VIRY.CZ

Po zapnuti startuje cca 15 min, behem hodiny jede CPU nekolikrat na 100% pouze pri surfovani na netu.

Dekuji

Logfile of random's system information tool 1.06 (written by random/random)
Run by Uživatel at 2011-05-01 12:17:11
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 14 GB (28%) free of 51 GB
Total RAM: 501 MB (13% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:19:21, on 1.5.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINXP\System32\smss.exe
C:\WINXP\system32\winlogon.exe
C:\WINXP\system32\services.exe
C:\WINXP\system32\lsass.exe
C:\WINXP\system32\svchost.exe
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINXP\System32\svchost.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINXP\Explorer.EXE
C:\DOCUME~1\UIVATE~1\LOCALS~1\Temp\DAT1C0.tmp.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINXP\system32\HPZipm12.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\system32\LVCOMSX.EXE
C:\WINXP\system32\spool\drivers\w32x86\3\hpztsb12.exe
C:\WINXP\system32\hkcmd.exe
C:\WINXP\system32\igfxpers.exe
C:\WINXP\RTHDCPL.EXE
C:\WINXP\system32\igfxsrvc.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\WINXP\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe
D:\ZZZprogramy\RSIT.exe
C:\Program Files\trend micro\Uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://mail.google.com/mail/h/1f95orv7o63ge/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [LVCOMSX] C:\WINXP\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINXP\system32\spool\drivers\w32x86\3\hpztsb12.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINXP\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINXP\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINXP\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINXP\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINXP\system32\GPhotos.scr/200
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINXP\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\WINXP\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINXP\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINXP\system32\ati2sgag.exe
O23 - Service: fvqgivcbi - Unknown owner - C:\DOCUME~1\UIVATE~1\LOCALS~1\Temp\DAT1C0.tmp.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINXP\system32\HPZipm12.exe
O24 - Desktop Component 0: (no name) - http://1.im.cz/webmail/img/files/ico_fs_ppt.gif

--
End of file - 8379 bytes

======Scheduled tasks folder======

C:\WINXP\tasks\GoogleUpdateTaskUserS-1-5-21-1004336348-117609710-682003330-1003Core.job
C:\WINXP\tasks\GoogleUpdateTaskUserS-1-5-21-1004336348-117609710-682003330-1003UA.job
C:\WINXP\tasks\MP Scheduled Scan.job
C:\WINXP\tasks\User_Feed_Synchronization-{4B80F5E8-CBB1-457A-A7E6-54F46D788927}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-20 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-20 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"LVCOMSX"=C:\WINXP\system32\LVCOMSX.EXE [2005-12-09 225280]
"HPDJ Taskbar Utility"=C:\WINXP\system32\spool\drivers\w32x86\3\hpztsb12.exe [2005-03-08 176128]
"IgfxTray"=C:\WINXP\system32\igfxtray.exe [2007-09-05 141848]
"HotKeysCmds"=C:\WINXP\system32\hkcmd.exe [2007-09-05 166424]
"Persistence"=C:\WINXP\system32\igfxpers.exe [2007-09-05 137752]
"RTHDCPL"=C:\WINXP\RTHDCPL.EXE [2008-02-13 16857600]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2006-11-03 866584]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2010-11-30 997408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-05-24 133104]
"ctfmon.exe"=C:\WINXP\system32\ctfmon.exe [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINXP\system32\Ati2evxx.dll [2007-03-15 114688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINXP\system32\igfxdev.dll [2007-08-24 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINXP\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINXP\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"=C:\PROGRA~1\WIFD1F~1\MpShHook.dll [2006-11-03 83224]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WinDefend]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Opera\Opera.exe"="C:\Program Files\Opera\Opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe"="C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\ICQ611_26_40\ICQ.exe"="C:\Program Files\ICQ611_26_40\ICQ.exe:*:Enabled:ICQ"
"C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll"="C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin"
"C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Documents and Settings\Uživatel\Plocha\utorrent.exe"="C:\Documents and Settings\Uživatel\Plocha\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2011-05-01 12:17:11 ----D---- C:\rsit
2011-04-14 11:52:17 ----HDC---- C:\WINXP\$NtUninstallKB2485663$
2011-04-14 11:46:01 ----HDC---- C:\WINXP\$NtUninstallKB2506223$
2011-04-14 11:31:41 ----HDC---- C:\WINXP\$NtUninstallKB2412687$
2011-04-14 11:08:00 ----HDC---- C:\WINXP\$NtUninstallKB2508272$
2011-04-14 11:05:56 ----HDC---- C:\WINXP\$NtUninstallKB2503658$
2011-04-14 11:04:07 ----HDC---- C:\WINXP\$NtUninstallKB2507618$
2011-04-14 11:02:43 ----HDC---- C:\WINXP\$NtUninstallKB2508429$
2011-04-14 11:01:21 ----HDC---- C:\WINXP\$NtUninstallKB2511455$
2011-04-14 10:58:55 ----HDC---- C:\WINXP\$NtUninstallKB2506212$
2011-04-14 10:43:51 ----HDC---- C:\WINXP\$NtUninstallKB2509553$
2011-04-08 15:57:08 ----D---- C:\Program Files\Realtek Sound Manager
2011-04-08 15:56:59 ----N---- C:\WINXP\avrack.ini

======List of files/folders modified in the last 1 months======

2011-05-01 12:18:35 ----D---- C:\Program Files\trend micro
2011-05-01 12:17:43 ----D---- C:\WINXP\Temp
2011-05-01 12:12:58 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\Skype
2011-05-01 11:12:42 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\OpenOffice.org2
2011-05-01 11:06:07 ----SD---- C:\WINXP\Tasks
2011-05-01 11:05:18 ----D---- C:\Program Files\Mozilla Firefox
2011-05-01 11:01:27 ----D---- C:\WINXP\system32\CatRoot2
2011-05-01 10:58:09 ----D---- C:\WINXP
2011-05-01 00:19:13 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\vlc
2011-04-30 22:37:38 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\dvdcss
2011-04-30 22:27:53 ----A---- C:\WINXP\NeroDigital.ini
2011-04-30 21:15:31 ----D---- C:\WINXP\Prefetch
2011-04-30 16:52:24 ----A---- C:\WINXP\SchedLgU.Txt
2011-04-30 16:04:03 ----D---- C:\Documents and Settings\Uživatel\Data aplikací\skypePM
2011-04-30 14:35:26 ----SHD---- C:\WINXP\Installer
2011-04-30 14:35:26 ----D---- C:\Config.Msi
2011-04-30 14:31:41 ----D---- C:\WINXP\Debug
2011-04-29 15:35:08 ----D---- C:\WINXP\system32
2011-04-18 15:46:44 ----A---- C:\WINXP\system32\MRT.exe
2011-04-16 18:53:21 ----HD---- C:\WINXP\inf
2011-04-14 22:13:27 ----D---- C:\WINXP\Microsoft.NET
2011-04-14 22:13:17 ----RSD---- C:\WINXP\assembly
2011-04-14 11:51:39 ----HD---- C:\WINXP\$hf_mig$
2011-04-14 11:46:12 ----RSHDC---- C:\WINXP\system32\dllcache
2011-04-14 11:43:18 ----D---- C:\Program Files\Internet Explorer
2011-04-14 11:31:55 ----D---- C:\WINXP\WinSxS
2011-04-14 11:23:14 ----A---- C:\WINXP\system32\PerfStringBackup.INI
2011-04-14 11:02:49 ----D---- C:\WINXP\system32\drivers
2011-04-14 10:49:45 ----D---- C:\Program Files\Opera
2011-04-08 15:57:08 ----RD---- C:\Program Files
2011-04-08 15:57:05 ----D---- C:\Program Files\AvRack
2011-04-07 14:13:34 ----RD---- C:\Program Files\Skype
2011-04-07 14:13:31 ----D---- C:\Program Files\Common Files\Skype
2011-04-07 14:13:06 ----D---- C:\Documents and Settings\All Users.WINXP\Data aplikací\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Řadič procesoru Intel; C:\WINXP\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 MpFilter;Microsoft Malware Protection Driver; C:\WINXP\system32\DRIVERS\MpFilter.sys [2010-10-24 165264]
R1 MpKsl17c8dce8;MpKsl17c8dce8; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKsl17c8dce8.sys []
R1 MpKsl26719a8b;MpKsl26719a8b; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl26719a8b.sys []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINXP\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\WINXP\system32\DRIVERS\igxpmp32.sys [2007-08-24 5776928]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINXP\system32\drivers\RtkHDAud.sys [2008-02-14 4676096]
R3 LVPrcMon;Logitech LVPrcMon Driver; \??\C:\WINXP\system32\drivers\LVPrcMon.sys []
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINXP\system32\drivers\lvusbsta.sys [2005-12-06 39424]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINXP\system32\DRIVERS\LV561AV.SYS [2005-12-06 287360]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINXP\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\WINXP\system32\DRIVERS\serscan.sys [2001-10-24 6784]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINXP\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINXP\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINXP\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINXP\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 MpKsl0295552a;MpKsl0295552a; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{0FDAC79F-E6EB-4444-9999-A5B4B5B578AF}\MpKsl0295552a.sys []
S1 MpKsl0bb930af;MpKsl0bb930af; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2C7CA5BD-29F9-447E-8891-C421E3C4FAD0}\MpKsl0bb930af.sys []
S1 MpKsl146ee89f;MpKsl146ee89f; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6886BFF6-4F1C-4DDC-80E1-E53560819C8F}\MpKsl146ee89f.sys []
S1 MpKsl17d9c74a;MpKsl17d9c74a; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D19FDDD6-3C58-4858-9C87-A96D865325A8}\MpKsl17d9c74a.sys []
S1 MpKsl24c61398;MpKsl24c61398; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsl24c61398.sys []
S1 MpKsl24e788e9;MpKsl24e788e9; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKsl24e788e9.sys []
S1 MpKsl27dd6a04;MpKsl27dd6a04; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1F55DF24-0FFB-4FE8-A3D3-F586E6CD20AF}\MpKsl27dd6a04.sys []
S1 MpKsl308c569c;MpKsl308c569c; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{BA5E4A1E-6724-4B2D-8A33-076C163D074F}\MpKsl308c569c.sys []
S1 MpKsl458ad993;MpKsl458ad993; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsl458ad993.sys []
S1 MpKsl5350ac56;MpKsl5350ac56; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{628E8B05-5E97-48B1-A505-B80121623E21}\MpKsl5350ac56.sys []
S1 MpKsl55467e4f;MpKsl55467e4f; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{14D038CD-C59D-4BC0-AB7D-78B52BAB7B52}\MpKsl55467e4f.sys []
S1 MpKsl5e0b1876;MpKsl5e0b1876; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl5e0b1876.sys []
S1 MpKsl6364c129;MpKsl6364c129; \??\C:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{50B4A780-60F8-4C1A-80CA-08160A922B34}\MpKsl6364c129.sys []
S1 MpKsl63d76356;MpKsl63d76356; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsl63d76356.sys []
S1 MpKsl6444df44;MpKsl6444df44; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsl6444df44.sys []
S1 MpKsl696e0ec4;MpKsl696e0ec4; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{162FA7B1-CB98-4B1C-8B3D-8184688933F4}\MpKsl696e0ec4.sys []
S1 MpKsl6cb177fe;MpKsl6cb177fe; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{5CF51EAE-172E-492B-84A8-D2B313D8A52F}\MpKsl6cb177fe.sys []
S1 MpKsl6f500a77;MpKsl6f500a77; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A7AB9E09-2646-4897-A9ED-9188845CE44B}\MpKsl6f500a77.sys []
S1 MpKsl74f7b47e;MpKsl74f7b47e; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6FACC6E-4457-48A5-95F8-7C336F3E15FB}\MpKsl74f7b47e.sys []
S1 MpKsl79273ab0;MpKsl79273ab0; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{000C9D51-D6FF-490B-A7EA-9DDEF8EC8B09}\MpKsl79273ab0.sys []
S1 MpKsl7f6db1c5;MpKsl7f6db1c5; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsl7f6db1c5.sys []
S1 MpKsl8a8c7b69;MpKsl8a8c7b69; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{8B129DD7-70B4-4720-BAA8-45854AC7A454}\MpKsl8a8c7b69.sys []
S1 MpKsl9901e7a6;MpKsl9901e7a6; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6D00A23E-C24E-475D-9B45-D292751A84AB}\MpKsl9901e7a6.sys []
S1 MpKsl9cd727df;MpKsl9cd727df; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{74D616ED-DEC8-4189-AA06-56BF78558A18}\MpKsl9cd727df.sys []
S1 MpKsla062f50b;MpKsla062f50b; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsla062f50b.sys []
S1 MpKsla323f51a;MpKsla323f51a; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3BB8F970-B217-4D91-A787-1F9A16D5B1A6}\MpKsla323f51a.sys []
S1 MpKsla7d02a57;MpKsla7d02a57; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsla7d02a57.sys []
S1 MpKslaf2f7a30;MpKslaf2f7a30; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKslaf2f7a30.sys []
S1 MpKslb5dcef18;MpKslb5dcef18; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6DA70D9-6463-4049-8AAB-46D115C1E437}\MpKslb5dcef18.sys []
S1 MpKslba95574c;MpKslba95574c; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{58DBBE52-FD92-4993-BD40-9ED242AF2AC2}\MpKslba95574c.sys []
S1 MpKslc61a11ff;MpKslc61a11ff; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D4EBCC4F-7F15-40A7-9618-CC06C7A45EAC}\MpKslc61a11ff.sys []
S1 MpKslca7db06d;MpKslca7db06d; \??\C:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{69F9594D-55FD-474F-98FC-D46D4E48FD87}\MpKslca7db06d.sys []
S1 MpKslcfba78ed;MpKslcfba78ed; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{13E1BC9A-C362-48FD-8B4D-5AB0601B2EE8}\MpKslcfba78ed.sys []
S1 MpKsld73c7fb9;MpKsld73c7fb9; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsld73c7fb9.sys []
S1 MpKsldf44fe17;MpKsldf44fe17; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B9A63DB8-67BF-473C-8CB6-609DF07B6FC7}\MpKsldf44fe17.sys []
S1 MpKsle213a404;MpKsle213a404; \??\C:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{CD59F0CC-F3A4-4E1D-9A0B-965B7EA12907}\MpKsle213a404.sys []
S1 MpKsle7b49992;MpKsle7b49992; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{59FD8D14-8CFD-4F6E-9CE5-0CFCA67A2CC9}\MpKsle7b49992.sys []
S1 MpKslea69af27;MpKslea69af27; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EBDBF8FE-B888-435D-8549-7490531945FC}\MpKslea69af27.sys []
S1 MpKsleb059df5;MpKsleb059df5; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsleb059df5.sys []
S1 MpKsled79381e;MpKsled79381e; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsled79381e.sys []
S1 MpKslf05b298a;MpKslf05b298a; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{82DBD0E1-E98D-48D9-917E-BBF128562D5C}\MpKslf05b298a.sys []
S1 MpKslf40dc7b9;MpKslf40dc7b9; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKslf40dc7b9.sys []
S1 MpKslf702aa37;MpKslf702aa37; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3A407536-AB8E-48C1-8B83-83D2F515CFC3}\MpKslf702aa37.sys []
S1 MpKslfabb3091;MpKslfabb3091; \??\c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{22F169AE-B495-4763-8EBD-46F85088AB3F}\MpKslfabb3091.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINXP\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
S3 ati2mtag;ati2mtag; C:\WINXP\system32\DRIVERS\ati2mtag.sys [2007-03-15 1986560]
S3 catchme;catchme; \??\C:\DOCUME~1\UIVATE~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINXP\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 gdrv;gdrv; \??\C:\WINXP\gdrv.sys []
S3 GMSIPCI;GMSIPCI; \??\I:\INSTALL\GMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINXP\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINXP\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINXP\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 Lvckap;Logitech Kernel Audio Processing Filter Driver; \??\C:\WINXP\system32\drivers\Lvckap.sys []
S3 lvmvdrv;Logitech Machine Vision Engine Loader; \??\C:\WINXP\system32\drivers\lvmvdrv.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINXP\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINXP\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINXP\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 pcouffin;VSO Software pcouffin; C:\WINXP\System32\Drivers\pcouffin.sys [2007-12-30 47360]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINXP\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SLIP;BDA Slip De-Framer; C:\WINXP\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 slnt;RTL8139D PCI Fast Ethernet Adapter; C:\WINXP\system32\DRIVERS\slnt.sys [2005-07-11 18004]
S3 streamip;BDA IPSink; C:\WINXP\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 USB_RNDIS;USB Remote NDIS Network Device Driver; C:\WINXP\system32\DRIVERS\usb8023k.sys [2002-08-12 11136]
S3 usbbus;LGE Mobile Composite USB Device; C:\WINXP\system32\DRIVERS\lgusbbus.sys [2008-09-04 13056]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINXP\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 UsbDiag;LGE Mobile USB Serial Port; C:\WINXP\system32\DRIVERS\lgusbdiag.sys [2008-09-04 19968]
S3 USBModem;LGE Mobile USB Modem; C:\WINXP\system32\DRIVERS\lgusbmodem.sys [2008-09-04 24832]
S3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINXP\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
S3 usbprint;Třída USB Printer; C:\WINXP\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINXP\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINXP\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WpdUsb;WpdUsb; C:\WINXP\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINXP\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINXP\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINXP\system32\drivers\IntelIde.sys []
S4 sr;Ovladač filtru Obnovy systému; C:\WINXP\system32\DRIVERS\sr.sys [2008-04-14 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-09-15 153376]
R2 LVPrcSrv;Logitech Process Monitor; c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe [2005-12-09 81920]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2010-11-11 11736]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINXP\system32\HPZipm12.exe [2004-09-29 69632]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINXP\system32\svchost.exe [2008-04-14 14336]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINXP\system32\Ati2evxx.exe [2007-03-15 450560]
S2 ATI Smart;ATI Smart; C:\WINXP\system32\ati2sgag.exe [2007-03-22 520192]
S2 fvqgivcbi;fvqgivcbi; C:\DOCUME~1\UIVATE~1\LOCALS~1\Temp\DAT1C0.tmp.exe [2011-03-27 68440]
S2 WinDefend;Windows Defender; C:\Program Files\Windows Defender\MsMpEng.exe [2006-11-03 13592]
S3 aspnet_state;ASP.NET State Service; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINXP\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINXP\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-22 136120]
S3 idsvc;Windows CardSpace; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINXP\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Zdravim
PROSIM CITAJTE POZORNE NAVOD!!!,

Použij ComboFix podle tohoto návodu: http://www.bleepingcomputer.com/combofi ... t-combofix
Log znej vloz sem.

Combofix nejde spustit. Zkouseno nekolikrat.
Pise to:

http://zkracene.cz/MSX4

Chod do nudzoveho rezimu a spust tam, ak nepojde napisat.

Byl to porod a scan asi neprobehl jak mel.
Nepovedlo se mi vypnout antivir(MSE) a psalo to, ze chybi nejaky disc.
Dal jsem preskocit.

Log je zde:


ComboFix 11-04-28.02 - Uživatel 01.05.2011 13:28:39.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.501.244 [GMT 2:00]
Spuštěný z: c:\documents and settings\Uživatel\Plocha\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\můj profil.VL-8D136B65CCE9\WINDOWS
c:\documents and settings\můj profil\WINDOWS
c:\winxp\system32\drivers\str.sys
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-04-01 do 2011-05-01 )))))))))))))))))))))))))))))))
.
.
2011-05-01 10:17 . 2011-05-01 10:19 -------- d-----w- C:\rsit
2011-05-01 09:24 . 2011-05-01 09:24 28752 ----a-w- c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKsl17c8dce8.sys
2011-05-01 09:19 . 2011-04-11 07:04 7071056 ----a-w- c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\mpengine.dll
2011-04-14 01:39 . 2011-04-14 01:39 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2011-04-14 01:39 . 2011-04-14 01:39 103864 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2011-04-08 13:57 . 2011-04-08 13:57 -------- d-----w- c:\program files\Realtek Sound Manager
2011-04-08 13:56 . 2002-09-03 06:30 640 ------w- c:\winxp\system32\drivers\alcxinit.dat
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-11 07:04 . 2010-05-31 08:58 7071056 ----a-w- c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-03-07 05:33 . 2007-05-14 14:10 692736 ----a-w- c:\winxp\system32\inetcomm.dll
2011-03-04 06:36 . 2006-03-02 12:00 420864 ----a-w- c:\winxp\system32\vbscript.dll
2011-03-03 13:53 . 2006-03-02 12:00 1857920 ----a-w- c:\winxp\system32\win32k.sys
2011-02-22 23:08 . 2006-03-02 12:00 916480 ----a-w- c:\winxp\system32\wininet.dll
2011-02-22 23:08 . 2006-03-02 12:00 43520 ----a-w- c:\winxp\system32\licmgr10.dll
2011-02-22 23:08 . 2006-03-02 12:00 1469440 ------w- c:\winxp\system32\inetcpl.cpl
2011-02-22 11:41 . 2006-03-02 12:00 385024 ----a-w- c:\winxp\system32\html.iec
2011-02-17 13:18 . 2006-03-02 12:00 455936 ----a-w- c:\winxp\system32\drivers\mrxsmb.sys
2011-02-17 13:18 . 2006-03-02 12:00 357888 ----a-w- c:\winxp\system32\drivers\srv.sys
2011-02-17 12:54 . 2008-05-05 05:25 5632 ----a-w- c:\winxp\system32\xpsp4res.dll
2011-02-15 12:56 . 2006-03-02 12:00 290432 ----a-w- c:\winxp\system32\atmfd.dll
2011-02-09 13:53 . 2006-03-02 12:00 270848 ----a-w- c:\winxp\system32\sbe.dll
2011-02-09 13:53 . 2006-03-02 12:00 186880 ----a-w- c:\winxp\system32\encdec.dll
2011-02-08 13:33 . 2006-03-02 12:00 978944 ----a-w- c:\winxp\system32\mfc42.dll
2011-02-08 13:33 . 2006-03-02 12:00 974848 ----a-w- c:\winxp\system32\mfc42u.dll
2011-02-02 07:58 . 2007-05-14 14:08 2067456 ----a-w- c:\winxp\system32\mstscax.dll
2007-02-02 09:44 . 2007-02-02 09:46 774144 ----a-w- c:\program files\RngInterstitial.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LVCOMSX"="c:\winxp\system32\LVCOMSX.EXE" [2005-12-09 225280]
"HPDJ Taskbar Utility"="c:\winxp\system32\spool\drivers\w32x86\3\hpztsb12.exe" [2005-03-08 176128]
"IgfxTray"="c:\winxp\system32\igfxtray.exe" [2007-09-05 141848]
"HotKeysCmds"="c:\winxp\system32\hkcmd.exe" [2007-09-05 166424]
"Persistence"="c:\winxp\system32\igfxpers.exe" [2007-09-05 137752]
"RTHDCPL"="RTHDCPL.EXE" [2008-02-13 16857600]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\winxp\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Opera\\Opera.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\ICQ611_26_40\\ICQ.exe"=
"c:\\Documents and Settings\\Uživatel\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Uživatel\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R1 MpKsl26719a8b;MpKsl26719a8b;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl26719a8b.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl26719a8b.sys [?]
S1 MpKsl0295552a;MpKsl0295552a;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{0FDAC79F-E6EB-4444-9999-A5B4B5B578AF}\MpKsl0295552a.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{0FDAC79F-E6EB-4444-9999-A5B4B5B578AF}\MpKsl0295552a.sys [?]
S1 MpKsl0bb930af;MpKsl0bb930af;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2C7CA5BD-29F9-447E-8891-C421E3C4FAD0}\MpKsl0bb930af.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2C7CA5BD-29F9-447E-8891-C421E3C4FAD0}\MpKsl0bb930af.sys [?]
S1 MpKsl146ee89f;MpKsl146ee89f;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6886BFF6-4F1C-4DDC-80E1-E53560819C8F}\MpKsl146ee89f.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6886BFF6-4F1C-4DDC-80E1-E53560819C8F}\MpKsl146ee89f.sys [?]
S1 MpKsl17d9c74a;MpKsl17d9c74a;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D19FDDD6-3C58-4858-9C87-A96D865325A8}\MpKsl17d9c74a.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D19FDDD6-3C58-4858-9C87-A96D865325A8}\MpKsl17d9c74a.sys [?]
S1 MpKsl24c61398;MpKsl24c61398;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsl24c61398.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsl24c61398.sys [?]
S1 MpKsl24e788e9;MpKsl24e788e9;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKsl24e788e9.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKsl24e788e9.sys [?]
S1 MpKsl27dd6a04;MpKsl27dd6a04;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1F55DF24-0FFB-4FE8-A3D3-F586E6CD20AF}\MpKsl27dd6a04.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1F55DF24-0FFB-4FE8-A3D3-F586E6CD20AF}\MpKsl27dd6a04.sys [?]
S1 MpKsl308c569c;MpKsl308c569c;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{BA5E4A1E-6724-4B2D-8A33-076C163D074F}\MpKsl308c569c.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{BA5E4A1E-6724-4B2D-8A33-076C163D074F}\MpKsl308c569c.sys [?]
S1 MpKsl458ad993;MpKsl458ad993;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsl458ad993.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsl458ad993.sys [?]
S1 MpKsl5350ac56;MpKsl5350ac56;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{628E8B05-5E97-48B1-A505-B80121623E21}\MpKsl5350ac56.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{628E8B05-5E97-48B1-A505-B80121623E21}\MpKsl5350ac56.sys [?]
S1 MpKsl55467e4f;MpKsl55467e4f;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{14D038CD-C59D-4BC0-AB7D-78B52BAB7B52}\MpKsl55467e4f.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{14D038CD-C59D-4BC0-AB7D-78B52BAB7B52}\MpKsl55467e4f.sys [?]
S1 MpKsl5e0b1876;MpKsl5e0b1876;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl5e0b1876.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl5e0b1876.sys [?]
S1 MpKsl6364c129;MpKsl6364c129;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{50B4A780-60F8-4C1A-80CA-08160A922B34}\MpKsl6364c129.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{50B4A780-60F8-4C1A-80CA-08160A922B34}\MpKsl6364c129.sys [?]
S1 MpKsl63d76356;MpKsl63d76356;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsl63d76356.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsl63d76356.sys [?]
S1 MpKsl6444df44;MpKsl6444df44;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsl6444df44.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsl6444df44.sys [?]
S1 MpKsl696e0ec4;MpKsl696e0ec4;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{162FA7B1-CB98-4B1C-8B3D-8184688933F4}\MpKsl696e0ec4.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{162FA7B1-CB98-4B1C-8B3D-8184688933F4}\MpKsl696e0ec4.sys [?]
S1 MpKsl6cb177fe;MpKsl6cb177fe;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{5CF51EAE-172E-492B-84A8-D2B313D8A52F}\MpKsl6cb177fe.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{5CF51EAE-172E-492B-84A8-D2B313D8A52F}\MpKsl6cb177fe.sys [?]
S1 MpKsl6f500a77;MpKsl6f500a77;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A7AB9E09-2646-4897-A9ED-9188845CE44B}\MpKsl6f500a77.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A7AB9E09-2646-4897-A9ED-9188845CE44B}\MpKsl6f500a77.sys [?]
S1 MpKsl74f7b47e;MpKsl74f7b47e;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6FACC6E-4457-48A5-95F8-7C336F3E15FB}\MpKsl74f7b47e.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6FACC6E-4457-48A5-95F8-7C336F3E15FB}\MpKsl74f7b47e.sys [?]
S1 MpKsl79273ab0;MpKsl79273ab0;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{000C9D51-D6FF-490B-A7EA-9DDEF8EC8B09}\MpKsl79273ab0.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{000C9D51-D6FF-490B-A7EA-9DDEF8EC8B09}\MpKsl79273ab0.sys [?]
S1 MpKsl7f6db1c5;MpKsl7f6db1c5;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsl7f6db1c5.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsl7f6db1c5.sys [?]
S1 MpKsl8a8c7b69;MpKsl8a8c7b69;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{8B129DD7-70B4-4720-BAA8-45854AC7A454}\MpKsl8a8c7b69.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{8B129DD7-70B4-4720-BAA8-45854AC7A454}\MpKsl8a8c7b69.sys [?]
S1 MpKsl9901e7a6;MpKsl9901e7a6;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6D00A23E-C24E-475D-9B45-D292751A84AB}\MpKsl9901e7a6.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6D00A23E-C24E-475D-9B45-D292751A84AB}\MpKsl9901e7a6.sys [?]
S1 MpKsl9cd727df;MpKsl9cd727df;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{74D616ED-DEC8-4189-AA06-56BF78558A18}\MpKsl9cd727df.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{74D616ED-DEC8-4189-AA06-56BF78558A18}\MpKsl9cd727df.sys [?]
S1 MpKsla062f50b;MpKsla062f50b;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsla062f50b.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsla062f50b.sys [?]
S1 MpKsla323f51a;MpKsla323f51a;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3BB8F970-B217-4D91-A787-1F9A16D5B1A6}\MpKsla323f51a.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3BB8F970-B217-4D91-A787-1F9A16D5B1A6}\MpKsla323f51a.sys [?]
S1 MpKsla7d02a57;MpKsla7d02a57;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsla7d02a57.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsla7d02a57.sys [?]
S1 MpKslaf2f7a30;MpKslaf2f7a30;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKslaf2f7a30.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKslaf2f7a30.sys [?]
S1 MpKslb5dcef18;MpKslb5dcef18;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6DA70D9-6463-4049-8AAB-46D115C1E437}\MpKslb5dcef18.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6DA70D9-6463-4049-8AAB-46D115C1E437}\MpKslb5dcef18.sys [?]
S1 MpKslba95574c;MpKslba95574c;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{58DBBE52-FD92-4993-BD40-9ED242AF2AC2}\MpKslba95574c.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{58DBBE52-FD92-4993-BD40-9ED242AF2AC2}\MpKslba95574c.sys [?]
S1 MpKslc61a11ff;MpKslc61a11ff;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D4EBCC4F-7F15-40A7-9618-CC06C7A45EAC}\MpKslc61a11ff.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D4EBCC4F-7F15-40A7-9618-CC06C7A45EAC}\MpKslc61a11ff.sys [?]
S1 MpKslca7db06d;MpKslca7db06d;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{69F9594D-55FD-474F-98FC-D46D4E48FD87}\MpKslca7db06d.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{69F9594D-55FD-474F-98FC-D46D4E48FD87}\MpKslca7db06d.sys [?]
S1 MpKslcfba78ed;MpKslcfba78ed;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{13E1BC9A-C362-48FD-8B4D-5AB0601B2EE8}\MpKslcfba78ed.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{13E1BC9A-C362-48FD-8B4D-5AB0601B2EE8}\MpKslcfba78ed.sys [?]
S1 MpKsld73c7fb9;MpKsld73c7fb9;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsld73c7fb9.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsld73c7fb9.sys [?]
S1 MpKsldf44fe17;MpKsldf44fe17;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B9A63DB8-67BF-473C-8CB6-609DF07B6FC7}\MpKsldf44fe17.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B9A63DB8-67BF-473C-8CB6-609DF07B6FC7}\MpKsldf44fe17.sys [?]
S1 MpKsle213a404;MpKsle213a404;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{CD59F0CC-F3A4-4E1D-9A0B-965B7EA12907}\MpKsle213a404.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{CD59F0CC-F3A4-4E1D-9A0B-965B7EA12907}\MpKsle213a404.sys [?]
S1 MpKsle7b49992;MpKsle7b49992;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{59FD8D14-8CFD-4F6E-9CE5-0CFCA67A2CC9}\MpKsle7b49992.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{59FD8D14-8CFD-4F6E-9CE5-0CFCA67A2CC9}\MpKsle7b49992.sys [?]
S1 MpKslea69af27;MpKslea69af27;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EBDBF8FE-B888-435D-8549-7490531945FC}\MpKslea69af27.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EBDBF8FE-B888-435D-8549-7490531945FC}\MpKslea69af27.sys [?]
S1 MpKsleb059df5;MpKsleb059df5;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsleb059df5.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsleb059df5.sys [?]
S1 MpKsled79381e;MpKsled79381e;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsled79381e.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsled79381e.sys [?]
S1 MpKslf05b298a;MpKslf05b298a;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{82DBD0E1-E98D-48D9-917E-BBF128562D5C}\MpKslf05b298a.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{82DBD0E1-E98D-48D9-917E-BBF128562D5C}\MpKslf05b298a.sys [?]
S1 MpKslf40dc7b9;MpKslf40dc7b9;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKslf40dc7b9.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKslf40dc7b9.sys [?]
S1 MpKslf702aa37;MpKslf702aa37;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3A407536-AB8E-48C1-8B83-83D2F515CFC3}\MpKslf702aa37.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3A407536-AB8E-48C1-8B83-83D2F515CFC3}\MpKslf702aa37.sys [?]
S1 MpKslfabb3091;MpKslfabb3091;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{22F169AE-B495-4763-8EBD-46F85088AB3F}\MpKslfabb3091.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{22F169AE-B495-4763-8EBD-46F85088AB3F}\MpKslfabb3091.sys [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSL17C8DCE8
.
Obsah adresáře 'Naplánované úlohy'
.
2011-05-01 c:\winxp\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2010-11-11 11:26]
.
2011-05-01 c:\winxp\Tasks\User_Feed_Synchronization-{4B80F5E8-CBB1-457A-A7E6-54F46D788927}.job
- c:\winxp\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = https://mail.google.com/mail/h/1f95orv7o63ge/
IE: Add to Google Photos Screensa&ver - c:\winxp\system32\GPhotos.scr/200
FF - ProfilePath - c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.7&q=
FF - prefs.js: network.proxy.http - 134.34.246.5
FF - prefs.js: network.proxy.http_port - 3124
FF - prefs.js: network.proxy.type - 2
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: µTorrent: {dfdd369d-7bf4-432b-8ad6-e2e7b777116a} - %profile%\extensions\{dfdd369d-7bf4-432b-8ad6-e2e7b777116a}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: Flash Video Downloader (Youtube Downloader): artur.dubovoy@gmail.com - %profile%\extensions\artur.dubovoy@gmail.com
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\winxp\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-01 13:42
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(728)
c:\winxp\system32\Ati2evxx.dll
.
Celkový čas: 2011-05-01 13:53:02
ComboFix-quarantined-files.txt 2011-05-01 11:52
.
Před spuštěním: Volných bajtů: 14 871 363 584
Po spuštění: Volných bajtů: 14 954 283 008
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINXP
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINXP="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 2E08C240A3910A5CD70839522CB5DBA3

Ty tam co za gulas mas????
Na jenom oddieli mas 2x windows

multi(0)disk(0)rdisk(0)partition(1)\WINXP="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

Pri tejto akcii je nutné mať ComboFix na ploche.

Vypni>FIREWALL>Antivir>Antispyware>vsetko rezidentne.

Otvor Notepad (Poznámkový blok) a zkopíruj do neho celý zeleny tex: Potom klik na Subor -> Uložiť ako.. .. -> Ako je Názov souboru tak do toho riadku napiš:CFScript.txt
Typ súboru tak tam vyberies *všetky súbory
A ulož ho na plochu.> Pozor CFScript.txt>Neotvarat a nemoze byt ani>CFScript.txt.txt A Urobis Toto :


Po skonceni skenu vlož log čo ComboFix vytvorí

Dvakrat Windows? To nechapu. Se systemem nikdo nic nedelal...

ComboFix 11-04-28.02 - Uživatel 01.05.2011 14:40:09.3.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.501.270 [GMT 2:00]
Spuštěný z: c:\documents and settings\Uživatel\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Uživatel\Plocha\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_FVQGIVCBI
-------\Service_fvqgivcbi
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-04-01 do 2011-05-01 )))))))))))))))))))))))))))))))
.
.
2011-05-01 13:05 . 2011-05-01 13:05 28752 ----a-w- c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKslea03d66d.sys
2011-05-01 10:17 . 2011-05-01 10:19 -------- d-----w- C:\rsit
2011-05-01 09:24 . 2011-05-01 09:24 28752 ----a-w- c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKsl17c8dce8.sys
2011-05-01 09:19 . 2011-04-11 07:04 7071056 ----a-w- c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\mpengine.dll
2011-04-14 01:39 . 2011-04-14 01:39 103864 ----a-w- c:\program files\Mozilla Firefox\plugins\nppdf32.dll
2011-04-14 01:39 . 2011-04-14 01:39 103864 ----a-w- c:\program files\Internet Explorer\PLUGINS\nppdf32.dll
2011-04-08 13:57 . 2011-04-08 13:57 -------- d-----w- c:\program files\Realtek Sound Manager
2011-04-08 13:56 . 2002-09-03 06:30 640 ------w- c:\winxp\system32\drivers\alcxinit.dat
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-11 07:04 . 2010-05-31 08:58 7071056 ----a-w- c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-03-07 05:33 . 2007-05-14 14:10 692736 ----a-w- c:\winxp\system32\inetcomm.dll
2011-03-04 06:36 . 2006-03-02 12:00 420864 ----a-w- c:\winxp\system32\vbscript.dll
2011-03-03 13:53 . 2006-03-02 12:00 1857920 ----a-w- c:\winxp\system32\win32k.sys
2011-02-22 23:08 . 2006-03-02 12:00 916480 ----a-w- c:\winxp\system32\wininet.dll
2011-02-22 23:08 . 2006-03-02 12:00 43520 ----a-w- c:\winxp\system32\licmgr10.dll
2011-02-22 23:08 . 2006-03-02 12:00 1469440 ------w- c:\winxp\system32\inetcpl.cpl
2011-02-22 11:41 . 2006-03-02 12:00 385024 ----a-w- c:\winxp\system32\html.iec
2011-02-17 13:18 . 2006-03-02 12:00 455936 ----a-w- c:\winxp\system32\drivers\mrxsmb.sys
2011-02-17 13:18 . 2006-03-02 12:00 357888 ----a-w- c:\winxp\system32\drivers\srv.sys
2011-02-17 12:54 . 2008-05-05 05:25 5632 ----a-w- c:\winxp\system32\xpsp4res.dll
2011-02-15 12:56 . 2006-03-02 12:00 290432 ----a-w- c:\winxp\system32\atmfd.dll
2011-02-09 13:53 . 2006-03-02 12:00 270848 ----a-w- c:\winxp\system32\sbe.dll
2011-02-09 13:53 . 2006-03-02 12:00 186880 ----a-w- c:\winxp\system32\encdec.dll
2011-02-08 13:33 . 2006-03-02 12:00 978944 ----a-w- c:\winxp\system32\mfc42.dll
2011-02-08 13:33 . 2006-03-02 12:00 974848 ----a-w- c:\winxp\system32\mfc42u.dll
2011-02-02 07:58 . 2007-05-14 14:08 2067456 ----a-w- c:\winxp\system32\mstscax.dll
2007-02-02 09:44 . 2007-02-02 09:46 774144 ----a-w- c:\program files\RngInterstitial.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LVCOMSX"="c:\winxp\system32\LVCOMSX.EXE" [2005-12-09 225280]
"HPDJ Taskbar Utility"="c:\winxp\system32\spool\drivers\w32x86\3\hpztsb12.exe" [2005-03-08 176128]
"IgfxTray"="c:\winxp\system32\igfxtray.exe" [2007-09-05 141848]
"HotKeysCmds"="c:\winxp\system32\hkcmd.exe" [2007-09-05 166424]
"Persistence"="c:\winxp\system32\igfxpers.exe" [2007-09-05 137752]
"RTHDCPL"="RTHDCPL.EXE" [2008-02-13 16857600]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-01-31 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2010-11-30 997408]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\winxp\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 437160]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Opera\\Opera.exe"=
"c:\\Program Files\\Nero\\Nero 7\\Nero Home\\NeroHome.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\ICQ611_26_40\\ICQ.exe"=
"c:\\Documents and Settings\\Uživatel\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Uživatel\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R1 MpKsl17c8dce8;MpKsl17c8dce8;c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKsl17c8dce8.sys [1.5.2011 11:24 28752]
R1 MpKslea03d66d;MpKslea03d66d;c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKslea03d66d.sys [1.5.2011 15:05 28752]
S1 MpKsl0295552a;MpKsl0295552a;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{0FDAC79F-E6EB-4444-9999-A5B4B5B578AF}\MpKsl0295552a.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{0FDAC79F-E6EB-4444-9999-A5B4B5B578AF}\MpKsl0295552a.sys [?]
S1 MpKsl0bb930af;MpKsl0bb930af;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2C7CA5BD-29F9-447E-8891-C421E3C4FAD0}\MpKsl0bb930af.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2C7CA5BD-29F9-447E-8891-C421E3C4FAD0}\MpKsl0bb930af.sys [?]
S1 MpKsl146ee89f;MpKsl146ee89f;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6886BFF6-4F1C-4DDC-80E1-E53560819C8F}\MpKsl146ee89f.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6886BFF6-4F1C-4DDC-80E1-E53560819C8F}\MpKsl146ee89f.sys [?]
S1 MpKsl17d9c74a;MpKsl17d9c74a;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D19FDDD6-3C58-4858-9C87-A96D865325A8}\MpKsl17d9c74a.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D19FDDD6-3C58-4858-9C87-A96D865325A8}\MpKsl17d9c74a.sys [?]
S1 MpKsl1c08a232;MpKsl1c08a232;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKsl1c08a232.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKsl1c08a232.sys [?]
S1 MpKsl24c61398;MpKsl24c61398;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsl24c61398.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsl24c61398.sys [?]
S1 MpKsl24e788e9;MpKsl24e788e9;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKsl24e788e9.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKsl24e788e9.sys [?]
S1 MpKsl26719a8b;MpKsl26719a8b;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl26719a8b.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl26719a8b.sys [?]
S1 MpKsl27dd6a04;MpKsl27dd6a04;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1F55DF24-0FFB-4FE8-A3D3-F586E6CD20AF}\MpKsl27dd6a04.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1F55DF24-0FFB-4FE8-A3D3-F586E6CD20AF}\MpKsl27dd6a04.sys [?]
S1 MpKsl308c569c;MpKsl308c569c;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{BA5E4A1E-6724-4B2D-8A33-076C163D074F}\MpKsl308c569c.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{BA5E4A1E-6724-4B2D-8A33-076C163D074F}\MpKsl308c569c.sys [?]
S1 MpKsl458ad993;MpKsl458ad993;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsl458ad993.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsl458ad993.sys [?]
S1 MpKsl5350ac56;MpKsl5350ac56;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{628E8B05-5E97-48B1-A505-B80121623E21}\MpKsl5350ac56.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{628E8B05-5E97-48B1-A505-B80121623E21}\MpKsl5350ac56.sys [?]
S1 MpKsl55467e4f;MpKsl55467e4f;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{14D038CD-C59D-4BC0-AB7D-78B52BAB7B52}\MpKsl55467e4f.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{14D038CD-C59D-4BC0-AB7D-78B52BAB7B52}\MpKsl55467e4f.sys [?]
S1 MpKsl5e0b1876;MpKsl5e0b1876;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl5e0b1876.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A8052C65-57DB-45E1-8677-850D278155DB}\MpKsl5e0b1876.sys [?]
S1 MpKsl6364c129;MpKsl6364c129;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{50B4A780-60F8-4C1A-80CA-08160A922B34}\MpKsl6364c129.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{50B4A780-60F8-4C1A-80CA-08160A922B34}\MpKsl6364c129.sys [?]
S1 MpKsl63d76356;MpKsl63d76356;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsl63d76356.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsl63d76356.sys [?]
S1 MpKsl6444df44;MpKsl6444df44;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsl6444df44.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsl6444df44.sys [?]
S1 MpKsl696e0ec4;MpKsl696e0ec4;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{162FA7B1-CB98-4B1C-8B3D-8184688933F4}\MpKsl696e0ec4.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{162FA7B1-CB98-4B1C-8B3D-8184688933F4}\MpKsl696e0ec4.sys [?]
S1 MpKsl6cb177fe;MpKsl6cb177fe;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{5CF51EAE-172E-492B-84A8-D2B313D8A52F}\MpKsl6cb177fe.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{5CF51EAE-172E-492B-84A8-D2B313D8A52F}\MpKsl6cb177fe.sys [?]
S1 MpKsl6f500a77;MpKsl6f500a77;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A7AB9E09-2646-4897-A9ED-9188845CE44B}\MpKsl6f500a77.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A7AB9E09-2646-4897-A9ED-9188845CE44B}\MpKsl6f500a77.sys [?]
S1 MpKsl74f7b47e;MpKsl74f7b47e;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6FACC6E-4457-48A5-95F8-7C336F3E15FB}\MpKsl74f7b47e.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6FACC6E-4457-48A5-95F8-7C336F3E15FB}\MpKsl74f7b47e.sys [?]
S1 MpKsl79273ab0;MpKsl79273ab0;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{000C9D51-D6FF-490B-A7EA-9DDEF8EC8B09}\MpKsl79273ab0.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{000C9D51-D6FF-490B-A7EA-9DDEF8EC8B09}\MpKsl79273ab0.sys [?]
S1 MpKsl7f6db1c5;MpKsl7f6db1c5;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsl7f6db1c5.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsl7f6db1c5.sys [?]
S1 MpKsl8a8c7b69;MpKsl8a8c7b69;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{8B129DD7-70B4-4720-BAA8-45854AC7A454}\MpKsl8a8c7b69.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{8B129DD7-70B4-4720-BAA8-45854AC7A454}\MpKsl8a8c7b69.sys [?]
S1 MpKsl9901e7a6;MpKsl9901e7a6;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6D00A23E-C24E-475D-9B45-D292751A84AB}\MpKsl9901e7a6.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{6D00A23E-C24E-475D-9B45-D292751A84AB}\MpKsl9901e7a6.sys [?]
S1 MpKsl9cd727df;MpKsl9cd727df;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{74D616ED-DEC8-4189-AA06-56BF78558A18}\MpKsl9cd727df.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{74D616ED-DEC8-4189-AA06-56BF78558A18}\MpKsl9cd727df.sys [?]
S1 MpKsla062f50b;MpKsla062f50b;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsla062f50b.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{1195D4CC-ADE1-4867-A01B-51B6D66984DD}\MpKsla062f50b.sys [?]
S1 MpKsla323f51a;MpKsla323f51a;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3BB8F970-B217-4D91-A787-1F9A16D5B1A6}\MpKsla323f51a.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3BB8F970-B217-4D91-A787-1F9A16D5B1A6}\MpKsla323f51a.sys [?]
S1 MpKsla7d02a57;MpKsla7d02a57;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsla7d02a57.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKsla7d02a57.sys [?]
S1 MpKslaf2f7a30;MpKslaf2f7a30;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKslaf2f7a30.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{93FA5DE1-BF6F-496F-9839-4A2C6AEA864B}\MpKslaf2f7a30.sys [?]
S1 MpKslb5dcef18;MpKslb5dcef18;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6DA70D9-6463-4049-8AAB-46D115C1E437}\MpKslb5dcef18.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B6DA70D9-6463-4049-8AAB-46D115C1E437}\MpKslb5dcef18.sys [?]
S1 MpKslba95574c;MpKslba95574c;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{58DBBE52-FD92-4993-BD40-9ED242AF2AC2}\MpKslba95574c.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{58DBBE52-FD92-4993-BD40-9ED242AF2AC2}\MpKslba95574c.sys [?]
S1 MpKslc61a11ff;MpKslc61a11ff;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D4EBCC4F-7F15-40A7-9618-CC06C7A45EAC}\MpKslc61a11ff.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{D4EBCC4F-7F15-40A7-9618-CC06C7A45EAC}\MpKslc61a11ff.sys [?]
S1 MpKslca7db06d;MpKslca7db06d;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{69F9594D-55FD-474F-98FC-D46D4E48FD87}\MpKslca7db06d.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{69F9594D-55FD-474F-98FC-D46D4E48FD87}\MpKslca7db06d.sys [?]
S1 MpKslcfba78ed;MpKslcfba78ed;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{13E1BC9A-C362-48FD-8B4D-5AB0601B2EE8}\MpKslcfba78ed.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{13E1BC9A-C362-48FD-8B4D-5AB0601B2EE8}\MpKslcfba78ed.sys [?]
S1 MpKsld73c7fb9;MpKsld73c7fb9;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsld73c7fb9.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{2085CE86-B3AE-4BD8-AC26-09712D1D5909}\MpKsld73c7fb9.sys [?]
S1 MpKsldf44fe17;MpKsldf44fe17;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B9A63DB8-67BF-473C-8CB6-609DF07B6FC7}\MpKsldf44fe17.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{B9A63DB8-67BF-473C-8CB6-609DF07B6FC7}\MpKsldf44fe17.sys [?]
S1 MpKsle213a404;MpKsle213a404;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{CD59F0CC-F3A4-4E1D-9A0B-965B7EA12907}\MpKsle213a404.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{CD59F0CC-F3A4-4E1D-9A0B-965B7EA12907}\MpKsle213a404.sys [?]
S1 MpKsle7b49992;MpKsle7b49992;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{59FD8D14-8CFD-4F6E-9CE5-0CFCA67A2CC9}\MpKsle7b49992.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{59FD8D14-8CFD-4F6E-9CE5-0CFCA67A2CC9}\MpKsle7b49992.sys [?]
S1 MpKslea69af27;MpKslea69af27;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EBDBF8FE-B888-435D-8549-7490531945FC}\MpKslea69af27.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EBDBF8FE-B888-435D-8549-7490531945FC}\MpKslea69af27.sys [?]
S1 MpKsleb059df5;MpKsleb059df5;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsleb059df5.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{A40D5A69-AA31-4236-83A3-BA378DA8D68C}\MpKsleb059df5.sys [?]
S1 MpKsled79381e;MpKsled79381e;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsled79381e.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{ADDE9E17-F5C2-4277-BB36-E36EF5AA4727}\MpKsled79381e.sys [?]
S1 MpKslf05b298a;MpKslf05b298a;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{82DBD0E1-E98D-48D9-917E-BBF128562D5C}\MpKslf05b298a.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{82DBD0E1-E98D-48D9-917E-BBF128562D5C}\MpKslf05b298a.sys [?]
S1 MpKslf40dc7b9;MpKslf40dc7b9;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKslf40dc7b9.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{EA8D3C1A-6BBA-494A-AB5A-47E8B261D0D8}\MpKslf40dc7b9.sys [?]
S1 MpKslf702aa37;MpKslf702aa37;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3A407536-AB8E-48C1-8B83-83D2F515CFC3}\MpKslf702aa37.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{3A407536-AB8E-48C1-8B83-83D2F515CFC3}\MpKslf702aa37.sys [?]
S1 MpKslfabb3091;MpKslfabb3091;\??\c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{22F169AE-B495-4763-8EBD-46F85088AB3F}\MpKslfabb3091.sys --> c:\documents and settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{22F169AE-B495-4763-8EBD-46F85088AB3F}\MpKslfabb3091.sys [?]
S2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 20:19 13592]
S3 slnt;RTL8139D PCI Fast Ethernet Adapter;c:\winxp\system32\drivers\slnt.sys [1.1.2005 23:45 18004]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\winxp\system32\drivers\wdcsam.sys [6.3.2010 21:36 11520]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - MPKSLEA03D66D
.
Obsah adresáře 'Naplánované úlohy'
.
2011-05-01 c:\winxp\Tasks\MP Scheduled Scan.job
- c:\program files\Microsoft Security Client\Antimalware\MpCmdRun.exe [2010-11-11 11:26]
.
2011-05-01 c:\winxp\Tasks\User_Feed_Synchronization-{4B80F5E8-CBB1-457A-A7E6-54F46D788927}.job
- c:\winxp\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uStart Page = https://mail.google.com/mail/h/1f95orv7o63ge/
IE: Add to Google Photos Screensa&ver - c:\winxp\system32\GPhotos.scr/200
FF - ProfilePath - c:\documents and settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.7&q=
FF - prefs.js: network.proxy.http - 134.34.246.5
FF - prefs.js: network.proxy.http_port - 3124
FF - prefs.js: network.proxy.type - 2
FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
FF - Ext: µTorrent: {dfdd369d-7bf4-432b-8ad6-e2e7b777116a} - %profile%\extensions\{dfdd369d-7bf4-432b-8ad6-e2e7b777116a}
FF - Ext: ICQ Toolbar: {800b5000-a755-47e1-992b-48a1c1357f07} - %profile%\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF - Ext: Flash Video Downloader (Youtube Downloader): artur.dubovoy@gmail.com - %profile%\extensions\artur.dubovoy@gmail.com
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\winxp\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-01 15:01
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(724)
c:\winxp\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(5208)
c:\program files\Common Files\Logitech\LVMVFM\LVPrcInj.dll
c:\progra~1\WINDOW~2\wmpband.dll
c:\winxp\system32\wpdshext.dll
c:\winxp\system32\PortableDeviceApi.dll
c:\winxp\system32\Audiodev.dll
c:\winxp\system32\WMVCore.DLL
c:\winxp\system32\WMASF.DLL
c:\winxp\system32\webcheck.dll
c:\winxp\system32\WPDShServiceObj.dll
c:\winxp\system32\PortableDeviceTypes.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft Security Client\Antimalware\MsMpEng.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\winxp\system32\HPZipm12.exe
c:\winxp\RTHDCPL.EXE
c:\winxp\system32\igfxsrvc.exe
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
.
**************************************************************************
.
Celkový čas: 2011-05-01 15:16:11 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-05-01 13:15
ComboFix2.txt 2011-05-01 11:53
.
Před spuštěním: Volných bajtů: 14 959 087 616
Po spuštění: Volných bajtů: 14 859 141 120
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINXP
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINXP="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - E23693483B15517382A0C86086D45DE6

no, v boot.ini mas tento zaznam

multi(0)disk(0)rdisk(0)partition(1)\WINXP="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

to jest teraz ked windows bootuje sa ti objavia 3=moznosti
a to.
WINXP
WINDOWS
Recovery Console

Ale ak ti to nevadi nechame tak,
Ako je na tom pc??

Nevim jestli mi to ma vadit

Jinak pri restartu, v minutach:
00.00-start
02.00-'uvitaci melodie'
03.17-plocha
04.49-nabehla spodni lista vpravo-zvukovka, odebrat harware a antivir(MSE).Ten byl ovsem vypnuty a naskocil az v
05.20
05.25-klik na Operu
07.07-nabehla a mohl jsem na internet

Takze nic moc. Ale uz je to taky starej kram a je to tak o polovinu rychlejsi nez pred tim.

Ale ,precistime to
premenuj ikonu combofixu na uninstall
a spust>.combofix sa odinstaluje.

Precisti pc CCleanerom
CCleaner
a)Download from Piriform.com program a nainštalujeme.
http://www.piriform.com/ccleaner/download/standard/
b)Všetky spustené programy,prehliadač zatvoríme.
c)Spustíme CCleaner,nastavenie necháme tak ako je. stlačte gombík Analyzovať a po analýze stlačte Gombík Spustiť Cleaner.
d)Kliknite na záložku Aplikácie a stlačte gombík Analyzovať a po analýze stlačte Gombík Spustiť Cleaner.
e)Kliknite na Register,stlačte Hľadaj problémy, po dokončení skenování kliknite na Opraviť vybrané problémy, zvoľte ANO pre vytvorenie zálohy, uložte súbor a kliknite na Opraviť všetky problémy.

Stahni OTListIt2>> OTL
Označ položku Pro všechny uživatele.
Označ položky Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
klik Klikn na tlačítko Prohledat
Po dokončení, sem vlož logy OTL.Txt a Extras.txt

Extras.txt


OTL Extras logfile created on: 1.5.2011 16:31:04 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Uživatel\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

501,00 Mb Total Physical Memory | 253,00 Mb Available Physical Memory | 50,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Program Files
Drive C: | 50,00 Gb Total Space | 14,07 Gb Free Space | 28,14% Space Free | Partition Type: NTFS
Drive D: | 136,27 Gb Total Space | 32,32 Gb Free Space | 23,72% Space Free | Partition Type: FAT32

Computer Name: U-1AADE91843524 | User Name: Uživatel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l

[HKEY_USERS\S-1-5-21-1004336348-117609710-682003330-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
https [open] -- "C:\Program Files\Opera\opera.exe" (Opera Software)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\ICQ7.2\ICQ.exe" = C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Program Files\ICQ7.2\aolload.exe" = C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Opera\Opera.exe" = C:\Program Files\Opera\Opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe" = C:\Program Files\Nero\Nero 7\Nero Home\NeroHome.exe:*:Enabled:Nero Home -- (Nero AG)
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe" = C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- ()
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"C:\Program Files\ICQ611_26_40\ICQ.exe" = C:\Program Files\ICQ611_26_40\ICQ.exe:*:Enabled:ICQ -- (ICQ, LLC.)
"C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll" = C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin -- (Google)
"C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe" = C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin -- (Google)
"C:\Program Files\ICQ7.2\aolload.exe" = C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{005F78AF-110D-398A-8430-BE98950A1E22}" = Google Talk Plugin
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan
"{14DCD95A-EBA3-4BF0-B7EF-533852E99BE6}" = LG PC Suite II
"{18063128-B9E1-AFAE-B7DD-2C313D2C375B}" = ccc-core-preinstall
"{1F7473D9-6C0B-4F5A-8FA4-AB8AD78CBE54}" = DocProc
"{24141F03-D9B2-D029-1C94-0BBA9977D173}" = Skins
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 22
"{2A425503-3D15-BE66-8781-3D153AF1F8A9}" = CCC Help English
"{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine
"{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java(TM) SE Runtime Environment 6
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{350C9405-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3CF78481-FB7B-4B51-99A2-D5E0CD0B3AAF}" = HPSystemDiagnostics
"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR
"{4817189D-1785-4627-A33C-39FD90919300}" = The Sims™ 2 Mazlíčci
"{48242276-DB89-42e8-9678-BD4280D7B99A}" = Copy
"{49B6F667-76EB-4E9D-ACD2-84B7437901C0}" = LG PC Suite II
"{49FB31C1-26EC-44c6-AB47-73C66E2BC41E}" = HP PSC & OfficeJet 5.3.B
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{519556CC-4382-4B35-80F5-DD8E9460EEAC}" = OpenOffice.org 2.3
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B
"{5BE3BF62-D432-4D47-A712-CD4DF91CABFB}" = ZyXEL USB ADSL Modem/Router
"{5E65E94D-69F2-4850-9E93-6459C53A0F50}" = Microsoft .NET Framework 1.1 Czech Language Pack
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = The Sims 2
"{723C033E-63EA-4227-BAB2-0AA8693C16EB}" = Director
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{749205D2-2B9F-467E-891E-93BF75DF6949}" = Document Express DjVu Plug-in
"{774088D4-0777-4D78-904D-E435B318F5D2}" = Microsoft Antimalware
"{77A776C4-D10F-416D-88F0-53F2D9DCD9B3}" = Microsoft Security Client
"{77FF5817-ABA9-1294-2D3D-A29F8FDA8BAD}" = ccc-core-static
"{7B1AF68B-4606-4152-9991-1E9D4FF5F0FA}" = Microsoft Antimalware Service CS-CZ Language Pack
"{7E0AED65-CE72-3715-5FD0-A18C149B5BFF}" = Catalyst Control Center Graphics Full Existing
"{81DD5688-695A-4c1d-AE7D-368BF857725A}" = TrayApp
"{859B9BCA-5376-4566-9F88-C6C9DAA7A925}" = Microsoft Security Client CS-CZ Language Pack
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{901C0405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Access 2003 Runtime
"{90260405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office XP Web Components
"{90A40405-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{91C0B95B-B83A-4828-A775-BBE2DD421029}" = Nero 7 Premium
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9DEE2DB4-D46C-E7CF-9465-802BD2077A0A}" = Catalyst Control Center Graphics Light
"{A06275F4-324B-4E85-95E6-87B2CD729401}" = Windows Defender
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1029-7B44-A94000000001}" = Adobe Reader 9.4.4 - Czech
"{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9
"{B031F0D7-0246-E2D0-0752-05A5C17DA1C3}" = Sendoid
"{B6F5B704-06D3-4687-90F3-6195304AD755}" = The Sims™ 2 Život v bytě
"{C02EDE17-BC2E-4393-70BD-36185ABEBFF7}" = Catalyst Control Center Graphics Previews Common
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C3ABE126-2BB2-4246-BFE1-6797679B3579}" = LG USB Modem driver
"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CA8802A2-2840-4FDE-B5E1-DA276F8842CD}" = EA-Land
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CB5363FC-04F2-E3F2-78BD-A9A6DB63DB9E}" = ccc-utility
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = AusLogics Disk Defrag
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6197679-051D-4E3E-9757-4D5CDA6D658B}" = Microsoft Antimalware Service CS-CZ Language Pack
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FBBF532A-47AC-457d-AC06-0D3163D8911E}" = WebReg
"{FEC22238-FB7E-5D07-F88A-78F15460073A}" = Catalyst Control Center Graphics Full New
"{FFD06ACB-DF8B-D34D-9F9E-CDA18C15E208}" = Catalyst Control Center Core Implementation
"ABC Amber ePub Converter" = ABC Amber ePub Converter
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"All ATI Software" = ATI - Software Uninstall Utility
"ATI Display Driver" = ATI Display Driver
"Capture-A-ScreenShot_is1" = Capture-A-ScreenShot
"CCleaner" = CCleaner (remove only)
"com.caffeinatedmind.Sendoid" = Sendoid
"DjVuLibre+DjView" = DjVuLibre+DjView
"DVDFab Ghosthunter release_is1" = DVDFab Ghosthunter release 5.2.3.2
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox (3.5.18)" = Mozilla Firefox (3.5.18)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Můj butik" = Můj butik
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Opera 11.10.2092" = Opera 11.10
"Picasa 3" = Picasa 3
"QcDrv" = ##CAMERADRIVERNAME##
"Recepty doma_is1" = Recepty doma
"Universal Document Converter_is1" = Universal Document Converter (Demo)
"VLC media player" = VLC media player 1.0.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WinSnap" = WinSnap
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-1004336348-117609710-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 22.4.2011 2:10:11 | Computer Name = U-1AADE91843524 | Source = Userenv | ID = 1047
Description = Systém Windows nemůže přečíst z registru historii objektů zásad skupiny.
Pokračování ve zpracování skupinových zásad.

Error - 22.4.2011 2:10:11 | Computer Name = U-1AADE91843524 | Source = Userenv | ID = 1047
Description = Systém Windows nemůže přečíst z registru historii objektů zásad skupiny.
Pokračování ve zpracování skupinových zásad.

Error - 23.4.2011 5:15:21 | Computer Name = U-1AADE91843524 | Source = Application Error | ID = 1000
Description = Chybující aplikace DAT1C0.tmp.exe, verze 3.0.6920.1109, chybující
modul unknown, verze 0.0.0.0, adresa chyby 0x009b3f6b.

Error - 24.4.2011 3:13:17 | Computer Name = U-1AADE91843524 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 1.9.1.4095, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 24.4.2011 3:13:19 | Computer Name = U-1AADE91843524 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 1.9.1.4095, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 24.4.2011 3:15:52 | Computer Name = U-1AADE91843524 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 1.9.1.4095, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 25.4.2011 3:01:26 | Computer Name = U-1AADE91843524 | Source = Application Hang | ID = 1002
Description = Zablokovaná aplikace firefox.exe, verze 1.9.1.4095, zablokovaný modul
hungapp, verze 0.0.0.0, adresa bloku 0x00000000.

Error - 25.4.2011 3:39:24 | Computer Name = U-1AADE91843524 | Source = Application Error | ID = 1000
Description = Chybující aplikace DAT1C0.tmp.exe, verze 3.0.6920.1109, chybující
modul unknown, verze 0.0.0.0, adresa chyby 0x009b3f70.

Error - 29.4.2011 8:42:30 | Computer Name = U-1AADE91843524 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 80240016, P2 begininstall, P3 install, P4
3.0.8107.0, P5 mpsigdwn.dll, P6 3.0.8107.0, P7 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P8 NIL, P9 NIL, P10 NIL.

Error - 30.4.2011 14:21:17 | Computer Name = U-1AADE91843524 | Source = MPSampleSubmission | ID = 5000
Description = EventType mptelemetry, P1 microsoft security essentials (edb4fa23-53b8-4afa-8c5d-99752cca7094),
P2 3.0.8107.0, P3 timeout, P4 1.1.6802.0, P5 fixed, P6 2 _ 512, P7 10 _ not boot,
P8 NIL, P9 NIL, P10 NIL.

[ System Events ]
Error - 1.5.2011 7:21:00 | Computer Name = U-1AADE91843524 | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 1.5.2011 7:21:00 | Computer Name = U-1AADE91843524 | Source = Disk | ID = 262151
Description = Zařízení \Device\Harddisk0\D má chybný blok.

Error - 1.5.2011 8:40:03 | Computer Name = U-1AADE91843524 | Source = Service Control Manager | ID = 7034
Description = Služba Pml Driver HPZ12 byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 1.5.2011 8:40:03 | Computer Name = U-1AADE91843524 | Source = Service Control Manager | ID = 7034
Description = Služba Zařazování tisku byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 1.5.2011 8:40:05 | Computer Name = U-1AADE91843524 | Source = Service Control Manager | ID = 7034
Description = Služba Java Quick Starter byla neočekávaně ukončena. Tento stav nastal
již 1krát.

Error - 1.5.2011 8:40:05 | Computer Name = U-1AADE91843524 | Source = Service Control Manager | ID = 7031
Description = Služba Microsoft Antimalware Service byla nečekaně ukončena. Stalo
se to 1 krát. Následující opravná akce bude spuštěna za 15000 milisekund: Restartovat
službu.

Error - 1.5.2011 8:40:06 | Computer Name = U-1AADE91843524 | Source = Service Control Manager | ID = 7034
Description = Služba Služba brány aplikačního rozhraní byla neočekávaně ukončena.
Tento stav nastal již 1krát.

Error - 1.5.2011 9:02:59 | Computer Name = U-1AADE91843524 | Source = Service Control Manager | ID = 7009
Description = Vypršel časový limit (30000 milisekund) čekání na připojení služby
Služba modelu COM pro zápis na disk CD (IMAPI).

Error - 1.5.2011 9:02:59 | Computer Name = U-1AADE91843524 | Source = Service Control Manager | ID = 7000
Description = Služba Služba modelu COM pro zápis na disk CD (IMAPI) neuspěla při
spuštění v důsledku následující chyby: %%1053

Error - 1.5.2011 10:24:53 | Computer Name = U-1AADE91843524 | Source = Service Control Manager | ID = 7034
Description = Služba Logitech Process Monitor byla neočekávaně ukončena. Tento stav
nastal již 1krát.


< End of report >


OTL.txt




OTL logfile created on: 1.5.2011 16:31:04 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Uživatel\Plocha
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000405 | Country: Česká republika | Language: CSY | Date Format: d.M.yyyy

501,00 Mb Total Physical Memory | 253,00 Mb Available Physical Memory | 50,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Program Files
Drive C: | 50,00 Gb Total Space | 14,07 Gb Free Space | 28,14% Space Free | Partition Type: NTFS
Drive D: | 136,27 Gb Total Space | 32,32 Gb Free Space | 23,72% Space Free | Partition Type: FAT32

Computer Name: U-1AADE91843524 | User Name: Uživatel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.05.01 16:27:28 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Uživatel\Plocha\OTL.exe
PRC - [2010.11.30 14:20:36 | 000,997,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2010.11.11 13:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2008.04.14 05:22:22 | 001,034,240 | ---- | M] (Microsoft Corporation) -- C:\WINXP\explorer.exe
PRC - [2007.06.27 20:04:00 | 001,213,736 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2007.06.27 20:03:40 | 000,152,872 | ---- | M] (Nero AG) -- C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PRC - [2005.12.09 15:32:18 | 000,225,280 | ---- | M] (Logitech Inc.) -- C:\WINXP\system32\LVCOMSX.EXE
PRC - [2005.03.08 06:42:09 | 000,176,128 | ---- | M] (HP) -- C:\WINXP\system32\spool\drivers\w32x86\3\hpztsb12.exe
PRC - [2004.09.29 13:14:36 | 000,069,632 | ---- | M] (HP) -- C:\WINXP\system32\HPZipm12.exe


========== Modules (SafeList) ==========

MOD - [2011.05.01 16:27:28 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Uživatel\Plocha\OTL.exe
MOD - [2010.08.23 18:12:33 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINXP\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2010.11.11 13:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV - [2006.11.03 20:19:58 | 000,013,592 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MsMpEng.exe -- (WinDefend)
SRV - [2005.12.09 15:37:42 | 000,081,920 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- c:\Program Files\Common Files\Logitech\LVMVFM\LVPrcSrv.exe -- (LVPrcSrv)
SRV - [2004.09.29 13:14:36 | 000,069,632 | ---- | M] (HP) [Auto | Running] -- C:\WINXP\system32\HPZipm12.exe -- (Pml Driver HPZ12)
SRV - [2004.08.17 15:49:22 | 000,006,656 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\WINDOWS\system32\wuauserv.dll -- (wuauserv)


========== Driver Services (SafeList) ==========

DRV - [2011.05.01 16:01:26 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- c:\Documents and Settings\All Users.WINXP\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{C053DEF2-B743-4107-A614-9607DA246B5B}\MpKsl7c102572.sys -- (MpKsl7c102572)
DRV - [2009.02.23 21:36:57 | 000,016,608 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINXP\gdrv.sys -- (gdrv)
DRV - [2009.02.13 21:02:52 | 000,011,520 | R--- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\wdcsam.sys -- (WDC_SAM)
DRV - [2008.09.04 06:28:22 | 000,019,968 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\lgusbdiag.sys -- (UsbDiag)
DRV - [2008.09.04 06:27:54 | 000,024,832 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\lgusbmodem.sys -- (USBModem)
DRV - [2008.09.04 06:27:28 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\lgusbbus.sys -- (usbbus)
DRV - [2008.02.14 11:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008.01.03 16:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007.03.15 03:57:15 | 001,986,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2007.03.08 14:34:46 | 004,027,840 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2005.12.09 15:37:42 | 002,400,256 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\LVMVdrv.sys -- (lvmvdrv)
DRV - [2005.12.09 15:37:42 | 000,016,768 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\LVPrcMon.sys -- (LVPrcMon)
DRV - [2005.12.09 15:35:54 | 002,174,464 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\Lvckap.sys -- (Lvckap)
DRV - [2005.12.06 05:27:29 | 000,287,360 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\LV561AV.SYS -- (PID_0928) Logitech QuickCam Express(PID_0928)
DRV - [2005.12.06 05:26:16 | 000,039,424 | R--- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2005.07.11 03:31:18 | 000,018,004 | R--- | M] (Silan Micro-Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\slnt.sys -- (slnt)
DRV - [2004.08.04 00:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\RTL8139.sys -- (rtl8139) Realtek RTL8139(A/B/C)
DRV - [2002.08.12 16:20:22 | 000,011,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\usb8023k.sys -- (USB_RNDIS)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found


IE - HKU\.DEFAULT\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1004336348-117609710-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://google.icq.com
IE - HKU\S-1-5-21-1004336348-117609710-682003330-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://mail.google.com/mail/h/1f95orv7o63ge/
IE - HKU\S-1-5-21-1004336348-117609710-682003330-1003\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1004336348-117609710-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.seznam.cz/"
FF - prefs.js..extensions.enabledItems: {dfdd369d-7bf4-432b-8ad6-e2e7b777116a}:0.1.9
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: artur.dubovoy@gmail.com:2.0.21
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_result ... r=1.1.7&q="
FF - prefs.js..network.proxy.http: "134.34.246.5 "
FF - prefs.js..network.proxy.http_port: 3124
FF - prefs.js..network.proxy.no_proxies_on: ""
FF - prefs.js..network.proxy.type: 2

FF - HKLM\software\mozilla\Mozilla Firefox 3.5.18\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.03.25 09:52:18 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.18\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.04.29 15:35:51 | 000,000,000 | ---D | M]

[2008.08.26 22:14:22 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Extensions
[2011.05.01 11:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\extensions
[2010.11.27 18:36:50 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.12.25 12:38:29 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.02.21 20:49:47 | 000,000,000 | ---D | M] (&#181;Torrent) -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\extensions\{dfdd369d-7bf4-432b-8ad6-e2e7b777116a}
[2011.03.28 15:33:13 | 000,000,000 | ---D | M] ("Flash Video Downloader (Youtube Downloader)") -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\extensions\artur.dubovoy@gmail.com
[2011.02.12 00:54:38 | 000,001,643 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\doplky-pro-firefox.xml
[2011.04.25 09:17:37 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-1.xml
[2010.12.06 22:36:58 | 000,000,962 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-10.xml
[2008.03.26 22:56:21 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-11.xml
[2008.04.17 20:22:48 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-12.xml
[2008.04.17 20:31:10 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-13.xml
[2008.06.29 12:19:59 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-14.xml
[2008.07.02 00:50:08 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-15.xml
[2008.07.18 10:58:19 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-16.xml
[2008.08.26 22:15:39 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-17.xml
[2008.09.25 10:49:02 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-18.xml
[2008.09.28 11:16:25 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-19.xml
[2007.06.01 00:21:35 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-2.xml
[2008.11.15 10:43:41 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-20.xml
[2008.12.19 00:50:04 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-21.xml
[2009.02.07 10:16:39 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-22.xml
[2009.03.06 14:43:49 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-23.xml
[2009.03.30 14:37:08 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-24.xml
[2009.04.25 23:27:18 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-25.xml
[2009.04.30 12:37:05 | 000,000,950 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-26.xml
[2010.12.14 10:21:45 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-27.xml
[2011.03.03 01:49:25 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-28.xml
[2011.03.25 09:53:11 | 000,000,961 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-29.xml
[2007.07.18 19:58:12 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-3.xml
[2007.07.31 17:46:35 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-4.xml
[2007.09.19 19:42:00 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-5.xml
[2007.10.19 20:11:10 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-6.xml
[2007.11.03 00:44:05 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-7.xml
[2007.11.28 15:07:31 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-8.xml
[2007.12.01 19:14:35 | 000,000,951 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin-9.xml
[2010.11.27 18:36:50 | 000,000,168 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin.gif
[2010.11.27 18:36:50 | 000,000,618 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin.src
[2010.06.21 17:35:24 | 000,001,042 | ---- | M] () -- C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Profiles\lmy2hyy3.default\searchplugins\icqplugin.xml
[2011.05.01 11:15:19 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2007.05.15 11:56:00 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
[2010.05.17 20:09:50 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.08.17 20:27:34 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.12.14 21:23:15 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\LMY2HYY3.DEFAULT\EXTENSIONS\{800B5000-A755-47E1-992B-48A1C1357F07}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\LMY2HYY3.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\LMY2HYY3.DEFAULT\EXTENSIONS\{DFDD369D-7BF4-432B-8AD6-E2E7B777116A}
File not found (No name found) -- C:\DOCUMENTS AND SETTINGS\UĹĽIVATEL\DATA APLIKACĂ­\MOZILLA\FIREFOX\PROFILES\LMY2HYY3.DEFAULT\EXTENSIONS\ARTUR.DUBOVOY@GMAIL.COM
[2008.12.17 01:47:57 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAM FILES\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2010.03.02 04:01:49 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINXP\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2010.09.15 05:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.11.18 18:44:16 | 001,680,272 | ---- | M] (Caminova, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdjvu.dll
[2007.02.02 11:44:29 | 000,024,576 | ---- | M] (RealNetworks) -- C:\Program Files\Mozilla Firefox\plugins\npgcplug.dll
[2005.04.27 22:10:49 | 000,102,400 | ---- | M] (RealNetworks) -- C:\Program Files\Mozilla Firefox\plugins\npracplug.dll
[2010.12.14 10:18:52 | 000,000,638 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\jyxo-cz.xml
[2010.12.14 10:18:52 | 000,001,687 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\mall-cz.xml
[2010.12.14 10:18:52 | 000,001,367 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\seznam-cz.xml
[2010.12.14 10:18:52 | 000,000,654 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\slunecnice-cz.xml
[2010.12.14 10:18:52 | 000,001,179 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-cz.xml

O1 HOSTS File: ([2011.05.01 15:01:25 | 000,000,027 | ---- | M]) - C:\WINXP\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O3 - HKU\S-1-5-21-1004336348-117609710-682003330-1003\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINXP\system32\spool\drivers\w32x86\3\hpztsb12.exe (HP)
O4 - HKLM..\Run: [LVCOMSX] C:\WINXP\system32\LVCOMSX.EXE (Logitech Inc.)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKU\S-1-5-21-1004336348-117609710-682003330-1003..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1004336348-117609710-682003330-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-1004336348-117609710-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-1004336348-117609710-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-1004336348-117609710-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINXP\System32\GPhotos.scr (Google Inc.)
O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - Reg Error: Value error. File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - Reg Error: Value error. File not found
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/pub/s ... wflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINXP\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINXP\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 () - http://1.im.cz/webmail/img/files/ico_fs_ppt.gif
O24 - Desktop Components:1 (Aktuální domovská stránka) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Pozadí plochy.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Uživatel\Data aplikací\Mozilla\Firefox\Pozadí plochy.bmp
O28 - HKLM ShellExecuteHooks: {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.29 14:16:53 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011.05.01 16:29:23 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Uživatel\Recent
[2011.05.01 16:27:25 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Uživatel\Plocha\OTL.exe
[2011.05.01 16:25:38 | 000,000,000 | --SD | C] -- C:\uninstall
[2011.05.01 15:52:07 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2011.05.01 14:53:47 | 000,000,000 | ---D | C] -- C:\WINXP\temp
[2011.05.01 14:35:26 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011.05.01 12:17:11 | 000,000,000 | ---D | C] -- C:\rsit
[2011.04.08 15:57:08 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek Sound Manager
[2011.04.07 14:13:35 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users.WINXP\Nabídka Start\Programy\Skype
[2007.12.30 20:01:14 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Uživatel\Data aplikací\pcouffin.sys
[2007.02.02 11:46:29 | 000,774,144 | ---- | C] (RealNetworks, Inc.) -- C:\Program Files\RngInterstitial.dll

========== Files - Modified Within 30 Days ==========

[2011.05.01 16:32:25 | 000,000,468 | -H-- | M] () -- C:\WINXP\tasks\User_Feed_Synchronization-{4B80F5E8-CBB1-457A-A7E6-54F46D788927}.job
[2011.05.01 16:31:40 | 000,169,080 | ---- | M] () -- C:\Documents and Settings\Uživatel\Plocha\capture1.jpg
[2011.05.01 16:27:28 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Uživatel\Plocha\OTL.exe
[2011.05.01 16:06:35 | 000,000,424 | -H-- | M] () -- C:\WINXP\tasks\MP Scheduled Scan.job
[2011.05.01 15:59:25 | 000,012,598 | ---- | M] () -- C:\WINXP\System32\wpa.dbl
[2011.05.01 15:58:14 | 000,002,048 | --S- | M] () -- C:\WINXP\bootstat.dat
[2011.05.01 15:01:25 | 000,000,027 | ---- | M] () -- C:\WINXP\System32\drivers\etc\hosts
[2011.05.01 14:35:46 | 000,000,433 | RHS- | M] () -- C:\boot.ini
[2011.05.01 13:23:59 | 000,000,433 | ---- | M] () -- C:\Boot.bak
[2011.04.30 22:27:53 | 000,000,182 | ---- | M] () -- C:\WINXP\NeroDigital.ini
[2011.04.30 22:27:47 | 000,053,760 | ---- | M] () -- C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.04.29 15:27:54 | 000,007,226 | ---- | M] () -- C:\Documents and Settings\Uživatel\Plocha\tisk-objednavky.php.htm
[2011.04.14 21:57:14 | 000,107,008 | ---- | M] () -- C:\WINXP\System32\FNTCACHE.DAT
[2011.04.14 11:23:15 | 000,441,124 | ---- | M] () -- C:\WINXP\System32\perfh009.dat
[2011.04.14 11:23:14 | 000,437,558 | ---- | M] () -- C:\WINXP\System32\perfh005.dat
[2011.04.14 11:23:14 | 000,082,372 | ---- | M] () -- C:\WINXP\System32\perfc005.dat
[2011.04.14 11:23:14 | 000,071,060 | ---- | M] () -- C:\WINXP\System32\perfc009.dat

========== Files Created - No Company Name ==========

[2011.05.01 16:31:40 | 000,169,080 | ---- | C] () -- C:\Documents and Settings\Uživatel\Plocha\capture1.jpg
[2011.04.29 15:27:28 | 000,007,226 | ---- | C] () -- C:\Documents and Settings\Uživatel\Plocha\tisk-objednavky.php.htm
[2011.04.08 15:56:59 | 000,000,164 | ---- | C] () -- C:\WINXP\avrack.ini
[2011.04.08 15:56:30 | 000,000,640 | ---- | C] () -- C:\WINXP\System32\drivers\alcxinit.dat
[2010.04.04 19:51:16 | 000,000,058 | ---- | C] () -- C:\WINXP\System32\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2010.04.04 19:51:16 | 000,000,058 | ---- | C] () -- C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\DonationCoder_ScreenshotCaptor_InstallInfo.dat
[2009.12.28 19:05:31 | 000,005,368 | ---- | C] () -- C:\Documents and Settings\Uživatel\Data aplikací\froggy_scorebox
[2009.12.28 19:05:31 | 000,000,906 | ---- | C] () -- C:\Documents and Settings\Uživatel\Data aplikací\pl_accounts.pl_acc
[2009.12.28 19:05:30 | 000,000,556 | ---- | C] () -- C:\Documents and Settings\Uživatel\Data aplikací\Troll.options
[2009.05.01 00:23:28 | 000,000,169 | ---- | C] () -- C:\WINXP\RtlRack.ini
[2009.02.23 21:28:18 | 000,147,456 | R--- | C] () -- C:\WINXP\System32\igfxCoIn_v4864.dll
[2009.01.26 20:14:21 | 000,201,216 | ---- | C] () -- C:\WINXP\System32\mediarcpt.dll
[2008.07.02 23:31:43 | 000,000,056 | -H-- | C] () -- C:\WINXP\System32\ezsidmv.dat
[2008.03.09 12:41:18 | 000,000,032 | ---- | C] () -- C:\Documents and Settings\All Users.WINXP\Data aplikací\ezsid.dat
[2008.01.24 14:39:32 | 000,000,754 | ---- | C] () -- C:\WINXP\WORDPAD.INI
[2008.01.16 14:18:38 | 000,000,151 | ---- | C] () -- C:\WINXP\PhotoSnapViewer.INI
[2007.12.30 20:01:14 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Uživatel\Data aplikací\inst.exe
[2007.12.30 20:01:14 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Uživatel\Data aplikací\pcouffin.cat
[2007.12.30 20:01:14 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Uživatel\Data aplikací\pcouffin.inf
[2007.12.30 19:46:13 | 000,000,509 | ---- | C] () -- C:\WINXP\cdplayer.ini
[2007.12.29 21:31:55 | 000,000,384 | ---- | C] () -- C:\WINXP\ODBC.INI
[2007.12.29 17:24:30 | 000,819,200 | ---- | C] () -- C:\WINXP\is-R14QT.exe
[2007.12.29 16:28:22 | 000,000,182 | ---- | C] () -- C:\WINXP\NeroDigital.ini
[2007.12.02 14:16:38 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\fusioncache.dat
[2007.05.23 15:05:43 | 000,000,335 | ---- | C] () -- C:\WINXP\mozregistry.dat
[2007.05.17 15:22:47 | 000,053,760 | ---- | C] () -- C:\Documents and Settings\Uživatel\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007.05.17 14:35:55 | 000,102,658 | ---- | C] () -- C:\WINXP\hpoins05.dat
[2007.05.17 14:35:55 | 000,017,505 | ---- | C] () -- C:\WINXP\hpomdl07.dat
[2007.05.15 13:59:28 | 000,005,120 | ---- | C] () -- C:\WINXP\System32\tcusbdrv.dll
[2007.05.15 13:46:28 | 000,013,126 | R--- | C] () -- C:\WINXP\System32\lvcoinst.ini
[2007.05.15 13:31:19 | 000,000,719 | R--- | C] () -- C:\WINXP\System32\InstExec.ini
[2007.05.15 11:20:45 | 000,000,000 | ---- | C] () -- C:\WINXP\nsreg.dat
[2007.05.14 18:01:24 | 000,004,161 | ---- | C] () -- C:\WINXP\ODBCINST.INI
[2007.05.14 17:59:53 | 000,107,008 | ---- | C] () -- C:\WINXP\System32\FNTCACHE.DAT
[2007.05.14 17:04:50 | 000,049,152 | R--- | C] () -- C:\WINXP\System32\ChCfg.exe
[2007.05.14 16:41:12 | 000,520,192 | ---- | C] () -- C:\WINXP\System32\ati2sgag.exe
[2007.05.14 16:17:18 | 000,002,048 | --S- | C] () -- C:\WINXP\bootstat.dat
[2007.05.14 16:09:45 | 000,021,812 | ---- | C] () -- C:\WINXP\System32\emptyregdb.dat
[2007.03.15 03:29:32 | 003,107,788 | ---- | C] () -- C:\WINXP\System32\ativvaxx.dat
[2007.03.07 00:04:53 | 000,143,676 | ---- | C] () -- C:\WINXP\System32\atiicdxx.dat
[2006.03.02 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINXP\System32\oembios.bin
[2006.03.02 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINXP\System32\mlang.dat
[2006.03.02 14:00:00 | 000,441,124 | ---- | C] () -- C:\WINXP\System32\perfh009.dat
[2006.03.02 14:00:00 | 000,437,558 | ---- | C] () -- C:\WINXP\System32\perfh005.dat
[2006.03.02 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINXP\System32\perfi009.dat
[2006.03.02 14:00:00 | 000,269,162 | ---- | C] () -- C:\WINXP\System32\perfi005.dat
[2006.03.02 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINXP\System32\dssec.dat
[2006.03.02 14:00:00 | 000,082,372 | ---- | C] () -- C:\WINXP\System32\perfc005.dat
[2006.03.02 14:00:00 | 000,071,060 | ---- | C] () -- C:\WINXP\System32\perfc009.dat
[2006.03.02 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINXP\System32\mib.bin
[2006.03.02 14:00:00 | 000,032,072 | ---- | C] () -- C:\WINXP\System32\perfd005.dat
[2006.03.02 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINXP\System32\perfd009.dat
[2006.03.02 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINXP\System32\secupd.dat
[2006.03.02 14:00:00 | 000,004,461 | ---- | C] () -- C:\WINXP\System32\oembios.dat
[2006.03.02 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINXP\System32\dcache.bin
[2006.03.02 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINXP\System32\noise.dat
[2005.12.09 15:37:42 | 002,400,256 | ---- | C] () -- C:\WINXP\System32\drivers\LVMVdrv.sys
[2005.12.09 15:37:42 | 000,016,768 | ---- | C] () -- C:\WINXP\System32\drivers\LVPrcMon.sys
[2005.12.09 15:35:54 | 002,174,464 | ---- | C] () -- C:\WINXP\System32\drivers\Lvckap.sys
[2005.01.01 01:24:23 | 000,000,552 | ---- | C] () -- C:\WINXP\System32\d3d8caps.dat
[2001.07.06 15:30:00 | 000,003,399 | ---- | C] () -- C:\WINXP\System32\hptcpmon.ini

========== LOP Check ==========

[2010.12.17 11:51:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINXP\Data aplikací\AdventureChronicles1
[2009.12.31 16:05:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINXP\Data aplikací\Alawar Stargaze
[2009.12.31 15:03:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINXP\Data aplikací\AlawarWrapper
[2009.12.28 22:56:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINXP\Data aplikací\Aliasworlds
[2007.12.28 18:37:45 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINXP\Data aplikací\Azureus
[2010.05.21 18:39:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINXP\Data aplikací\Gogii
[2010.11.27 18:36:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINXP\Data aplikací\ICQ
[2010.05.22 13:41:43 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP
[2006.12.10 14:48:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\můj profil\Data aplikací\ICQLite
[2007.05.01 10:15:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\můj profil\Data aplikací\Leadertech
[2006.10.02 16:04:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\můj profil\Data aplikací\RTPlayer
[2007.02.02 00:55:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\můj profil\Data aplikací\XnView
[2007.05.14 14:48:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\můj profil.VL-8D136B65CCE9\Data aplikací\WinPatrol
[2009.12.28 19:17:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Alawar
[2011.01.29 02:22:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Amber ePub
[2008.02.01 21:00:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Azureus
[2010.12.01 22:23:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\bfgbar
[2011.03.28 17:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\com.caffeinatedmind.Sendoid
[2010.04.04 19:51:16 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\DonationCoder
[2010.12.04 21:30:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\EBookSys
[2010.05.02 16:13:54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Enki Games
[2009.12.30 16:10:32 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Gaijin Ent
[2010.02.17 23:48:52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Hide IP NG
[2011.02.14 21:23:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\ICQ
[2007.12.04 17:45:28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\ICQ Toolbar
[2007.05.16 20:04:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\ICQLite
[2011.02.03 00:14:41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Image Zone Express
[2010.05.21 19:48:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\iMaxGen
[2010.08.10 15:10:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\LG Electronics
[2009.12.28 21:51:35 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\MagicBall3
[2010.12.17 10:29:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\net.tw.fotolia-desktop
[2011.03.16 21:43:17 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Opera
[2007.05.17 14:17:56 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Printer Info Cache
[2010.12.13 14:57:29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\UDC Profiles
[2010.05.25 14:20:20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Uniblue
[2007.12.30 20:03:53 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Vso
[2009.12.28 20:01:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Uživatel\Data aplikací\Zak&Jack
[2011.05.01 16:06:35 | 000,000,424 | -H-- | M] () -- C:\WINXP\Tasks\MP Scheduled Scan.job
[2011.05.01 16:32:25 | 000,000,468 | -H-- | M] () -- C:\WINXP\Tasks\User_Feed_Synchronization-{4B80F5E8-CBB1-457A-A7E6-54F46D788927}.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 137 bytes -> C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:79AE1C15
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:6017A808
@Alternate Data Stream - 129 bytes -> C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:13EF4AF6
@Alternate Data Stream - 122 bytes -> C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:7B52659E
@Alternate Data Stream - 118 bytes -> C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:5197985B
@Alternate Data Stream - 112 bytes -> C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:EA666F77

< End of report >


Porad mi to pise o tom disku...

No , mas problem s HD,
Zařízení \Device\Harddisk0\D má chybný blok.

Spust OTL, do okna vloz zeleny text a teraz klikni na OPRAVIT Log po restarte vloz sem.

spust prikazovy riadok, a zadaj prikaz chkdsk /f/r
Enter>>suhlasis>>restart a nechas aby chkdsk skontroloval HD, a potomnapis ako sa chova pc.

Tim 'prikazovy radek' myslis:
START-SPUSTIT a vlozit?





All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\ not found.
Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry value HKEY_USERS\S-1-5-21-1004336348-117609710-682003330-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\\ deleted successfully.
HKU\S-1-5-21-1004336348-117609710-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Prefs.js: "http://search.icq.com/search/afe_result ... r=1.1.7&q=" removed from keyword.URL
Registry value HKEY_USERS\S-1-5-21-1004336348-117609710-682003330-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
ADS C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:79AE1C15 deleted successfully.
ADS C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:6017A808 deleted successfully.
ADS C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:13EF4AF6 deleted successfully.
ADS C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:7B52659E deleted successfully.
ADS C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:5197985B deleted successfully.
ADS C:\Documents and Settings\All Users.WINXP\Data aplikací\TEMP:EA666F77 deleted successfully.
========== COMMANDS ==========
Unable to start service SrService!

[EMPTYTEMP]

User: All Users

User: All Users.WINXP

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User.WINXP
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 56502 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService.NT AUTHORITY
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: můj profil
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: můj profil.VL-8D136B65CCE9
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->FireFox cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: NetworkService.NT AUTHORITY
->Temp folder emptied: 12088 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Uživatel
->Temp folder emptied: 593996 bytes
->Temporary Internet Files folder emptied: 5276991 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 83707480 bytes
->Google Chrome cache emptied: 16298420 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 62596 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16885 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 169080 bytes

Total Files Cleaned = 101,00 mb


OTL by OldTimer - Version 3.2.22.3 log created on 05032011_000458

Files\Folders moved on Reboot...
Folder move failed. C:\Documents and Settings\můj profil\Local Settings\Temporary Internet Files\Content.IE5\81E58RWH\... scheduled to be moved on reboot.

Registry entries deleted on Reboot...

start spustit napises cmd
enter, a tu do cierneho okna napises prikaz.
potom napis ako sa chova pc.