Extrémně zpomalený počítač / problem s USB

[00Inferno00]

Dobrý den, velmi se zpomalil počítač, taky se vyskytuje problem s periferiema v USBckach (volant, klavesnice, mys - samy od sebe se vypinaji)

log RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by Jan at 2011-04-02 23:00:11
Systém Microsoft Windows XP Professional Service Pack 3
System drive D: has 11 GB (4%) free of 238 GB
Total RAM: 3327 MB (83% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:00:26, on 2.4.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\Ati2evxx.exe
D:\Program Files\AVAST Software\Avast\AvastSvc.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
D:\Program Files\Winamp\winampa.exe
D:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\Program Files\PowerISO\PWRISOVM.EXE
D:\Program Files\Analog Devices\Core\smax4pnp.exe
D:\Program Files\AVAST Software\Avast\avastUI.exe
D:\Program Files\Microsoft ActiveSync\wcescomm.exe
D:\Program Files\uTorrent\uTorrent.exe
E:\ZALOHA1\ALOHA\O.C\Core Temp.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Logitech\Profiler\lwemon.exe
D:\PROGRA~1\MI3AA1~1\rapimgr.exe
D:\Documents and Settings\All Users\Data aplikací\U3\U3Launcher\LaunchU3.exe
D:\Documents and Settings\Jan\Plocha\SpeedFan\speedfan.exe
D:\Program Files\ICQ6Toolbar\ICQ Service.exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
D:\WINDOWS\system32\wbem\wmiapsrv.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
D:\Documents and Settings\Jan\Plocha\RSIT.exe
D:\Program Files\trend micro\Jan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/sm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - D:\Documents and Settings\Jan\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - D:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - D:\Program Files\uTorrentBar\tbuTor.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - D:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - D:\Documents and Settings\Jan\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - D:\Program Files\uTorrentBar\tbuTor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - D:\Program Files\uTorrentBar\tbuTor.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - D:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - D:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] D:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] D:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [StartCCC] "D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] D:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [SoundMAXPnP] D:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [avast] "D:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "D:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [uTorrent] "D:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [Core Temp] E:\ZALOHA1\ALOHA\O.C\Core Temp.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LSVP] D:\Documents and Settings\Jan\Plocha\lsvp.exe |Ş…pɱ­Ż…ľŠŔp{ƒzq…|°pR‹}|tv{zr‡p
O4 - HKCU\..\Run: [Start WingMan Profiler] "D:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Zástupce - speedfan.exe.lnk = D:\Documents and Settings\Jan\Plocha\SpeedFan\speedfan.exe
O4 - Global Startup: LaunchU3.exe.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Vytvořit mobilní oblíbenou položku… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - D:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - D:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4FE42FBC-A8C6-4C80-AF62-CF7D532108D9}: NameServer = 212.71.150.16,82.209.19.226
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - D:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: ICQ Service - Unknown owner - D:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 8848 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - D:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - D:\Documents and Settings\Jan\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2011-02-01 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - D:\Program Files\uTorrentBar\tbuTor.dll [2010-12-09 3911776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - D:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-03 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-02-03 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - D:\Program Files\uTorrentBar\tbuTor.dll [2010-12-09 3911776]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - D:\Program Files\ConduitEngine\ConduitEngine.dll [2010-12-09 3911776]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - D:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-02-23 814160]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - D:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-06-21 1018680]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=D:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"36X Raid Configurer"=D:\WINDOWS\system32\xRaidSetup.exe [2007-03-21 1953792]
"GrooveMonitor"=D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"StartCCC"=D:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-11 61440]
"WinampAgent"=D:\Program Files\Winamp\winampa.exe [2007-08-22 39424]
"SunJavaUpdateSched"=D:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"PWRISOVM.EXE"=D:\Program Files\PowerISO\PWRISOVM.EXE [2010-04-12 180224]
"SoundMAXPnP"=D:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"avast"=D:\Program Files\AVAST Software\Avast\avastUI.exe [2011-02-23 3451496]
"Adobe Reader Speed Launcher"=D:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=D:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"H/PC Connection Agent"=D:\Program Files\Microsoft ActiveSync\wcescomm.exe [2006-11-13 1289000]
"uTorrent"=D:\Program Files\uTorrent\uTorrent.exe [2011-03-29 399736]
"Core Temp"=E:\ZALOHA1\ALOHA\O.C\Core Temp.exe [2009-05-29 260624]
"ctfmon.exe"=D:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"LSVP"=D:\Documents and Settings\Jan\Plocha\lsvp.exe |Ş…pɱ­Ż…ľŠŔp{ƒzq…|°pR‹}|tv{zr‡p []
"Start WingMan Profiler"=D:\Program Files\Logitech\Profiler\lwemon.exe [2005-04-18 73728]

D:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
LaunchU3.exe.lnk - D:\WINDOWS\Installer\{D8E363A7-88B7-446D-B2C0-E26CE4DC8E54}\_294823.exe

D:\Documents and Settings\Jan\Nabídka Start\Programy\Po spuštění
Zástupce - speedfan.exe.lnk - D:\Documents and Settings\Jan\Plocha\SpeedFan\speedfan.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
D:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
D:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=D:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Codemasters\GRID\GRID.exe"="D:\Program Files\Codemasters\GRID\GRID.exe:*:Enabled:GRID"
"D:\Program Files\uTorrent\uTorrent.exe"="D:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\Program Files\Microsoft ActiveSync\rapimgr.exe"="D:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"D:\Program Files\Microsoft ActiveSync\wcescomm.exe"="D:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"D:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="D:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"D:\Program Files\Codemasters\DiRT2\dirt2_game.exe"="D:\Program Files\Codemasters\DiRT2\dirt2_game.exe:*:Enabled:DiRT2"
"D:\Program Files\ICQ7.4\ICQ.exe"="D:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"D:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\Czech\setup.exe"="D:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\Czech\setup.exe:*:Disabled:Kaspersky Internet Security 2009 Setup"
"D:\Program Files\Valve\Half-Life 2\hl2.exe"="D:\Program Files\Valve\Half-Life 2\hl2.exe:*:Enabled:HL2_1"
"D:\Program Files\Valve\Half-Life 2 Episode One\hl2.exe"="D:\Program Files\Valve\Half-Life 2 Episode One\hl2.exe:*:Enabled:HL2_2"
"D:\Program Files\Valve\Half-Life 2 Episode Two\hl2.exe"="D:\Program Files\Valve\Half-Life 2 Episode Two\hl2.exe:*:Enabled:HL2_3"
"D:\Program Files\SIERRA\Half-Life\hl.exe"="D:\Program Files\SIERRA\Half-Life\hl.exe:*:Enabled:Half-Life Launcher"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Microsoft ActiveSync\rapimgr.exe"="D:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"D:\Program Files\Microsoft ActiveSync\wcescomm.exe"="D:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"D:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="D:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"D:\Program Files\ICQ7.4\ICQ.exe"="D:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"

======List of files/folders created in the last 1 months======

2011-04-02 07:30:49 ----SHD---- D:\Config.Msi
2011-04-01 21:37:45 ----D---- D:\Program Files\prjMegaTrain
2011-03-31 21:39:10 ----D---- D:\Program Files\mega_train
2011-03-31 21:38:21 ----N---- D:\WINDOWS\Setup1.exe
2011-03-31 21:38:20 ----A---- D:\WINDOWS\ST6UNST.EXE
2011-03-31 19:57:49 ----A---- D:\WINDOWS\system32\SNWValid.dll
2011-03-31 19:57:49 ----A---- D:\WINDOWS\system32\SierraNW.dll
2011-03-31 19:57:45 ----D---- D:\Program Files\Sierra On-Line
2011-03-31 19:57:44 ----D---- D:\Program Files\SIERRA
2011-03-31 19:54:11 ----A---- D:\WINDOWS\SIERRA.INI
2011-03-31 15:08:46 ----D---- D:\Documents and Settings\All Users\Data aplikací\EA Core
2011-03-30 22:42:34 ----D---- D:\Program Files\Valve
2011-03-30 21:26:20 ----D---- D:\Program Files\Common Files\ATI Technologies
2011-03-30 21:26:08 ----D---- D:\Program Files\DIFX
2011-03-30 21:26:05 ----D---- D:\Program Files\USB TV
2011-03-30 19:53:19 ----D---- D:\Documents and Settings\All Users\Data aplikací\Kaspersky Lab Setup Files
2011-03-30 19:50:01 ----D---- D:\Program Files\Traktor Simulátor
2011-03-30 12:15:58 ----D---- D:\Documents and Settings\All Users\Data aplikací\U3
2011-03-29 22:26:23 ----SHD---- D:\RECYCLER
2011-03-29 20:39:26 ----D---- D:\Program Files\MG4
2011-03-29 18:28:12 ----A---- D:\WINDOWS\system32\drivers\AsIO.sys
2011-03-29 18:28:12 ----A---- D:\WINDOWS\system32\AsIO.dll
2011-03-29 18:28:10 ----D---- D:\Program Files\ASUS
2011-03-29 18:28:10 ----A---- D:\WINDOWS\system32\drivers\AsInsHelp64.sys
2011-03-29 18:28:10 ----A---- D:\WINDOWS\system32\drivers\AsInsHelp32.sys
2011-03-28 09:10:36 ----D---- D:\Program Files\podXP
2011-03-28 09:07:30 ----D---- D:\Program Files\Common Files\Adobe
2011-03-28 09:07:30 ----D---- D:\Program Files\Adobe
2011-03-28 09:07:07 ----D---- D:\Documents and Settings\All Users\Data aplikací\Adobe
2011-03-27 20:41:35 ----D---- D:\Documents and Settings\Jan\Data aplikací\PriceGong
2011-03-27 19:23:15 ----A---- D:\ComboFix.txt
2011-03-27 19:15:13 ----D---- D:\WINDOWS\temp
2011-03-27 15:57:38 ----D---- D:\Program Files\ICQ6Toolbar
2011-03-27 15:57:10 ----D---- D:\Documents and Settings\All Users\Data aplikací\ICQ
2011-03-27 15:39:20 ----D---- D:\Documents and Settings\Jan\Data aplikací\ICQ
2011-03-27 15:35:31 ----D---- D:\Program Files\ICQ7.4
2011-03-27 13:01:48 ----A---- D:\WINDOWS\system32\drivers\aswSP.sys
2011-03-27 13:01:48 ----A---- D:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-03-27 13:01:47 ----A---- D:\WINDOWS\system32\drivers\aswRdr.sys
2011-03-27 13:01:46 ----A---- D:\WINDOWS\system32\drivers\aswTdi.sys
2011-03-27 13:01:46 ----A---- D:\WINDOWS\system32\drivers\aswSnx.sys
2011-03-27 13:01:45 ----A---- D:\WINDOWS\system32\drivers\aswmon2.sys
2011-03-27 13:01:45 ----A---- D:\WINDOWS\system32\drivers\aswmon.sys
2011-03-27 13:01:44 ----A---- D:\WINDOWS\system32\drivers\aavmker4.sys
2011-03-27 13:01:34 ----A---- D:\WINDOWS\system32\aswBoot.exe
2011-03-27 13:01:30 ----D---- D:\Program Files\AVAST Software
2011-03-27 13:01:30 ----D---- D:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-03-27 12:23:01 ----A---- D:\WINDOWS\zip.exe
2011-03-27 12:23:01 ----A---- D:\WINDOWS\SWXCACLS.exe
2011-03-27 12:23:01 ----A---- D:\WINDOWS\SWSC.exe
2011-03-27 12:23:01 ----A---- D:\WINDOWS\SWREG.exe
2011-03-27 12:23:01 ----A---- D:\WINDOWS\sed.exe
2011-03-27 12:23:01 ----A---- D:\WINDOWS\PEV.exe
2011-03-27 12:23:01 ----A---- D:\WINDOWS\NIRCMD.exe
2011-03-27 12:23:01 ----A---- D:\WINDOWS\MBR.exe
2011-03-27 12:23:01 ----A---- D:\WINDOWS\grep.exe
2011-03-27 12:22:55 ----D---- D:\WINDOWS\ERDNT
2011-03-27 12:17:12 ----D---- D:\Qoobox
2011-03-27 10:43:26 ----D---- D:\rsit
2011-03-27 10:43:26 ----D---- D:\Program Files\trend micro
2011-03-27 00:14:29 ----A---- D:\WINDOWS\ntbtlog.txt
2011-03-26 21:31:03 ----HD---- D:\WINDOWS\system32\GroupPolicy
2011-03-26 00:50:49 ----D---- D:\WINDOWS\system32\NtmsData
2011-03-26 00:26:00 ----D---- D:\WINDOWS\system32\xlive
2011-03-26 00:26:00 ----D---- D:\Program Files\Microsoft Games for Windows - LIVE
2011-03-25 20:40:06 ----D---- D:\Program Files\Free YouTube Downloader Converter
2011-03-24 23:32:26 ----D---- D:\Documents and Settings\All Users\Data aplikací\Electronic Arts
2011-03-24 22:21:11 ----D---- D:\Program Files\7-Zip
2011-03-24 21:28:19 ----A---- D:\WINDOWS\system32\XAudio2_6.dll
2011-03-24 21:28:19 ----A---- D:\WINDOWS\system32\XAPOFX1_4.dll
2011-03-24 21:28:18 ----A---- D:\WINDOWS\system32\xactengine3_6.dll
2011-03-24 21:28:17 ----A---- D:\WINDOWS\system32\X3DAudio1_7.dll
2011-03-24 21:28:16 ----A---- D:\WINDOWS\system32\XAudio2_5.dll
2011-03-24 21:28:15 ----A---- D:\WINDOWS\system32\xactengine3_5.dll
2011-03-24 21:28:14 ----A---- D:\WINDOWS\system32\D3DCompiler_42.dll
2011-03-24 21:28:13 ----A---- D:\WINDOWS\system32\d3dcsx_42.dll
2011-03-24 21:28:12 ----A---- D:\WINDOWS\system32\d3dx11_42.dll
2011-03-24 21:28:11 ----A---- D:\WINDOWS\system32\d3dx10_42.dll
2011-03-24 21:28:10 ----A---- D:\WINDOWS\system32\D3DX9_42.dll
2011-03-24 07:57:59 ----HDC---- D:\WINDOWS\$NtUninstallKB2524375$
2011-03-23 23:09:58 ----D---- D:\WINDOWS\system32\appmgmt
2011-03-23 17:55:37 ----A---- D:\WINDOWS\system32\mkl_vml_p4.dll
2011-03-23 17:55:36 ----A---- D:\WINDOWS\system32\mkl_vml_p3.dll
2011-03-23 17:55:36 ----A---- D:\WINDOWS\system32\mkl_vml_def.dll
2011-03-23 17:55:35 ----A---- D:\WINDOWS\system32\mkl_p4.dll
2011-03-23 17:55:34 ----A---- D:\WINDOWS\system32\mkl_p3.dll
2011-03-23 17:55:33 ----A---- D:\WINDOWS\system32\mkl_lapack64.dll
2011-03-23 17:55:31 ----A---- D:\WINDOWS\system32\mkl_lapack32.dll
2011-03-23 17:55:29 ----A---- D:\WINDOWS\system32\mkl_def.dll
2011-03-23 17:55:29 ----A---- D:\WINDOWS\system32\libguide40.dll
2011-03-23 17:55:28 ----A---- D:\WINDOWS\system32\rapture3d_oal.dll
2011-03-23 17:55:25 ----D---- D:\Program Files\BRS
2011-03-23 15:18:35 ----D---- D:\Program Files\Feneris
2011-03-23 12:59:07 ----D---- D:\Program Files\Micro DVD Player
2011-03-23 00:37:45 ----D---- D:\Program Files\Earth 3D Screensaver
2011-03-22 23:50:19 ----D---- D:\Program Files\3Planesoft Screensaver Manager
2011-03-22 23:50:19 ----D---- D:\Documents and Settings\All Users\Data aplikací\3Planesoft
2011-03-22 23:50:00 ----D---- D:\Program Files\The One Ring 3D Screensaver
2011-03-22 23:45:39 ----A---- D:\WINDOWS\LOTR_Orcs.exe
2011-03-22 23:42:14 ----A---- D:\WINDOWS\LOTR Dark Rider.exe
2011-03-22 23:40:11 ----A---- D:\WINDOWS\mickey32.dll
2011-03-22 23:40:11 ----A---- D:\WINDOWS\LOTR Eye of Sauron.exe
2011-03-22 19:08:00 ----D---- D:\Program Files\Microsoft Games
2011-03-22 15:49:37 ----HD---- D:\WINDOWS\PIF
2011-03-22 10:28:15 ----A---- D:\WINDOWS\Q3version.ini
2011-03-22 10:28:08 ----D---- D:\Program Files\Quake III Arena
2011-03-20 20:10:51 ----RA---- D:\WINDOWS\system32\drivers\senfilt.sys
2011-03-20 20:10:51 ----RA---- D:\WINDOWS\system32\drivers\aeaudio.sys
2011-03-20 20:10:50 ----RA---- D:\WINDOWS\system32\drivers\ADIHdAud.sys
2011-03-20 20:10:37 ----N---- D:\WINDOWS\system32\wdmioctl.dll
2011-03-20 20:10:36 ----N---- D:\WINDOWS\system32\SMMedia.dll
2011-03-20 20:10:32 ----N---- D:\WINDOWS\system32\DSndUp.exe
2011-03-20 20:10:32 ----D---- D:\Program Files\Analog Devices
2011-03-20 20:10:31 ----N---- D:\WINDOWS\system32\CleanUp.exe
2011-03-20 20:10:01 ----A---- D:\WINDOWS\Ascd_tmp.ini
2011-03-20 19:52:41 ----D---- D:\swsetup
2011-03-20 19:38:17 ----D---- D:\Documents and Settings\All Users\Data aplikací\PC Drivers HeadQuarters
2011-03-20 19:05:59 ----A---- D:\WINDOWS\AS_Debug.txt
2011-03-20 18:18:16 ----D---- D:\Documents and Settings\Jan\Data aplikací\InstallShield
2011-03-20 10:48:44 ----D---- D:\Program Files\Ubisoft
2011-03-20 09:35:41 ----A---- D:\WINDOWS\Qiii.INI
2011-03-20 09:30:39 ----A---- D:\WINDOWS\NeroDigital.ini
2011-03-20 08:54:46 ----D---- D:\Program Files\MSXML 4.0
2011-03-19 19:53:26 ----A---- D:\WINDOWS\system32\MsiExec.exe.log
2011-03-19 19:47:35 ----D---- D:\Documents and Settings\Jan\Data aplikací\U3
2011-03-19 19:08:43 ----D---- D:\Documents and Settings\Jan\Data aplikací\F-Secure
2011-03-16 20:28:21 ----D---- D:\Program Files\18 Wheels of Steel Haulin
2011-03-16 16:17:46 ----HDC---- D:\WINDOWS\$NtUninstallKB971029$
2011-03-13 14:52:44 ----A---- D:\WINDOWS\treeskp.sys
2011-03-12 14:16:01 ----A---- D:\WINDOWS\IE4 Error Log.txt
2011-03-09 21:05:05 ----HDC---- D:\WINDOWS\$NtUninstallKB2479943$
2011-03-09 21:03:50 ----HDC---- D:\WINDOWS\$NtUninstallKB2481109$
2011-03-09 16:17:19 ----D---- D:\Documents and Settings\All Users\Data aplikací\ACD Systems
2011-03-09 16:17:13 ----D---- D:\Program Files\Common Files\ACD Systems
2011-03-09 16:17:13 ----D---- D:\Program Files\ACD Systems
2011-03-06 14:21:45 ----A---- D:\WINDOWS\doom3.ini
2011-03-06 14:20:52 ----D---- D:\Program Files\Doom 3
2011-03-06 10:09:02 ----A---- D:\WINDOWS\system32\D3DX9_41.dll
2011-03-06 10:09:02 ----A---- D:\WINDOWS\system32\d3dx10_41.dll
2011-03-06 10:09:02 ----A---- D:\WINDOWS\system32\D3DCompiler_41.dll
2011-03-06 10:09:01 ----A---- D:\WINDOWS\system32\XAudio2_4.dll
2011-03-06 10:09:01 ----A---- D:\WINDOWS\system32\XAPOFX1_3.dll
2011-03-06 10:09:01 ----A---- D:\WINDOWS\system32\xactengine3_4.dll
2011-03-06 10:09:01 ----A---- D:\WINDOWS\system32\X3DAudio1_6.dll
2011-03-06 10:09:00 ----A---- D:\WINDOWS\system32\d3dx10_40.dll
2011-03-06 10:09:00 ----A---- D:\WINDOWS\system32\D3DCompiler_40.dll
2011-03-06 10:08:59 ----A---- D:\WINDOWS\system32\XAudio2_3.dll
2011-03-06 10:08:59 ----A---- D:\WINDOWS\system32\XAPOFX1_2.dll
2011-03-06 10:08:58 ----A---- D:\WINDOWS\system32\xactengine3_3.dll
2011-03-06 10:08:58 ----A---- D:\WINDOWS\system32\X3DAudio1_5.dll
2011-03-06 10:08:57 ----A---- D:\WINDOWS\system32\XAudio2_2.dll
2011-03-06 10:08:57 ----A---- D:\WINDOWS\system32\XAPOFX1_1.dll
2011-03-06 10:08:57 ----A---- D:\WINDOWS\system32\xactengine3_2.dll
2011-03-06 10:08:56 ----A---- D:\WINDOWS\system32\d3dx10_39.dll
2011-03-06 10:08:56 ----A---- D:\WINDOWS\system32\D3DCompiler_39.dll
2011-03-06 10:08:55 ----A---- D:\WINDOWS\system32\XAudio2_1.dll
2011-03-06 10:08:55 ----A---- D:\WINDOWS\system32\XAPOFX1_0.dll
2011-03-06 10:08:55 ----A---- D:\WINDOWS\system32\D3DX9_39.dll
2011-03-06 10:08:54 ----A---- D:\WINDOWS\system32\xactengine3_1.dll
2011-03-06 10:08:54 ----A---- D:\WINDOWS\system32\X3DAudio1_4.dll
2011-03-06 10:08:53 ----A---- D:\WINDOWS\system32\D3DX9_38.dll
2011-03-06 10:08:53 ----A---- D:\WINDOWS\system32\d3dx10_38.dll
2011-03-06 10:08:53 ----A---- D:\WINDOWS\system32\D3DCompiler_38.dll
2011-03-06 09:33:24 ----D---- D:\WINDOWS\ASTULogTemp
2011-03-05 18:25:05 ----D---- D:\Program Files\City Interactive

======List of files/folders modified in the last 1 months======

2011-04-02 22:54:44 ----D---- D:\Documents and Settings\Jan\Data aplikací\uTorrent
2011-04-02 22:48:26 ----D---- D:\WINDOWS
2011-04-02 22:47:13 ----D---- D:\WINDOWS\Prefetch
2011-04-02 21:46:58 ----D---- D:\WINDOWS\system32\config
2011-04-02 21:44:20 ----D---- D:\WINDOWS\system32\wbem
2011-04-02 21:44:12 ----D---- D:\WINDOWS\Registration
2011-04-02 21:43:45 ----D---- D:\WINDOWS\system32\DirectX
2011-04-02 21:40:34 ----SHD---- D:\WINDOWS\Installer
2011-04-02 21:35:39 ----D---- D:\WINDOWS\system32
2011-04-02 21:08:14 ----D---- D:\Program Files\Electronic Arts
2011-04-02 20:43:04 ----A---- D:\WINDOWS\SchedLgU.Txt
2011-04-02 20:41:45 ----D---- D:\WINDOWS\system32\CatRoot2
2011-04-02 19:14:32 ----HD---- D:\WINDOWS\inf
2011-04-01 21:37:45 ----RD---- D:\Program Files
2011-04-01 20:13:05 ----A---- D:\WINDOWS\RTacDbg.txt
2011-04-01 12:57:38 ----D---- D:\WINDOWS\system32\drivers
2011-04-01 12:57:34 ----D---- D:\WINDOWS\system32\ReinstallBackups
2011-04-01 12:57:21 ----RSHDC---- D:\WINDOWS\system32\dllcache
2011-04-01 12:56:32 ----HD---- D:\Program Files\InstallShield Installation Information
2011-04-01 12:31:10 ----D---- D:\Program Files\rFactor
2011-03-31 13:47:45 ----SD---- D:\Documents and Settings\Jan\Data aplikací\Microsoft
2011-03-31 13:47:45 ----D---- D:\Documents and Settings\Jan\Data aplikací\Adobe
2011-03-30 21:26:44 ----D---- D:\WINDOWS\system32\CatRoot
2011-03-30 21:26:08 ----DC---- D:\WINDOWS\system32\DRVSTORE
2011-03-28 09:07:30 ----D---- D:\Program Files\Common Files
2011-03-27 20:41:26 ----SD---- D:\WINDOWS\Downloaded Program Files
2011-03-27 19:22:37 ----SD---- D:\WINDOWS\Tasks
2011-03-27 19:19:35 ----A---- D:\WINDOWS\system.ini
2011-03-27 19:17:13 ----D---- D:\WINDOWS\system32\drivers\etc
2011-03-27 19:12:01 ----D---- D:\WINDOWS\AppPatch
2011-03-27 19:08:25 ----A---- D:\WINDOWS\system32\PerfStringBackup.INI
2011-03-27 19:03:11 ----D---- D:\Program Files\F-Secure
2011-03-27 15:28:11 ----D---- D:\Program Files\QIP 2010
2011-03-27 13:01:41 ----D---- D:\WINDOWS\WinSxS
2011-03-26 01:13:41 ----D---- D:\Documents and Settings\All Users\Data aplikací\Codemasters
2011-03-26 00:36:09 ----A---- D:\WINDOWS\system32\wrap_oal.dll
2011-03-26 00:36:09 ----A---- D:\WINDOWS\system32\OpenAL32.dll
2011-03-26 00:35:54 ----RSD---- D:\WINDOWS\assembly
2011-03-26 00:26:00 ----SD---- D:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-03-25 23:51:17 ----D---- D:\Program Files\Codemasters
2011-03-24 12:55:25 ----D---- D:\Program Files\Mozilla Firefox
2011-03-24 12:50:29 ----D---- D:\WINDOWS\Minidump
2011-03-24 07:57:56 ----HD---- D:\WINDOWS\$hf_mig$
2011-03-23 23:11:29 ----D---- D:\Program Files\Nero
2011-03-23 23:09:29 ----D---- D:\Documents and Settings\All Users\Data aplikací\Nero
2011-03-22 19:18:08 ----RSD---- D:\WINDOWS\Fonts
2011-03-20 20:10:56 ----D---- D:\WINDOWS\system
2011-03-20 19:25:40 ----D---- D:\Program Files\Microsoft ActiveSync
2011-03-19 19:53:48 ----D---- D:\Documents and Settings\Jan\Data aplikací\Nero
2011-03-19 19:52:01 ----D---- D:\WINDOWS\Cursors
2011-03-16 16:17:55 ----A---- D:\WINDOWS\imsins.BAK
2011-03-13 15:22:13 ----D---- D:\Program Files\SpeedFan
2011-03-09 21:04:05 ----D---- D:\WINDOWS\Debug
2011-03-09 21:04:02 ----A---- D:\WINDOWS\system32\MRT.exe
2011-03-05 15:40:35 ----D---- D:\Documents and Settings\Jan\Data aplikací\Dream Aquarium

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; D:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 JGOGO;JMicron Hot-Plug Driver; D:\WINDOWS\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; D:\WINDOWS\system32\DRIVERS\jraid.sys [2007-03-24 46208]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; D:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; D:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 speedfan;speedfan; D:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R1 Aavmker4;avast! Asynchronous Virus Monitor; D:\WINDOWS\system32\drivers\Aavmker4.sys [2011-02-23 30680]
R1 AsIO;AsIO; D:\WINDOWS\system32\drivers\AsIO.sys [2009-08-04 11296]
R1 aswRdr;aswRdr; D:\WINDOWS\system32\drivers\aswRdr.sys [2011-02-23 25432]
R1 aswSnx;aswSnx; D:\WINDOWS\system32\drivers\aswSnx.sys [2011-02-23 371544]
R1 aswSP;aswSP; D:\WINDOWS\system32\drivers\aswSP.sys [2011-02-23 301528]
R1 aswTdi;avast! Network Shield Support; D:\WINDOWS\system32\drivers\aswTdi.sys [2011-02-23 49240]
R1 intelppm;Řadič procesoru Intel; D:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ISODrive;ISO DVD/CD-ROM Device Driver; \??\D:\Program Files\UltraISO\drivers\ISODrive.sys []
R1 kbdhid;Ovladač klávesnice standardu HID; D:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SCDEmu;SCDEmu; D:\WINDOWS\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.5.0; D:\WINDOWS\system32\DRIVERS\AegisP.sys [2011-02-08 21035]
R2 aswFsBlk;aswFsBlk; D:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-02-23 19544]
R2 aswMon2;avast! Standard Shield Support; D:\WINDOWS\system32\drivers\aswMon2.sys [2011-02-23 102232]
R2 cpuz135;cpuz135; \??\D:\WINDOWS\system32\drivers\cpuz135_x32.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; D:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-01-16 293888]
R3 AEAudio;AE Audio Service; D:\WINDOWS\system32\drivers\AEAudio.sys [2006-08-07 93952]
R3 ALSysIO;ALSysIO; \??\D:\DOCUME~1\Jan\LOCALS~1\Temp\ALSysIO.sys []
R3 Arp1394;Protokol 1394 ARP Client; D:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ati2mtag;ati2mtag; D:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; D:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; D:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; D:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; D:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; D:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter; D:\WINDOWS\system32\DRIVERS\RTL8187.sys [2006-06-16 176128]
R3 SenFiltService;SenFilt Service; D:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; D:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; D:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; D:\WINDOWS\system32\drivers\WmBEnum.sys [2005-04-12 10144]
R3 WmFilter;Logitech Gaming HID Filter Driver; D:\WINDOWS\system32\drivers\WmFilter.sys [2005-04-12 22240]
R3 WmHidLo;Logitech Gaming USB Filter Driver; D:\WINDOWS\system32\drivers\WmHidLo.sys [2005-04-12 17632]
R3 WmVirHid;Logitech Virtual Hid Device Driver; D:\WINDOWS\system32\drivers\WmVirHid.sys [2005-04-12 5600]
R3 WmXlCore;Logitech WingMan Translation Layer Driver; D:\WINDOWS\system32\drivers\WmXlCore.sys [2005-04-12 45504]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; D:\WINDOWS\system32\DRIVERS\yk51x86.sys [2007-08-15 265856]
S3 catchme;catchme; \??\D:\ComboFix\catchme.sys []
S3 usb_rndisx;Adaptér USB RNDIS; D:\WINDOWS\system32\DRIVERS\usb8023x.sys [2008-04-13 12800]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; D:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; D:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; D:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-02-23 42184]
R2 ICQ Service;ICQ Service; D:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-06-21 246584]
R2 JavaQuickStarterService;Java Quick Starter; D:\Program Files\Java\jre6\bin\jqs.exe [2011-02-02 153376]
R2 MDM;Machine Debug Manager; D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 UMWdf;Windows User Mode Driver Framework; D:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 ATI Smart;ATI Smart; D:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S3 aspnet_state;ASP.NET State Service; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; D:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; d:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; d:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; D:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; D:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; d:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Rudy]

Poprosím o log z ComboFix z 27.3.2011. Pokud uděláte log RSIT po skenu CF můžete si být jist, že bude čistý. Log by měl být uložen v C:\combofix.txt .

[00Inferno00]

log z CF/27.03.11 nemam

[Rudy]

V tom případě proveďte nový ComboFix a dejte log.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

[00Inferno00]

aktuální log

ComboFix 11-04-02.03 - Jan 03.04.2011 13:45:34.3.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3327.2917 [GMT 2:00]
Spuštěný z: d:\documents and settings\Jan\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
VAROVÁNÍ - NA TOMTO POČÍTAČI NENÍ NAINSTALOVÁNA KONZOLA PRO ZOTAVENÍ !!
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
d:\documents and settings\Jan\Data aplikací\PriceGong
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\1.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\a.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\b.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\c.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\d.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\e.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\f.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\g.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\h.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\i.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\J.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\k.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\l.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\m.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\mru.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\n.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\o.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\p.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\q.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\r.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\s.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\t.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\u.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\v.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\w.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\x.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\y.xml
d:\documents and settings\Jan\Data aplikací\PriceGong\Data\z.xml
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-03 do 2011-04-03 )))))))))))))))))))))))))))))))
.
.
2011-04-03 09:28 . 2011-04-03 09:28 -------- d-----w- d:\documents and settings\Jan\Data aplikací\TuneUp Software
2011-04-03 09:28 . 2011-04-03 09:28 306432 ----a-w- d:\windows\system32\TuneUpDefragService.exe
2011-04-03 09:28 . 2007-12-20 08:41 29440 ----a-w- d:\windows\system32\uxtuneup.dll
2011-04-03 09:28 . 2011-04-03 09:28 -------- d-----w- d:\documents and settings\All Users\Data aplikací\TuneUp Software
2011-04-03 09:28 . 2011-04-03 09:28 -------- d-----w- d:\program files\TuneUp Utilities 2008
2011-04-03 09:28 . 2011-04-03 09:28 -------- d-----w- d:\program files\Common Files\Wise Installation Wizard
2011-04-02 19:44 . 2011-04-02 19:44 -------- d-----w- d:\windows\system32\wbem\Repository
2011-04-01 19:37 . 2011-04-01 19:38 -------- d-----w- d:\program files\prjMegaTrain
2011-03-31 19:39 . 2011-03-31 19:39 -------- d-----w- d:\program files\mega_train
2011-03-31 19:38 . 2011-04-01 19:37 286720 ------w- d:\windows\Setup1.exe
2011-03-31 19:38 . 2011-04-01 19:37 73216 ----a-w- d:\windows\ST6UNST.EXE
2011-03-31 17:57 . 1998-10-30 20:21 231936 ----a-w- d:\windows\system32\SNWValid.dll
2011-03-31 17:57 . 1998-10-30 20:21 1022976 ----a-w- d:\windows\system32\SierraNW.dll
2011-03-31 17:57 . 2011-03-31 17:57 -------- d-----w- d:\program files\Sierra On-Line
2011-03-31 17:57 . 2011-03-31 17:59 -------- d-----w- d:\program files\SIERRA
2011-03-31 17:52 . 2011-03-31 17:52 -------- d-----w- d:\documents and settings\Jan\WINDOWS
2011-03-31 13:08 . 2011-03-31 13:08 -------- d-----w- d:\documents and settings\All Users\Data aplikací\EA Core
2011-03-31 11:47 . 2011-03-31 11:47 -------- d-----w- d:\documents and settings\Jan\Local Settings\Data aplikací\Adobe
2011-03-30 20:42 . 2011-03-30 20:58 -------- d-----w- d:\program files\Valve
2011-03-30 19:26 . 2011-03-30 19:26 -------- d-----w- d:\program files\Common Files\ATI Technologies
2011-03-30 19:26 . 2011-03-30 19:26 -------- d-----w- d:\program files\DIFX
2011-03-30 19:26 . 2011-03-30 19:26 -------- d-----w- d:\program files\USB TV
2011-03-30 17:53 . 2011-03-30 17:53 -------- d-----w- d:\documents and settings\All Users\Data aplikací\Kaspersky Lab Setup Files
2011-03-30 17:50 . 2011-03-30 17:50 -------- d-----w- d:\program files\Traktor Simulátor
2011-03-30 10:15 . 2011-03-30 10:15 -------- d-----w- d:\documents and settings\All Users\Data aplikací\U3
2011-03-29 18:39 . 2011-03-29 18:42 -------- d-----w- d:\program files\MG4
2011-03-29 16:28 . 2009-09-30 09:33 24576 ----a-w- d:\windows\system32\AsIO.dll
2011-03-29 16:28 . 2009-08-04 08:28 11296 ----a-w- d:\windows\system32\drivers\AsIO.sys
2011-03-29 16:28 . 2011-03-29 16:28 -------- d-----w- d:\program files\ASUS
2011-03-29 16:28 . 2008-01-04 11:34 11832 ----a-w- d:\windows\system32\drivers\AsInsHelp64.sys
2011-03-29 16:28 . 2008-01-04 11:34 10216 ----a-w- d:\windows\system32\drivers\AsInsHelp32.sys
2011-03-28 07:10 . 2011-03-28 07:16 -------- d-----w- d:\program files\podXP
2011-03-28 07:07 . 2011-03-28 07:07 -------- d-----w- d:\program files\Common Files\Adobe
2011-03-27 13:58 . 2011-03-27 13:59 -------- d-----w- d:\documents and settings\Jan\Local Settings\Data aplikací\AskToolbar
2011-03-27 13:57 . 2011-03-27 13:57 -------- d-----w- d:\program files\ICQ6Toolbar
2011-03-27 13:57 . 2011-03-27 13:57 -------- d-----w- d:\documents and settings\All Users\Data aplikací\ICQ
2011-03-27 13:39 . 2011-04-02 16:13 -------- d-----w- d:\documents and settings\Jan\Data aplikací\ICQ
2011-03-27 13:35 . 2011-03-27 14:01 -------- d-----w- d:\program files\ICQ7.4
2011-03-27 11:01 . 2011-02-23 13:56 301528 ----a-w- d:\windows\system32\drivers\aswSP.sys
2011-03-27 11:01 . 2011-02-23 13:54 19544 ----a-w- d:\windows\system32\drivers\aswFsBlk.sys
2011-03-27 11:01 . 2011-02-23 13:55 25432 ----a-w- d:\windows\system32\drivers\aswRdr.sys
2011-03-27 11:01 . 2011-02-23 13:56 371544 ----a-w- d:\windows\system32\drivers\aswSnx.sys
2011-03-27 11:01 . 2011-02-23 13:55 49240 ----a-w- d:\windows\system32\drivers\aswTdi.sys
2011-03-27 11:01 . 2011-02-23 13:55 102232 ----a-w- d:\windows\system32\drivers\aswmon2.sys
2011-03-27 11:01 . 2011-02-23 13:55 96344 ----a-w- d:\windows\system32\drivers\aswmon.sys
2011-03-27 11:01 . 2011-02-23 13:54 30680 ----a-w- d:\windows\system32\drivers\aavmker4.sys
2011-03-27 11:01 . 2011-02-23 14:04 40648 ----a-w- d:\windows\avastSS.scr
2011-03-27 11:01 . 2011-02-23 14:04 190016 ----a-w- d:\windows\system32\aswBoot.exe
2011-03-27 11:01 . 2011-03-27 11:01 -------- d-----w- d:\program files\AVAST Software
2011-03-27 11:01 . 2011-03-27 11:01 -------- d-----w- d:\documents and settings\All Users\Data aplikací\AVAST Software
2011-03-27 08:43 . 2011-04-02 21:00 -------- d-----w- d:\program files\trend micro
2011-03-27 08:43 . 2011-03-27 08:43 -------- d-----w- D:\rsit
2011-03-26 19:31 . 2011-03-26 19:31 -------- d--h--w- d:\windows\system32\GroupPolicy
2011-03-25 22:50 . 2011-03-25 23:02 -------- d-----w- d:\windows\system32\NtmsData
2011-03-25 22:26 . 2011-03-25 22:26 -------- d-----w- d:\program files\Microsoft Games for Windows - LIVE
2011-03-25 22:26 . 2011-03-25 22:26 -------- d-----w- d:\windows\system32\xlive
2011-03-25 18:40 . 2011-03-28 20:29 -------- d-----w- d:\program files\Free YouTube Downloader Converter
2011-03-24 21:32 . 2011-03-31 13:08 -------- d-----w- d:\documents and settings\All Users\Data aplikací\Electronic Arts
2011-03-24 20:21 . 2011-03-24 20:21 -------- d-----w- d:\program files\7-Zip
2011-03-24 19:28 . 2010-02-04 09:01 74072 ----a-w- d:\windows\system32\XAPOFX1_4.dll
2011-03-24 19:28 . 2010-02-04 09:01 528216 ----a-w- d:\windows\system32\XAudio2_6.dll
2011-03-24 19:28 . 2010-02-04 09:01 238936 ----a-w- d:\windows\system32\xactengine3_6.dll
2011-03-24 19:28 . 2010-02-04 09:01 22360 ----a-w- d:\windows\system32\X3DAudio1_7.dll
2011-03-24 19:28 . 2009-09-04 16:44 515416 ----a-w- d:\windows\system32\XAudio2_5.dll
2011-03-24 19:28 . 2009-09-04 16:44 238936 ----a-w- d:\windows\system32\xactengine3_5.dll
2011-03-24 19:28 . 2009-09-04 16:29 1974616 ----a-w- d:\windows\system32\D3DCompiler_42.dll
2011-03-24 19:28 . 2009-09-04 16:29 5501792 ----a-w- d:\windows\system32\d3dcsx_42.dll
2011-03-24 19:28 . 2009-09-04 16:29 235344 ----a-w- d:\windows\system32\d3dx11_42.dll
2011-03-24 19:28 . 2009-09-04 16:29 453456 ----a-w- d:\windows\system32\d3dx10_42.dll
2011-03-24 19:28 . 2009-09-04 16:29 1892184 ----a-w- d:\windows\system32\D3DX9_42.dll
2011-03-23 15:55 . 2009-07-13 18:04 839680 ----a-w- d:\windows\system32\mkl_vml_p4.dll
2011-03-23 15:55 . 2009-07-13 18:04 532480 ----a-w- d:\windows\system32\mkl_vml_p3.dll
2011-03-23 15:55 . 2009-07-13 18:04 512000 ----a-w- d:\windows\system32\mkl_vml_def.dll
2011-03-23 15:55 . 2009-07-13 18:04 3485696 ----a-w- d:\windows\system32\mkl_p4.dll
2011-03-23 15:55 . 2009-07-13 18:04 2793472 ----a-w- d:\windows\system32\mkl_p3.dll
2011-03-23 15:55 . 2009-07-13 18:04 2125824 ----a-w- d:\windows\system32\mkl_lapack64.dll
2011-03-23 15:55 . 2009-07-13 18:04 2174976 ----a-w- d:\windows\system32\mkl_lapack32.dll
2011-03-23 15:55 . 2009-07-13 18:04 2441216 ----a-w- d:\windows\system32\mkl_def.dll
2011-03-23 15:55 . 2009-07-13 18:04 184320 ----a-w- d:\windows\system32\libguide40.dll
2011-03-23 15:55 . 2009-10-16 10:19 872448 ----a-w- d:\windows\system32\rapture3d_oal.dll
2011-03-23 15:55 . 2011-03-25 22:36 -------- d-----w- d:\program files\BRS
2011-03-23 13:18 . 2011-03-23 13:18 -------- d-----w- d:\program files\Feneris
2011-03-23 10:59 . 2011-03-23 10:59 -------- d-----w- d:\program files\Micro DVD Player
2011-03-22 22:37 . 2010-12-08 14:19 850944 ----a-w- d:\windows\system32\Earth_3D_Screensaver.scr
2011-03-22 22:37 . 2011-03-22 22:37 -------- d-----w- d:\program files\Earth 3D Screensaver
2011-03-22 21:50 . 2011-01-17 18:16 688640 ----a-w- d:\windows\system32\3Planesoft_Screensaver_Manager.scr
2011-03-22 21:50 . 2011-03-22 22:38 -------- d-----w- d:\program files\3Planesoft Screensaver Manager
2011-03-22 21:50 . 2011-03-22 22:38 -------- d-----w- d:\documents and settings\All Users\Data aplikací\3Planesoft
2011-03-22 21:50 . 2010-06-02 13:05 462848 ----a-w- d:\windows\system32\The_One_Ring_3D_Screensaver.scr
2011-03-22 21:50 . 2011-03-22 21:50 -------- d-----w- d:\program files\The One Ring 3D Screensaver
2011-03-22 21:45 . 2011-03-22 21:45 851999 ----a-w- d:\windows\LOTR_Orcs.exe
2011-03-22 21:45 . 2011-03-22 21:45 386848 ----a-w- d:\windows\LOTR_Orcs.scr
2011-03-22 21:42 . 2011-03-22 21:42 649069 ----a-w- d:\windows\LOTR Dark Rider.exe
2011-03-22 21:42 . 2011-03-22 21:42 273304 ----a-w- d:\windows\LOTR Dark Rider.scr
2011-03-22 21:40 . 2011-03-22 21:45 30208 ----a-w- d:\windows\mickey32.dll
2011-03-22 21:40 . 2011-03-22 21:40 514266 ----a-w- d:\windows\LOTR Eye of Sauron.exe
2011-03-22 21:40 . 2011-03-22 21:40 273304 ----a-w- d:\windows\LOTR Eye of Sauron.scr
2011-03-22 17:08 . 2011-03-22 17:08 -------- d-----w- d:\program files\Microsoft Games
2011-03-22 13:49 . 2011-03-22 13:49 -------- d--h--w- d:\windows\PIF
2011-03-22 08:28 . 2011-04-01 12:26 -------- d-----w- d:\program files\Quake III Arena
2011-03-20 18:10 . 2001-09-19 04:47 765952 ----a-r- d:\windows\system\crlds3d.dll
2011-03-20 18:10 . 2006-08-06 22:57 93952 ----a-r- d:\windows\system32\drivers\aeaudio.sys
2011-03-20 18:10 . 2006-03-17 09:18 392960 ----a-r- d:\windows\system32\drivers\senfilt.sys
2011-03-20 18:10 . 2007-01-16 01:09 293888 ----a-r- d:\windows\system32\drivers\ADIHdAud.sys
2011-03-20 18:10 . 2005-05-04 07:20 53248 ------w- d:\windows\system32\wdmioctl.dll
2011-03-20 18:10 . 2001-09-11 13:20 1285632 ------w- d:\windows\system32\SMMedia.dll
2011-03-20 18:10 . 2011-03-20 18:10 -------- d-----w- d:\program files\Analog Devices
2011-03-20 18:10 . 2006-07-10 13:42 49152 ------w- d:\windows\system32\DSndUp.exe
2011-03-20 18:10 . 2002-04-17 13:05 45056 ------w- d:\windows\system32\CleanUp.exe
2011-03-20 17:52 . 2011-03-20 17:52 -------- d-----w- D:\swsetup
2011-03-20 17:38 . 2011-03-20 17:38 -------- d-----w- d:\documents and settings\All Users\Data aplikací\PC Drivers HeadQuarters
2011-03-20 16:18 . 2011-03-20 16:18 -------- d-----w- d:\documents and settings\Jan\Data aplikací\InstallShield
2011-03-20 08:48 . 2011-03-20 08:48 -------- d-----w- d:\program files\Ubisoft
2011-03-20 06:54 . 2011-03-20 06:54 -------- d-----w- d:\program files\MSXML 4.0
2011-03-19 17:55 . 2011-03-19 17:56 -------- d-----w- d:\documents and settings\Jan\Local Settings\Data aplikací\Ahead
2011-03-19 17:55 . 2011-03-19 17:55 -------- d-----w- d:\documents and settings\Jan\Local Settings\Data aplikací\Nero
2011-03-19 17:47 . 2011-03-30 09:56 -------- d-----w- d:\documents and settings\Jan\Data aplikací\U3
2011-03-19 17:08 . 2011-03-19 17:08 -------- d-----w- d:\documents and settings\Jan\Data aplikací\F-Secure
2011-03-16 18:28 . 2011-03-16 18:28 -------- d-----w- d:\program files\18 Wheels of Steel Haulin
2011-03-13 12:52 . 2011-03-13 12:52 7 ----a-w- d:\windows\treeskp.sys
2011-03-13 12:52 . 2011-03-13 12:52 7 ----a-w- d:\windows\sbacknt.bin
2011-03-12 13:46 . 2004-07-15 23:19 266240 ----a-w- d:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll
2011-03-12 13:46 . 2004-07-15 23:18 172032 ----a-w- d:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll
2011-03-12 13:46 . 2004-07-15 23:20 733184 ----a-w- d:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll
2011-03-12 13:46 . 2004-07-15 23:20 69715 ----a-w- d:\program files\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-03-26 19:28 . 2004-08-03 21:14 361600 ----a-w- d:\windows\system32\drivers\tcpip.sys
2011-03-25 22:36 . 2011-02-20 07:37 445016 ----a-w- d:\windows\system32\wrap_oal.dll
2011-03-25 22:36 . 2011-02-20 07:37 109144 ----a-w- d:\windows\system32\OpenAL32.dll
2011-02-19 12:18 . 2011-02-19 12:18 98304 ----a-w- d:\windows\system32CmdLineExt.dll
2011-02-09 13:53 . 2004-08-17 13:49 270848 ----a-w- d:\windows\system32\sbe.dll
2011-02-09 13:53 . 2004-08-17 13:49 186880 ----a-w- d:\windows\system32\encdec.dll
2011-02-08 17:45 . 2011-02-08 17:45 21035 ----a-w- d:\windows\system32\drivers\AegisP.sys
2011-02-02 20:40 . 2011-02-17 15:13 472808 ----a-w- d:\windows\system32\deployJava1.dll
2011-02-02 18:19 . 2011-02-17 15:13 73728 ----a-w- d:\windows\system32\javacpl.cpl
2011-02-02 07:58 . 2011-02-08 16:20 2067456 ----a-w- d:\windows\system32\mstscax.dll
2011-02-01 09:24 . 2011-02-13 09:22 141184 ----a-w- d:\documents and settings\Jan\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
2011-01-27 11:57 . 2011-02-08 16:20 677888 ----a-w- d:\windows\system32\mstsc.exe
2011-01-24 12:29 . 2011-02-13 11:26 1284712 ----a-w- d:\windows\RtlExUpd.dll
2011-01-21 14:44 . 2004-08-17 13:49 440320 ----a-w- d:\windows\system32\shimgvw.dll
2011-01-19 16:47 . 2011-02-19 18:32 22504 ----a-w- d:\windows\system32\drivers\cpuz135_x32.sys
2011-01-07 14:09 . 2004-08-17 13:48 290048 ----a-w- d:\windows\system32\atmfd.dll
.
.
------- Sigcheck -------
.
[-] 2011-03-26 . CBEEBEB899E31EF52B962CB31FC8CA5C . 361600 . . [5.1.2600.5625] . . d:\windows\system32\drivers\tcpip.sys
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . d:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . d:\windows\system32\dllcache\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . d:\windows\$NtUninstallKB951748$\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . d:\windows\ServicePackFiles\i386\tcpip.sys
[7] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . d:\windows\$NtServicePackUninstall$\tcpip.sys
.
((((((((((((((((((((((((((((( SnapShot@2011-03-27_10.41.24 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-07-11 22:02 . 2009-07-11 22:02 51008 d:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_f0ccd4aa\vcomp90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 59728 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90rus.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 42832 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90kor.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 43344 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90jpn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61264 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90ita.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 36688 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90cht.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 35648 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90chs.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 62800 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90fra.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61760 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esp.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 61776 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90esn.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 53568 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90enu.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 63296 d:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_15fc9313\mfc90deu.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 d:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90u.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 59904 d:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfcm90.dll
+ 2011-04-03 11:43 . 2011-04-03 11:43 16384 d:\windows\temp\Perflib_Perfdata_3c4.dat
+ 2011-04-01 10:57 . 2005-04-12 18:21 45504 d:\windows\system32\ReinstallBackups\0029\DriverFiles\WmXlCore.sys
+ 2011-04-01 10:57 . 2005-04-12 18:21 10144 d:\windows\system32\ReinstallBackups\0029\DriverFiles\WmBEnum.sys
+ 2011-04-01 10:57 . 2005-04-12 18:21 17632 d:\windows\system32\ReinstallBackups\0028\DriverFiles\WmHidLo.sys
+ 2011-04-01 10:57 . 2008-04-13 17:45 10368 d:\windows\system32\ReinstallBackups\0028\DriverFiles\i386\hidusb.sys
+ 2011-04-01 10:57 . 2008-04-13 17:45 24960 d:\windows\system32\ReinstallBackups\0028\DriverFiles\i386\hidparse.sys
+ 2011-04-01 10:57 . 2008-04-13 17:45 36864 d:\windows\system32\ReinstallBackups\0028\DriverFiles\i386\hidclass.sys
+ 2011-04-01 10:57 . 2008-04-14 03:21 20992 d:\windows\system32\ReinstallBackups\0028\DriverFiles\i386\hid.dll
+ 2011-04-01 10:57 . 2005-04-12 18:21 22240 d:\windows\system32\ReinstallBackups\0027\DriverFiles\WmFilter.sys
+ 2011-04-01 10:57 . 2005-04-12 18:21 22240 d:\windows\system32\ReinstallBackups\0026\DriverFiles\WmFilter.sys
+ 2011-04-01 10:56 . 2005-04-12 18:21 17632 d:\windows\system32\ReinstallBackups\0025\DriverFiles\WmHidLo.sys
+ 2011-04-01 10:56 . 2008-04-13 18:45 10368 d:\windows\system32\ReinstallBackups\0025\DriverFiles\i386\hidusb.sys
+ 2011-04-01 10:56 . 2008-04-13 18:45 24960 d:\windows\system32\ReinstallBackups\0025\DriverFiles\i386\hidparse.sys
+ 2011-04-01 10:56 . 2008-04-13 18:45 36864 d:\windows\system32\ReinstallBackups\0025\DriverFiles\i386\hidclass.sys
+ 2011-04-01 10:56 . 2008-04-14 03:21 20992 d:\windows\system32\ReinstallBackups\0025\DriverFiles\i386\hid.dll
+ 2011-03-31 16:32 . 2001-11-09 16:01 24064 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ativcoxx.dll
+ 2011-03-31 16:32 . 2010-02-11 03:53 17408 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atitvo32.dll
+ 2011-03-31 16:32 . 2010-02-11 04:32 53248 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ATIDDC.DLL
+ 2011-03-31 16:32 . 2010-02-11 04:23 45056 d:\windows\system32\ReinstallBackups\0001\DriverFiles\aticalrt.dll
+ 2011-03-31 16:32 . 2010-02-11 04:22 45056 d:\windows\system32\ReinstallBackups\0001\DriverFiles\aticalcl.dll
+ 2011-03-31 16:32 . 2010-02-11 04:35 26112 d:\windows\system32\ReinstallBackups\0001\DriverFiles\Ati2mdxx.exe
+ 2011-03-31 16:32 . 2010-02-11 04:19 53248 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2erec.dll
+ 2011-03-31 16:32 . 2010-02-11 04:35 43520 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2edxx.dll
+ 2011-03-31 16:32 . 2010-02-11 03:59 49664 d:\windows\system32\ReinstallBackups\0001\DriverFiles\amdpcom32.dll
+ 2011-03-31 16:31 . 2001-11-09 16:01 24064 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ativcoxx.dll
+ 2011-03-31 16:31 . 2010-02-11 03:53 17408 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atitvo32.dll
+ 2011-03-31 16:31 . 2010-02-11 04:32 53248 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ATIDDC.DLL
+ 2011-03-31 16:31 . 2010-02-11 04:23 45056 d:\windows\system32\ReinstallBackups\0000\DriverFiles\aticalrt.dll
+ 2011-03-31 16:31 . 2010-02-11 04:22 45056 d:\windows\system32\ReinstallBackups\0000\DriverFiles\aticalcl.dll
+ 2011-03-31 16:31 . 2010-02-11 04:35 26112 d:\windows\system32\ReinstallBackups\0000\DriverFiles\Ati2mdxx.exe
+ 2011-03-31 16:31 . 2010-02-11 04:19 53248 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ati2erec.dll
+ 2011-03-31 16:31 . 2010-02-11 04:35 43520 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ati2edxx.dll
+ 2011-03-31 16:31 . 2010-02-11 03:59 49664 d:\windows\system32\ReinstallBackups\0000\DriverFiles\amdpcom32.dll
+ 2001-10-25 13:00 . 2011-04-02 19:35 69370 d:\windows\system32\perfc009.dat
+ 2001-10-25 13:00 . 2011-04-02 19:35 80276 d:\windows\system32\perfc005.dat
+ 2011-03-30 19:26 . 2007-08-31 12:14 38656 d:\windows\system32\DRVSTORE\embda_754491038463AF55DC013DBF40581C2B1BFEE429\emOEM.sys
+ 2011-03-30 19:26 . 2006-12-15 14:54 61440 d:\windows\system32\DRVSTORE\embda_754491038463AF55DC013DBF40581C2B1BFEE429\emMON.exe
+ 2011-03-30 19:26 . 2007-08-31 12:15 24448 d:\windows\system32\DRVSTORE\emaudio_754491038463AF55DC013DBF40581C2B1BFEE429\emAudio.sys
- 2001-10-25 13:00 . 2008-04-13 18:45 10368 d:\windows\system32\drivers\hidusb.sys
+ 2001-10-25 13:00 . 2008-04-13 17:45 10368 d:\windows\system32\drivers\hidusb.sys
- 2004-08-03 21:08 . 2008-04-13 18:45 24960 d:\windows\system32\drivers\hidparse.sys
+ 2004-08-03 21:08 . 2008-04-13 17:45 24960 d:\windows\system32\drivers\hidparse.sys
+ 2004-08-03 21:08 . 2008-04-13 17:45 36864 d:\windows\system32\drivers\hidclass.sys
- 2004-08-03 21:08 . 2008-04-13 18:45 36864 d:\windows\system32\drivers\hidclass.sys
- 2001-10-25 13:00 . 2008-04-13 18:45 10368 d:\windows\system32\dllcache\hidusb.sys
+ 2001-10-25 13:00 . 2008-04-13 17:45 10368 d:\windows\system32\dllcache\hidusb.sys
- 2004-08-03 21:08 . 2008-04-13 18:45 24960 d:\windows\system32\dllcache\hidparse.sys
+ 2004-08-03 21:08 . 2008-04-13 17:45 24960 d:\windows\system32\dllcache\hidparse.sys
+ 2004-08-03 21:08 . 2008-04-13 17:45 36864 d:\windows\system32\dllcache\hidclass.sys
- 2004-08-03 21:08 . 2008-04-13 18:45 36864 d:\windows\system32\dllcache\hidclass.sys
+ 2011-03-30 10:15 . 2011-03-30 10:15 22486 d:\windows\Installer\{D8E363A7-88B7-446D-B2C0-E26CE4DC8E54}\_294823.exe
+ 2010-11-15 19:02 . 2010-11-15 19:02 17304 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\ViewerPS.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 35736 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\reader_sl.exe
+ 2010-11-15 19:02 . 2010-11-15 19:02 84896 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\PDFPrevHndlr.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 94608 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\eula.exe
+ 2010-11-15 19:02 . 2010-11-15 19:02 49064 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\acrotextextractor.exe
+ 2010-11-15 19:02 . 2010-11-15 19:02 17824 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\AcroRd32Info.exe
+ 2010-11-15 19:02 . 2010-11-15 19:02 62376 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\acroiehelpershim.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 64928 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\AcroIEHelper.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 63384 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\Acrofx32.dll
+ 2011-04-01 10:57 . 2005-04-12 18:21 5600 d:\windows\system32\ReinstallBackups\0030\DriverFiles\WmVirHid.sys
+ 2009-07-11 22:02 . 2009-07-11 22:02 653120 d:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 569664 d:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
+ 2009-07-11 22:05 . 2009-07-11 22:05 225280 d:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcm90.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 159032 d:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_353599c2\atl90.dll
+ 2001-06-17 23:00 . 2001-06-17 23:00 101888 d:\windows\system32\VB6STKIT.DLL
+ 2011-04-02 19:38 . 2011-04-02 19:46 818340 d:\windows\system32\Restore\rstrlog.dat
+ 2011-04-01 10:57 . 2005-04-12 18:09 159744 d:\windows\system32\ReinstallBackups\0028\DriverFiles\WmJoyFrc.dll
+ 2011-03-31 16:32 . 2010-02-11 04:35 155648 d:\windows\system32\ReinstallBackups\0001\DriverFiles\Oemdspif.dll
+ 2011-03-31 16:32 . 2010-02-11 04:12 887724 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ativva6x.dat
+ 2011-03-31 16:32 . 2010-02-11 04:36 204800 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atipdlxx.dll
+ 2011-03-31 16:32 . 2010-02-11 04:37 290816 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atiok3x2.dll
+ 2011-03-31 16:32 . 2010-02-11 03:55 475136 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atikvmag.dll
+ 2011-03-31 16:32 . 2010-02-11 05:07 307200 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atiiiexx.dll
+ 2011-03-31 16:32 . 2009-04-23 22:29 189051 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atiicdxx.dat
+ 2011-03-31 16:32 . 2010-02-11 04:46 442368 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ATIDEMGX.dll
+ 2011-03-31 16:32 . 2008-10-21 18:51 118784 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atibrtmon.exe
+ 2011-03-31 16:32 . 2010-02-11 03:54 126976 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atiadlxx.dll
+ 2011-03-31 16:32 . 2010-02-11 04:33 602112 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2evxx.exe
+ 2011-03-31 16:32 . 2010-02-11 04:35 155648 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2evxx.dll
+ 2011-03-31 16:32 . 2010-02-11 04:45 325120 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2dvag.dll
+ 2011-03-31 16:32 . 2010-02-11 03:47 626688 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2cqag.dll
+ 2011-03-31 16:31 . 2010-02-11 04:35 155648 d:\windows\system32\ReinstallBackups\0000\DriverFiles\Oemdspif.dll
+ 2011-03-31 16:31 . 2010-02-11 04:12 887724 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ativva6x.dat
+ 2011-03-31 16:31 . 2010-02-11 04:36 204800 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atipdlxx.dll
+ 2011-03-31 16:31 . 2010-02-11 04:37 290816 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atiok3x2.dll
+ 2011-03-31 16:31 . 2010-02-11 03:55 475136 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atikvmag.dll
+ 2011-03-31 16:31 . 2010-02-11 05:07 307200 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atiiiexx.dll
+ 2011-03-31 16:31 . 2009-04-23 22:29 189051 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atiicdxx.dat
+ 2011-03-31 16:31 . 2010-02-11 04:46 442368 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ATIDEMGX.dll
+ 2011-03-31 16:31 . 2008-10-21 18:51 118784 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atibrtmon.exe
+ 2011-03-31 16:31 . 2010-02-11 03:54 126976 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atiadlxx.dll
+ 2011-03-31 16:31 . 2010-02-11 04:33 602112 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ati2evxx.exe
+ 2011-03-31 16:31 . 2010-02-11 04:35 155648 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ati2evxx.dll
+ 2011-03-31 16:31 . 2010-02-11 04:45 325120 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ati2dvag.dll
+ 2011-03-31 16:31 . 2010-02-11 03:47 626688 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ati2cqag.dll
+ 2001-10-25 13:00 . 2011-04-02 19:35 437876 d:\windows\system32\perfh009.dat
+ 2001-10-25 13:00 . 2011-04-02 19:35 434620 d:\windows\system32\perfh005.dat
+ 2011-03-27 18:07 . 2011-03-27 18:07 235168 d:\windows\system32\Macromed\Flash\FlashUtil10o_Plugin.exe
+ 2011-03-27 18:41 . 2011-03-27 18:41 235168 d:\windows\system32\Macromed\Flash\FlashUtil10o_ActiveX.exe
+ 2011-03-27 18:41 . 2011-03-27 18:41 311456 d:\windows\system32\Macromed\Flash\FlashUtil10o_ActiveX.dll
+ 2011-03-30 19:26 . 2007-08-31 15:33 479744 d:\windows\system32\DRVSTORE\embda_754491038463AF55DC013DBF40581C2B1BFEE429\emBDA.sys
+ 2011-04-02 11:52 . 2011-04-02 11:52 253952 d:\windows\system32\config\systemprofile\ntuser.dat
- 2011-02-12 16:04 . 2010-02-10 20:20 593920 d:\windows\system32\ati2sgag.exe
+ 2011-02-12 16:04 . 2010-02-10 19:20 593920 d:\windows\system32\ati2sgag.exe
+ 2011-03-27 20:38 . 2011-03-27 20:38 878592 d:\windows\Installer\719aa5.msi
+ 2011-03-30 10:15 . 2011-03-30 10:15 109056 d:\windows\Installer\3ae1685.msi
+ 2011-03-27 11:01 . 2011-03-27 11:01 219648 d:\windows\Installer\1cd957.msi
+ 2011-03-30 19:26 . 2011-03-30 19:26 774144 d:\windows\Installer\11eabf6.msi
+ 2010-11-15 19:02 . 2010-11-15 19:02 390552 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\pdfshell.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 101288 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\PDFPrevHndlrShim.exe
+ 2010-11-15 19:02 . 2010-11-15 19:02 135568 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\nppdf32.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 681872 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\JP2KLib.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 104344 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\AiodLite.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 702352 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\AcroPDF.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 294808 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\acrobroker.exe
+ 2010-11-15 19:02 . 2010-11-15 19:02 205720 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\a3dutils.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 3780424 d:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90u.dll
+ 2009-07-11 22:02 . 2009-07-11 22:02 3765048 d:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_a57c1f53\mfc90.dll
+ 2011-03-31 16:32 . 2010-02-11 04:12 2670592 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ativvaxx.dll
+ 2011-03-31 16:32 . 2010-02-11 04:12 3107788 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ativva5x.dat
+ 2011-03-31 16:32 . 2010-02-11 04:21 3227648 d:\windows\system32\ReinstallBackups\0001\DriverFiles\aticaldd.dll
+ 2011-03-31 16:32 . 2010-02-11 04:25 3818144 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ati3duag.dll
+ 2011-03-31 16:32 . 2010-02-11 07:38 3565056 d:\windows\system32\ReinstallBackups\0001\DriverFiles\ati2mtag.sys
+ 2011-03-31 16:31 . 2010-02-11 04:12 2670592 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ativvaxx.dll
+ 2011-03-31 16:31 . 2010-02-11 04:12 3107788 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ativva5x.dat
+ 2011-03-31 16:31 . 2010-02-11 04:21 3227648 d:\windows\system32\ReinstallBackups\0000\DriverFiles\aticaldd.dll
+ 2011-03-31 16:31 . 2010-02-11 04:25 3818144 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ati3duag.dll
+ 2011-03-31 16:31 . 2010-02-11 07:38 3565056 d:\windows\system32\ReinstallBackups\0000\DriverFiles\ati2mtag.sys
+ 2011-02-13 06:57 . 2011-03-27 18:07 6053536 d:\windows\system32\Macromed\Flash\NPSWF32.dll
- 2011-02-13 06:57 . 2011-03-06 18:24 6053536 d:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2011-04-03 09:28 . 2011-04-03 09:28 1165824 d:\windows\Installer\e60db.msi
+ 2011-03-28 07:08 . 2011-03-28 07:08 2292224 d:\windows\Installer\3c77a0.msi
+ 2010-11-15 19:02 . 2010-11-15 19:02 2207632 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\rt3d.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 6222744 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\authplay.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 5503368 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\AGM.dll
+ 2010-11-15 19:02 . 2010-11-15 19:02 1216416 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\AdobeCollabSync.exe
+ 2010-11-15 19:02 . 2010-11-15 19:02 1289624 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\AcroRd32.exe
+ 2011-03-10 19:10 . 2011-03-10 19:10 2872992 d:\windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
+ 2011-03-31 16:32 . 2010-02-11 05:17 11845632 d:\windows\system32\ReinstallBackups\0001\DriverFiles\atioglxx.dll
+ 2011-03-31 16:31 . 2010-02-11 05:17 11845632 d:\windows\system32\ReinstallBackups\0000\DriverFiles\atioglxx.dll
+ 2011-01-30 20:52 . 2011-01-30 20:52 13186560 d:\windows\Installer\18b192.msp
+ 2010-11-15 19:02 . 2010-11-15 19:02 23724952 d:\windows\Installer\$PatchCache$\Managed\68AB67CA7DA79201B744AA0000000010\10.0.0\AcroRd32.dll
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "d:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-12-09 11:51 3911776 ----a-w- d:\program files\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-12-09 11:51 3911776 ----a-w- d:\program files\uTorrentBar\tbuTor.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "d:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "d:\program files\ConduitEngine\ConduitEngine.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}"= "d:\program files\uTorrentBar\tbuTor.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-02-23 14:04 122512 ----a-w- d:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="d:\program files\uTorrent\uTorrent.exe" [2011-03-29 399736]
"Core Temp"="e:\zaloha1\ALOHA\O.C\Core Temp.exe" [2009-05-29 260624]
"Start WingMan Profiler"="d:\program files\Logitech\Profiler\lwemon.exe" [2005-04-18 73728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="d:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]
"avast"="d:\program files\AVAST Software\Avast\avastUI.exe" [2011-02-23 3451496]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="d:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
d:\documents and settings\Jan\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Z stupce - speedfan.lnk - d:\documents and settings\Jan\Plocha\SpeedFan\speedfan.exe [2009-5-27 3287552]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"d:\\Program Files\\Codemasters\\GRID\\GRID.exe"=
"d:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\program files\Microsoft ActiveSync\rapimgr.exe"= d:\program files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"d:\program files\Microsoft ActiveSync\wcescomm.exe"= d:\program files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"d:\program files\Microsoft ActiveSync\WCESMgr.exe"= d:\program files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"d:\\Program Files\\Codemasters\\DiRT2\\dirt2_game.exe"=
"d:\\Program Files\\ICQ7.4\\ICQ.exe"=
"d:\\Documents and Settings\\All Users\\Data aplikací\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\Czech\\setup.exe"=
"d:\\Program Files\\Valve\\Half-Life 2\\hl2.exe"=
"d:\\Program Files\\Valve\\Half-Life 2 Episode One\\hl2.exe"=
"d:\\Program Files\\Valve\\Half-Life 2 Episode Two\\hl2.exe"=
"d:\\Program Files\\SIERRA\\Half-Life\\hl.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
.
R1 aswSnx;aswSnx;d:\windows\system32\drivers\aswSnx.sys [27.3.2011 13:01 371544]
R1 aswSP;aswSP;d:\windows\system32\drivers\aswSP.sys [27.3.2011 13:01 301528]
R2 aswFsBlk;aswFsBlk;d:\windows\system32\drivers\aswFsBlk.sys [27.3.2011 13:01 19544]
R2 cpuz135;cpuz135;d:\windows\system32\drivers\cpuz135_x32.sys [19.2.2011 20:32 22504]
R2 ICQ Service;ICQ Service;d:\program files\ICQ6Toolbar\ICQ Service.exe [27.3.2011 15:57 246584]
R3 RTLWUSB;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;d:\windows\system32\drivers\RTL8187.sys [8.2.2011 19:45 176128]
S3 ALSysIO;ALSysIO;\??\d:\docume~1\Jan\LOCALS~1\Temp\ALSysIO.sys --> d:\docume~1\Jan\LOCALS~1\Temp\ALSysIO.sys [?]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-03 d:\windows\Tasks\1-Click Maintenance.job
- d:\program files\TuneUp Utilities 2008\OneClick.exe [2008-01-08 11:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/sm
IE: E&xportovat do aplikace Microsoft Excel - d:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - d:\program files\ICQ7.4\ICQ.exe
TCP: {4FE42FBC-A8C6-4C80-AF62-CF7D532108D9} = 212.71.150.16,82.209.19.226
FF - ProfilePath - d:\documents and settings\Jan\Data aplikací\Mozilla\Firefox\Profiles\dv83ap4n.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=sm&tb_ver=1.2.0&q=
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - d:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - d:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - d:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - d:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: jqs@sun.com - d:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: avast! WebRep: wrc@avast.com - d:\program files\AVAST Software\Avast\WebRep\FF
FF - Ext: NASA Night Launch: nasanightlaunch@example.com - %profile%\extensions\nasanightlaunch@example.com
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: QipAuthorizer: {32a1fd71-835e-4b11-8e54-886fda0b4c89} - %profile%\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-03 14:07
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-507921405-1004336348-682003330-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:e3,ee,7b,8c,0d,38,a5,32,07,61,76,ed,db,51,bb,46,fb,36,af,a7,67,3f,d4,
63,d6,81,9d,0b,d8,89,d0,6e,3e,be,1d,5a,eb,79,bb,5b,6d,be,2e,cf,a3,ea,46,27,\
"??"=hex:dd,ab,42,a5,75,cb,6c,d1,39,ec,00,6a,ad,10,4d,95
.
[HKEY_USERS\S-1-5-21-507921405-1004336348-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:ca,c0,b8,40,ac,4d,b6,de,db,1b,88,f1,a5,31,d4,30,28,56,d8,e5,f1,
19,37,2f,d7,1d,ce,52,b9,d4,cf,86,d8,37,ba,2a,f1,93,ee,b2,7f,fe,39,04,bd,c6,\
"rkeysecu"=hex:0a,8b,e7,68,98,a6,91,bc,e3,2b,0d,69,bc,3c,46,ba
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@d:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10o_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="d:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10o_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1080)
d:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2011-04-03 14:14:50
ComboFix-quarantined-files.txt 2011-04-03 12:14
ComboFix2.txt 2011-03-27 17:38
ComboFix3.txt 2011-03-27 10:42
.
Před spuštěním: Volných bajtů: 11 713 060 864
Po spuštění: Volných bajtů: 11 732 414 464
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
.
- - End Of File - - 61086D97735EDE331FFD16DC238D6B55

[Rudy]

Několik položek bylo smazáno, zbytek logu vypadá čistý. Nastala nějaká změna?

[00Inferno00]

Počítač měl v rukách soused který taky smazal nějakou havěť, každopádně USBčka zatím fungují a zdá se, že PC trošku ožil. Díky

[Rudy]

Nemáte zač!