VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by supervisor at 2011-10-12 08:54:36
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 155 GB (33%) free of 477 GB
Total RAM: 3326 MB (57% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:54:39, on 12.10.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
C:\WINDOWS\system32\drivers\ctfmon.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe
C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe
C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\bkwin\MSDE2K\MSSQL$BANKKLIENT\Binn\sqlservr.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\help\svchost.exe
c:\Program Files\Silicon Image\3132-W-R\SATARaid5ConfigService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\tlntsvr.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Windows\system32\dllcache\msgsm.exe
C:\PCIRADIO\Radiotray.exe
C:\WINDOWS\system32\Fmctrl.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\program files\real\realplayer\update\realsched.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\windows\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Documents and Settings\supervisor\Data aplikací\Dropbox\bin\Dropbox.exe
C:\PCIRADIO\Raktiv32.exe
C:\WINDOWS\system32\cmd.exe
C:\ins\DOS presmerovani\DOSPrintUI.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclIVTBTSrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\WINDOWS\system32\gptsvc.exe
C:\WINDOWS\system32\srvany.exe
C:\WINDOWS\Microsoft.NET\csrss.exe
C:\WINDOWS\system32\ping.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\ins\RSIT\RSIT.exe
C:\Program Files\trend micro\supervisor.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.komponenty.xcs.cz/Default.aspx
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RadioTray] C:\PCIRADIO\Radiotray.exe
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.EXE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [BtTray] "C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\program files\real\realplayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [NET.Framework] c:\windows\svchost.exe
O4 - HKLM\..\Run: [Update] C:\WINDOWS\security\mupa.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [BrowserChoice] "C:\WINDOWS\system32\browserchoice.exe" /run (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Dropbox.lnk = ?
O4 - Startup: RadioAKTIV.lnk = C:\PCIRADIO\Raktiv32.exe
O4 - Startup: Zástupce - DOSPrintUI.lnk = C:\ins\DOS presmerovani\DOSPrintUI.exe
O4 - Startup: Zástupce - netfruko.lnk = C:\netfruko.bat
O4 - Startup: Zástupce - RFlowCollector.lnk = C:\internet\RFlowCollectorV3\RFlowCollector.exe
O4 - Global Startup: Service Manager.lnk = C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Download All by ASUS Download - C:\Program Files\ASUS\WL-500gP Wireless Router Utilities\ASDownloadAll.htm
O8 - Extra context menu item: Download using ASUS Download - C:\Program Files\ASUS\WL-500gP Wireless Router Utilities\ASDownload.htm
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Vytvořit mobilní oblíbenou položku… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {43BD5CFC-1382-4282-8239-AEC0E7ECAA48} (CTBClient Control) - http://www.wspk.cz/internetbanking/inte ... roject.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 4463542468
O16 - DPF: {721700FE-7F0E-49C5-BDED-CA92B7CB1245} (Camera Stream Client Control Object) - http://90.176.34.126:1112/dcsclictrl.cab
O16 - DPF: {A93B47FD-9BF6-4DA8-97FC-9270B9D64A6C} (VaPgCtrl Class) - http://88.146.207.195:82/plugin/h263ctrl.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O17 - HKLM\System\CCS\Services\Tcpip\..\{5B32B4CD-41AE-4F3F-8060-08FA64E1E77D}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{BF2FA9FE-C8D8-45B9-A1D4-65ADD64A136D}: NameServer = 192.168.1.1
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Audio control provider (ACP.starter) - Unknown owner - C:\WINDOWS\system32\drivers\ctfmon.exe
O23 - Service: Service Application Layer Gateway (Algsvc) - Unknown owner - C:\WINDOWS\nview\lsass.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\WINDOWS\system32\AppleChargerSrv.exe
O23 - Service: ASP.NET_AJAX - Unknown owner - C:\WINDOWS\system32\srvany.exe
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: DNS-server (DNSserver) - Unknown owner - C:\WINDOWS\system32\cmsdll.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Emma Device Management (EmmaDevMgmtSvc) - Sony Ericsson Mobile Communications - C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe
O23 - Service: Emma Update Management (EmmaUpdMgmtSvc) - Sony Ericsson Mobile Communications - C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: Manager mapping IP addresses to hosts (MsHosts) - Unknown owner - C:\WINDOWS\system32\dllcache\mgm.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: Service Host Controller (r_server) - Unknown owner - C:\WINDOWS\help\svchost.exe
O23 - Service: SATARaid5 Configuration Service (SATARaid5 Config Service) - Unknown owner - c:\Program Files\Silicon Image\3132-W-R\SATARaid5ConfigService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 14357 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1935655697-515967899-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1935655697-515967899-839522115-500.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1935655697-515967899-839522115-1003.job
C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1935655697-515967899-839522115-500.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\supervisor\Data aplikací\Mozilla\Firefox\Profiles\20lxcyrw.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}:6.0.03, {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}:6.0.05, {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}:6.0.07, {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, jqs@sun.com:1.0, LogMeInClient@logmein.com:1.0.0.652, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {de1b245c-de57-11da-ba2d-0050c2490048}:1.0.8, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.3, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.4.76, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.6.0.8312, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.23"

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
"{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}"=C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=c:\program files\real\realplayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647]
"Description"=RealJukebox Netscape Plugin
"Path"=c:\program files\real\realplayer\Netscape6\nprjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.652]
"Description"=RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In
"Path"=C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.652]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.647]
"Description"=12.0.1.647
"Path"=c:\program files\real\realplayer\Netscape6\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=Software602 Form Filler Plugin
"Path"=C:\Program Files\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
search@searchsettings.com
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nppl3260.xpt
nsjsrealplayerplugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
NPOFF12.DLL
nppdf32.dll
nppl3260.dll
nprjplug.dll
nprpjplug.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

C:\Documents and Settings\supervisor\Data aplikací\Mozilla\Firefox\Profiles\20lxcyrw.default\extensions\
LogMeInClient@logmein.com
{20a82645-c095-46ed-80e3-08825760534b}
{de1b245c-de57-11da-ba2d-0050c2490048}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2011-06-29 386264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-09-21 3853984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-04 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RadioTray"=C:\PCIRADIO\Radiotray.exe [2000-05-12 32256]
"FmctrlTray"=C:\WINDOWS\system32\Fmctrl.EXE [2001-08-20 270336]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2010-06-09 49208]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"WinSys2"=C:\WINDOWS\system32\winsys2.exe [2006-04-29 208896]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe [2008-05-15 54576]
"LogMeIn GUI"=C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [2008-07-24 63048]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-02-06 2021400]
"BtTray"=C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe [2009-02-27 278016]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-09-08 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2009-06-17 85160]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-02-25 18791456]
"SystemTray"=C:\WINDOWS\system32\SysTray.Exe [2001-10-25 3072]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"TkBellExe"=C:\program files\real\realplayer\update\realsched.exe [2011-06-29 273544]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"NET.Framework"=c:\windows\svchost.exe [2011-10-06 95744]
"Update"=C:\WINDOWS\security\mupa.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"H/PC Connection Agent"=C:\Program Files\Microsoft ActiveSync\Wcescomm.exe [2006-11-13 1289000]
"OM2_Monitor"=C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe [2008-05-15 95536]
"NokiaOviSuite2"=C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2011-07-21 966712]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-09-26 19554952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FmctrlTray]
C:\WINDOWS\system32\Fmctrl.EXE [2001-08-20 270336]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Service Manager.lnk - C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe

C:\Documents and Settings\supervisor\Nabídka Start\Programy\Po spuštění
Dropbox.lnk - C:\Documents and Settings\supervisor\Data aplikací\Dropbox\bin\Dropbox.exe
RadioAKTIV.lnk - C:\PCIRADIO\Raktiv32.exe
Zástupce - DOSPrintUI.lnk - C:\ins\DOS presmerovani\DOSPrintUI.exe
Zástupce - netfruko.lnk - C:\netfruko.bat
Zástupce - RFlowCollector.lnk - C:\internet\RFlowCollectorV3\RFlowCollector.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LMIinit]
C:\WINDOWS\system32\LMIinit.dll [2011-10-06 87424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=1
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\Program Files\Sony Ericsson\SEMC OMSI Module\SEMC OMSI Module.exe"="C:\Program Files\Sony Ericsson\SEMC OMSI Module\SEMC OMSI Module.exe:*:Enabled:SEMC OMSI Module"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\bkwin\20398\BKWIN.EXE"="C:\Program Files\bkwin\20398\BKWIN.EXE:*:Enabled:BankKlient 7 - 20398"
"C:\Program Files\bkwin\MSDE2K\MSSQL$BANKKLIENT\Binn\sqlservr.exe"="C:\Program Files\bkwin\MSDE2K\MSSQL$BANKKLIENT\Binn\sqlservr.exe:*:Enabled:sqlservr.exe"
"C:\internet\RFlowCollectorV3\RFlowCollector.exe"="C:\internet\RFlowCollectorV3\RFlowCollector.exe:*:Enabled:RFlowCollector"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\totalcmd\TOTALCMD.EXE"="C:\Program Files\totalcmd\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Casino\bwin Casino\casino.exe"="C:\Casino\bwin Casino\casino.exe:*:Enabled:casino"
"C:\Documents and Settings\supervisor\Plocha\axisiputility_2_21_0_4\IPUtility.exe"="C:\Documents and Settings\supervisor\Plocha\axisiputility_2_21_0_4\IPUtility.exe:*:Enabled:IPUtility"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\Real\RealPlayer\realplay.exe"="C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite"
"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"C:\Program Files\ASUS\WL-500gP Wireless Router Utilities\Download.exe"="C:\Program Files\ASUS\WL-500gP Wireless Router Utilities\Download.exe:*:Enabled:ASUS Download Master Utility"
"C:\Documents and Settings\supervisor\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\supervisor\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\WINDOWS\Help\svchost.exe"="C:\WINDOWS\Help\svchost.exe:*:Enabled:system"
"C:\Program Files\Hewlett-Packard\HP Download Manager\hpjdwnld.exe"="C:\Program Files\Hewlett-Packard\HP Download Manager\hpjdwnld.exe:*:Enabled:HP Networked Printer Installer"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft ActiveSync\rapimgr.exe"="C:\Program Files\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager"
"C:\Program Files\Microsoft ActiveSync\wcescomm.exe"="C:\Program Files\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager"
"C:\Program Files\Microsoft ActiveSync\WCESMgr.exe"="C:\Program Files\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=L3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"vidc.LEAD"=LCODCCMP.DLL
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.voxacm160"=vct3216.acm
"msacm.scg726"=scg726.acm
"msacm.alf2cd"=alf2cd.acm
"msacm.ac3acm"=AC3ACM.acm
"vidc.dvsd"=mcdvd_32.dll
"vidc.xvid"=xvid.dll
"vidc.divx"=divx.dll
"vidc.mpg4"=mpg4c32.dll
"vidc.mp42"=mpg4c32.dll
"vidc.mp43"=mpg4c32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.vorbis"=Vorbis.acm
"msacm.a3d"=a3d.dll
"msacm.ogg"=ogg.dll
"msacm.vorbisenc"=vorbisenc.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-10-10 09:22:50 ----D---- C:\WINDOWS\Prefetch
2011-10-10 08:44:46 ----A---- C:\WINDOWS\system32\drivers\alg.bat
2011-10-10 08:39:22 ----D---- C:\smazat
2011-10-06 19:52:17 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2011-10-06 02:28:28 ----A---- C:\WINDOWS\system32\wmild.exe
2011-10-06 00:07:54 ----A---- C:\param.txt
2011-10-06 00:07:49 ----A---- C:\WINDOWS\svchost.exe
2011-10-06 00:07:29 ----A---- C:\WINDOWS\system32\srvany.exe
2011-10-06 00:06:14 ----A---- C:\WINDOWS\system32\qtu.exe
2011-10-06 00:06:13 ----A---- C:\WINDOWS\system32\date.ini
2011-10-06 00:06:11 ----A---- C:\WINDOWS\system32\upsvcm.exe
2011-10-06 00:06:10 ----A---- C:\WINDOWS\system32\nvidsrv.exe
2011-10-06 00:06:06 ----A---- C:\ip.txt
2011-10-06 00:05:59 ----A---- C:\WINDOWS\system32\updsv.exe
2011-10-06 00:05:59 ----A---- C:\WINDOWS\system32\killoff.exe
2011-10-06 00:05:54 ----A---- C:\WINDOWS\system32\gptsvc.exe
2011-10-06 00:05:54 ----A---- C:\WINDOWS\system32\drivers\tasklist.exe
2011-10-06 00:05:54 ----A---- C:\WINDOWS\system32\drivers\sc.exe
2011-10-06 00:05:54 ----A---- C:\WINDOWS\system32\drivers\instsrv.exe
2011-10-06 00:05:54 ----A---- C:\WINDOWS\system32\drivers\ctfmon.exe
2011-10-06 00:05:13 ----A---- C:\WINDOWS\system32\sc.exe
2011-10-06 00:05:13 ----A---- C:\WINDOWS\system32\instsrv.exe
2011-10-06 00:05:13 ----A---- C:\WINDOWS\system32\cmsdll.exe
2011-10-04 11:14:17 ----D---- C:\www.volejbal new
2011-10-02 18:25:10 ----N---- C:\SafeSurf ABUSE README.txt
2011-10-02 18:21:02 ----A---- C:\WINDOWS\ss.exe
2011-09-26 10:15:28 ----A---- C:\WINDOWS\system32\drivers\usbccgp.sys
2011-09-18 21:15:45 ----D---- C:\pomocok
2011-09-16 03:10:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2616676$
2011-09-16 03:04:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2011-09-15 10:53:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Hewlett-Packard
2011-09-15 10:53:07 ----A---- C:\WINDOWS\system32\hpcpn5r1.dll
2011-09-15 10:52:05 ----A---- C:\WINDOWS\system32\hpbicoin.dll

======List of files/folders modified in the last 1 month======

2011-10-12 08:54:36 ----D---- C:\Program Files\trend micro
2011-10-12 08:54:30 ----D---- C:\WINDOWS\Temp
2011-10-12 08:54:00 ----D---- C:\ins
2011-10-12 08:54:00 ----A---- C:\WINDOWS\wincmd.ini
2011-10-12 08:52:54 ----D---- C:\Documents and Settings\supervisor\Data aplikací\Skype
2011-10-12 02:32:32 ----A---- C:\WINDOWS\hpbafd.ini
2011-10-12 00:01:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\LogMeIn
2011-10-11 22:27:46 ----D---- C:\Documents and Settings\supervisor\Data aplikací\Dropbox
2011-10-11 18:50:29 ----A---- C:\WINDOWS\wcx_ftp.ini
2011-10-11 15:00:22 ----D---- C:\karat
2011-10-11 14:32:13 ----D---- C:\WINDOWS\Tasks
2011-10-11 14:25:28 ----D---- C:\Program Files\Mozilla Firefox
2011-10-11 14:23:31 ----A---- C:\WINDOWS\system32\LOCALSERVICE.INI
2011-10-11 14:23:30 ----ADC---- C:\WINDOWS\system32\dllcache
2011-10-11 14:23:29 ----AD---- C:\WINDOWS\system32\ias
2011-10-11 14:22:59 ----A---- C:\WINDOWS\system32\bscs.ini
2011-10-11 14:20:59 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-10-11 10:26:08 ----D---- C:\Program Files\DreamCom
2011-10-10 21:35:28 ----HD---- C:\Program Files\WindowsUpdate
2011-10-10 13:58:21 ----AD---- C:\WINDOWS\system32
2011-10-10 13:15:24 ----D---- C:\rum
2011-10-10 12:48:19 ----SHD---- C:\WINDOWS\Installer
2011-10-10 12:48:19 ----D---- C:\Config.Msi
2011-10-10 12:48:16 ----RD---- C:\Program Files\Skype
2011-10-10 12:46:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-10-10 12:46:45 ----D---- C:\Program Files\Common Files
2011-10-10 09:24:51 ----D---- C:\Documents and Settings\supervisor\Data aplikací\skypePM
2011-10-10 09:22:50 ----D---- C:\WINDOWS
2011-10-10 09:20:59 ----SHD---- C:\RECYCLER
2011-10-10 09:17:15 ----A---- C:\WINDOWS\ntbtlog.txt
2011-10-10 09:13:28 ----ASH---- C:\boot.ini
2011-10-10 09:13:28 ----A---- C:\WINDOWS\win.ini
2011-10-10 09:13:28 ----A---- C:\WINDOWS\system.ini
2011-10-10 09:07:39 ----AD---- C:\WINDOWS\system32\drivers
2011-10-10 08:44:51 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-07 15:39:18 ----D---- C:\Program Files\Mozilla Thunderbird
2011-10-06 18:40:29 ----D---- C:\Program Files\LogMeIn
2011-10-06 18:28:53 ----A---- C:\WINDOWS\system32\LMIRfsClientNP.dll
2011-10-06 18:28:50 ----A---- C:\WINDOWS\system32\LMIport.dll
2011-10-06 18:28:50 ----A---- C:\WINDOWS\system32\LMIinit.dll
2011-10-06 18:27:43 ----AD---- C:\WINDOWS\system32\CatRoot2
2011-10-06 02:43:42 ----AD---- C:\WINDOWS\system32\Com
2011-10-06 02:30:55 ----D---- C:\Documents and Settings
2011-10-06 00:07:54 ----D---- C:\WINDOWS\Config
2011-10-05 11:08:09 ----AD---- C:\WINDOWS\system32\drivers\UMDF
2011-10-05 11:02:55 ----D---- C:\Documents and Settings\supervisor\Data aplikací\PC Suite
2011-09-29 03:00:22 ----A---- C:\WINDOWS\system32\MRT.exe
2011-09-26 11:56:41 ----D---- C:\sdileni
2011-09-26 09:26:05 ----D---- C:\WINDOWS\Minidump
2011-09-21 23:44:08 ----D---- C:\Program Files\PsrView
2011-09-20 08:38:30 ----D---- C:\WINDOWS\inf
2011-09-19 15:20:05 ----RSD---- C:\WINDOWS\assembly
2011-09-19 13:29:22 ----D---- C:\Program Files\Microsoft Visual Studio 10.0
2011-09-19 13:28:57 ----D---- C:\WINDOWS\WinSxS
2011-09-19 13:28:38 ----D---- C:\Program Files\Microsoft SQL Server
2011-09-19 13:27:48 ----SD---- C:\Documents and Settings\supervisor\Data aplikací\Microsoft
2011-09-19 13:27:48 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-09-16 09:10:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\tmp
2011-09-16 09:10:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\hps
2011-09-16 08:45:02 ----D---- C:\tisk
2011-09-16 03:11:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-09-16 03:04:41 ----A---- C:\WINDOWS\imsins.BAK
2011-09-16 03:02:24 ----D---- C:\WINDOWS\$hf_mig$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 a347bus;a347bus; C:\WINDOWS\system32\DRIVERS\a347bus.sys [2004-04-30 160640]
R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2009-01-07 20744]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2005-08-19 46080]
R0 SI3132;SiI-3132 SATALink Controller; C:\WINDOWS\system32\DRIVERS\SI3132.sys [2007-10-03 80424]
R0 Si3132r5;SiI-3132 SoftRaid 5 Controller; C:\WINDOWS\system32\DRIVERS\Si3132r5.sys [2008-10-30 217128]
R0 SiFilter;SATALink driver accelerator; C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys [2008-10-30 17064]
R0 SiRemFil;SATALink External Device Filter; C:\WINDOWS\system32\DRIVERS\SiRemFil.sys [2008-10-30 12200]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 AppleCharger;AppleCharger; C:\WINDOWS\system32\DRIVERS\AppleCharger.sys [2010-04-27 19496]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2009-12-18 26024]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-02-06 93336]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 UserPort;UserPort; \??\C:\WINDOWS\system32\Drivers\UserPort.sys []
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-02-06 113448]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\WINDOWS\system32\drivers\LMIRfsDriver.sys []
R2 RadPciNT;RadPciNT; \??\C:\WINDOWS\system32\Radpcint.sys []
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2008-12-07 14088]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2008-12-07 30088]
R3 gameport;FM801 PCI Joystick; C:\WINDOWS\system32\DRIVERS\fmjoy.sys [2001-11-02 9728]
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-02-25 5864480]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
R3 lmimirr;lmimirr; C:\WINDOWS\system32\DRIVERS\lmimirr.sys [2008-07-24 10144]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 radpms;Driver for RADPMS Device; C:\WINDOWS\system32\DRIVERS\radpms.sys [2010-06-10 13408]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2010-03-08 220112]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\WINDOWS\system32\DRIVERS\seehcri.sys [2008-01-09 27632]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2009-08-09 29696]
R3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2008-01-21 14856]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2009-01-08 31880]
R3 wdm_fm801;FM801 PCI Audio (WDM); C:\WINDOWS\system32\drivers\fm801.sys [2001-11-02 328320]
S0 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\System32\Drivers\vbtenum.sys []
S0 BTHidMgr;Bluetooth HID Manager Service; C:\WINDOWS\System32\Drivers\BTHidMgr.sys []
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 MLPTDR_B;MLPTDR_B; \??\C:\WINDOWS\system32\MLPTDR_B.SYS []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2007-07-20 84992]
S3 block_reader;MPR DRV; \??\C:\WINDOWS\security\Avas\block_reader.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2008-11-25 33800]
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2008-11-25 27528]
S3 btaudio;Bluetooth Audio Device; C:\WINDOWS\system32\drivers\btaudio.sys []
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2009-01-03 39304]
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS\system32\DRIVERS\btport.sys []
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys []
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS\system32\DRIVERS\btwdndis.sys []
S3 btwmodem;Bluetooth Modem; C:\WINDOWS\system32\DRIVERS\btwmodem.sys [2005-09-19 30189]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 dot4;Ovladač MS IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2008-04-13 206976]
S3 Dot4Print;Ovladač třídy tiskárny standardu IEEE-1284.4; C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [2001-08-17 12928]
S3 dot4usb;Filtr Dot4USB Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2001-10-24 23808]
S3 FWL;Fwl Packet Filter; \??\C:\Program files\Software602\602LAN SUITE\fwl.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:\WINDOWS\system32\DRIVERS\ggflt.sys [2009-04-06 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys [2009-04-06 25512]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 HidBth;Miniport Bluetooth HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidbth.sys [2008-04-14 25600]
S3 MA-620;Mobile Action MA-660 USB Infrared Adapter; C:\WINDOWS\system32\DRIVERS\MA-620.sys [2003-03-25 27136]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSICPL;MSICPL; \??\E:\install4\MSICPL.sys []
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 NTACCESS;NTACCESS; \??\E:\NTACCESS.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PRODIGY;PRODIGY; C:\WINDOWS\System32\Drivers\PRODIGY.SYS [2006-08-29 32377]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-12-14 85120]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\WINDOWS\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\WINDOWS\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\WINDOWS\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\WINDOWS\system32\DRIVERS\s115bus.sys [2007-04-23 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s115mdfl.sys [2007-04-23 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s115mdm.sys [2007-04-23 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s115mgmt.sys [2007-04-23 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s115obex.sys [2007-04-23 98568]
S3 Ser2pl;Prolific2 Serial port driver; C:\WINDOWS\system32\DRIVERS\ser2pl.sys [2005-07-25 48640]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2008-04-13 12800]
S3 usb2vcom;USB Data Cable; C:\WINDOWS\system32\DRIVERS\usb2vcom.sys [2005-12-21 29152]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 VHidMinidrv;Bluetooth HID Device Service; C:\WINDOWS\system32\drivers\VHIDMini.sys [2008-12-22 17416]
S3 vncdrv;vncdrv; C:\WINDOWS\system32\DRIVERS\vncdrv.sys [2004-06-26 4736]
S3 wceusbsh;Windows CE USB Serial Host Driver; C:\WINDOWS\system32\DRIVERS\wceusbsh.sys [2006-11-06 28672]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
S4 a347scsi;a347scsi; C:\WINDOWS\System32\Drivers\a347scsi.sys [2004-04-30 5248]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\WINDOWS\system32\drivers\LMIRfsClientNP.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2011-03-14 84520]
R2 ACP.starter;Audio control provider; C:\WINDOWS\system32\drivers\ctfmon.exe [2004-11-16 15872]
R2 ASP.NET_AJAX;ASP.NET_AJAX; C:\WINDOWS\system32\srvany.exe [2011-01-28 15872]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2009-02-27 850432]
R2 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
R2 EmmaDevMgmtSvc;Emma Device Management; C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe [2009-09-08 306296]
R2 EmmaUpdMgmtSvc;Emma Update Management; C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe [2009-09-08 162936]
R2 GEST Service;GEST Service for program management.; C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [2009-07-30 68136]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe [2011-10-06 374152]
R2 LMIMaint;LogMeIn Maintenance Service; C:\Program Files\LogMeIn\x86\RaMaint.exe [2011-10-06 136584]
R2 LogMeIn;LogMeIn; C:\Program Files\LogMeIn\x86\LogMeIn.exe [2010-11-08 390528]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2003-03-19 335872]
R2 MSSQL$BANKKLIENT;MSSQL$BANKKLIENT; C:\Program Files\bkwin\MSDE2K\MSSQL$BANKKLIENT\Binn\sqlservr.exe [2002-12-17 7520337]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 r_server;Service Host Controller; C:\WINDOWS\help\svchost.exe [2005-09-14 142336]
R2 SATARaid5 Config Service;SATARaid5 Configuration Service; c:\Program Files\Silicon Image\3132-W-R\SATARaid5ConfigService.exe [2005-10-05 131072]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 98407]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S2 Algsvc;Service Application Layer Gateway; C:\WINDOWS\nview\lsass.exe []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 DNSserver;DNS-server; C:\WINDOWS\system32\cmsdll.exe [2004-07-09 15872]
S2 MacroSoft;Microsoft Network helper Service; C:\WINDOWS\system32\svchost -k MacroSoft []
S2 MsHosts;Manager mapping IP addresses to hosts; C:\WINDOWS\system32\dllcache\mgm.exe [2004-07-09 15872]
S3 AppleChargerSrv;AppleChargerSrv; C:\WINDOWS\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-02-06 20680]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-12-22 136120]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [2002-12-17 66112]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SQLAgent$BANKKLIENT;SQLAgent$BANKKLIENT; C:\Program Files\bkwin\MSDE2K\MSSQL$BANKKLIENT\Binn\sqlagent.EXE [2002-12-17 311872]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Dobrý den
tady to vypadá na havěť ... Dejte mi log z Combofixu...

Program nepoužívejte bez doporučení Rádce a pozorně se řiďte následujících pokynu,protože program netoleruje chyby a může dojít k úplnému poškození systému!!

• Stáhneme si Combofix
• Program uložíme nejlépe na Plochu
• Vypneme všechny rezidentní štíty.Jak antiviru,tak antispywaru a firewallu
• Vypneme všechny běžící aplikace (ICQ,prohlížeč,programy) a necháme pouze Combofix
• Spustíme Combofix.exe s administrátorským oprávněním
  U Windows XP se přihlásíme pod účtem správce
  Ve Windows 7 a Vista klikněte pravým tlačítkem myši na Combofix.exe a dejte ,,Spustit jako správce,,)
• Hned po startu programu na vás vyskočí licenční podmínky,tak potvrdíme tlačítkemANO
• Pokud vám Combofix nabídne instalaci Konzoly pro zotavení,tak souhlaste a nechte nainstalovat(zde je potřeba aktivní připojení na internet)
• Pokračujte dle pokynů programu a během skenování na nic neklikejte,na pc nepracujte(ICQ,jiné aplikace,internet..).Nechte počítač v klidu.
• Celý sken tvá mezi 5-15 min,ale pokud je v PC hodně havěti,tak se čas může lišit.
• Po skončení skenování(případném restartu počítače) se vám zobrazí log z Combofixu,který mi vložte sem(Kdyby se log nezobrazil,tak jej najdete zde: C:\ComboFix.txt
• (Pokud si nevíte rady s kterýmkoliv z výše uvedených kroků,tak se ptejte nebo mrkněte na detailnější návod včetně obrázků http://www.bleepingcomputer.com/combofi ... t-combofix )

Zdravim,

zde je log po restartu

log je zde

www.fruko.cz/combo

Vypada to ze vse funguje dobre.
Dekuji.

Moj ty bože..ty je celkem slušně zaflákáné...takže to je potřeba trochu pročistit..

Stáhněte si TDSSKiller

• Spuste program a klikněte na Start Scan
• Pokud program najde infikekci,tak ji bude lecit (Cure), povolte léčení kliknutím na tlačítko Continue
• Pokud program najde podezrely soubor (suspicious),bude ho chtít přeskočit (Skip), povolte přeskočení kliknutim na tlačítko Continue
• Po dokončení skenování bude možná potřeba restartovat počítač,ten povolíte programu kliknutím na tlačítko Reboot now
• Po restartování počítače na vás vyskočí log(pokud se tak nestane,tak ho najdete na disku,kde máte nainstalovaná systém s názvem TDSSKiller.xxxx_log.txt) a vložte mi sem jeho obsah
• Pokud nebude program požadovat restartování počítače,klikněte na tlačítko Close a následně na Report , čímž se Vám vytvoří log a jeho obsah mu sem vložte

Dále vyčistíme pc s AVPTool dle návodu: viewtopic.php?f=29&t=58179

Tak ten problem s vypadavanim pingu byl tim ze jsem pevne zadano IP mel jeste na sitovem pripojeni ktere uz nebylo aktivni (sitovy adapter mam jiny) tak jsem zmenil IP a pak to bezelo, pote jsem odstarnil toto jiz neexistujici pripojeni a vratil IP, ted pingy bezi, zde je log:

13:59:16.0359 2112 TDSS rootkit removing tool 2.6.8.0 Oct 12 2011 07:30:54
13:59:16.0546 2112 ============================================================
13:59:16.0546 2112 Current date / time: 2011/10/12 13:59:16.0546
13:59:16.0546 2112 SystemInfo:
13:59:16.0546 2112
13:59:16.0546 2112 OS Version: 5.1.2600 ServicePack: 3.0
13:59:16.0546 2112 Product type: Workstation
13:59:16.0546 2112 ComputerName: SPRAVCE
13:59:16.0546 2112 UserName: supervisor
13:59:16.0546 2112 Windows directory: C:\WINDOWS
13:59:16.0546 2112 System windows directory: C:\WINDOWS
13:59:16.0546 2112 Processor architecture: Intel x86
13:59:16.0546 2112 Number of processors: 2
13:59:16.0546 2112 Page size: 0x1000
13:59:16.0546 2112 Boot type: Normal boot
13:59:16.0546 2112 ============================================================
13:59:18.0656 2112 Initialize success
13:59:24.0203 5972 ============================================================
13:59:24.0203 5972 Scan started
13:59:24.0203 5972 Mode: Manual;
13:59:24.0203 5972 ============================================================
13:59:25.0562 5972 a347bus (1f61cacacb521215f39061789147968c) C:\WINDOWS\system32\DRIVERS\a347bus.sys
13:59:25.0562 5972 a347bus - ok
13:59:25.0593 5972 a347scsi (113e4b318bbaa7483ca4e582a4d63f49) C:\WINDOWS\System32\Drivers\a347scsi.sys
13:59:25.0593 5972 a347scsi - ok
13:59:25.0593 5972 Abiosdsk - ok
13:59:25.0609 5972 abp480n5 - ok
13:59:25.0656 5972 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:59:25.0656 5972 ACPI - ok
13:59:25.0671 5972 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
13:59:25.0671 5972 ACPIEC - ok
13:59:25.0687 5972 adpu160m - ok
13:59:25.0718 5972 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
13:59:25.0718 5972 aec - ok
13:59:25.0750 5972 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys
13:59:25.0750 5972 AFD - ok
13:59:25.0765 5972 Aha154x - ok
13:59:25.0781 5972 aic78u2 - ok
13:59:25.0796 5972 aic78xx - ok
13:59:25.0812 5972 AliIde - ok
13:59:25.0875 5972 Ambfilt (267fc636801edc5ab28e14036349e3be) C:\WINDOWS\system32\drivers\Ambfilt.sys
13:59:25.0890 5972 Ambfilt - ok
13:59:25.0906 5972 amsint - ok
13:59:25.0921 5972 AppleCharger (75a8b998eb259dd512f01ea25bec7f3b) C:\WINDOWS\system32\DRIVERS\AppleCharger.sys
13:59:25.0921 5972 AppleCharger - ok
13:59:25.0937 5972 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
13:59:25.0937 5972 Arp1394 - ok
13:59:25.0937 5972 asc - ok
13:59:25.0953 5972 asc3350p - ok
13:59:25.0968 5972 asc3550 - ok
13:59:26.0000 5972 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:59:26.0000 5972 AsyncMac - ok
13:59:26.0031 5972 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
13:59:26.0031 5972 Suspicious file (NoAccess): C:\WINDOWS\system32\DRIVERS\atapi.sys. md5: 9f3a2f5aa6875c72bf062c712cfa2674
13:59:26.0031 5972 atapi ( LockedFile.Multi.Generic ) - warning
13:59:26.0046 5972 atapi - detected LockedFile.Multi.Generic (1)
13:59:26.0046 5972 Atdisk - ok
13:59:26.0093 5972 AtiHdmiService (dc6957811ff95f2dd3004361b20d8d3f) C:\WINDOWS\system32\drivers\AtiHdmi.sys
13:59:26.0093 5972 AtiHdmiService - ok
13:59:26.0109 5972 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:59:26.0109 5972 Atmarpc - ok
13:59:26.0156 5972 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
13:59:26.0156 5972 audstub - ok
13:59:26.0187 5972 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
13:59:26.0203 5972 Beep - ok
13:59:26.0250 5972 BlueletAudio (bc0e1c15e6fb3e20cd558f496ea684a0) C:\WINDOWS\system32\DRIVERS\blueletaudio.sys
13:59:26.0250 5972 BlueletAudio - ok
13:59:26.0265 5972 BlueletSCOAudio (5f81a2d1abc1e480c6152f7b9e446bfa) C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys
13:59:26.0265 5972 BlueletSCOAudio - ok
13:59:26.0312 5972 BT (8e2d9ece59dfe7d310201e0d65d97ecb) C:\WINDOWS\system32\DRIVERS\btnetdrv.sys
13:59:26.0312 5972 BT - ok
13:59:26.0312 5972 btaudio - ok
13:59:26.0359 5972 Btcsrusb (942c602296119d758547808221c85a2c) C:\WINDOWS\system32\Drivers\btcusb.sys
13:59:26.0359 5972 Btcsrusb - ok
13:59:26.0375 5972 BTDriver - ok
13:59:26.0406 5972 BthEnum (b279426e3c0c344893ed78a613a73bde) C:\WINDOWS\system32\DRIVERS\BthEnum.sys
13:59:26.0406 5972 BthEnum - ok
13:59:26.0421 5972 BtHidBus (ce441ccd98c5ecb10cb12fcaf97322ec) C:\WINDOWS\system32\Drivers\BtHidBus.sys
13:59:26.0421 5972 BtHidBus - ok
13:59:26.0437 5972 BTHidEnum - ok
13:59:26.0453 5972 BTHidMgr - ok
13:59:26.0468 5972 BTHMODEM (fca6f069597b62d42495191ace3fc6c1) C:\WINDOWS\system32\DRIVERS\bthmodem.sys
13:59:26.0468 5972 BTHMODEM - ok
13:59:26.0500 5972 BthPan (80602b8746d3738f5886ce3d67ef06b6) C:\WINDOWS\system32\DRIVERS\bthpan.sys
13:59:26.0500 5972 BthPan - ok
13:59:26.0546 5972 BTHPORT (f338662a6c1fc11dd9508f6dff2c06a2) C:\WINDOWS\system32\Drivers\BTHport.sys
13:59:26.0562 5972 BTHPORT - ok
13:59:26.0593 5972 BTHUSB (61364cd71ef63b0f038b7e9df00f1efa) C:\WINDOWS\system32\Drivers\BTHUSB.sys
13:59:26.0593 5972 BTHUSB - ok
13:59:26.0593 5972 BTKRNL - ok
13:59:26.0640 5972 btnetBUs (d3c277a51ef9e2ec972d6221f99c0b6d) C:\WINDOWS\system32\Drivers\btnetBus.sys
13:59:26.0640 5972 btnetBUs - ok
13:59:26.0703 5972 BTNetFilter (4f26303becbb7cc5ca8ff39593124cf2) C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys
13:59:26.0703 5972 BTNetFilter - ok
13:59:26.0703 5972 BTWDNDIS - ok
13:59:26.0750 5972 btwmodem (27af704459039344851bacc12929b3fe) C:\WINDOWS\system32\DRIVERS\btwmodem.sys
13:59:26.0750 5972 btwmodem - ok
13:59:26.0765 5972 BTWUSB - ok
13:59:26.0765 5972 catchme - ok
13:59:26.0781 5972 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
13:59:26.0796 5972 cbidf2k - ok
13:59:26.0812 5972 cd20xrnt - ok
13:59:26.0828 5972 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
13:59:26.0828 5972 Cdaudio - ok
13:59:26.0843 5972 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
13:59:26.0843 5972 Cdfs - ok
13:59:26.0859 5972 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
13:59:26.0859 5972 Cdrom - ok
13:59:26.0875 5972 Changer (2a5815ca6fff24b688c01f828b96819c) C:\WINDOWS\system32\drivers\Changer.sys
13:59:26.0875 5972 Changer - ok
13:59:26.0906 5972 CmdIde - ok
13:59:26.0921 5972 Cpqarray - ok
13:59:26.0937 5972 dac2w2k - ok
13:59:26.0937 5972 dac960nt - ok
13:59:26.0968 5972 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
13:59:26.0968 5972 Disk - ok
13:59:26.0984 5972 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
13:59:27.0000 5972 dmboot - ok
13:59:27.0015 5972 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
13:59:27.0015 5972 dmio - ok
13:59:27.0031 5972 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
13:59:27.0031 5972 dmload - ok
13:59:27.0046 5972 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
13:59:27.0046 5972 DMusic - ok
13:59:27.0093 5972 dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys
13:59:27.0093 5972 dot4 - ok
13:59:27.0125 5972 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys
13:59:27.0125 5972 Dot4Print - ok
13:59:27.0140 5972 dot4usb (ccc4092dfc85336f2e1c142483adeb42) C:\WINDOWS\system32\DRIVERS\dot4usb.sys
13:59:27.0140 5972 dot4usb - ok
13:59:27.0140 5972 dpti2o - ok
13:59:27.0156 5972 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
13:59:27.0156 5972 drmkaud - ok
13:59:27.0203 5972 eamon (59d9e5dbcfef1e0e3dbac1b55c718f2d) C:\WINDOWS\system32\DRIVERS\eamon.sys
13:59:27.0203 5972 eamon - ok
13:59:27.0218 5972 ehdrv (3bd67a869964bf57266cbbd1dca38c6a) C:\WINDOWS\system32\DRIVERS\ehdrv.sys
13:59:27.0218 5972 ehdrv - ok
13:59:27.0265 5972 ElbyCDIO (44996a2addd2db7454f2ca40b67d8941) C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
13:59:27.0265 5972 ElbyCDIO - ok
13:59:27.0281 5972 epfwtdir (aa0af2830fc14ffd7e80611614ecac74) C:\WINDOWS\system32\DRIVERS\epfwtdir.sys
13:59:27.0281 5972 epfwtdir - ok
13:59:27.0312 5972 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
13:59:27.0312 5972 Fastfat - ok
13:59:27.0328 5972 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
13:59:27.0343 5972 Fdc - ok
13:59:27.0343 5972 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
13:59:27.0343 5972 Fips - ok
13:59:27.0359 5972 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
13:59:27.0359 5972 Flpydisk - ok
13:59:27.0375 5972 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
13:59:27.0375 5972 FltMgr - ok
13:59:27.0390 5972 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:59:27.0390 5972 Fs_Rec - ok
13:59:27.0406 5972 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
13:59:27.0406 5972 Ftdisk - ok
13:59:27.0453 5972 FWL - ok
13:59:27.0484 5972 gameport (7ee9a39c7d9d17aa537baef0e1c358cb) C:\WINDOWS\system32\DRIVERS\fmjoy.sys
13:59:27.0484 5972 gameport - ok
13:59:27.0500 5972 gdrv (d556cb79967e92b5cc69686d16c1d846) C:\WINDOWS\gdrv.sys
13:59:27.0515 5972 gdrv - ok
13:59:27.0531 5972 ggflt (007aea2e06e7cef7372e40c277163959) C:\WINDOWS\system32\DRIVERS\ggflt.sys
13:59:27.0531 5972 ggflt - ok
13:59:27.0562 5972 ggsemc (c73de35960ca75c5ab4ae636b127c64e) C:\WINDOWS\system32\DRIVERS\ggsemc.sys
13:59:27.0562 5972 ggsemc - ok
13:59:27.0562 5972 GMSIPCI - ok
13:59:27.0578 5972 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
13:59:27.0578 5972 Gpc - ok
13:59:27.0609 5972 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
13:59:27.0609 5972 HDAudBus - ok
13:59:27.0609 5972 HidBth (0d349dc78c6ee16e655557e325a67d9c) C:\WINDOWS\system32\DRIVERS\hidbth.sys
13:59:27.0625 5972 HidBth - ok
13:59:27.0625 5972 hpn - ok
13:59:27.0671 5972 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
13:59:27.0671 5972 HTTP - ok
13:59:27.0687 5972 i2omgmt - ok
13:59:27.0703 5972 i2omp - ok
13:59:27.0718 5972 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
13:59:27.0718 5972 i8042prt - ok
13:59:27.0734 5972 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
13:59:27.0734 5972 Imapi - ok
13:59:27.0750 5972 ini910u - ok
13:59:27.0875 5972 IntcAzAudAddService (991f90d02ec0ec6a425e1c0b1d822562) C:\WINDOWS\system32\drivers\RtkHDAud.sys
13:59:27.0921 5972 IntcAzAudAddService - ok
13:59:27.0921 5972 IntelIde - ok
13:59:27.0937 5972 intelppm (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
13:59:27.0937 5972 intelppm - ok
13:59:27.0968 5972 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
13:59:27.0968 5972 Ip6Fw - ok
13:59:28.0000 5972 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:59:28.0000 5972 IpFilterDriver - ok
13:59:28.0015 5972 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
13:59:28.0015 5972 IpInIp - ok
13:59:28.0046 5972 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
13:59:28.0046 5972 IpNat - ok
13:59:28.0078 5972 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
13:59:28.0078 5972 IPSec - ok
13:59:28.0093 5972 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
13:59:28.0093 5972 irda - ok
13:59:28.0125 5972 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
13:59:28.0125 5972 IRENUM - ok
13:59:28.0156 5972 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
13:59:28.0156 5972 isapnp - ok
13:59:28.0187 5972 IvtBtBUs (71e1fc547cc488d5cd7bf0860c96f5af) C:\WINDOWS\system32\Drivers\IvtBtBus.sys
13:59:28.0187 5972 IvtBtBUs - ok
13:59:28.0203 5972 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
13:59:28.0203 5972 Kbdclass - ok
13:59:28.0234 5972 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
13:59:28.0234 5972 kbdhid - ok
13:59:28.0250 5972 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
13:59:28.0250 5972 kmixer - ok
13:59:28.0265 5972 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
13:59:28.0265 5972 KSecDD - ok
13:59:28.0281 5972 lbrtfdc - ok
13:59:28.0359 5972 LMIInfo (4f69faaabb7db0d43e327c0b6aab40fc) C:\Program Files\LogMeIn\x86\RaInfo.sys
13:59:28.0359 5972 LMIInfo - ok
13:59:28.0375 5972 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys
13:59:28.0375 5972 lmimirr - ok
13:59:28.0390 5972 LMIRfsClientNP - ok
13:59:28.0421 5972 LMIRfsDriver (3faa563ddf853320f90259d455a01d79) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
13:59:28.0421 5972 LMIRfsDriver - ok
13:59:28.0453 5972 MA-620 (d57a920490362c89a0ef2a61fe249afa) C:\WINDOWS\system32\DRIVERS\MA-620.sys
13:59:28.0453 5972 MA-620 - ok
13:59:28.0484 5972 MLPTDR_B (124aaf5d2a58e00c05019b0fb77c0966) C:\WINDOWS\system32\MLPTDR_B.SYS
13:59:28.0500 5972 MLPTDR_B - ok
13:59:28.0531 5972 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
13:59:28.0531 5972 mnmdd - ok
13:59:28.0546 5972 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
13:59:28.0546 5972 Modem - ok
13:59:28.0609 5972 Monfilt (c7d9f9717916b34c1b00dd4834af485c) C:\WINDOWS\system32\drivers\Monfilt.sys
13:59:28.0625 5972 Monfilt - ok
13:59:28.0640 5972 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
13:59:28.0640 5972 Mouclass - ok
13:59:28.0687 5972 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
13:59:28.0687 5972 mouhid - ok
13:59:28.0687 5972 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
13:59:28.0718 5972 MountMgr - ok
13:59:28.0718 5972 mraid35x - ok
13:59:28.0734 5972 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
13:59:28.0734 5972 MRxDAV - ok
13:59:28.0765 5972 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:59:28.0781 5972 MRxSmb - ok
13:59:28.0796 5972 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
13:59:28.0796 5972 Msfs - ok
13:59:28.0812 5972 MSICPL - ok
13:59:28.0828 5972 MSIRCOMM (95c6432151ccff8617352f8e616a1aa4) C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys
13:59:28.0828 5972 MSIRCOMM - ok
13:59:28.0843 5972 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
13:59:28.0843 5972 MSKSSRV - ok
13:59:28.0875 5972 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
13:59:28.0875 5972 MSPCLOCK - ok
13:59:28.0890 5972 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
13:59:28.0890 5972 MSPQM - ok
13:59:28.0906 5972 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
13:59:28.0906 5972 mssmbios - ok
13:59:28.0937 5972 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
13:59:28.0937 5972 Mup - ok
13:59:28.0953 5972 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
13:59:28.0953 5972 NDIS - ok
13:59:28.0984 5972 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:59:29.0000 5972 NdisTapi - ok
13:59:29.0031 5972 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
13:59:29.0031 5972 Ndisuio - ok
13:59:29.0046 5972 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:59:29.0046 5972 NdisWan - ok
13:59:29.0062 5972 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
13:59:29.0093 5972 NDProxy - ok
13:59:29.0109 5972 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
13:59:29.0109 5972 NetBIOS - ok
13:59:29.0125 5972 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
13:59:29.0125 5972 NetBT - ok
13:59:29.0140 5972 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
13:59:29.0140 5972 NIC1394 - ok
13:59:29.0171 5972 nmwcd (cfe3462a9e94a57dcd9676f6b7fe7f67) C:\WINDOWS\system32\drivers\ccdcmb.sys
13:59:29.0171 5972 nmwcd - ok
13:59:29.0203 5972 nmwcdc (8f2a94f991f8c73cec26b4b5620d1edc) C:\WINDOWS\system32\drivers\ccdcmbo.sys
13:59:29.0203 5972 nmwcdc - ok
13:59:29.0218 5972 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
13:59:29.0218 5972 Npfs - ok
13:59:29.0234 5972 NTACCESS - ok
13:59:29.0250 5972 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
13:59:29.0250 5972 Ntfs - ok
13:59:29.0281 5972 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
13:59:29.0281 5972 Null - ok
13:59:29.0453 5972 nv (18c9b152da7bea76b2f9e4b6412e0aaf) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
13:59:29.0515 5972 nv - ok
13:59:29.0562 5972 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
13:59:29.0562 5972 NwlnkFlt - ok
13:59:29.0593 5972 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
13:59:29.0593 5972 NwlnkFwd - ok
13:59:29.0625 5972 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
13:59:29.0625 5972 ohci1394 - ok
13:59:29.0656 5972 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\DRIVERS\parport.sys
13:59:29.0656 5972 Parport - ok
13:59:29.0656 5972 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
13:59:29.0656 5972 PartMgr - ok
13:59:29.0687 5972 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
13:59:29.0687 5972 ParVdm - ok
13:59:29.0718 5972 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
13:59:29.0718 5972 pccsmcfd - ok
13:59:29.0750 5972 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
13:59:29.0750 5972 PCI - ok
13:59:29.0765 5972 PCIDump - ok
13:59:29.0781 5972 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
13:59:29.0781 5972 PCIIde - ok
13:59:29.0796 5972 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\drivers\Pcmcia.sys
13:59:29.0796 5972 Pcmcia - ok
13:59:29.0796 5972 PDCOMP - ok
13:59:29.0812 5972 PDFRAME - ok
13:59:29.0828 5972 PDRELI - ok
13:59:29.0843 5972 PDRFRAME - ok
13:59:29.0843 5972 perc2 - ok
13:59:29.0859 5972 perc2hib - ok
13:59:29.0906 5972 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
13:59:29.0906 5972 PptpMiniport - ok
13:59:29.0921 5972 PRODIGY (65937a34c9a5741e3030a86905400d91) C:\WINDOWS\system32\Drivers\PRODIGY.SYS
13:59:29.0921 5972 PRODIGY - ok
13:59:29.0937 5972 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
13:59:29.0937 5972 PSched - ok
13:59:29.0953 5972 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
13:59:29.0953 5972 Ptilink - ok
13:59:29.0968 5972 PxHelp20 (0457e25bb122b854e267cf552dcdc370) C:\WINDOWS\system32\Drivers\PxHelp20.sys
13:59:29.0968 5972 PxHelp20 - ok
13:59:29.0984 5972 ql1080 - ok
13:59:30.0000 5972 Ql10wnt - ok
13:59:30.0015 5972 ql12160 - ok
13:59:30.0015 5972 ql1240 - ok
13:59:30.0031 5972 ql1280 - ok
13:59:30.0046 5972 RadPciNT (3da0d3d1da7a59c8f5b9e478ef723085) C:\WINDOWS\system32\Radpcint.sys
13:59:30.0046 5972 RadPciNT - ok
13:59:30.0078 5972 radpms (b953369c5ef43615f1bfa9cea69fc9aa) C:\WINDOWS\system32\DRIVERS\radpms.sys
13:59:30.0078 5972 radpms - ok
13:59:30.0093 5972 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:59:30.0093 5972 RasAcd - ok
13:59:30.0109 5972 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
13:59:30.0109 5972 Rasirda - ok
13:59:30.0125 5972 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
13:59:30.0125 5972 Rasl2tp - ok
13:59:30.0140 5972 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:59:30.0140 5972 RasPppoe - ok
13:59:30.0171 5972 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
13:59:30.0171 5972 Raspti - ok
13:59:30.0187 5972 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:59:30.0187 5972 Rdbss - ok
13:59:30.0187 5972 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
13:59:30.0187 5972 RDPCDD - ok
13:59:30.0218 5972 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
13:59:30.0218 5972 rdpdr - ok
13:59:30.0250 5972 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
13:59:30.0265 5972 RDPWD - ok
13:59:30.0265 5972 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
13:59:30.0281 5972 redbook - ok
13:59:30.0312 5972 RFCOMM (851c30df2807fcfa21e4c681a7d6440e) C:\WINDOWS\system32\DRIVERS\rfcomm.sys
13:59:30.0312 5972 RFCOMM - ok
13:59:30.0343 5972 ROOTMODEM (d8b0b4ade32574b2d9c5cc34dc0dbbe7) C:\WINDOWS\system32\Drivers\RootMdm.sys
13:59:30.0343 5972 ROOTMODEM - ok
13:59:30.0390 5972 RTL8023xp (1e11171c0b9989e1bdaa59e96b2e81c4) C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
13:59:30.0390 5972 RTL8023xp - ok
13:59:30.0421 5972 RTLE8023xp (a1ad65718870dbf2bcb81e3c1406469e) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
13:59:30.0421 5972 RTLE8023xp - ok
13:59:30.0468 5972 s0016bus (59509ad6cbc28f2c73056268985b3e48) C:\WINDOWS\system32\DRIVERS\s0016bus.sys
13:59:30.0468 5972 s0016bus - ok
13:59:30.0484 5972 s0016mdfl (b98c3a6f91f4fba285af9606a240c6b4) C:\WINDOWS\system32\DRIVERS\s0016mdfl.sys
13:59:30.0484 5972 s0016mdfl - ok
13:59:30.0500 5972 s0016mdm (8a83426f4fb7b5212825d9de76368b1a) C:\WINDOWS\system32\DRIVERS\s0016mdm.sys
13:59:30.0500 5972 s0016mdm - ok
13:59:30.0515 5972 s0016mgmt (7a78bba97feb5e6d24c49e93a3bf7287) C:\WINDOWS\system32\DRIVERS\s0016mgmt.sys
13:59:30.0515 5972 s0016mgmt - ok
13:59:30.0546 5972 s0016nd5 (34ef7b5f611957b73e7219dd5a222ad1) C:\WINDOWS\system32\DRIVERS\s0016nd5.sys
13:59:30.0546 5972 s0016nd5 - ok
13:59:30.0562 5972 s0016obex (36792935847143e4a3cda0dc87248487) C:\WINDOWS\system32\DRIVERS\s0016obex.sys
13:59:30.0562 5972 s0016obex - ok
13:59:30.0593 5972 s0016unic (927208754fb27fc3e7a659e77500c5d1) C:\WINDOWS\system32\DRIVERS\s0016unic.sys
13:59:30.0609 5972 s0016unic - ok
13:59:30.0625 5972 s115bus (e1ab463b36a7ef31d8a73a97a9b57afa) C:\WINDOWS\system32\DRIVERS\s115bus.sys
13:59:30.0625 5972 s115bus - ok
13:59:30.0640 5972 s115mdfl (e24113fc13b8737c94cf4e3415488c76) C:\WINDOWS\system32\DRIVERS\s115mdfl.sys
13:59:30.0640 5972 s115mdfl - ok
13:59:30.0656 5972 s115mdm (4029e49e7c673aa0670bd206b0af1b5b) C:\WINDOWS\system32\DRIVERS\s115mdm.sys
13:59:30.0656 5972 s115mdm - ok
13:59:30.0687 5972 s115mgmt (eb02ab4ca8bccecfde236cad8fc6e135) C:\WINDOWS\system32\DRIVERS\s115mgmt.sys
13:59:30.0687 5972 s115mgmt - ok
13:59:30.0703 5972 s115obex (089869db9ffd2ac807fa87fe82ac7761) C:\WINDOWS\system32\DRIVERS\s115obex.sys
13:59:30.0703 5972 s115obex - ok
13:59:30.0734 5972 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
13:59:30.0750 5972 Secdrv - ok
13:59:30.0765 5972 seehcri (e5b56569a9f79b70314fede6c953641e) C:\WINDOWS\system32\DRIVERS\seehcri.sys
13:59:30.0765 5972 seehcri - ok
13:59:30.0781 5972 Ser2pl (2ec41a96d0dc98bd119bf325e0b9f392) C:\WINDOWS\system32\DRIVERS\ser2pl.sys
13:59:30.0781 5972 Ser2pl - ok
13:59:30.0812 5972 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
13:59:30.0812 5972 serenum - ok
13:59:30.0828 5972 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\DRIVERS\serial.sys
13:59:30.0828 5972 Serial - ok
13:59:30.0859 5972 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys
13:59:30.0859 5972 Sfloppy - ok
13:59:30.0906 5972 SI3132 (0b9b5c6df6226497ef4819b6e1b2efd5) C:\WINDOWS\system32\DRIVERS\SI3132.sys
13:59:30.0906 5972 SI3132 - ok
13:59:30.0937 5972 Si3132r5 (227e56633d6423e1f7d869618ac8404f) C:\WINDOWS\system32\DRIVERS\Si3132r5.sys
13:59:30.0937 5972 Si3132r5 - ok
13:59:30.0953 5972 SiFilter (dbdee2a96f2f616726817373516cb0bd) C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys
13:59:30.0953 5972 SiFilter - ok
13:59:30.0968 5972 Simbad - ok
13:59:30.0968 5972 SiRemFil (3e6b438e5cb674a1382b2955aa98f637) C:\WINDOWS\system32\DRIVERS\SiRemFil.sys
13:59:30.0984 5972 SiRemFil - ok
13:59:30.0984 5972 Sparrow - ok
13:59:31.0015 5972 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
13:59:31.0015 5972 splitter - ok
13:59:31.0031 5972 sptd - ok
13:59:31.0046 5972 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
13:59:31.0046 5972 sr - ok
13:59:31.0062 5972 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
13:59:31.0078 5972 Srv - ok
13:59:31.0093 5972 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
13:59:31.0093 5972 swenum - ok
13:59:31.0109 5972 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
13:59:31.0109 5972 swmidi - ok
13:59:31.0109 5972 symc810 - ok
13:59:31.0125 5972 symc8xx - ok
13:59:31.0140 5972 sym_hi - ok
13:59:31.0156 5972 sym_u3 - ok
13:59:31.0171 5972 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
13:59:31.0171 5972 sysaudio - ok
13:59:31.0203 5972 Tcpip (ad978a1b783b5719720cff204b666c8e) C:\WINDOWS\system32\DRIVERS\tcpip.sys
13:59:31.0203 5972 Tcpip - ok
13:59:31.0234 5972 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
13:59:31.0234 5972 TDPIPE - ok
13:59:31.0250 5972 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
13:59:31.0250 5972 TDTCP - ok
13:59:31.0265 5972 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
13:59:31.0265 5972 TermDD - ok
13:59:31.0281 5972 TosIde - ok
13:59:31.0312 5972 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
13:59:31.0312 5972 Udfs - ok
13:59:31.0328 5972 ultra - ok
13:59:31.0343 5972 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
13:59:31.0343 5972 Update - ok
13:59:31.0375 5972 upperdev (ec01da44b090d2651fc032c8b9257232) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
13:59:31.0390 5972 upperdev - ok
13:59:31.0421 5972 usb2vcom (76a5050be71eeb611e8c2c9642ca2b0f) C:\WINDOWS\system32\DRIVERS\usb2vcom.sys
13:59:31.0421 5972 usb2vcom - ok
13:59:31.0453 5972 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
13:59:31.0453 5972 usbccgp - ok
13:59:31.0484 5972 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
13:59:31.0484 5972 usbehci - ok
13:59:31.0500 5972 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
13:59:31.0500 5972 usbhub - ok
13:59:31.0531 5972 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
13:59:31.0531 5972 usbscan - ok
13:59:31.0546 5972 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys
13:59:31.0546 5972 usbser - ok
13:59:31.0578 5972 UsbserFilt (4abd37cfbd710e64f01f9da8710c73f7) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
13:59:31.0578 5972 UsbserFilt - ok
13:59:31.0593 5972 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
13:59:31.0593 5972 USBSTOR - ok
13:59:31.0625 5972 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
13:59:31.0625 5972 usbuhci - ok
13:59:31.0656 5972 usb_rndisx (b6cc50279d6cd28e090a5d33244adc9a) C:\WINDOWS\system32\DRIVERS\usb8023x.sys
13:59:31.0656 5972 usb_rndisx - ok
13:59:31.0687 5972 UserPort (6d36dcab6d62132e3c62d9b530a93e2d) C:\WINDOWS\system32\Drivers\UserPort.sys
13:59:31.0687 5972 UserPort - ok
13:59:31.0703 5972 VClone (94d73b62e458fb56c9ce60aa96d914f9) C:\WINDOWS\system32\DRIVERS\VClone.sys
13:59:31.0703 5972 VClone - ok
13:59:31.0750 5972 VComm (0955553090e0a88614e5b8a02af9324c) C:\WINDOWS\system32\DRIVERS\VComm.sys
13:59:31.0750 5972 VComm - ok
13:59:31.0765 5972 VcommMgr (ea0d7c68dc77b478f1c08022b8afe8ca) C:\WINDOWS\system32\Drivers\VcommMgr.sys
13:59:31.0765 5972 VcommMgr - ok
13:59:31.0796 5972 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
13:59:31.0796 5972 VgaSave - ok
13:59:31.0843 5972 VHidMinidrv (95a38e0a1b06109ad2bfb50dd40e31db) C:\WINDOWS\system32\drivers\VHIDMini.sys
13:59:31.0843 5972 VHidMinidrv - ok
13:59:31.0843 5972 ViaIde - ok
13:59:31.0890 5972 vncdrv (4ec979b157d1aa075330362acb5424e5) C:\WINDOWS\system32\DRIVERS\vncdrv.sys
13:59:31.0890 5972 vncdrv - ok
13:59:31.0921 5972 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
13:59:31.0921 5972 VolSnap - ok
13:59:31.0937 5972 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:59:31.0937 5972 Wanarp - ok
13:59:31.0984 5972 wceusbsh (46a247f6617526afe38b6f12f5512120) C:\WINDOWS\system32\DRIVERS\wceusbsh.sys
13:59:31.0984 5972 wceusbsh - ok
13:59:32.0031 5972 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\Drivers\wdf01000.sys
13:59:32.0031 5972 Wdf01000 - ok
13:59:32.0046 5972 WDICA - ok
13:59:32.0062 5972 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
13:59:32.0093 5972 wdmaud - ok
13:59:32.0109 5972 wdm_fm801 (cbf2290ecaa5d56246b96abeaf99730d) C:\WINDOWS\system32\drivers\fm801.sys
13:59:32.0109 5972 wdm_fm801 - ok
13:59:32.0171 5972 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
13:59:32.0171 5972 WpdUsb - ok
13:59:32.0203 5972 WudfPf (eaa6324f51214d2f6718977ec9ce0def) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
13:59:32.0218 5972 WudfPf - ok
13:59:32.0250 5972 WudfRd (f91ff1e51fca30b3c3981db7d5924252) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
13:59:32.0250 5972 WudfRd - ok
13:59:32.0265 5972 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
13:59:32.0359 5972 \Device\Harddisk0\DR0 - ok
13:59:32.0359 5972 Boot (0x1200) (645c800ea471b04240cc6f051a2fb9c7) \Device\Harddisk0\DR0\Partition0
13:59:32.0359 5972 \Device\Harddisk0\DR0\Partition0 - ok
13:59:32.0359 5972 ============================================================
13:59:32.0359 5972 Scan finished
13:59:32.0359 5972 ============================================================
13:59:32.0375 2340 Detected object count: 1
13:59:32.0375 2340 Actual detected object count: 1
13:59:34.0125 2340 atapi ( LockedFile.Multi.Generic ) - skipped by user
13:59:34.0125 2340 atapi ( LockedFile.Multi.Generic ) - User select action: Skip
13:59:37.0750 1216 Deinitialize success

SUPER pokračujte AVPTool máte v pc stále havěť... www stránky tedy už fungují dobře,ano?

Dekuju, stranky jedou dobre, ted spoustim AVP tool ale to je na deset hodin, tak vysledek bude asi az rano.

AVPTool je dost podrobný,ale nedával bych vám ho spouštět,kdybych neviděl v logu tolik havěti vše o najde a nebudete znát,dejte smazat poté čekám na log...

Dobry den,
omlouvam se za zpozdeni, tak jsem test konecne provedl, driv jsem se k to mu nedostal. Tady je vysledek.

Status: Deleted (events: 7)
19.10.2011 12:15:41 Deleted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\RU75MH9I\nvidsrv[2].exe High
19.10.2011 17:14:38 Deleted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1586\A0283941.dll High
19.10.2011 17:14:38 Deleted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1586\A0283941.dll//onatra.exe High
19.10.2011 17:36:12 Deleted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\WINDOWS\nview\webroot.dll High
19.10.2011 17:36:12 Deleted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\WINDOWS\nview\webroot.dll//onatra.exe High
19.10.2011 19:43:57 Deleted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289537.dll High
19.10.2011 19:43:57 Deleted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289537.dll//onatra.exe High
Status: Quarantined (events: 23)
19.10.2011 12:15:42 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\5IL752CJ\upsvcm[1].exe High
19.10.2011 12:15:45 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\5KJ7ZCNE\Avas[1].exe High
19.10.2011 12:15:47 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\P5VV2W04\mupa[1].exe High
19.10.2011 12:15:49 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\RU75MH9I\svchost[1].exe High
19.10.2011 12:18:48 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\P5VV2W04\raabes[1].exe High
19.10.2011 13:21:43 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\ins\mobily\siemens\c60repair\freia9\freialog.exe High
19.10.2011 17:14:48 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1589\A0285320.exe High
19.10.2011 17:14:50 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1589\A0285322.exe High
19.10.2011 17:16:27 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1592\A0286127.exe High
19.10.2011 17:16:32 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1592\A0286138.exe High
19.10.2011 17:16:33 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1593\A0286156.exe High
19.10.2011 17:16:36 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1594\A0286228.exe High
19.10.2011 17:16:58 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0286295.exe High
19.10.2011 17:17:02 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0286320.exe High
19.10.2011 17:23:53 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289356.exe High
19.10.2011 17:24:00 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289403.exe High
19.10.2011 17:33:41 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\WINDOWS\Microsoft.NET\svchost.exe High
19.10.2011 17:36:13 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\WINDOWS\security\Avas.exe High
19.10.2011 17:36:16 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\WINDOWS\security\mupa.dll High
19.10.2011 17:39:30 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\WINDOWS\system32\upsvcm.exe High
20.10.2011 8:15:14 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289535.exe High
20.10.2011 8:15:33 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289538.exe High
20.10.2011 8:15:40 Quarantined unknown threat UDS:DangerousObject.Multi.Generic C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289539.dll High
Status: Detected (events: 3)
19.10.2011 13:18:03 Detected unknown threat Packed.Win32.PasswordProtectedExe.gen C:\ins\mobily\nokia\Unlock Codes Calculator v2.31 by Crux\CruxUnlocker_v231_Setup.zip//CruxUnlocker_v231_Setup.exe Medium
19.10.2011 13:45:31 Detected Trojan program Trojan.Win32.Genome.mij C:\ins\programy\Translator 007\PC Translator 2007.iso//Seriove ??slo/rg-pt27e.exe High
19.10.2011 16:36:15 Detected Trojan program Trojan.Win32.Genome.gcjm C:\sdileni\Driver Genius 2007 Professional Edition 7.1.622\Driver Genius 2007 Professional Edition 7.1.622.rar//keygen/keygen.exe High
Status: Disinfected (events: 4)
19.10.2011 17:11:35 Disinfected Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\smazat\nview.zip High
19.10.2011 17:11:35 Disinfected Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\smazat\nview.zip/nview/nvidsrv.exe High
19.10.2011 17:11:35 Disinfected Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\smazat\nview.zip/nview/webroot.dll High
19.10.2011 17:11:35 Disinfected Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\smazat\nview.zip/nview/webroot.dll//onatra.exe High
Status: Will be deleted when the computer is restarted (events: 18)
19.10.2011 17:14:38 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1589\A0285321.exe High
19.10.2011 17:16:16 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1592\A0286125.exe High
19.10.2011 17:16:18 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1592\A0286126.exe High
19.10.2011 17:16:19 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1592\A0286143.exe High
19.10.2011 17:16:20 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1593\A0286154.exe High
19.10.2011 17:16:21 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1593\A0286155.exe High
19.10.2011 17:16:24 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1594\A0286226.exe High
19.10.2011 17:16:24 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1594\A0286227.exe High
19.10.2011 17:16:35 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0286293.exe High
19.10.2011 17:16:37 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0286294.exe High
19.10.2011 17:16:41 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0286317.exe High
19.10.2011 17:16:44 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0286319.exe High
19.10.2011 17:18:40 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289355.exe High
19.10.2011 17:18:43 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289534.exe High
19.10.2011 17:34:36 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\WINDOWS\nview\onatra.exe High
19.10.2011 17:39:28 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\WINDOWS\system32\nvidsrv.exe High
19.10.2011 19:43:46 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289536.exe High
19.10.2011 19:43:57 Will be deleted when the computer is restarted Trojan program Trojan-Downloader.MSIL.Agent.aqq C:\System Volume Information\_restore{82804EBF-20C6-4182-B93E-A58EDDFFB30D}\RP1595\A0289540.exe High

Výborně..vyčistěte pc dle návodu System volume information/restore, javapi a IE cache

Poté restartujte PC a pokračujte dále..

Malwarebytes' Anti-Malware

• Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
• Vybereme Úplná kontrola a klikneme na tlačítko Prohledat
• Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
• Objeví se vám log,který mi sem vložte
• NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci

Dekuju jdu na to.

Jasan čekám na výsledek

Tak tady mam vysledek :

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

20.10.2011 11:45:16
mbam-log-2011-10-20 (11-45-11).txt

Typ: Úplná kontrola (C:\|)
Kontrolované objekty: 472617
Uplynulý čas: 1 hodin, 31 minut, 7 sekund

Infikované procesy v paměti: 2
Infikované moduly v paměti: 0
Infikované klíče v registru: 3
Infikované hodnoty v registru: 1
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 17

Infikované procesy v paměti:
c:\WINDOWS\microsoft.net\csrss.exe (Trojan.Agent.Gen) -> 232 -> No action taken.
c:\WINDOWS\system32\drivers\ctfmon.exe (Heuristics.Reserved.Word.Exploit) -> 156 -> No action taken.

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\JetSwap (Adware.JetSwap) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\BLOCK_READER (Trojan.LdPinch) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ACP.starter (Heuristics.Reserved.Word.Exploit) -> No action taken.

Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\block_reader\DisplayName (Trojan.LdPinch) -> Value: DisplayName -> No action taken.

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\WINDOWS\microsoft.net\csrss.exe (Trojan.Agent.Gen) -> No action taken.
c:\d\PDA\the bat voyager\voyuni-[ru-board!]\Keygen.exe (Trojan.Agent.CK) -> No action taken.
c:\ins\mobily\siemens\x65\sst upadate problem fix\sst_tampered.exe (RiskWare.Tool.CK) -> No action taken.
c:\ins\ms office 2007\msoe2007kg.exe (RiskWare.Tool.CK) -> No action taken.
c:\ins\servis\bluetooth\canyon cn-btu3 sn b23736\program neomezeny\keygen.exe (Trojan.Agent) -> No action taken.
c:\ins\servis\bluetooth\canyon cn-btu3 sn b23736\program neomezeny\ivt.bluesoleil.v6.4.249.0.incl.keymaker-embrace\keygen.exe (Trojan.Agent) -> No action taken.
c:\ins\nero 7.0.1.2.pe\Keygen.exe (Trojan.Agent.CK) -> No action taken.
c:\ins\xp serial\XPPID1.exe (RiskWare.Tool.CK) -> No action taken.
c:\ins\xp wpa kill\Crypt.dll (Hacktool) -> No action taken.
c:\_OTL\movedfiles\06252010_144446\c_program files\mozilla firefox\extensions\{b922d405-6d13-4a2b-ae89-08a030da4402}\components\pdfforgetoolbarff.dll (Adware.WidgiToolbar) -> No action taken.
c:\_OTL\movedfiles\06252010_144446\c_program files\pdfforge toolbar\widgitoolbarie.dll (PUP.Dealio.TB) -> No action taken.
c:\sdileni\ins\nero 7.0.1.2.pe\Keygen.exe (Trojan.Agent.CK) -> No action taken.
c:\sdileni\ins\nero 8.3.2.1\n.8.3.2.1-ue-full-rlz\keymaker.exe (RiskWare.Tool.HCK) -> No action taken.
c:\sdileni\ins\nero 8.3.2.1\n.8.3.2.1-ue-key-ser-activ-rlz\keymaker.exe (RiskWare.Tool.HCK) -> No action taken.
c:\documents and settings\supervisor\data aplikací\wiaserva.log (Malware.Trace) -> No action taken.
c:\WINDOWS\security\Avas\block_reader.sys (Trojan.LdPinch) -> No action taken.
c:\WINDOWS\system32\drivers\ctfmon.exe (Heuristics.Reserved.Word.Exploit) -> No action taken.

Všechno smazat a poprosím nový sken. Znovu vše smazat, pokud něco najde