VIRY.CZ

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:16:39, on 4.3.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files\Cyberlink\Shared files\brs.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\totalcmd\TOTALCMD.EXE
D:\Download\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://gspn1.samsungcsportal.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [IPNI Agent] C:\WINDOWS\system32\28463\IPNI.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Microsoft Outlook.lnk = C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.sec.samsung.com
O15 - Trusted Zone: *.samsungportal.com
O16 - DPF: {08BCD971-A13B-4D6E-A2A5-E9B2324FC00D} (ClientEXE Class) - http://europe.samsungportal.com/EP/web/ ... entEXE.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://europe.samsungportal.com/km/htdo ... _en_US.cab
O16 - DPF: {317642DD-AF52-11D4-BC2A-0050DA8AEE6F} (FileMng Control) - http://europe.samsungportal.com/EP/web/ ... ileWiz.cab
O16 - DPF: {714E667D-360C-4BFB-8C1A-E4812B608CC1} (ACUBETrustChecker Control) - http://europe.samsungportal.com/EP/web/ ... hecker.cab
O16 - DPF: {9D67EBF0-AF1A-4BCE-BAC9-C84A9383E0B3} (SSOCheck Class) - http://europe.samsungportal.com/EP/web/ ... OCheck.cab
O16 - DPF: {C4D88B8E-352B-11D6-BF77-0080C740A177} (Setup Class) - http://europe.samsungportal.com/EP/web/ ... XSetup.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {F2B7C894-49BD-4582-A142-0AE1C99460C2} (CodeAxNew Class) - http://europe.samsungportal.com/EP/web/ ... eAxNew.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

--
End of file - 9776 bytes

ještě log z RSIT

Logfile of random's system information tool 1.08 (written by random/random)
Run by User at 2011-03-04 16:20:51
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 83 GB (83%) free of 100 GB
Total RAM: 2046 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:20:55, on 4.3.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files\Cyberlink\Shared files\brs.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
D:\Download\RSIT.exe
C:\Program Files\trend micro\User.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://gspn1.samsungcsportal.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared files\brs.exe
O4 - HKLM\..\Run: [IPNI Agent] C:\WINDOWS\system32\28463\IPNI.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Microsoft Outlook.lnk = C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.sec.samsung.com
O15 - Trusted Zone: *.samsungportal.com
O16 - DPF: {08BCD971-A13B-4D6E-A2A5-E9B2324FC00D} (ClientEXE Class) - http://europe.samsungportal.com/EP/web/ ... entEXE.cab
O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://europe.samsungportal.com/km/htdo ... _en_US.cab
O16 - DPF: {317642DD-AF52-11D4-BC2A-0050DA8AEE6F} (FileMng Control) - http://europe.samsungportal.com/EP/web/ ... ileWiz.cab
O16 - DPF: {714E667D-360C-4BFB-8C1A-E4812B608CC1} (ACUBETrustChecker Control) - http://europe.samsungportal.com/EP/web/ ... hecker.cab
O16 - DPF: {9D67EBF0-AF1A-4BCE-BAC9-C84A9383E0B3} (SSOCheck Class) - http://europe.samsungportal.com/EP/web/ ... OCheck.cab
O16 - DPF: {C4D88B8E-352B-11D6-BF77-0080C740A177} (Setup Class) - http://europe.samsungportal.com/EP/web/ ... XSetup.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {F2B7C894-49BD-4582-A142-0AE1C99460C2} (CodeAxNew Class) - http://europe.samsungportal.com/EP/web/ ... eAxNew.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe

--
End of file - 10045 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-01-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-01-19 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-07-06 19556968]
"RemoteControl10"=C:\Program Files\CyberLink\PowerDVD10\PDVD10Serv.exe [2010-02-03 87336]
"BDRegion"=C:\Program Files\Cyberlink\Shared files\brs.exe [2010-03-13 75048]
"IPNI Agent"=C:\WINDOWS\system32\28463\IPNI.exe []
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2010-04-07 2145000]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-02-28 570664]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-02-18 2221352]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-03-08 13680640]
"nwiz"=nwiz.exe /install []
"WinSys2"=C:\WINDOWS\system32\winsys2.exe [2009-03-18 208896]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-03-08 86016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"ICQ"=C:\Program Files\ICQ7.2\ICQ.exe [2011-01-05 133432]
"BitTorrent DNA"=C:\Program Files\DNA\btdna.exe [2011-01-19 323392]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe []

C:\Documents and Settings\User\Nabídka Start\Programy\Po spuštění
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Microsoft Outlook.lnk - C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Documents and Settings\User\Local Settings\Temp\1A1.tmp\KMService.exe"="C:\Documents and Settings\User\Local Settings\Temp\1A1.tmp\KMService.exe:*:Enabled:KMService"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\DNA\btdna.exe"="C:\Program Files\DNA\btdna.exe:*:Enabled:DNA"
"C:\totalcmd\TOTALCMD.EXE"="C:\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2011-03-04 16:20:52 ----D---- C:\Program Files\trend micro
2011-03-04 16:20:51 ----D---- C:\rsit
2011-03-04 13:01:40 ----A---- C:\WINDOWS\OPHN.INI
2011-03-04 03:36:49 ----HDC---- C:\WINDOWS\$NtUninstallKB961118$
2011-03-04 03:24:09 ----SHD---- C:\Config.Msi
2011-03-03 08:35:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe Systems
2011-03-03 08:34:55 ----D---- C:\Program Files\Common Files\Adobe Systems Shared
2011-03-03 03:08:08 ----D---- C:\WINDOWS\system32\XPSViewer
2011-03-03 03:07:51 ----D---- C:\WINDOWS\system32\en-US
2011-03-03 03:07:32 ----D---- C:\Program Files\Reference Assemblies
2011-03-03 03:06:43 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2011-03-03 03:06:43 ----N---- C:\WINDOWS\system32\prntvpt.dll
2011-03-03 03:06:41 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2011-03-02 10:10:11 ----D---- C:\DriveKey
2011-03-02 09:45:46 ----D---- C:\Program Files\nLite
2011-03-02 09:42:32 ----RSD---- C:\WINDOWS\assembly
2011-03-02 09:41:35 ----D---- C:\WINDOWS\Microsoft.NET
2011-02-28 14:57:09 ----D---- C:\Program Files\Mozilla Firefox
2011-02-28 14:42:47 ----D---- C:\WINDOWS\DD1865F0AD7340FBB23E1822E02396FF.TMP
2011-02-28 14:42:14 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-02-28 14:41:29 ----D---- C:\WINDOWS\nview
2011-02-28 14:41:28 ----A---- C:\WINDOWS\system32\nvudisp.exe
2011-02-28 14:29:12 ----A---- C:\WINDOWS\system32\NVUNINST.EXE
2011-02-28 14:19:46 ----A---- C:\WINDOWS\system32\WinSys2.exe
2011-02-28 14:19:46 ----A---- C:\WINDOWS\system32\smdll.dll
2011-02-28 14:19:20 ----A---- C:\WINDOWS\system32\nwiz.exe
2011-02-28 14:19:20 ----A---- C:\WINDOWS\system32\nvwssr.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwss.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrszht.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrszhc.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrstr.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrsth.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrssv.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrssl.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrssk.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrsru.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrsptb.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrspt.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrspl.dll
2011-02-28 14:19:18 ----A---- C:\WINDOWS\system32\nvwrsno.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsnl.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsko.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsja.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsit.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrshu.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrshe.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsfr.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsfi.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsesm.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrses.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrseng.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsel.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsde.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsda.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrscs.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwrsar.dll
2011-02-28 14:19:17 ----A---- C:\WINDOWS\system32\nvwimg.dll
2011-02-28 14:19:16 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll
2011-02-28 14:19:16 ----A---- C:\WINDOWS\system32\nvwddi.dll
2011-02-28 14:19:13 ----A---- C:\WINDOWS\system32\nvvitvsr.dll
2011-02-28 14:19:11 ----A---- C:\WINDOWS\system32\nvvitvs.dll
2011-02-28 14:19:11 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvshell.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrszht.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrstr.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrsth.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrssv.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrssl.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrssk.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrsru.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrspt.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrspl.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrsno.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrsko.dll
2011-02-28 14:19:10 ----A---- C:\WINDOWS\system32\nvrsja.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrsit.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrshu.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrshe.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrses.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrseng.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrsel.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrsde.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrsda.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrscs.dll
2011-02-28 14:19:09 ----A---- C:\WINDOWS\system32\nvrsar.dll
2011-02-28 14:19:06 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2011-02-28 14:19:05 ----A---- C:\WINDOWS\system32\nvmoblsr.dll
2011-02-28 14:19:04 ----A---- C:\WINDOWS\system32\nvmobls.dll
2011-02-28 14:19:03 ----A---- C:\WINDOWS\system32\nvmctray.dll
2011-02-28 14:19:03 ----A---- C:\WINDOWS\system32\nvmccssr.dll
2011-02-28 14:19:03 ----A---- C:\WINDOWS\system32\nvmccss.dll
2011-02-28 14:19:03 ----A---- C:\WINDOWS\system32\nvmccsrs.dll
2011-02-28 14:19:03 ----A---- C:\WINDOWS\system32\nvmccs.dll
2011-02-28 14:19:03 ----A---- C:\WINDOWS\system32\nview.dll
2011-02-28 14:19:02 ----A---- C:\WINDOWS\system32\nvgamesr.dll
2011-02-28 14:19:01 ----A---- C:\WINDOWS\system32\nvgames.dll
2011-02-28 14:19:00 ----A---- C:\WINDOWS\system32\nvdspsch.exe
2011-02-28 14:18:54 ----A---- C:\WINDOWS\system32\nvdispsr.dll
2011-02-28 14:18:52 ----A---- C:\WINDOWS\system32\nvdisps.dll
2011-02-28 14:18:52 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2011-02-28 14:18:51 ----A---- C:\WINDOWS\system32\nvcuda.dll
2011-02-28 14:18:50 ----A---- C:\WINDOWS\system32\nvcpluir.dll
2011-02-28 14:18:49 ----A---- C:\WINDOWS\system32\nvcplui.exe
2011-02-28 14:18:41 ----A---- C:\WINDOWS\system32\nvcpl.dll
2011-02-28 14:18:39 ----A---- C:\WINDOWS\system32\nvcolor.exe
2011-02-28 14:18:39 ----A---- C:\WINDOWS\system32\nvcodins.dll
2011-02-28 14:18:39 ----A---- C:\WINDOWS\system32\nvcod.dll
2011-02-28 14:18:39 ----A---- C:\WINDOWS\system32\nvappbar.exe
2011-02-28 14:18:39 ----A---- C:\WINDOWS\system32\nvapi.dll
2011-02-28 14:18:33 ----A---- C:\WINDOWS\system32\msvcr80.dll
2011-02-28 14:18:32 ----A---- C:\WINDOWS\system32\msicpl.dll
2011-02-28 14:18:32 ----A---- C:\WINDOWS\system32\MadCHook.dll
2011-02-28 14:18:32 ----A---- C:\WINDOWS\system32\keystone.exe
2011-02-28 14:18:29 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2011-02-28 14:18:29 ----A---- C:\WINDOWS\system32\Auxiliary.dll
2011-02-28 13:44:57 ----A---- C:\WINDOWS\ntbtlog.txt
2011-02-28 13:40:38 ----A---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2011-02-21 13:19:11 ----D---- C:\WinDDC
2011-02-15 16:25:40 ----HD---- C:\Documents and Settings\All Users\Data aplikací\CanonIJEGV
2011-02-11 13:59:59 ----A---- C:\WINDOWS\Dms2K.ini
2011-02-10 10:48:49 ----D---- C:\Program Files\MSBuild
2011-02-10 10:48:02 ----D---- C:\Program Files\Common Files\DESIGNER
2011-02-10 10:47:39 ----D---- C:\Program Files\Microsoft Sync Framework
2011-02-10 10:45:06 ----D---- C:\Program Files\Microsoft Analysis Services
2011-02-10 10:44:19 ----RHD---- C:\MSOCache
2011-02-10 10:41:32 ----D---- C:\Program Files\MSECache
2011-02-10 10:21:34 ----D---- C:\WINDOWS\SHELLNEW
2011-02-10 10:21:33 ----D---- C:\Program Files\Microsoft Office
2011-02-10 10:16:50 ----D---- C:\WINDOWS\SxsCaPendDel
2011-02-10 03:02:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2011-02-10 03:02:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2485376$
2011-02-10 03:02:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2479628$
2011-02-10 03:02:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2011-02-10 03:02:12 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-02-10 03:00:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2476687$
2011-02-10 03:00:43 ----D---- C:\Program Files\MSXML 4.0
2011-02-10 03:00:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2011-02-10 03:00:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2011-02-09 15:34:39 ----D---- C:\Program Files\NeroInstall.bak
2011-02-09 15:33:29 ----D---- C:\Documents and Settings\User\Data aplikací\Nero
2011-02-09 15:33:11 ----A---- C:\WINDOWS\system32\MsiExec.exe.log
2011-02-09 15:30:09 ----D---- C:\Program Files\Common Files\Nero
2011-02-09 15:30:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2011-02-09 12:45:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ahead
2011-02-09 12:44:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\LightScribe
2011-02-09 12:30:29 ----D---- C:\Program Files\Common Files\LightScribe
2011-02-09 12:24:23 ----D---- C:\Documents and Settings\User\Data aplikací\Ahead
2011-02-09 12:17:42 ----D---- C:\Program Files\Nero
2011-02-09 12:17:42 ----D---- C:\Program Files\Common Files\Ahead
2011-02-09 12:15:52 ----D---- C:\WINDOWS\RegisteredPackages
2011-02-09 12:00:40 ----A---- C:\WINDOWS\system32\d3dx9_30.dll
2011-02-09 12:00:38 ----A---- C:\WINDOWS\system32\d3dx9_28.dll

======List of files/folders modified in the last 1 months======

2011-03-04 16:20:55 ----D---- C:\WINDOWS\Prefetch
2011-03-04 16:20:55 ----A---- C:\WINDOWS\wincmd.ini
2011-03-04 16:20:52 ----RD---- C:\Program Files
2011-03-04 16:18:00 ----D---- C:\Documents and Settings\User\Data aplikací\DNA
2011-03-04 15:35:28 ----D---- C:\WINDOWS\Temp
2011-03-04 13:35:27 ----A---- C:\WINDOWS\wcx_ftp.ini
2011-03-04 13:01:40 ----D---- C:\WINDOWS\system32
2011-03-04 13:01:40 ----D---- C:\WINDOWS
2011-03-04 03:56:29 ----D---- C:\Program Files\DNA
2011-03-04 03:52:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-03-04 03:40:14 ----D---- C:\WINDOWS\system32\CatRoot2
2011-03-04 03:37:25 ----HD---- C:\WINDOWS\inf
2011-03-04 03:37:17 ----D---- C:\WINDOWS\system32\CatRoot
2011-03-04 03:36:57 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-03-04 03:36:06 ----SHD---- C:\WINDOWS\Installer
2011-03-04 03:33:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-03-04 03:32:46 ----D---- C:\WINDOWS\WinSxS
2011-03-03 10:34:39 ----D---- C:\Documents and Settings\User\Data aplikací\Adobe
2011-03-03 09:04:49 ----D---- C:\Program Files\Adobe
2011-03-03 09:02:07 ----D---- C:\Program Files\Common Files\Adobe
2011-03-03 08:34:55 ----D---- C:\Program Files\Common Files
2011-03-03 08:30:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-03-03 03:07:45 ----RSD---- C:\WINDOWS\Fonts
2011-03-03 03:07:02 ----D---- C:\WINDOWS\system32\spool
2011-03-03 03:03:30 ----D---- C:\Program Files\Internet Explorer
2011-03-02 10:10:10 ----HD---- C:\Program Files\InstallShield Installation Information
2011-02-28 14:57:47 ----D---- C:\Documents and Settings\User\Data aplikací\Mozilla
2011-02-28 14:41:55 ----D---- C:\WINDOWS\Help
2011-02-28 14:40:18 ----D---- C:\WINDOWS\system32\drivers
2011-02-28 13:35:48 ----D---- C:\Program Files\NVIDIA Corporation
2011-02-28 13:35:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\NVIDIA Corporation
2011-02-24 16:32:55 ----D---- C:\Documents and Settings\User\Data aplikací\ICQ
2011-02-22 15:20:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-02-19 10:35:56 ----D---- C:\Documents and Settings\User\Data aplikací\TeamViewer
2011-02-19 10:35:17 ----D---- C:\Program Files\TeamViewer
2011-02-17 16:10:46 ----D---- C:\Documents and Settings\User\Data aplikací\Download Manager
2011-02-15 16:25:13 ----D---- C:\Program Files\Canon
2011-02-10 12:30:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-02-10 10:52:30 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-02-10 10:51:52 ----A---- C:\WINDOWS\win.ini
2011-02-10 10:47:26 ----D---- C:\WINDOWS\pchealth
2011-02-10 10:23:46 ----D---- C:\WINDOWS\system32\wbem
2011-02-10 10:22:27 ----A---- C:\WINDOWS\ODBC.INI
2011-02-10 10:19:50 ----D---- C:\WINDOWS\system
2011-02-10 03:02:48 ----A---- C:\WINDOWS\imsins.BAK
2011-02-10 03:01:14 ----A---- C:\WINDOWS\system32\MRT.exe
2011-02-10 03:00:57 ----HD---- C:\WINDOWS\$hf_mig$
2011-02-09 15:51:28 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-02-09 15:30:07 ----D---- C:\WINDOWS\Cursors
2011-02-09 12:37:38 ----D---- C:\WINDOWS\security
2011-02-09 12:17:15 ----D---- C:\Program Files\Windows Media Player
2011-02-09 12:00:44 ----D---- C:\WINDOWS\system32\DirectX

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-01-05 691696]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2010-04-07 95872]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/01/05 08:35:19]; \??\C:\Program Files\CyberLink\PowerDVD10\NavFilter\000.fcl []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2010-04-07 139192]
R3 ddc_i2c;Samsung Monitor I2C Emulation Service for DDC; C:\WINDOWS\system32\DRIVERS\DDC_I2C.sys [2005-04-28 5861]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-07-06 6088296]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-06-15 12160]
R3 mtparisp;MasTech I2C Communication Service; C:\WINDOWS\system32\DRIVERS\mtparisp.sys [2008-10-06 4352]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-03-08 6288672]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2008-04-07 105088]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R4 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 a4c3cl8w;a4c3cl8w; C:\WINDOWS\system32\drivers\a4c3cl8w.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2010-04-07 810120]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-01-19 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-12-14 61440]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-02-18 877864]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-03-08 163908]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 TeamViewer6;TeamViewer 6; C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2011-01-27 2253688]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2011-03-03 72704]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2010-04-07 33560]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Moc prosím nějakého ochotníka aby mi na to koukl...

Zdravim a pekny vecer preji

Nesmite si sam odpovidat, jinak nam zapadnete (thx kolega Marty84 za upozorneni)

Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit

Predpokladam ze ten NOD32 mate legalni = zakoupena licence