA---- C:\WINDOWS\NPSExec.exe
2010-12-28 14:56:14 ----D---- C:\Program Files\EA GAMES
2010-12-28 14:42:25 ----D---- C:\Program Files\uTorrent
2010-12-25 09:35:42 ----D---- C:\WINDOWS\SPEECH
2010-12-24 20:12:31 ----D---- C:\Program Files\F1 Mania 2010 Astros-Gamez
2010-12-22 15:21:19 ----D---- C:\Program Files\Lavalys
2010-12-15 21:21:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-15 21:20:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-15 21:19:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-15 21:19:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-15 21:19:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-15 21:19:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-15 21:14:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2010-12-15 18:12:22 ----A---- C:\WINDOWS\nfsc_patch.ini
2010-12-15 17:56:02 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2010-12-14 18:00:30 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2010-12-11 21:29:54 ----RA---- C:\WINDOWS\system32\tmp141.tmp
2010-12-11 21:29:54 ----RA---- C:\WINDOWS\system32\tmp140.tmp
2010-12-11 16:24:31 ----D---- C:\WINDOWS\system32\appmgmt
2010-12-11 08:23:53 ----A---- C:\WINDOWS\system32\RtNicProp32.dll
2010-12-11 08:23:53 ----A---- C:\WINDOWS\system32\drivers\Rtnicxp.sys
2010-12-11 08:23:52 ----D---- C:\Program Files\Realtek
2010-12-07 18:08:47 ----A---- C:\WINDOWS\system32\drivers\ACEDRV07.sys
2010-12-07 18:06:05 ----D---- C:\Program Files\Ski Alpin Racing 2007
2010-12-06 16:13:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2010-12-06 16:12:54 ----A---- C:\WINDOWS\system32\OggDSuninst.exe
2010-12-02 12:24:07 ----D---- C:\WINDOWS\Sun
2010-11-27 12:56:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-11-27 12:56:07 ----D---- C:\Program Files\Common Files\Java
2010-11-27 12:55:56 ----A---- C:\WINDOWS\system32\javaws.exe
2010-11-27 12:55:56 ----A---- C:\WINDOWS\system32\javaw.exe
2010-11-27 12:55:56 ----A---- C:\WINDOWS\system32\java.exe
2010-11-27 12:55:56 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-11-27 12:55:38 ----D---- C:\Program Files\Java
2010-11-27 12:53:51 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\Sun
2010-11-27 12:52:04 ----D---- C:\Program Files\JDownloader
2010-11-19 19:58:17 ----A---- C:\WINDOWS\system32\wt_menu.dll
2010-11-19 19:58:17 ----A---- C:\WINDOWS\system32\vbuzip10.DLL
2010-11-19 19:58:16 ----D---- C:\Program Files\Smarty Uninstaller Pro
2010-11-17 15:01:12 ----A---- C:\WINDOWS\oodcnt.INI
2010-11-04 18:45:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
2010-11-04 18:45:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\EA Core
2010-11-04 18:31:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Solidshield
2010-10-28 12:21:09 ----A---- C:\WINDOWS\system32\LMRTREND.dll
2010-10-28 12:21:06 ----A---- C:\WINDOWS\system32\dxtmsft3.dll
2010-10-28 12:21:02 ----A---- C:\WINDOWS\system32\unam4ie.exe
2010-10-28 12:20:59 ----A---- C:\WINDOWS\system32\vidx16.dll
2010-10-28 12:20:59 ----A---- C:\WINDOWS\system32\qcut.dll
2010-10-28 12:20:54 ----A---- C:\WINDOWS\system32\w95inf32.dll
2010-10-28 12:20:54 ----A---- C:\WINDOWS\system32\w95inf16.dll
2010-10-27 16:36:08 ----D---- C:\Program Files\Generic Game Trainer
2010-10-25 15:01:09 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\OpenOffice.org2
2010-10-25 14:57:26 ----D---- C:\Program Files\OpenOffice.org 2.3
2010-10-25 14:56:25 ----D---- C:\Program Files\open office 2007
2010-10-21 19:01:44 ----HD---- C:\WINDOWS\msdownld.tmp
2010-10-18 17:58:05 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys
2010-10-13 12:34:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2010-10-13 12:34:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2279986$
2010-10-13 12:34:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2010-10-13 12:33:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2010-10-13 12:33:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2010-10-13 12:33:42 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2010-10-13 12:33:34 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2010-10-13 12:30:55 ----HDC---- C:\WINDOWS\$NtUninstallKB981957$
2010-10-13 12:30:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2010-10-11 18:12:31 ----SHD---- C:\WINDOWS\ftpcache
2010-10-06 19:25:41 ----D---- C:\Program Files\Common Files\Adobe
2010-10-06 19:25:41 ----D---- C:\Program Files\Adobe

======List of files/folders modified in the last 3 months======

2010-12-29 14:11:08 ----D---- C:\WINDOWS\Prefetch
2010-12-29 14:10:56 ----RD---- C:\Program Files
2010-12-29 13:23:17 ----D---- C:\WINDOWS\system32\LogFiles
2010-12-29 13:23:16 ----D---- C:\WINDOWS\Temp
2010-12-29 13:23:16 ----D---- C:\WINDOWS\Minidump
2010-12-29 13:23:16 ----D---- C:\WINDOWS
2010-12-29 12:55:54 ----A---- C:\WINDOWS\win.ini
2010-12-29 12:55:54 ----A---- C:\WINDOWS\system.ini
2010-12-29 12:55:29 ----D---- C:\WINDOWS\pss
2010-12-29 12:52:08 ----D---- C:\WINDOWS\system32\CatRoot2
2010-12-29 12:49:06 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-12-29 09:11:53 ----D---- C:\WINDOWS\system32\drivers\Avg
2010-12-29 08:43:42 ----D---- C:\WINDOWS\system32\drivers
2010-12-29 08:43:41 ----D---- C:\WINDOWS\system32
2010-12-29 08:43:36 ----HD---- C:\WINDOWS\inf
2010-12-29 08:39:41 ----A---- C:\WINDOWS\DUMP69b6.tmp
2010-12-29 08:33:05 ----SHD---- C:\WINDOWS\Installer
2010-12-29 08:32:03 ----D---- C:\WINDOWS\system32\ReinstallBackups
2010-12-29 08:31:59 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-12-29 08:30:04 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-12-29 07:59:31 ----D---- C:\WINDOWS\system32\config
2010-12-28 17:34:59 ----D---- C:\WINDOWS\Help
2010-12-28 17:13:05 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\XnView
2010-12-28 15:04:22 ----D---- C:\WINDOWS\Debug
2010-12-28 14:55:43 ----D---- C:\WINDOWS\system32\DirectX
2010-12-28 14:55:42 ----RSD---- C:\WINDOWS\assembly
2010-12-28 14:45:45 ----D---- C:\Documents and Settings\Uzivatel\Data aplikací\Sports Interactive
2010-12-28 14:29:42 ----D---- C:\Program Files\Common Files\Logitech
2010-12-28 14:27:26 ----D---- C:\Program Files\Common Files\InstallShield
2010-12-28 14:27:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-12-28 13:43:54 ----D---- C:\Program Files\ATI
2010-12-24 17:30:13 ----D---- C:\Program Files\Czech Soccer Manager 2009 FE
2010-12-23 09:19:44 ----A---- C:\WINDOWS\DUMP633e.tmp
2010-12-22 13:25:12 ----D---- C:\Program Files\Mozilla Firefox
2010-12-21 18:53:16 ----D---- C:\Program Files\WinRAR
2010-12-19 20:37:17 ----D---- C:\Program Files\Windows Media Connect 2
2010-12-19 20:24:49 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-12-19 20:02:11 ----A---- C:\WINDOWS\disney.ini
2010-12-19 19:42:10 ----D---- C:\Program Files\Common Files
2010-12-17 20:48:22 ----A---- C:\WINDOWS\NeroDigital.ini
2010-12-15 21:20:41 ----D---- C:\Program Files\Internet Explorer
2010-12-15 21:20:13 ----D---- C:\WINDOWS\ie8updates
2010-12-15 21:19:57 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-15 21:15:21 ----A---- C:\WINDOWS\system32\MRT.exe
2010-12-15 21:14:44 ----D---- C:\Program Files\Outlook Express
2010-12-11 21:29:55 ----D---- C:\Program Files\OpenAL
2010-12-11 16:25:17 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-12-11 12:50:54 ----D---- C:\Program Files\Czech Soccer Manager 2001
2010-12-11 09:57:59 ----SD---- C:\WINDOWS\Tasks
2010-11-19 19:58:49 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-11-18 19:15:47 ----A---- C:\WINDOWS\system32\isign32.dll
2010-11-06 01:23:38 ----N---- C:\WINDOWS\system32\occache.dll
2010-11-06 01:23:38 ----A---- C:\WINDOWS\system32\wininet.dll
2010-11-06 01:23:38 ----A---- C:\WINDOWS\system32\urlmon.dll
2010-11-06 01:23:38 ----A---- C:\WINDOWS\system32\mstime.dll
2010-11-06 01:23:37 ----N---- C:\WINDOWS\system32\jsproxy.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\mshtmled.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\mshtml.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\msfeeds.dll
2010-11-06 01:23:37 ----A---- C:\WINDOWS\system32\licmgr10.dll
2010-11-06 01:23:36 ----N---- C:\WINDOWS\system32\iepeers.dll
2010-11-06 01:23:36 ----A---- C:\WINDOWS\system32\iertutil.dll
2010-11-06 01:23:36 ----A---- C:\WINDOWS\system32\ieframe.dll
2010-11-06 01:23:35 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2010-11-04 13:06:18 ----SD---- C:\Documents and Settings\Uzivatel\Data aplikací\Microsoft
2010-11-03 14:12:40 ----A---- C:\WINDOWS\system32\tzchange.exe
2010-11-03 13:26:18 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2010-10-31 17:12:02 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-28 14:09:00 ----A---- C:\WINDOWS\system32\atmfd.dll
2010-10-28 12:21:09 ----D---- C:\Program Files\Windows Media Player
2010-10-27 12:25:15 ----D---- C:\WINDOWS\system32\wbem
2010-10-27 12:25:14 ----D---- C:\WINDOWS\Registration
2010-10-27 12:14:44 ----D---- C:\WINDOWS\system32\Restore
2010-10-25 14:57:49 ----RSD---- C:\WINDOWS\Fonts
2010-10-13 12:33:58 ----D---- C:\WINDOWS\WinSxS
2010-10-08 16:30:44 ----D---- C:\WINDOWS\Microsoft.NET
2010-10-06 19:25:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-14 46464]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x); C:\WINDOWS\System32\drivers\sfsync03.sys [2005-12-06 35328]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-12-15 611064]
R0 videX32;videX32; C:\WINDOWS\system32\DRIVERS\videX32.sys [2010-03-09 13976]
R0 xfilt;VIA SATA IDE Hot-plug Driver; C:\WINDOWS\system32\DRIVERS\xfilt.sys [2010-03-09 22168]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2010-07-18 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2010-06-03 29584]
R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2010-07-18 243024]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2009-11-09 59388]
R2 ACEDRV07;ACEDRV07; \??\C:\WINDOWS\system32\drivers\ACEDRV07.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-11-26 5555712]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2009-03-25 130432]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2009-09-11 22792]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2009-09-11 66056]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2010-04-13 25280]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2009-09-11 35592]
S3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2009-09-11 14984]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-03-08 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-03-08 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-11-26 614400]
R2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2010-07-25 921952]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2010-07-18 308136]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-11-27 153376]
R2 O&O Defrag;O&O Defrag; C:\windows\system32\oodag.exe [2009-04-08 1377536]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-20 66872]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2010-03-20 107832]
S2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Služba Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


info.txt logfile of random's system information tool 1.08 2010-12-29 14:11:09

======Uninstall list======

-->MsiExec /X{DEA314C4-0929-4250-BC92-98E4C105F28D}
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
µTorrent-->"C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_Plugin.exe -maintain plugin
Adobe Reader 9.4.1 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A94000000001}
Aktualizace systému Windows Internet Explorer 8 (KB976662)-->"C:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe"
Aktualizace systému Windows Internet Explorer 8 (KB978506)-->"C:\WINDOWS\ie8updates\KB978506-IE8\spuninst\spuninst.exe"
Aktualizace systému Windows Internet Explorer 8 (KB980182)-->"C:\WINDOWS\ie8updates\KB980182-IE8\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB2141007)-->"C:\WINDOWS\$NtUninstallKB2141007$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB2345886)-->"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB2467659)-->"C:\WINDOWS\$NtUninstallKB2467659$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB2378111)-->"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB975558)-->"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 7 (KB978207)-->"C:\WINDOWS\ie7updates\KB978207-IE7\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2183461)-->"C:\WINDOWS\ie8updates\KB2183461-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2360131)-->"C:\WINDOWS\ie8updates\KB2360131-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2416400)-->"C:\WINDOWS\ie8updates\KB2416400-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB978207)-->"C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB981332)-->"C:\WINDOWS\ie8updates\KB981332-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB982381)-->"C:\WINDOWS\ie8updates\KB982381-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2079403)-->"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2121546)-->"C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2160329)-->"C:\WINDOWS\$NtUninstallKB2160329$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2259922)-->"C:\WINDOWS\$NtUninstallKB2259922$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2279986)-->"C:\WINDOWS\$NtUninstallKB2279986$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2286198)-->"C:\WINDOWS\$NtUninstallKB2286198$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2296011)-->"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2296199)-->"C:\WINDOWS\$NtUninstallKB2296199$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2347290)-->"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2360937)-->"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2387149)-->"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2423089)-->"C:\WINDOWS\$NtUninstallKB2423089$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2436673)-->"C:\WINDOWS\$NtUninstallKB2436673$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2440591)-->"C:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2443105)-->"C:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB923789)-->C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
Aktualizace zabezpečení systému Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971961)-->"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977165-v2)-->"C:\WINDOWS\$NtUninstallKB977165-v2$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979687)-->"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB980436)-->"C:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981322)-->"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981852)-->"C:\WINDOWS\$NtUninstallKB981852$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981957)-->"C:\WINDOWS\$NtUninstallKB981957$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982132)-->"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982214)-->"C:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982802)-->"C:\WINDOWS\$NtUninstallKB982802$\spuninst\spuninst.exe"
AVG Free 9.0-->C:\Program Files\AVG\AVG9\setup.exe /UNINSTALL
Catalyst Control Center - Branding-->MsiExec.exe /I{6AB57823-3580-4CE0-9CF0-072E2A39460C}
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Czech Soccer Manager 2001-->"C:\Program Files\Czech Soccer Manager 2001\uninstall.exe" "/U:C:\Program Files\Czech Soccer Manager 2001\uninstall.xml"
Direct Show Ogg Vorbis Filter (remove only)-->"C:\WINDOWS\system32\OggDSuninst.exe"
EVEREST Home Edition v2.20-->"C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
F1 2010-->MsiExec.exe /I{434D0831-A4CC-401A-9E74-621000018401}
F1 2010-->MsiExec.exe /X{434D0831-3E0C-4D03-A5D4-5E1000008400}
F1 Mania 2010 Astros-Gamez-->C:\Program Files\F1 Mania 2010 Astros-Gamez\Desinstalador.exe
Fraps-->"C:\Program Files\Fraps\uninstall.exe"
Generic Game Trainer-->MsiExec.exe /X{FEF198EE-DF2E-47B3-A556-B195706E667D}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Windows XP (KB915800-v4)-->"C:\WINDOWS\$NtUninstallKB915800-v4$\spuninst\spuninst.exe"
Java(TM) 6 Update 20-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216020FF}
JDownloader-->C:\Program Files\JDownloader\uninstall.exe
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - CSY-->MsiExec.exe /I{A2C9CD1B-2551-3AED-B244-6698FB929FA6}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - CSY-->MsiExec.exe /I{546C143E-68DC-314D-97BC-1E454E3BA429}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack SP1 - csy-->MsiExec.exe /I{DD73CA82-EA82-38AA-863D-9A24A018DC96}
Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - csy\setup.exe
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
Microsoft WSE 3.0 Runtime-->MsiExec.exe /X{E3E71D07-CD27-46CB-8448-16D4FB29AA13}
Mozilla Firefox (3.6.13)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 4.0 SP2 Parser and SDK-->MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
Need for Speed™ Most Wanted-->C:\Program Files\EA GAMES\Need for Speed Most Wanted\EAUninstall.exe
O&O Defrag Professional-->MsiExec.exe /I{F530581E-12FE-43B4-A28D-E5257AAD63E6}
OpenAL-->"C:\Program Files\OpenAL\OalinstGridRelease.exe" /U
OpenOffice.org 2.3-->MsiExec.exe /I{519556CC-4382-4B35-80F5-DD8E9460EEAC}
Oprava Hotfix systému Windows XP (KB2158563)-->"C:\WINDOWS\$NtUninstallKB2158563$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB2443685)-->"C:\WINDOWS\$NtUninstallKB2443685$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB938759)-->"C:\WINDOWS\$NtUninstallKB938759$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB979306)-->"C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
PowerISO-->"C:\Program Files\PowerISO\uninstall.exe"
PunkBuster Services-->C:\WINDOWS\system32\pbsvc.exe -u
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x5 -removeonly
REALTEK GbE & FE Ethernet PCI NIC Driver-->C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\setup.exe -runfromtemp -removeonly
Sada Compatibility Pack pro systém Office 2007-->MsiExec.exe /X{90120000-0020-0405-0000-0000000FF1CE}
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT=""
Security Update for Windows Search 4 - KB963093-->"C:\WINDOWS\$NtUninstallKB963093$\spuninst\spuninst.exe"
Ski Alpin Racing 2007-->"C:\Program Files\Ski Alpin Racing 2007\setup.exe" -u
Smarty Uninstaller Pro-->"C:\Program Files\Smarty Uninstaller Pro\unins000.exe"
The KMPlayer (remove only)-->"C:\Program Files\The KMPlayer\uninstall.exe"
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
VIA Platforma Ovladače zařízení-->C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{20D4A895-748C-4D88-871C-FDB1695B0169}
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Search 4.0-->"C:\WINDOWS\$NtUninstallKB940157$\spuninst\spuninst.exe"
WinRAR-->C:\Program Files\WinRAR\uninstall.exe
XML Paper Specification Shared Components Language Pack 1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XnView 1.97.4-->"C:\Program Files\XnView\unins000.exe"

======Security center information======

AV: AVG Anti-Virus Free

======System event log======

Computer Name: PC-8F5DEC7BE64B
Event Code: 7036
Message: Stav služby Služba modelu COM pro zápis na disk CD (IMAPI) byl změněn na: Spuštěno

Record Number: 10677
Source Name: Service Control Manager
Time Written: 20101118121319.000000+060
Event Type: Informace
User:

Computer Name: PC-8F5DEC7BE64B
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Služba modelu COM pro zápis na disk CD (IMAPI) úspěšně odeslán.

Record Number: 10676
Source Name: Service Control Manager
Time Written: 20101118121319.000000+060
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: PC-8F5DEC7BE64B
Event Code: 7036
Message: Stav služby Služba modelu COM pro zápis na disk CD (IMAPI) byl změněn na: Zastaveno

Record Number: 10675
Source Name: Service Control Manager
Time Written: 20101118121257.000000+060
Event Type: Informace
User:

Computer Name: PC-8F5DEC7BE64B
Event Code: 7036
Message: Stav služby Služba modelu COM pro zápis na disk CD (IMAPI) byl změněn na: Spuštěno

Record Number: 10674
Source Name: Service Control Manager
Time Written: 20101118121251.000000+060
Event Type: Informace
User:

Computer Name: PC-8F5DEC7BE64B
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Služba modelu COM pro zápis na disk CD (IMAPI) úspěšně odeslán.

Record Number: 10673
Source Name: Service Control Manager
Time Written: 20101118121251.000000+060
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Application event log=====

Computer Name: PC-8F5DEC7BE64B
Event Code: 1002
Message: Čítače výkonu služby .NET CLR Data (.NET CLR Data) jsou již v registru výkonu zaznamenány.
Není třeba je instalovat znovu.

Record Number: 2017
Source Name: LoadPerf
Time Written: 20100611223606.000000+120
Event Type: Informace
User:

Computer Name: PC-8F5DEC7BE64B
Event Code: 1002
Message: Čítače výkonu služby .NET CLR Networking (.NET CLR Networking) jsou již v registru výkonu zaznamenány.
Není třeba je instalovat znovu.

Record Number: 2016
Source Name: LoadPerf
Time Written: 20100611223606.000000+120
Event Type: Informace
User:

Computer Name: PC-8F5DEC7BE64B
Event Code: 1002
Message: Čítače výkonu služby .NET Data Provider for SqlServer (.NET Data Provider for SqlServer) jsou již v registru výkonu zaznamenány.
Není třeba je instalovat znovu.

Record Number: 2015
Source Name: LoadPerf
Time Written: 20100611223606.000000+120
Event Type: Informace
User:

Computer Name: PC-8F5DEC7BE64B
Event Code: 1002
Message: Čítače výkonu služby .NET Data Provider for Oracle (.NET Data Provider for Oracle) jsou již v registru výkonu zaznamenány.
Není třeba je instalovat znovu.

Record Number: 2014
Source Name: LoadPerf
Time Written: 20100611223606.000000+120
Event Type: Informace
User:

Computer Name: PC-8F5DEC7BE64B
Event Code: 1019
Message: Ukončení registrace ASP.NET (verze 2.0.50727.0). Podrobné záznamy o registraci najdete v souboru C:\WINDOWS\TEMP\ASPNETSetup_00000.log.

Record Number: 2013
Source Name: ASP.NET 2.0.50727.0
Time Written: 20100611223555.000000+120
Event Type: Informace
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Program Files\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\Smart Projects\IsoBuster
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 28 Stepping 0, AuthenticAMD
"PROCESSOR_REVISION"=1c00
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------

Odpovězte prosím, děkuji

Dobrý večer Mám takový pocit, že tohle dělá AVG. jestli ho máte ve free verzi, vyměnte ho třeba za Avast nebo Aviru

Odinstaloval jsem AVG, nainstaloval Aviru.
Proces System.exe už paměť nežere.
Ale při skenování mně Avira našla 4 viry.

V jakých souborech je našla?

Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.

Avira hlásila:
C:\System Volume Information\_restore{419F4648-D7A4-4B6C-BD51-77436E2EF628}\RP87\A0017230.exe
[DETECTION] This file has been compressed using unusual runtime compression (PCK/YodaProt). Please verify the origin of this file.
[NOTE] The file was moved to the quarantine directory under the name '4e759095.qua'.
C:\System Volume Information\_restore{419F4648-D7A4-4B6C-BD51-77436E2EF628}\RP47\A0010204.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was moved to the quarantine directory under the name '56e2bf32.qua'.
C:\System Volume Information\_restore{419F4648-D7A4-4B6C-BD51-77436E2EF628}\RP47\A0010202.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was moved to the quarantine directory under the name '04bde5db.qua'.
C:\System Volume Information\_restore{419F4648-D7A4-4B6C-BD51-77436E2EF628}\RP18\A0004500.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE] The file was moved to the quarantine directory under the name '628aaa19.qua'.




Za chvíli přidám log z MBAM

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Verze databáze: 5417

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

30.12.2010 14:16:10
mbam-log-2010-12-30 (14-16-06).txt

Typ kontroly: Úplný test (A:\|C:\|E:\|)
Testované objekty: 193004
Uplynulý čas: 35 minut, 48 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\system volume information\_restore{419f4648-d7a4-4b6c-bd51-77436e2ef628}\RP77\A0015658.dll (Trojan.KillDisk) -> No action taken.
c:\WINDOWS\system32\h@tkeysh@@k.dll (Trojan.Agent) -> No action taken.

V mbamu vše smažte.
Klikněte mi do podpisu na SVI a smažte obnovu systému podle návodu .

Co počítač?

Hotovo.
Počítač je nějak pomalejší; mám problém, že v biosu nemůžu nastavit např. rychlost AGP - dřív to šlo; taky se mi občas stává, že PC zamrzne a objeví se modrá obrazovka, že ati2dvag přestal pracovat a počítač musím restartovat.

Přeinstalujte ovladače od grafické karty.


Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

Ovladače přeinstalovány.
Log z ComboFix:



ComboFix 10-12-30.01 - Uzivatel 30.12.2010 22:46:46.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1534.1049 [GMT 1:00]
Spuštěný z: c:\documents and settings\Uzivatel\Plocha\ComboFix.exe
AV: AntiVir Desktop *Disabled/Updated* {11638345-E4FC-4BEE-BB73-EC754659C5F6}
FW: Avira FireWall *Disabled* {11638345-E4FC-4BEE-BB73-EC754659C5F6}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\OggDSuninst.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-11-28 do 2010-12-30 )))))))))))))))))))))))))))))))
.

2010-12-30 21:23 . 2010-12-30 21:23 -------- d-----w- c:\program files\ATI
2010-12-30 08:19 . 2008-04-14 06:51 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll
2010-12-30 08:19 . 2008-04-14 06:51 21504 ----a-w- c:\windows\system32\hidserv.dll
2010-12-30 07:31 . 2010-12-30 07:31 -------- d-----r- c:\documents and settings\LocalService\Dokumenty
2010-12-30 07:05 . 2010-12-30 07:05 -------- d-----r- c:\documents and settings\LocalService\Oblíbené položky
2010-12-30 06:41 . 2010-12-30 07:22 -------- d-----w- c:\windows\system32\NtmsData
2010-12-29 22:13 . 2010-12-29 22:13 -------- d-----w- c:\documents and settings\Uzivatel\Data aplikací\Avira
2010-12-29 22:11 . 2010-12-13 07:31 135096 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-12-29 22:11 . 2010-12-13 07:31 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-12-29 22:11 . 2010-12-13 07:31 102856 ----a-w- c:\windows\system32\drivers\avfwot.sys
2010-12-29 22:11 . 2010-06-17 13:23 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-12-29 22:11 . 2010-06-17 13:23 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-12-29 22:11 . 2010-06-17 13:23 79432 ----a-w- c:\windows\system32\drivers\avfwim.sys
2010-12-29 22:11 . 2010-12-29 22:12 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Avira
2010-12-29 22:11 . 2010-12-29 22:11 -------- d-----w- c:\program files\Avira
2010-12-29 18:10 . 2010-12-29 18:10 -------- d-----w- c:\documents and settings\Uzivatel\Data aplikací\Malwarebytes
2010-12-29 18:09 . 2010-12-29 18:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2010-12-29 18:09 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-29 18:09 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-29 18:09 . 2010-12-29 18:09 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-12-29 13:10 . 2010-12-29 13:15 -------- d-----w- c:\program files\trend micro
2010-12-29 13:10 . 2010-12-29 13:11 -------- d-----w- C:\rsit
2010-12-29 07:44 . 2010-12-29 07:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\ATI
2010-12-29 07:32 . 2009-05-11 22:35 118784 ----a-w- c:\windows\system32\atibtmon.exe
2010-12-29 07:32 . 2001-11-09 16:01 24064 ----a-w- c:\windows\system32\ativcoxx.dll
2010-12-29 07:31 . 2010-12-29 07:32 -------- d-----w- c:\program files\ATI Technologies
2010-12-29 07:29 . 2010-11-26 02:18 765952 ----a-w- c:\windows\system32\ati2cqag.dll
2010-12-29 07:29 . 2010-11-26 02:54 302080 ----a-w- c:\windows\system32\ati2dvag.dll
2010-12-29 07:29 . 2010-11-26 02:39 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2010-12-29 07:29 . 2010-11-26 04:17 5555712 -c--a-w- c:\windows\system32\dllcache\ati2mtag.sys
2010-12-29 07:29 . 2010-11-26 04:17 5555712 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2010-12-28 17:55 . 2010-12-28 17:55 -------- d-----w- c:\windows\system32\oodag
2010-12-28 17:53 . 2010-12-28 17:53 -------- d-----w- c:\documents and settings\Uzivatel\Local Settings\Data aplikací\O&O
2010-12-28 17:52 . 2010-12-28 17:52 -------- d-----w- c:\program files\OO Software
2010-12-28 16:35 . 2010-12-29 22:10 -------- d-----w- c:\documents and settings\Uzivatel\Data aplikací\uTorrent
2010-12-28 16:17 . 1999-04-02 15:37 33792 ----a-r- c:\windows\NPSExec.exe
2010-12-28 13:56 . 2010-12-29 18:58 -------- d-----w- c:\program files\EA GAMES
2010-12-28 13:42 . 2010-12-28 16:36 -------- d-----w- c:\program files\uTorrent
2010-12-25 08:35 . 2010-12-25 08:35 -------- d-----w- c:\windows\SPEECH
2010-12-24 19:12 . 2010-12-27 18:33 -------- d-----w- c:\program files\F1 Mania 2010 Astros-Gamez
2010-12-22 14:21 . 2010-12-22 14:21 -------- d-----w- c:\program files\Lavalys
2010-12-15 16:56 . 2010-12-15 16:56 611064 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-12-14 17:00 . 2008-04-13 22:15 32128 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys
2010-12-14 17:00 . 2008-04-13 22:15 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2010-12-11 20:29 . 2008-04-28 14:53 805400 ----a-r- c:\windows\system32\tmp141.tmp
2010-12-11 20:29 . 2008-04-28 14:53 805400 ----a-r- c:\windows\system32\tmp140.tmp
2010-12-11 07:23 . 2009-03-25 13:29 130432 ----a-w- c:\windows\system32\drivers\Rtnicxp.sys
2010-12-11 07:23 . 2009-03-03 19:18 73728 ----a-w- c:\windows\system32\RtNicProp32.dll
2010-12-11 07:23 . 2010-12-11 07:23 -------- d-----w- c:\program files\Realtek
2010-12-07 17:08 . 2010-12-07 17:08 101376 ----a-w- c:\windows\system32\drivers\ACEDRV07.sys
2010-12-07 17:06 . 2010-12-07 17:16 -------- d-----w- c:\program files\Ski Alpin Racing 2007
2010-12-06 15:13 . 2010-12-06 15:13 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Trymedia
2010-12-02 11:24 . 2010-12-02 11:24 -------- d-----w- c:\windows\Sun

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-12-30 12:24 . 2010-03-09 10:30 737280 ----a-w- c:\windows\iun6002.exe
2010-12-29 07:39 . 2010-03-09 10:02 102400 ----a-w- c:\windows\DUMP69b6.tmp
2010-12-23 08:19 . 2010-03-09 10:02 110592 ----a-w- c:\windows\DUMP633e.tmp
2010-11-27 11:55 . 2010-11-27 11:55 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-11-27 11:55 . 2010-11-27 11:55 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-11-18 18:15 . 2010-03-09 09:14 81920 ----a-w- c:\windows\system32\isign32.dll
2010-11-06 00:23 . 2008-12-20 22:03 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:23 . 2009-03-07 16:25 43520 ----a-w- c:\windows\system32\licmgr10.dll
2010-11-06 00:23 . 2008-12-20 22:03 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-03 12:25 . 2009-03-07 16:25 385024 ----a-w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2008-04-13 21:27 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:09 . 2008-04-14 05:37 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-28 11:20 . 2010-10-28 11:20 4608 ----a-w- c:\windows\system32\w95inf32.dll
2010-10-28 11:20 . 2010-10-28 11:20 2272 ----a-w- c:\windows\system32\w95inf16.dll
2010-10-27 15:36 . 2010-10-27 15:36 5632 ----a-r- c:\documents and settings\Uzivatel\Data aplikací\Microsoft\Installer\{FEF198EE-DF2E-47B3-A556-B195706E667D}\IconFEF198EE3.exe
2010-10-27 15:36 . 2010-10-27 15:36 5632 ----a-r- c:\documents and settings\Uzivatel\Data aplikací\Microsoft\Installer\{FEF198EE-DF2E-47B3-A556-B195706E667D}\IconFEF198EE3.exe
2010-10-27 15:36 . 2010-10-27 15:36 5632 ----a-r- c:\documents and settings\Uzivatel\Data aplikací\Microsoft\Installer\{FEF198EE-DF2E-47B3-A556-B195706E667D}\IconFEF198EE.exe
2010-10-27 15:36 . 2010-10-27 15:36 5632 ----a-r- c:\documents and settings\Uzivatel\Data aplikací\Microsoft\Installer\{FEF198EE-DF2E-47B3-A556-B195706E667D}\IconFEF198EE.exe
2010-10-27 15:36 . 2010-10-27 15:36 4608 ----a-r- c:\documents and settings\Uzivatel\Data aplikací\Microsoft\Installer\{FEF198EE-DF2E-47B3-A556-B195706E667D}\IconFEF198EE4.exe
2010-10-27 15:36 . 2010-10-27 15:36 4608 ----a-r- c:\documents and settings\Uzivatel\Data aplikací\Microsoft\Installer\{FEF198EE-DF2E-47B3-A556-B195706E667D}\IconFEF198EE4.exe
2010-10-27 15:36 . 2010-10-27 15:36 4608 ----a-r- c:\documents and settings\Uzivatel\Data aplikací\Microsoft\Installer\{FEF198EE-DF2E-47B3-A556-B195706E667D}\IconFEF198EE1.exe
2010-10-27 15:36 . 2010-10-27 15:36 4608 ----a-r- c:\documents and settings\Uzivatel\Data aplikací\Microsoft\Installer\{FEF198EE-DF2E-47B3-A556-B195706E667D}\IconFEF198EE1.exe
2010-10-26 14:04 . 2009-03-08 15:30 1862272 ----a-w- c:\windows\system32\win32k.sys
.

------- Sigcheck -------

[-] 2009-09-20 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"="SOUNDMAN.EXE" [2007-04-16 577536]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-11-25 98304]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-12-13 281768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"AvgUninstallURL"="start http:" [X]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_2"="shell32" [X]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Windows Search.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
backup=c:\windows\pss\Windows Search.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Uzivatel^Nabídka Start^Programy^Po spuštění^OpenOffice.org 2.3.lnk]
path=c:\documents and settings\Uzivatel\Nabídka Start\Programy\Po spuštění\OpenOffice.org 2.3.lnk
backup=c:\windows\pss\OpenOffice.org 2.3.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 21:07 932288 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OODefragTray]
2009-04-08 00:39 2553088 ----a-w- c:\windows\system32\oodtray.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [6.12.2005 16:11 35328]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [15.12.2010 17:56 611064]
R1 avfwot;avfwot;c:\windows\system32\drivers\avfwot.sys [29.12.2010 23:11 102856]
R2 AntiVirFirewallService;Avira FireWall;c:\program files\Avira\AntiVir Desktop\avfwsvc.exe [29.12.2010 23:11 539304]
R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [29.12.2010 23:11 339624]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [29.12.2010 23:11 135336]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [29.12.2010 23:11 403624]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\drivers\avfwim.sys [29.12.2010 23:11 79432]
S3 GPU-Z;GPU-Z;\??\c:\docume~1\Uzivatel\LOCALS~1\Temp\GPU-Z.sys --> c:\docume~1\Uzivatel\LOCALS~1\Temp\GPU-Z.sys [?]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
TCP: {1D03707C-780E-4FBD-A93A-82602A84CE14} = 90.183.115.6,90.183.115.11
FF - ProfilePath - c:\documents and settings\Uzivatel\Data aplikací\Mozilla\Firefox\Profiles\m38me4lr.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

MSConfigStartUp-MSMSGS - c:\program files\Messenger\msmsgs.exe
MSConfigStartUp-Steam - c:\program files\Steam\Steam.exe
AddRemove-OggDS - c:\windows\system32\OggDSuninst.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-30 22:52
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
"OODEFRAG11.00.00.01WORKSTATION"="E4E14F3B745170BB308DD297CA9AE1DECE610A1E64313D96C4B9218BCE97E77B7566B943EDED37DF6A5669E9BE093904A915BFBB3E53802619146441D5080AD37B4BBED1572F2F16F026B260107B2AEA8E3A6B1C6064240A87D932E4F1A3DA80E2EF5D87717652173F26C7CFDEAF978E2BE9DD6AEA9F14230E35359366476DE71AA7B897BE5BFA6DD4F9E4A2119CC5BF31340DE544F71EA6ADBEBC8138FD3943133C9AC906A6E9F7B635EA554EE5DEA1521914DF158F749CEA863BF5B28A1AA0FEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B9808A2D97226D213B555C038D530D6EB3452A6A0AC4980AC7933324D54A66AD1157352339C6DF4CC26BC0D9EE654C5D0200C04B3A1E81BF0D157A6C30BE103E7E41D141946D3C64E3BBC941208AEE71CE224A10E5010347F1842FB2C3663DD81D9D0CBD3C0D02EF80B70E115D181C352A38C75D2A22B5C9CF4187D4048F4BAF9FC10992BD8241047C7DB041D0A21FAA8DCEF1DC373C397DD4FC87D2DD7F49E62BE309DD97B211065875B0E119676768C71CE3E93C5F5AF89ED18CE969C55537FEE597C0EBD2E9AB4C89A164C83FCDF192479FE6D3DF3AF9B001F4B11F69D66C94587E16C55C65C4B699BB5A0024427231E980CECA38367C19748CE276667A76D5D8DFA8A9DFA47732C358ED0E5F27FB06AA494A4E3FC6CE128D33B5792DF2DCA330E78F3946D93A9398F3F15A440607CFAEFCC1891CE95130C55F41345CBCF772B031027DD55B8201CAA721ADC7784F3231AEAC060787E9F813563C06A7FAC3B89387D9840FEF5BBC3564FFECD79EABA1C9CAC8BA8118908292F733A966525127B50FA2E2648CE16833908D7DA3B572681BFD0DA69C059800751964DFE7C5E2E0E3ECDC31F2508FC134D4CAD8CC4CFC254A21A02C045566E0782C13C7C57C17232CB39A7DD9D2BF10FDE53FA8DB0A04D79B9D14B746F2C6F75776DBC8D1A7BF7C095869CB9CB08AA7412D9322F32D738B74A42716EA4CBD183BC94795481FC8BF28C85D9ADDEAF10A7DA9B34648BC92CBC70BB283B5FE89AC6B33A10165A7DAC67F4078BD69AF8407104DCDB45158C81199991940B2BFB7FB80FE1133D08721220675F4FFA57FC0DFA2B64738E3C7DC640889BCCB32A40ECB6D51407D8809CA104526A38FDFE9A7A55C1FC3B9E7F38C08B553660AC91378181E4DDE818CDFA795DF383CEEC10F344730D74E7FB75A263376ABF50152A2592BFEBCE23D28DD2E95A630E8C75206F56ABA81D214BC4E25AE1859B102B529026F96E7D9A03F22EF68E07EEE0EB5436523B00CE03DAA96405133A3389567A47F79E4381A345C35A5AED1E10AE4669B70F40D6E39D197556F3316F711A9E28D7787D98F608DC5BE67FD4B75FCD1F2EA594BEC0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1168)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll

- - - - - - - > 'lsass.exe'(1224)
c:\program files\Avira\AntiVir Desktop\avsda.dll
.
Celkový čas: 2010-12-30 22:54:34
ComboFix-quarantined-files.txt 2010-12-30 21:54

Před spuštěním: Volných bajtů: 120 054 890 496
Po spuštění: Volných bajtů: 120 111 058 944

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect

- - End Of File - - 3F6933B572D9D0B7BCA126759A4630A1

Otestujte na www.virustotal.com
c:\windows\NPSExec.exe

File name:
NPSExec.exe
Submission date:
2010-12-31 15:26:16 (UTC)
Current status:
queued (#3080) queued analysing finished
Result:
0/ 43 (0.0%)

Jak je na tom počítač?

Při práci na ploše nebo na internetu je to v pohodě, ale ve hrách se asi každých 5 sekund snižuje FPS, hra se pak strašně trhá. V biosu stále nejde nastavit rychlost AGP (je na 8x - nejde měnit, dřív to šlo), v NFS Mos Wanted nejde zapnout Antialiasing - dřív to šlo. Při startu počítače, když se objeví Plocha, tak asi 4x probliknou ikony.

Od včerejška se mi zatím modrá obrazovka, že přestal pracovat ati2dvag nezobrazila.