Padající PC, odpojující se internet

[petr.29]

Zdravím všechny, prosím o kontrolu logu. Počítač je nestabilní. Časté modré obrazovky a vypadává internet.
Moc děkuju za případnou pomoc.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Peter at 2011-09-29 20:51:03
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 364 GB (76%) free of 477 GB
Total RAM: 2046 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:51:10, on 29.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\savedump.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TO2SSM\McciTrayApp.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe
C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe
C:\Program Files\TO2SSM\McciBrowser.exe
C:\Program Files\TO2SSM\McciBrowser.exe
C:\Program Files\IOI\IOI\ButtonMonitor.exe
C:\Program Files\TO2SSM\McciBrowser.exe
C:\Program Files\TO2SSM\McciBrowser.exe
C:\WINDOWS\HKExt3.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\dgdersvc.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Gameforge4D\4Story\PrePatch.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\TO2SAM\McciBrowser.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\WINDOWS\MHotkey.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\WinFast\WFDTV\WFWIZ.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\ChiFuncExt.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
H:\06.02.2011_combofix\RSIT.exe
C:\Program Files\trend micro\Peter.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.myheritage.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.myheritage.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\20101103132419\ICQToolBar.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: (no name) - {edd4f682-e67a-4175-bb45-c4066da2f7d9} - C:\Program Files\OurBabyMaker_27\bar\2.bin\27SrcAs.dll (file missing)
R3 - URLSearchHook: MHURLSearchHook Class - {1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48} - C:\Program Files\Family Toolbar\tbhelper.dll
O2 - BHO: MHTBPos00 - {0C37B053-FD68-456a-82E1-D788EE342E6F} - C:\Program Files\Family Toolbar\tbcore3.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: FreeSoundRecorder Toolbar - {32b29df0-2237-4370-9a29-37cebb730e9b} - C:\Program Files\FreeSoundRecorder\tbFree.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (file missing)
O2 - BHO: HiGames Toolbar - {64d23501-5195-4224-9446-e2b0fb64e859} - C:\Program Files\HiGames\tbHiG2.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: IMVU Inc - {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files\IMVU_Inc\prxtbIMVU.dll
O2 - BHO: GamePlayLabsBHO - {984A9162-8891-4D19-8CFE-17648BB4E1EC} - C:\Program Files\Browser Plugin\BHO.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O2 - BHO: GdfrDUEn - {A3CF7606-E683-4375-A372-96B75DA0AEF7} - C:\Program Files\Get Styles\enlbrdr.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\MP3 Rocket FileBulldog Toolbar\tbcore3.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\20101103132419\ICQToolBar.dll
O3 - Toolbar: Family Toolbar - {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - C:\Program Files\Family Toolbar\tbcore3.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: HiGames Toolbar - {64d23501-5195-4224-9446-e2b0fb64e859} - C:\Program Files\HiGames\tbHiG2.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: FreeSoundRecorder Toolbar - {32b29df0-2237-4370-9a29-37cebb730e9b} - C:\Program Files\FreeSoundRecorder\tbFree.dll
O3 - Toolbar: MP3 Rocket FileBulldog Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files\MP3 Rocket FileBulldog Toolbar\tbcore3.dll
O3 - Toolbar: IMVU Inc Toolbar - {90b49673-5506-483e-b92b-ca0265bd9ca8} - C:\Program Files\IMVU_Inc\prxtbIMVU.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [TO2SSM_McciTrayApp] C:\Program Files\TO2SSM\McciTrayApp.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe
O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [GUCI_AVS] C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe
O4 - HKLM\..\Run: [PAP7501_Monitor] C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe
O4 - HKLM\..\Run: [ButtonMonitor] C:\Program Files\IOI\IOI\ButtonMonitor.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11 SE DVD\uvPL.exe
O4 - HKLM\..\Run: [Family Tree Builder Update] C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe
O4 - HKLM\..\Run: [LchDrvKey] LchDrvKey.exe
O4 - HKLM\..\Run: [HKExt3] HKExt3.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [4StoryPrePatch] C:\Program Files\Gameforge4D\4Story\PrePatch.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [MotiveReportAgent] "C:\Program Files\TO2SAM\McciBrowser.exe" -appkey=TO2SAM -hidden -url=file:///C:/Program%20Files/TO2SAM/ReportAgent.html
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: &Search - http://tbedits.ourbabymaker.com/one-too ... 2010122915
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm
O9 - Extra 'Tools' menuitem: GetStyles - {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - C:\Program Files\Get Styles\ct.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - C:\Program Files\ICQ7.0\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Kity\Nabídka Start\Programy\IMVU\Run IMVU.lnk
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6218F7B5-0D3A-48BA-AE4C-49DCFA63D400} (CSEQueryObject Object) - http://www.myheritage.cz/Genoogle/Compo ... eQuery.dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 5664409781
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Filter hijack: text/html - {574940E0-1B7A-4881-8FA3-1E809714B156} - C:\Documents and Settings\Tess\AppData\LocalLow\Microńoft\redir.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe
O23 - Service: AVGIDSAgent - Unknown owner - C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Device Error Recovery Service (dgdersvc) - Devguru Co., Ltd. - C:\WINDOWS\system32\dgdersvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee ScanAndRepair Svc - McAfee, Inc. - C:\Program Files\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 18224 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\RPCReminder.job
C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
MHTBPos00 Class - C:\Program Files\Family Toolbar\tbcore3.dll [2009-05-07 2642432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}]
C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2008-09-10 1194496]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{32b29df0-2237-4370-9a29-37cebb730e9b}]
FreeSoundRecorder Toolbar - C:\Program Files\FreeSoundRecorder\tbFree.dll [2010-06-13 2734688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64d23501-5195-4224-9446-e2b0fb64e859}]
HiGames Toolbar - C:\Program Files\HiGames\tbHiG2.dll [2010-10-18 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{90b49673-5506-483e-b92b-ca0265bd9ca8}]
IMVU Inc Toolbar - C:\Program Files\IMVU_Inc\prxtbIMVU.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC}]
GamePlayLabsBHO Class - C:\Program Files\Browser Plugin\BHO.dll [2011-02-21 433152]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2010-08-27 2565448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
GdfrDUEn Class - C:\Program Files\Get Styles\enlbrdr.dll [2010-02-11 185856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-09-28 1400712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-06-14 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-06-14 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2010-06-13 1438520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
SMTTB2009 Class - C:\Program Files\MP3 Rocket FileBulldog Toolbar\tbcore3.dll [2010-02-16 2495488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\20101103132419\ICQToolBar.dll [2010-10-04 1049912]
{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - Family Toolbar - C:\Program Files\Family Toolbar\tbcore3.dll [2009-05-07 2642432]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{64d23501-5195-4224-9446-e2b0fb64e859} - HiGames Toolbar - C:\Program Files\HiGames\tbHiG2.dll [2010-10-18 3908192]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2010-06-13 1438520]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll [2010-08-27 2565448]
{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll [2010-09-28 1400712]
{32b29df0-2237-4370-9a29-37cebb730e9b} - FreeSoundRecorder Toolbar - C:\Program Files\FreeSoundRecorder\tbFree.dll [2010-06-13 2734688]
{338B4DFE-2E2C-4338-9E41-E176D497299E} - MP3 Rocket FileBulldog Toolbar - C:\Program Files\MP3 Rocket FileBulldog Toolbar\tbcore3.dll [2010-02-16 2495488]
{90b49673-5506-483e-b92b-ca0265bd9ca8} - IMVU Inc Toolbar - C:\Program Files\IMVU_Inc\prxtbIMVU.dll [2011-01-17 175912]
{4B3803EA-5230-4DC3-A7FC-33638F3D3542} - &Crawler lišta - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll [2008-09-10 1194496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TO2SSM_McciTrayApp"=C:\Program Files\TO2SSM\McciTrayApp.exe [2008-08-15 1473536]
"{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"=C:\Program Files\Google\Gmail Notifier\gnotify.exe [2005-07-15 479232]
"WinFastDTV"=C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [2008-06-20 90112]
"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2008-03-10 689488]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2008-03-17 1848648]
"GUCI_AVS"=C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe [2007-12-10 323584]
"PAP7501_Monitor"=C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe [2007-12-10 323584]
"ButtonMonitor"=C:\Program Files\IOI\IOI\ButtonMonitor.exe [2007-01-30 53248]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]
"UVS11 Preload"=C:\Program Files\Ulead Systems\Ulead VideoStudio 11 SE DVD\uvPL.exe [2007-04-12 341488]
"Family Tree Builder Update"=C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2011-05-29 221184]
"LchDrvKey"=C:\WINDOWS\LchDrvKey.exe [2007-03-28 36864]
"HKExt3"=C:\WINDOWS\HKExt3.exe [2008-09-16 313856]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2010-06-07 110696]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2010-06-07 13902440]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-09-08 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe /nogui []
"4StoryPrePatch"=C:\Program Files\Gameforge4D\4Story\PrePatch.exe [2010-10-19 319488]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"MotiveReportAgent"=C:\Program Files\TO2SAM\McciBrowser.exe [2008-05-29 1013248]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"WinFast Schedule"=C:\Program Files\WinFast\WFDTV\WFWIZ.exe [2008-06-20 2887680]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]
"NokiaOviSuite2"=C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2010-07-02 671608]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
""= []

C:\Documents and Settings\Peter\Nabídka Start\Programy\Po spuštění
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=0x91000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\usmt\migwiz.exe"="C:\WINDOWS\system32\usmt\migwiz.exe:*:Enabled:Průvodce přenesením souborů a nastavení"
"C:\Documents and Settings\Peter\Plocha\ICQ6.5\ICQ.exe"="C:\Documents and Settings\Peter\Plocha\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Metin2_CZ\metin2.bin"="C:\Program Files\Metin2_CZ\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Metin2_Germany\metin2.bin"="C:\Program Files\Metin2_Germany\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Metin2_CZ\metin2client.bin"="C:\Program Files\Metin2_CZ\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\TeamViewer\Version4\TeamViewer.exe"="C:\Program Files\TeamViewer\Version4\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Electronic Arts\Need for Speed ProStreet\nfs.exe"="C:\Program Files\Electronic Arts\Need for Speed ProStreet\nfs.exe:*:Enabled:nfs"
"C:\Program Files\TmNationsForever\TmForever.exe"="C:\Program Files\TmNationsForever\TmForever.exe:*:Enabled:TmForever"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\ooVoo\ooVoo.exe"="C:\Program Files\ooVoo\ooVoo.exe:*:Enabled:ooVoo"
"C:\Program Files\EA Sports\FIFA 08\FIFA08.exe"="C:\Program Files\EA Sports\FIFA 08\FIFA08.exe:*:Enabled:FIFA08"
"C:\Documents and Settings\Tess\Plocha\luncher.exe"="C:\Documents and Settings\Tess\Plocha\luncher.exe:*:Enabled:luncher"
"C:\Documents and Settings\Tess\Plocha\mc.exe"="C:\Documents and Settings\Tess\Plocha\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\Peter\Plocha\luncher.exe"="C:\Documents and Settings\Peter\Plocha\luncher.exe:*:Enabled:luncher"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\All Users.WINDOWS\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe"="C:\Documents and Settings\All Users.WINDOWS\Data aplikací\SweetIM\Messenger\update\sweetimsetup.exe:*:Enabled:SweetIM Installer"
"C:\Documents and Settings\Kity\Plocha\luncher.exe"="C:\Documents and Settings\Kity\Plocha\luncher.exe:*:Enabled:luncher"
"C:\Documents and Settings\Kity\Plocha\mc.exe"="C:\Documents and Settings\Kity\Plocha\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\Kity\Plocha\italian metinoo\luncher.exe"="C:\Documents and Settings\Kity\Plocha\italian metinoo\luncher.exe:*:Enabled:luncher"
"C:\Documents and Settings\Kity\Plocha\italian metinoo\mc.exe"="C:\Documents and Settings\Kity\Plocha\italian metinoo\mc.exe:*:Enabled:mc"
"C:\WINDOWS\system32\muzapp.exe"="C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\Loki\Loki.exe"="C:\Program Files\Loki\Loki.exe:*:Enabled:Loki"
"C:\Program Files\Cyanide\GameCenter\GameCenter.exe"="C:\Program Files\Cyanide\GameCenter\GameCenter.exe:*:Enabled:GameCenter"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\Aspire Metin2\metin2client.bin"="C:\Program Files\Aspire Metin2\metin2client.bin:*:Disabled:metin2client"
"C:\Documents and Settings\Kity\Data aplikací\IMVUClient\1VivoxVoice.exe"="C:\Documents and Settings\Kity\Data aplikací\IMVUClient\1VivoxVoice.exe:*:Enabled:1VivoxVoice"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\ICQ7.0\ICQ.exe"="C:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"C:\Program Files\ICQ7.0\aolload.exe"="C:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2011-09-29 20:51:04 ----D---- C:\Program Files\trend micro
2011-09-29 20:51:03 ----D---- C:\rsit
2011-09-29 20:39:41 ----D---- C:\Documents and Settings\Peter\Data aplikací\Malwarebytes
2011-09-29 20:39:37 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-09-29 20:39:35 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Malwarebytes
2011-09-29 20:39:34 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-09-29 20:39:34 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-09-29 20:33:05 ----A---- C:\WINDOWS\resetlog.txt
2011-09-29 20:24:19 ----D---- C:\WINDOWS\pss
2011-09-29 20:17:35 ----D---- C:\driver gigabyte
2011-09-29 20:03:51 ----D---- C:\Program Files\Lavalys
2011-09-29 19:57:51 ----RA---- C:\WINDOWS\system32\drivers\rt2500usb.sys
2011-09-29 15:50:34 ----A---- C:\WINDOWS\zip.exe
2011-09-29 15:50:34 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-09-29 15:50:34 ----A---- C:\WINDOWS\SWSC.exe
2011-09-29 15:50:34 ----A---- C:\WINDOWS\SWREG.exe
2011-09-29 15:50:34 ----A---- C:\WINDOWS\sed.exe
2011-09-29 15:50:34 ----A---- C:\WINDOWS\PEV.exe
2011-09-29 15:50:34 ----A---- C:\WINDOWS\NIRCMD.exe
2011-09-29 15:50:34 ----A---- C:\WINDOWS\MBR.exe
2011-09-29 15:50:34 ----A---- C:\WINDOWS\grep.exe
2011-09-29 15:50:30 ----D---- C:\WINDOWS\ERDNT
2011-09-29 15:50:29 ----SD---- C:\ComboFix
2011-09-29 15:50:26 ----D---- C:\Qoobox
2011-09-29 15:22:24 ----D---- C:\WINDOWS\Prefetch
2011-09-29 14:47:49 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2011-09-29 14:47:30 ----A---- C:\WINDOWS\system32\desktop.ini
2011-09-29 14:34:33 ----RA---- C:\WINDOWS\SET45.tmp
2011-09-29 14:34:31 ----RA---- C:\WINDOWS\SET39.tmp
2011-09-29 14:34:29 ----RA---- C:\WINDOWS\SET36.tmp
2011-09-22 14:18:12 ----A---- C:\WINDOWS\SET6B.tmp
2011-09-20 11:33:28 ----RA---- C:\WINDOWS\SET9D.tmp
2011-09-20 11:33:25 ----RA---- C:\WINDOWS\SET8E.tmp
2011-09-20 11:33:24 ----RA---- C:\WINDOWS\SET88.tmp
2011-09-19 16:12:00 ----RA---- C:\WINDOWS\SET9C.tmp
2011-09-19 16:11:58 ----RA---- C:\WINDOWS\SET8D.tmp
2011-09-19 16:11:56 ----RA---- C:\WINDOWS\SET87.tmp
2011-09-18 18:27:56 ----RA---- C:\WINDOWS\SET9B.tmp
2011-09-18 18:27:53 ----RA---- C:\WINDOWS\SET8C.tmp
2011-09-18 18:27:52 ----RA---- C:\WINDOWS\SET86.tmp
2011-09-18 15:04:55 ----RA---- C:\WINDOWS\SET94.tmp
2011-09-18 15:04:52 ----RA---- C:\WINDOWS\SET85.tmp
2011-09-18 15:04:51 ----RA---- C:\WINDOWS\SET7F.tmp
2011-09-18 11:39:02 ----RA---- C:\WINDOWS\SET93.tmp
2011-09-18 11:38:59 ----RA---- C:\WINDOWS\SET84.tmp
2011-09-18 11:38:58 ----RA---- C:\WINDOWS\SET7E.tmp
2011-09-18 11:30:17 ----RA---- C:\WINDOWS\SET92.tmp
2011-09-18 11:30:14 ----RA---- C:\WINDOWS\SET83.tmp
2011-09-18 11:30:13 ----RA---- C:\WINDOWS\SET7D.tmp
2011-09-18 11:11:17 ----RA---- C:\WINDOWS\SET8B.tmp
2011-09-18 11:11:14 ----RA---- C:\WINDOWS\SET7C.tmp
2011-09-18 11:11:13 ----RA---- C:\WINDOWS\SET79.tmp
2011-09-18 10:56:29 ----A---- C:\WINDOWS\pnplog.txt
2011-09-18 10:48:59 ----RA---- C:\WINDOWS\SET8A.tmp
2011-09-18 10:48:56 ----RA---- C:\WINDOWS\SET7B.tmp
2011-09-18 10:48:55 ----RA---- C:\WINDOWS\SET78.tmp
2011-09-17 22:41:36 ----RA---- C:\WINDOWS\SET89.tmp
2011-09-17 22:41:33 ----RA---- C:\WINDOWS\SET7A.tmp
2011-09-17 22:41:32 ----RA---- C:\WINDOWS\SET77.tmp
2011-09-17 22:23:44 ----RA---- C:\WINDOWS\SET82.tmp
2011-09-17 22:23:41 ----RA---- C:\WINDOWS\SET76.tmp
2011-09-17 22:23:40 ----RA---- C:\WINDOWS\SET73.tmp
2011-09-17 21:26:29 ----RA---- C:\WINDOWS\SET81.tmp
2011-09-17 21:26:26 ----RA---- C:\WINDOWS\SET75.tmp
2011-09-17 21:26:25 ----RA---- C:\WINDOWS\SET72.tmp
2011-09-17 21:14:04 ----RA---- C:\WINDOWS\SET80.tmp
2011-09-17 21:14:02 ----RA---- C:\WINDOWS\SET74.tmp
2011-09-17 21:14:01 ----RA---- C:\WINDOWS\SET71.tmp
2011-09-17 20:32:48 ----A---- C:\WINDOWS\system32\irclass.dll
2011-09-17 20:32:47 ----A---- C:\WINDOWS\system32\spxcoins.dll
2011-09-17 20:32:36 ----RA---- C:\WINDOWS\SET162.tmp
2011-09-17 20:32:33 ----RA---- C:\WINDOWS\SET156.tmp
2011-09-17 20:32:32 ----RA---- C:\WINDOWS\SET153.tmp
2011-09-17 20:20:32 ----A---- C:\WINDOWS\UPGRADE.TXT
2011-09-17 20:02:46 ----D---- C:\Program Files\TO2SAM
2011-09-17 13:21:24 ----D---- C:\Program Files\Crawler
2011-09-17 13:21:09 ----D---- C:\Documents and Settings\Peter\Data aplikací\Spyware Terminator
2011-09-17 13:21:09 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Spyware Terminator
2011-09-17 13:21:09 ----A---- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2011-09-17 13:21:06 ----D---- C:\Program Files\Spyware Terminator
2011-09-16 21:50:32 ----RA---- C:\WINDOWS\system32\drivers\wfcxdtun.sys
2011-09-16 21:50:16 ----RA---- C:\WINDOWS\system32\drivers\wfcxatun.sys
2011-09-16 21:50:03 ----RA---- C:\WINDOWS\system32\drivers\wfcxxbar.sys
2011-09-16 21:49:51 ----RA---- C:\WINDOWS\system32\drivers\wfcxtcap.sys
2011-09-16 21:49:42 ----RA---- C:\WINDOWS\system32\drivers\wfcxacap.sys
2011-09-16 21:49:11 ----D---- C:\Documents and Settings\Peter\Data aplikací\InstallShield
2011-09-16 15:25:08 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\SUPERAntiSpyware.com
2011-09-16 15:25:02 ----D---- C:\Documents and Settings\Peter\Data aplikací\SUPERAntiSpyware.com
2011-09-02 20:42:28 ----D---- C:\Documents and Settings\Peter\Data aplikací\.minecraft

======List of files/folders modified in the last 1 months======

2011-09-29 20:51:04 ----SD---- C:\Program Files
2011-09-29 20:49:56 ----SHD---- C:\WINDOWS\Installer
2011-09-29 20:49:56 ----SHD---- C:\Config.Msi
2011-09-29 20:49:41 ----D---- C:\WINDOWS\Temp
2011-09-29 20:49:32 ----D---- C:\WINDOWS\system32
2011-09-29 20:47:31 ----D---- C:\WINDOWS\system32\drivers
2011-09-29 20:46:56 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-29 20:46:49 ----D---- C:\WINDOWS\Connection Wizard
2011-09-29 20:36:11 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-29 20:33:07 ----D---- C:\WINDOWS\system32\drivers\etc
2011-09-29 20:33:05 ----D---- C:\WINDOWS
2011-09-29 20:26:29 ----HD---- C:\WINDOWS\inf
2011-09-29 20:20:14 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-29 20:20:07 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-09-29 20:19:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-09-29 20:10:15 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-09-29 20:10:14 ----D---- C:\Program Files\SUPERAntiSpyware
2011-09-29 19:57:57 ----SD---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Microsoft
2011-09-29 17:46:46 ----D---- C:\WINDOWS\AppPatch
2011-09-29 17:46:44 ----D---- C:\Program Files\Common Files
2011-09-29 15:23:53 ----D---- C:\WINDOWS\Registration
2011-09-29 15:23:15 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-29 15:22:49 ----SHD---- C:\System Volume Information
2011-09-29 15:22:49 ----D---- C:\WINDOWS\system32\Restore
2011-09-29 14:52:48 ----D---- C:\WINDOWS\system32\config
2011-09-29 14:52:48 ----AC---- C:\WINDOWS\setuplog.txt
2011-09-29 14:49:14 ----AC---- C:\WINDOWS\OEWABLog.txt
2011-09-29 14:49:09 ----AC---- C:\WINDOWS\ODBCINST.INI
2011-09-29 14:48:16 ----ASHC---- C:\WINDOWS\fonts\desktop.ini
2011-09-29 14:47:51 ----SD---- C:\WINDOWS\Web
2011-09-29 14:47:44 ----RAHC---- C:\WINDOWS\system32\cdplayer.exe.manifest
2011-09-29 14:47:34 ----A---- C:\WINDOWS\win.ini
2011-09-29 14:47:27 ----D---- C:\Program Files\Windows Media Player
2011-09-29 14:47:25 ----D---- C:\Program Files\Movie Maker
2011-09-29 14:47:24 ----D---- C:\WINDOWS\system32\oobe
2011-09-29 14:47:23 ----D---- C:\Program Files\Outlook Express
2011-09-29 14:47:19 ----D---- C:\Program Files\Internet Explorer
2011-09-29 14:47:05 ----D---- C:\WINDOWS\system32\Com
2011-09-29 14:46:09 ----D---- C:\WINDOWS\system32\wbem
2011-09-29 14:45:23 ----SH---- C:\boot.ini
2011-09-29 14:42:41 ----D---- C:\WINDOWS\security
2011-09-29 14:36:18 ----D---- C:\WINDOWS\system32\CatRoot
2011-09-29 14:34:47 ----A---- C:\WINDOWS\system.ini
2011-09-29 14:34:36 ----ASH---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\desktop.ini
2011-09-20 11:33:51 ----A---- C:\WINDOWS\imsins.BAK
2011-09-18 10:55:05 ----D---- C:\WINDOWS\Help
2011-09-17 22:29:48 ----D---- C:\WINDOWS\system
2011-09-17 22:29:47 ----D---- C:\WINDOWS\system32\Setup
2011-09-17 22:29:41 ----D---- C:\WINDOWS\system32\usmt
2011-09-17 22:29:41 ----D---- C:\WINDOWS\L2Schemas
2011-09-17 22:29:31 ----D---- C:\WINDOWS\ime
2011-09-17 22:29:30 ----RSD---- C:\WINDOWS\Fonts
2011-09-17 22:29:29 ----D---- C:\WINDOWS\Network Diagnostic
2011-09-17 22:29:29 ----D---- C:\WINDOWS\Media
2011-09-17 22:29:27 ----D---- C:\WINDOWS\system32\cs-cz
2011-09-17 22:29:19 ----D---- C:\WINDOWS\PeerNet
2011-09-17 22:29:10 ----D---- C:\WINDOWS\system32\npp
2011-09-17 22:29:04 ----D---- C:\WINDOWS\msagent
2011-09-17 22:29:01 ----D---- C:\WINDOWS\system32\cs
2011-09-17 22:26:57 ----D---- C:\WINDOWS\system32\1029
2011-09-17 22:26:46 ----D---- C:\WINDOWS\twain_32
2011-09-17 22:26:16 ----D---- C:\WINDOWS\system32\icsxml
2011-09-17 22:25:55 ----D---- C:\WINDOWS\system32\ias
2011-09-17 22:25:51 ----D---- C:\WINDOWS\system32\1033
2011-09-17 22:25:09 ----D---- C:\WINDOWS\WinSxS
2011-09-17 22:25:09 ----D---- C:\WINDOWS\Driver Cache
2011-09-17 13:25:40 ----D---- C:\Program Files\Winferno
2011-09-16 15:23:34 ----SD---- C:\Documents and Settings\Peter\Data aplikací\Microsoft
2011-09-16 13:27:27 ----AC---- C:\WINDOWS\system32\Dvbpws.dll
2011-09-16 13:09:10 ----D---- C:\WINDOWS\system32\RTCOM
2011-09-14 10:29:46 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\CanonIJPLM
2011-09-13 15:09:06 ----D---- C:\Documents and Settings\Peter\Data aplikací\Apple Computer
2011-09-13 13:05:34 ----SD---- C:\WINDOWS\Tasks
2011-09-12 15:31:17 ----D---- C:\Program Files\Graffiti Studio 2.0
2011-09-10 20:43:47 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\TrackMania
2011-09-10 20:41:02 ----D---- C:\Documents and Settings\Peter\Data aplikací\Skype
2011-09-10 16:39:55 ----AC---- C:\WINDOWS\NeroDigital.ini
2011-09-10 15:45:36 ----D---- C:\Program Files\Mozilla Firefox
2011-09-10 12:40:53 ----D---- C:\Program Files\Metin2_CZ
2011-09-08 15:12:15 ----D---- C:\Program Files\Ladicka
2011-09-07 18:10:34 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-07 08:38:18 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\CanonIJ

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-08-09 114016]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-05-22 664064]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-08-09 53920]
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2008-12-19 5632]
R1 wfcxacap;WinFast TV PCI Audio Capture Driver; C:\WINDOWS\system32\DRIVERS\wfcxacap.sys [2007-09-19 9856]
R2 npf;NetGroup Packet Filter Driver; C:\WINDOWS\system32\drivers\npf.sys [2010-01-27 50704]
R2 wfcxatun;WinFast TV Analog Tuner Driver; C:\WINDOWS\system32\drivers\wfcxatun.sys [2007-09-19 31744]
R2 WFCXVCAP;WinFast TV Video Capture Driver; C:\WINDOWS\system32\drivers\wfcxvcap.sys [2007-09-19 167040]
R3 dgderdrv;dgderdrv; C:\WINDOWS\System32\drivers\dgderdrv.sys [2010-10-25 18120]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2010-06-08 10531200]
R3 RT2500USB;ASUS RT2500 USB Wireless LAN Driver; C:\WINDOWS\system32\DRIVERS\rt2500usb.sys [2006-11-08 240384]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-01-03 105856]
R3 ULCDRHlp;ULCDRHlp; C:\WINDOWS\System32\Drivers\ULCDRHlp.sys [2004-12-23 27392]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver; C:\WINDOWS\system32\drivers\wfcxdtun.sys [2007-09-19 21248]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver; C:\WINDOWS\system32\drivers\wfcxtcap.sys [2007-09-19 15872]
R3 wfcxxbar;WinFast TV Crossbar Driver; C:\WINDOWS\system32\drivers\wfcxxbar.sys [2007-09-19 10496]
S3 Avgfwdx;Avgfwdx; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2010-07-12 30432]
S3 Avgfwfd;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2010-07-12 30432]
S3 catchme;catchme; \??\C:\DOCUME~1\Kity\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GUCI_AVS;iSlim 320; C:\WINDOWS\system32\DRIVERS\GUCI_AVS.sys [2008-03-31 533888]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys []
S3 motmodem;Motorola USB CDC ACM Driver; C:\WINDOWS\system32\DRIVERS\motmodem.sys [2007-06-18 23680]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2010-02-26 8320]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2008-04-14 5888]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2010-08-27 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2010-08-27 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2010-08-27 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver; C:\WINDOWS\system32\DRIVERS\ss_bserd.sys [2010-08-27 100224]
S3 ssm_bus;SAMSUNG Mobile USB Device II 1.0 driver (WDM); C:\WINDOWS\system32\DRIVERS\ssm_bus.sys [2010-08-27 104448]
S3 ssm_mdfl;SAMSUNG Mobile USB Modem II 1.0 Filter; C:\WINDOWS\system32\DRIVERS\ssm_mdfl.sys [2010-08-27 14848]
S3 ssm_mdm;SAMSUNG Mobile USB Modem II 1.0 Drivers; C:\WINDOWS\system32\DRIVERS\ssm_mdm.sys [2010-08-27 132608]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 usbsermptxp;Motorola USB Modem Driver for MPT XP; C:\WINDOWS\system32\DRIVERS\usbsermptxp.sys [2009-06-13 25600]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2011-01-05 37664]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-10-07 345376]
R2 Capture Device Service;Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 dgdersvc;Device Error Recovery Service; C:\WINDOWS\system32\dgdersvc.exe [2010-10-25 95568]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2010-10-25 217088]
R2 GEST Service;GEST Service for program management.; C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [2008-05-13 80392]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
R2 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2008-01-22 103808]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-08-20 73728]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-07-20 935208]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2010-06-07 154728]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2011-09-17 570880]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2007-03-03 67056]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe []
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-27 133104]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [2010-08-27 488776]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-01-23 654848]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-27 133104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-22 136120]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McAfee ScanAndRepair Svc;McAfee ScanAndRepair Svc; C:\Program Files\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [2011-04-06 694864]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-11-28 800040]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[petr.29]

Přidávám ještě log z Combofixu:

ComboFix 11-09-29.06 - Peter 29.09.2011 21:34:19.3.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1306 [GMT 2:00]
Spuštěný z: C:\Documents and Settings\Peter\Plocha\ComboFix.exe


((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))


---- Předchozí spuštění -------

C:\Documents and Settings\Peter\Recent\Thumbs.db
C:\install.exe
C:\Program Files\Browser Plugin\BHO.dll
C:\Program Files\Mozilla Firefox\extensions\{4CFC8387-5FB1-47C1-8AA4-5B7B906A591E}\defaults\preferences\prefs.js
C:\Program Files\Mozilla Firefox\extensions\{4CFC8387-5FB1-47C1-8AA4-5B7B906A591E}\chrome.manifest
C:\Program Files\Mozilla Firefox\extensions\{4CFC8387-5FB1-47C1-8AA4-5B7B906A591E}\chrome\wyeke.jar
C:\Program Files\Mozilla Firefox\extensions\{4CFC8387-5FB1-47C1-8AA4-5B7B906A591E}\install.rdf
C:\WINDOWS\COM+.log
C:\WINDOWS\regopt.log
C:\WINDOWS\system32\detoured.dll
C:\WINDOWS\system32\Dvbpws.dll
C:\WINDOWS\system32\TZLog.log


((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_MYWEBSEARCHSERVICE
-------\Legacy_WYEKE_SERVICE


((((((((((((((((((((((((( Soubory vytvořené od 2011-08-28 do 2011-09-29 )))))))))))))))))))))))))))))))


2011-09-29 19:19:37 . 2011-09-29 19:19:38 -------- d-----w- C:\CCleaner
2011-09-29 18:51:04 . 2011-09-29 18:51:10 -------- d-----w- C:\Program Files\trend micro
2011-09-29 18:51:03 . 2011-09-29 18:51:12 -------- d-----w- C:\rsit
2011-09-29 18:39:37 . 2010-01-07 14:07:14 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-09-29 18:39:35 . 2011-09-29 18:39:35 -------- d-----w- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Malwarebytes
2011-09-29 18:39:34 . 2011-09-29 18:39:40 -------- d-----w- C:\Program Files\Malwarebytes' Anti-Malware
2011-09-29 18:39:34 . 2010-01-07 14:07:04 19160 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2011-09-29 18:17:35 . 2011-09-29 18:18:18 -------- d-----w- C:\driver gigabyte
2011-09-29 18:03:51 . 2011-09-29 18:03:51 -------- d-----w- C:\Program Files\Lavalys
2011-09-29 17:57:51 . 2006-11-08 12:45:26 240384 ----a-r- C:\WINDOWS\system32\drivers\rt2500usb.sys
2011-09-29 12:49:55 . 2008-04-14 12:00:00 57399 -c--a-w- C:\WINDOWS\system32\dllcache\cplexe.exe
2011-09-29 12:34:33 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET45.tmp
2011-09-29 12:34:31 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET39.tmp
2011-09-29 12:34:29 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET36.tmp
2011-09-22 12:18:12 . 2011-09-22 12:18:12 0 ----a-w- C:\WINDOWS\SET6B.tmp
2011-09-20 09:33:28 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET9D.tmp
2011-09-20 09:33:25 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET8E.tmp
2011-09-20 09:33:24 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET88.tmp
2011-09-19 14:12:00 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET9C.tmp
2011-09-19 14:11:58 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET8D.tmp
2011-09-19 14:11:56 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET87.tmp
2011-09-18 16:27:56 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET9B.tmp
2011-09-18 16:27:53 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET8C.tmp
2011-09-18 16:27:52 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET86.tmp
2011-09-18 13:04:55 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET94.tmp
2011-09-18 13:04:52 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET85.tmp
2011-09-18 13:04:51 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET7F.tmp
2011-09-18 09:39:02 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET93.tmp
2011-09-18 09:38:59 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET84.tmp
2011-09-18 09:38:58 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET7E.tmp
2011-09-18 09:30:17 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET92.tmp
2011-09-18 09:30:14 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET83.tmp
2011-09-18 09:30:13 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET7D.tmp
2011-09-18 09:11:17 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET8B.tmp
2011-09-18 09:11:14 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET7C.tmp
2011-09-18 09:11:13 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET79.tmp
2011-09-18 08:48:59 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET8A.tmp
2011-09-18 08:48:56 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET7B.tmp
2011-09-18 08:48:55 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET78.tmp
2011-09-17 20:41:36 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET89.tmp
2011-09-17 20:41:33 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET7A.tmp
2011-09-17 20:41:32 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET77.tmp
2011-09-17 20:23:44 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET82.tmp
2011-09-17 20:23:41 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET76.tmp
2011-09-17 20:23:40 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET73.tmp
2011-09-17 19:26:29 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET81.tmp
2011-09-17 19:26:26 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET75.tmp
2011-09-17 19:26:25 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET72.tmp
2011-09-17 19:14:04 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET80.tmp
2011-09-17 19:14:02 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET74.tmp
2011-09-17 19:14:01 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET71.tmp
2011-09-17 18:32:48 . 2008-04-14 12:00:00 13312 -c--a-w- C:\WINDOWS\system32\dllcache\irclass.dll
2011-09-17 18:32:48 . 2008-04-14 12:00:00 13312 ----a-w- C:\WINDOWS\system32\irclass.dll
2011-09-17 18:32:47 . 2008-04-14 12:00:00 24661 -c--a-w- C:\WINDOWS\system32\dllcache\spxcoins.dll
2011-09-17 18:32:47 . 2008-04-14 12:00:00 24661 ----a-w- C:\WINDOWS\system32\spxcoins.dll
2011-09-17 18:32:36 . 2008-04-14 12:00:00 16825 ----a-r- C:\WINDOWS\SET162.tmp
2011-09-17 18:32:33 . 2008-04-14 12:00:00 1088840 ----a-r- C:\WINDOWS\SET156.tmp
2011-09-17 18:32:32 . 2008-04-14 12:00:00 1246067 ----a-r- C:\WINDOWS\SET153.tmp
2011-09-17 18:02:46 . 2011-09-17 18:02:47 -------- d-----w- C:\Program Files\TO2SAM
2011-09-17 11:21:24 . 2011-09-17 11:21:33 -------- d-----w- C:\Program Files\Crawler
2011-09-17 11:21:09 . 2011-09-17 11:25:41 -------- d-----w- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Spyware Terminator
2011-09-17 11:21:09 . 2011-09-17 11:21:09 141312 ----a-w- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2011-09-17 11:21:06 . 2011-09-17 11:25:36 -------- d-----w- C:\Program Files\Spyware Terminator
2011-09-16 19:50:32 . 2007-09-19 03:12:52 21248 ----a-r- C:\WINDOWS\system32\drivers\wfcxdtun.sys
2011-09-16 19:50:16 . 2007-09-19 05:37:58 31744 ----a-r- C:\WINDOWS\system32\drivers\wfcxatun.sys
2011-09-16 19:50:03 . 2007-09-19 03:09:52 10496 ----a-r- C:\WINDOWS\system32\drivers\wfcxxbar.sys
2011-09-16 19:49:51 . 2007-09-19 03:09:42 15872 ----a-r- C:\WINDOWS\system32\drivers\wfcxtcap.sys
2011-09-16 19:49:42 . 2007-09-19 03:09:32 9856 ----a-r- C:\WINDOWS\system32\drivers\wfcxacap.sys
2011-09-16 13:25:08 . 2011-09-16 13:25:08 -------- d-----w- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\SUPERAntiSpyware.com
.


(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))

2011-09-29 19:15:41 . 2009-06-10 13:31:02 16608 ----a-w- C:\WINDOWS\gdrv.sys
2010-01-26 09:11:08 . 2011-03-06 22:28:56 444283 -c--a-w- C:\Program Files\Common Files\WinPcapNmap.exe
2009-05-07 16:24:29 . 2009-05-07 16:24:29 1914000 -c--a-w- C:\Program Files\install_flash_player_10_active_x.exe
2009-05-07 16:19:10 . 2009-05-07 16:19:10 1878888 -c--a-w- C:\Program Files\install_flash_player_10.exe
2009-03-06 11:36:36 . 2009-03-06 11:36:36 547496 -c--a-w- C:\Program Files\ChromeSetup.exe
2009-02-22 10:36:28 . 2009-02-22 10:36:27 2249512 -c--a-w- C:\Program Files\SkypeSetup.exe
2009-02-06 11:55:04 . 2009-02-06 11:55:04 318904 -c--a-w- C:\Program Files\wmpfirefoxplugin.exe
2009-01-19 14:29:59 . 2009-01-19 14:26:05 14877776 -c--a-w- C:\Program Files\AVSDVDCopy.exe
2009-01-19 14:07:50 . 2009-01-19 14:07:31 4329014 -c--a-w- C:\Program Files\Burn4free_setup.exe
2009-01-16 10:53:12 . 2009-01-16 10:53:12 2090323 -c--a-w- C:\Program Files\HfAsistentSetup.exe
2011-06-30 18:05:38 . 2011-03-25 12:27:06 142296 ----a-w- C:\Program Files\mozilla firefox\components\browsercomps.dll


(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))


*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll" [2010-08-27 13:25:22 2565448]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2010-06-13 15:25:14 138552]
"{1C4AB6A5-595F-4e86-B15F-F93CCE2BBD48}"= "C:\Program Files\Family Toolbar\tbhelper.dll" [2009-05-07 21:43:00 355840]

[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]

[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]

[HKEY_CLASSES_ROOT\clsid\{1c4ab6a5-595f-4e86-b15f-f93cce2bbd48}]
[HKEY_CLASSES_ROOT\URLSearchHook.MHURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{1EA6B471-CAD2-419a-9539-0586EEFE2D09}]
[HKEY_CLASSES_ROOT\URLSearchHook.MHURLSearchHook]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]
2009-05-07 21:46:54 2642432 -c--a-w- C:\Program Files\Family Toolbar\tbcore3.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26:36 3908192 ----a-w- C:\Program Files\ConduitEngine\ConduitEngine.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{32b29df0-2237-4370-9a29-37cebb730e9b}]
2011-01-17 14:54:02 175912 ----a-w- C:\Program Files\FreeSoundRecorder\prxtbFre0.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{90b49673-5506-483e-b92b-ca0265bd9ca8}]
2011-01-17 14:54:02 175912 ----a-w- C:\Program Files\IMVU_Inc\prxtbIMVU.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2010-08-27 13:25:22 2565448 ----a-w- C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3CF7606-E683-4375-A372-96B75DA0AEF7}]
2010-02-11 07:58:56 185856 -c--a-w- C:\Program Files\Get Styles\enlbrdr.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2010-06-13 15:25:12 1438520 -c--a-w- C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}"= "C:\Program Files\Family Toolbar\tbcore3.dll" [2009-05-07 21:46:54 2642432]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2010-06-13 15:25:12 1438520]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll" [2010-08-27 13:25:22 2565448]
"{32b29df0-2237-4370-9a29-37cebb730e9b}"= "C:\Program Files\FreeSoundRecorder\prxtbFre0.dll" [2011-01-17 14:54:02 175912]
"{90b49673-5506-483e-b92b-ca0265bd9ca8}"= "C:\Program Files\IMVU_Inc\prxtbIMVU.dll" [2011-01-17 14:54:02 175912]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "C:\Program Files\ConduitEngine\ConduitEngine.dll" [2010-10-18 10:26:36 3908192]

[HKEY_CLASSES_ROOT\clsid\{fd2fd708-1f6f-4b68-b141-c5778f0c19bb}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CLASSES_ROOT\clsid\{32b29df0-2237-4370-9a29-37cebb730e9b}]

[HKEY_CLASSES_ROOT\clsid\{90b49673-5506-483e-b92b-ca0265bd9ca8}]

[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}"= "C:\Program Files\Family Toolbar\tbcore3.dll" [2009-05-07 21:46:54 2642432]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2010-06-13 15:25:12 1438520]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll" [2010-08-27 13:25:22 2565448]
"{32B29DF0-2237-4370-9A29-37CEBB730E9B}"= "C:\Program Files\FreeSoundRecorder\prxtbFre0.dll" [2011-01-17 14:54:02 175912]
"{90B49673-5506-483E-B92B-CA0265BD9CA8}"= "C:\Program Files\IMVU_Inc\prxtbIMVU.dll" [2011-01-17 14:54:02 175912]

[HKEY_CLASSES_ROOT\clsid\{fd2fd708-1f6f-4b68-b141-c5778f0c19bb}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar.3]
[HKEY_CLASSES_ROOT\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E}]
[HKEY_CLASSES_ROOT\MHToolbar.MHToolbar]

[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]

[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]

[HKEY_CLASSES_ROOT\clsid\{32b29df0-2237-4370-9a29-37cebb730e9b}]

[HKEY_CLASSES_ROOT\clsid\{90b49673-5506-483e-b92b-ca0265bd9ca8}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WinFast Schedule"="C:\Program Files\WinFast\WFDTV\WFWIZ.exe" [2008-06-20 13:58:38 2887680]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 16:03:40 152872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"TO2SSM_McciTrayApp"="C:\Program Files\TO2SSM\McciTrayApp.exe" [2008-08-15 16:33:08 1473536]
"{0228e555-4f9c-4e35-a3ec-b109a192b4c2}"="C:\Program Files\Google\Gmail Notifier\gnotify.exe" [2005-07-15 21:48:33 479232]
"WinFastDTV"="C:\Program Files\WinFast\WFDTV\DTVSchdl.exe" [2008-06-20 13:49:54 90112]
"ArcSoft Connection Service"="C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 18:17:52 207424]
"CanonSolutionMenu"="C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe" [2008-03-10 16:20:00 689488]
"CanonMyPrinter"="C:\Program Files\Canon\MyPrinter\BJMyPrt.exe" [2008-03-17 16:06:00 1848648]
"GUCI_AVS"="C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe" [2007-12-10 13:55:26 323584]
"PAP7501_Monitor"="C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe" [2007-12-10 13:55:26 323584]
"ButtonMonitor"="C:\Program Files\IOI\IOI\ButtonMonitor.exe" [2007-01-30 03:37:00 53248]
"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 12:57:24 153136]
"UVS11 Preload"="C:\Program Files\Ulead Systems\Ulead VideoStudio 11 SE DVD\uvPL.exe" [2007-04-12 16:24:18 341488]
"Family Tree Builder Update"="C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe" [2011-05-29 16:30:46 221184]
"LchDrvKey"="LchDrvKey.exe" [2007-03-28 15:55:54 36864]
"HKExt3"="HKExt3.exe" [2008-09-16 17:47:40 313856]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2010-06-07 15:35:24 110696]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2010-06-07 15:35:22 13902440]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 22:58:10 37296]
"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 04:59:06 937920]
"4StoryPrePatch"="C:\Program Files\Gameforge4D\4Story\PrePatch.exe" [2010-10-19 17:41:05 319488]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2010-11-29 16:38:18 421888]
"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 10:59:52 254696]
"MotiveReportAgent"="C:\Program Files\TO2SAM\McciBrowser.exe" [2008-05-29 12:34:50 1013248]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 12:00:00 15360]

C:\Documents and Settings\tereska\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

C:\Documents and Settings\Kity\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0C:\PROGRA~1\AVG\AVG10\avgchsvx.exe /sync\0C:\PROGRA~1\AVG\AVG10\avgrsx.exe /sync /restart\0\0sprestrt

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaOviSuite2]
2010-07-02 10:20:12 671608 ----a-w- C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Program Files\\Metin2_CZ\\metin2.bin"=
"C:\\Program Files\\Metin2_Germany\\metin2.bin"=
"C:\\Program Files\\Metin2_CZ\\metin2client.bin"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\TeamViewer\\Version4\\TeamViewer.exe"=
"C:\\Program Files\\TmNationsForever\\TmForever.exe"=
"C:\\Program Files\\Valve\\hl.exe"=
"C:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"C:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"C:\\Program Files\\ICQ7.0\\ICQ.exe"=
"C:\\Program Files\\ICQ7.0\\aolload.exe"=
"C:\\Program Files\\EA Sports\\FIFA 08\\FIFA08.exe"=
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"C:\\Documents and Settings\\All Users.WINDOWS\\Data aplikací\\SweetIM\\Messenger\\update\\sweetimsetup.exe"=
"C:\\Documents and Settings\\Kity\\Plocha\\italian metinoo\\luncher.exe"=
"C:\\Documents and Settings\\Kity\\Plocha\\italian metinoo\\mc.exe"=
"C:\\WINDOWS\\system32\\muzapp.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Documents and Settings\\Kity\\Data aplikací\\IMVUClient\\1VivoxVoice.exe"=
"C:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"443:TCP"= 443:TCP:*:Disabled:ooVoo TCP port 443
"443:UDP"= 443:UDP:*:Disabled:ooVoo UDP port 443
"37674:TCP"= 37674:TCP:*:Disabled:ooVoo TCP port 37674
"37674:UDP"= 37674:UDP:*:Disabled:ooVoo UDP port 37674
"37675:UDP"= 37675:UDP:*:Disabled:ooVoo UDP port 37675

R0 sptd;sptd;C:\WINDOWS\system32\drivers\sptd.sys [22.5.2010 18:12:56 664064]
R1 wfcxacap;WinFast TV PCI Audio Capture Driver;C:\WINDOWS\system32\drivers\wfcxacap.sys [16.9.2011 21:49:42 9856]
R2 dgdersvc;Device Error Recovery Service;C:\WINDOWS\system32\dgdersvc.exe [25.10.2010 11:07:48 95568]
R2 FsUsbExService;FsUsbExService;C:\WINDOWS\system32\FsUsbExService.Exe [24.12.2010 20:51:15 217088]
R2 GEST Service;GEST Service for program management.;C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [10.6.2009 16:30:43 80392]
R2 ICQ Service;ICQ Service;C:\Program Files\ICQ6Toolbar\ICQ Service.exe [19.12.2008 19:57:30 246520]
R2 npf;NetGroup Packet Filter Driver;C:\WINDOWS\system32\drivers\npf.sys [27.1.2010 4:09:02 50704]
R2 wfcxatun;WinFast TV Analog Tuner Driver;C:\WINDOWS\system32\drivers\wfcxatun.sys [16.9.2011 21:50:16 31744]
R2 WFCXVCAP;WinFast TV Video Capture Driver;C:\WINDOWS\system32\drivers\wfcxvcap.sys [22.10.2009 14:35:44 167040]
R3 dgderdrv;dgderdrv;C:\WINDOWS\system32\drivers\dgderdrv.sys [25.10.2010 11:07:48 18120]
R3 FsUsbExDisk;FsUsbExDisk;C:\WINDOWS\system32\FsUsbExDisk.Sys [24.12.2010 20:51:15 36640]
R3 wfcxdtun;WinFast DTV BDA Tuner/Demod Driver;C:\WINDOWS\system32\drivers\wfcxdtun.sys [16.9.2011 21:50:32 21248]
R3 wfcxtcap;WinFast DTV BDA Transport Stream Capture Driver;C:\WINDOWS\system32\drivers\wfcxtcap.sys [16.9.2011 21:49:51 15872]
R3 wfcxxbar;WinFast TV Crossbar Driver;C:\WINDOWS\system32\drivers\wfcxxbar.sys [16.9.2011 21:50:03 10496]
S2 AVGIDSAgent;AVGIDSAgent;"C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe" --> C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe [?]
S2 gupdate;Služba Google Update (gupdate);C:\Program Files\Google\Update\GoogleUpdate.exe [27.3.2009 12:23:09 133104]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe [13.10.2010 17:57:52 488776]
S3 Avgfwdx;Avgfwdx;C:\WINDOWS\system32\drivers\avgfwdx.sys [12.7.2010 4:33:54 30432]
S3 Avgfwfd;AVG network filter service;C:\WINDOWS\system32\drivers\avgfwdx.sys [12.7.2010 4:33:54 30432]
S3 EagleXNt;EagleXNt;\??\C:\WINDOWS\system32\drivers\EagleXNt.sys --> C:\WINDOWS\system32\drivers\EagleXNt.sys [?]
S3 GUCI_AVS;iSlim 320;C:\WINDOWS\system32\drivers\GUCI_AVS.sys [24.12.2008 19:19:40 533888]
S3 gupdatem;Služba Google Update (gupdatem);C:\Program Files\Google\Update\GoogleUpdate.exe [27.3.2009 12:23:09 133104]
S3 McAfee ScanAndRepair Svc;McAfee ScanAndRepair Svc;C:\Program Files\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [6.4.2011 16:40:00 694864]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;C:\WINDOWS\system32\drivers\nmwcdnsu.sys [21.7.2010 15:15:56 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic;C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [21.7.2010 15:15:56 8320]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);C:\WINDOWS\system32\drivers\ss_bbus.sys [24.12.2010 20:49:47 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);C:\WINDOWS\system32\drivers\ss_bmdfl.sys [24.12.2010 20:49:48 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;C:\WINDOWS\system32\drivers\ss_bmdm.sys [24.12.2010 20:49:48 123648]
S3 ss_bserd;SAMSUNG USB Mobile Logging Driver;C:\WINDOWS\system32\drivers\ss_bserd.sys [24.12.2010 20:49:48 100224]

--- Ostatní služby/ovladače v paměti ---

*NewlyCreated* - FSUSBEXDISK

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 11:24:06 451872 -c--a-w- C:\Program Files\Common Files\LightScribe\LSRunOnce.exe

Obsah adresáře 'Naplánované úlohy'

2011-09-17 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2009-10-22 10:50:20 . 2009-10-22 10:50:20]

2011-09-29 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-27 10:23:09 . 2009-03-27 10:23:04]

2011-09-29 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2009-03-27 10:23:09 . 2009-03-27 10:23:04]


------- Doplňkový sken -------

uStart Page = hxxp://search.myheritage.com
mStart Page = hxxp://search.myheritage.com
mWindow Title = Microsoft Internet Explorer
IE: Add to Google Photos Screensa&ver - C:\WINDOWS\system32\GPhotos.scr/200
IE: Crawler Search - tbr:iemenu
IE: E&xportovat do aplikace Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Kity\Nabídka Start\Programy\IMVU\Run IMVU.lnk
TCP: DhcpNameServer = 62.129.50.20 85.135.32.100
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
DPF: {6218F7B5-0D3A-48BA-AE4C-49DCFA63D400} - hxxp://www.myheritage.cz/Genoogle/Components/A ... eQuery.dll
FF - ProfilePath - C:\Documents and Settings\Peter\Data aplikací\Mozilla\Firefox\Profiles\v6irx927.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - seznam.cz
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZJfox000&ptb=sTCYCVZCkcj2HUiTrSI9kQ&ind=2009102416&ptnrS=ZJfox000&si=&n=77c07850&psa=&st=kwd&searchfor=
FF - prefs.js: network.proxy.type - 4

- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

URLSearchHooks-{edd4f682-e67a-4175-bb45-c4066da2f7d9} - (no file)
WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
AddRemove-conduitEngine - C:\Program Files\ConduitEngine\ConduitEngineUninstall.exe

[motji]

Dobrý večer

Kdopak Vám poradit pouštět combofix?

Stahněte OTL http://oldtimer.geekstogo.com/OTL.exe
-uložte ho na plochu a spustte soubor OTL.exe.
-do bílého okna dole skopírujte tento skript:

Kód: Vybrat vše

netsvcs
drivers32
savembr:0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /s

/md5start
cngaudit.dll
cryptsvc.dll
eNetHook.dll
eventlog.dll
hal.dll
logevent.dll
netlogon.dll
ntelogon.dll
scecli.dll
sceclt.dll
ws2_32.dll
autochk.exe
csrss.exe
explorer.exe
lsass.exe
services.exe
smss.exe
spoolsv.exe
svchost.exe
userinit.exe
winlogon.exe
adp3132.sys
AGP440.sys
ahcix86.sys
ahcix86s.sys
atapi.sys
cdrom.sys
Changer.sys
fastfat.sys
iaStor.sys
iastorv.sys
IdeChnDr.sys
isapnp.sys
JakNDis.sys
KR10N.sys
mv61xx.sys
ndis.sys
ntfs.sys
nvata.sys
nvatabus.sys
nvgts.sys
nvraid.sys
nvrd32.sys
nvstor.sys
nvstor32.sys
symmpi.sys
tcpip.sys
vaxscsi.sys
viamraid.sys
viasraid.sys
ViPrt.sys
/md5stop

C:\windows\system32\spool\prtprocs|dll;true;true;true /FP
%systemroot%\system32\drivers\*.sys /5
%systemroot%\system32\drivers\*.sys /X
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\system32\*.* /5
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\system32\config\*.sav
%systemroot%\Tasks\*.job /lockedfiles
%systemroot%\*.* /U /s
%systemroot%\*. /mp /s
%ALLUSERSPROFILE%\Data Aplikací\*.*
%ALLUSERSPROFILE%\Data Aplikací\*.exe /s
%ALLUSERSPROFILE%\Dáta aplikácií\*.*
%ALLUSERSPROFILE%\Dáta aplikácií\*.exe /s
%APPDATA%\*.
%APPDATA%\*.*
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe


HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /s
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\BITS /s
reg query "HKLM\Software\Microsoft\Windows NT\CurrentVersion\winlogon" /v GinaDLL /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BITS" /v ImagePath /c
reg query "HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager" /v BootExecute /c
reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager" /v "PendingFileRenameOperations" /c

type c:\boot.ini >> test.txt /c
%SystemDrive%\PhysicalMBR.bin /md5 

- zaškrtněte okénko Pro všechny uživatele.
-označte okénka Kontrola na havěť "LOP" a Kontrola na havěť "Purity"
- Klikněte na tlačítko Prohledat
-po dokončení skenu se objeví logy OTL.Txt a Extras.txt, vložte je zde