VIRY.CZ

Zdravím, mám internet ADSL od O2 a právě v nedávné době nám ho zrychlili na 16 MB/s. Mám doma dva počítače a jeden notebook. U počítače ve vedlejším pokoji je modem, ze kterého vede jeden kabel do přilehlého PC a druhý kabel do druhého. Když se internet tedy zrychlil, zjistil jsem to u PC s modemem a šel vyzkoušet na druhý. Tam však nastal problém, pouze 2,5 MB/s. A noťas chytá normálně na wifi skoro 16. Řekl jsem si, že je to kabelem a utíkal do Alzy, abych si koupil adaptér na wifi do USB. Koupil jsem, nainstaloval, změna ale bohužel nenastala, pouze jen slabě přes 2 MB/s. A notebook chytá úplně normálně svých 16, ať už na svůj vlastní přijímač, nebo po jeho vypnutí na zakoupený adaptér. Jedná se o model TP-LINK TL-WN722NC. Počítač sice je starší, to ne že ne a trochu zaneřáděný nepotřebnými věcmi ho mám, ale o žádných virech nevím, přikládám RSIT.


Logfile of random's system information tool 1.09 (written by random/random)
Run by Alois at 2011-10-24 21:22:08
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 10 GB (10%) free of 100 GB
Total RAM: 1022 MB (24% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:22:14, on 24.10.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\HPZipm12.exe
D:\Alcohol\Alcohol 120\StarWind\StarWindService.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
E:\RSIT.exe
C:\Program Files\trend micro\Alois.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\WINDOWS\WebIE.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\WINDOWS\WebIE.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [NSU_agent] "C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Block This Image (ABP) - C:\Program Files\Adblock Pro\blockimg.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout pomocí BitSpiritu - D:\BitSpirit\BitSpirit\bsurl.htm
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - K:\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - K:\ICQ7.2\ICQ.exe
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\WINDOWS\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\WINDOWS\WebIE.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Alois\Nabídka Start\Programy\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net ... plugin.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/Shar ... vSniff.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 2422398031
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar ... /cabsa.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 9852830843
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate1c9c8e82b147a60) (gupdate1c9c8e82b147a60) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - D:\Alcohol\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 13969 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\At1.job
C:\WINDOWS\tasks\At2.job
C:\WINDOWS\tasks\At3.job
C:\WINDOWS\tasks\At4.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-879983540-839522115-1004Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-879983540-839522115-1004UA.job
C:\WINDOWS\tasks\HPpromotions journeysoftware.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Alois\Data aplikací\Mozilla\Firefox\Profiles\ekbq4b7f.default

prefs.js - "browser.startup.homepage" - "http://start.icq.com/"
prefs.js - "extensions.enabledItems" - "{4B3803EA-5230-4DC3-A7FC-33638F3D3542}:1.3, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, jqs@sun.com:1.0, {991A772A-BA13-4c1d-A9EF-F897F31DEC7D}:3.1, {20a82645-c095-46ed-80e3-08825760534b}:1.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.5.7"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?ei=utf-8&fr=megaup&p="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}"=C:\Program Files\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Web Player
"Path"=C:\Program Files\DivX\DivX Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.69\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18]
"Description"=Veetle TV Core
"Path"=C:\Program Files\Veetle\plugins\npVeetle.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18]
"Description"=Veetle TV Player
"Path"=C:\Program Files\Veetle\Player\npvlc.dll

C:\Program Files\Mozilla Firefox 4.0 Beta 8\extensions\
testpilot@labs.mozilla.com
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox 4.0 Beta 8\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox 4.0 Beta 8\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Alois\Data aplikací\Mozilla\Firefox\Profiles\ekbq4b7f.default\extensions\
DTToolbar@toolbarnet.com
{20a82645-c095-46ed-80e3-08825760534b}
{635abd67-4fe9-1b23-4f01-e679fa7484c1}
{991A772A-BA13-4c1d-A9EF-F897F31DEC7D}
{9d1f059c-cada-4111-9696-41a62d64e3ba}

C:\Documents and Settings\Alois\Data aplikací\Mozilla\Firefox\Profiles\ekbq4b7f.default\searchplugins\
icqplugin-1.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin.xml
qipsearch.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\WINDOWS\WebIE.dll [2007-08-08 491520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-14 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-07-14 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\WINDOWS\WebIE.dll [2007-08-08 491520]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-03-28 1017592]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2011-09-06 806456]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2011-09-06 3722416]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-01-13 18084864]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"UserFaultCheck"=C:\WINDOWS\system32\dumprep 0 -u []
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2010-03-12 49208]
""= []
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-06-29 286720]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-04-08 254696]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"NSU_agent"=C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe [2011-08-11 169264]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=C:\Documents and Settings\Alois\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2010-02-25 135664]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
""= []
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2010-05-14 1479680]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-02-11 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-03-15 236928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoDriveAutoRun"=67108863
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\Pinnacle\Studio 10\programs\RM.exe"="C:\Program Files\Pinnacle\Studio 10\programs\RM.exe:*:Enabled:Render Manager"
"C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe"="C:\Program Files\Pinnacle\Studio 10\programs\Studio.exe:*:Enabled:Studio"
"C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe"="C:\Program Files\Pinnacle\Studio 10\programs\PMSRegisterFile.exe:*:Enabled:PMSRegisterFile"
"C:\Program Files\Pinnacle\Studio 10\programs\umi.exe"="C:\Program Files\Pinnacle\Studio 10\programs\umi.exe:*:Enabled:umi"
"C:\Program Files\Pinnacle\Shared Files\Programs\MediaManager\PMSManager.exe"="C:\Program Files\Pinnacle\Shared Files\Programs\MediaManager\PMSManager.exe:*:Enabled:PMSManager"
"C:\Program Files\Electronic Arts\Need for Speed Carbon\NFSC.exe"="C:\Program Files\Electronic Arts\Need for Speed Carbon\NFSC.exe:*:Enabled:Need for Speed™ Carbon"
"D:\Test Drive Unlimited\TestDriveUnlimited.exe"="D:\Test Drive Unlimited\TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="C:\Program Files\Electronic Arts\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"D:\Race Driver GRID\GRID.exe"="D:\Race Driver GRID\GRID.exe:*:Enabled:GRID"
"D:\Burnout Paradise\BurnoutLauncher.exe"="D:\Burnout Paradise\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Burnout Paradise\BurnoutConfigTool.exe"="D:\Burnout Paradise\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Burnout Paradise\BurnoutParadise.exe"="D:\Burnout Paradise\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Alcohol\Alcohol 120\Alcohol.exe"="D:\Alcohol\Alcohol 120\Alcohol.exe:*:Enabled:ENABLE"
"C:\Program Files\Java\jre1.5.0_09\bin\javaw.exe"="C:\Program Files\Java\jre1.5.0_09\bin\javaw.exe:*:Enabled:ENABLE"
"C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe:*:Enabled:ENABLE"
"C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe"="C:\WINDOWS\pchealth\helpctr\binaries\helpctr.exe:*:Enabled:ENABLE"
"C:\WINDOWS\pchealth\helpctr\binaries\HelpHost.exe"="C:\WINDOWS\pchealth\helpctr\binaries\HelpHost.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\Restore\rstrui.exe"="C:\WINDOWS\system32\Restore\rstrui.exe:*:Enabled:ENABLE"
"C:\Program Files\Mafia\MafiaDataXTractor.exe"="C:\Program Files\Mafia\MafiaDataXTractor.exe:*:Enabled:ENABLE"
"C:\Program Files\Mafia\Game.exe"="C:\Program Files\Mafia\Game.exe:*:Enabled:ENABLE"
"C:\Program Files\Windows Media Player\setup_wm.exe"="C:\Program Files\Windows Media Player\setup_wm.exe:*:Enabled:ENABLE"
"C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE:*:Enabled:ENABLE"
"C:\WINDOWS\system32\taskmgr.exe"="C:\WINDOWS\system32\taskmgr.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\dxdiag.exe"="C:\WINDOWS\system32\dxdiag.exe:*:Enabled:ENABLE"
"C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\Setup.exe"="C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\Setup.exe:*:Enabled:ENABLE"
"C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\issetup.exe"="C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\issetup.exe:*:Enabled:ENABLE"
"C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\AtiCim.bin"="C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\AtiCim.bin:*:Enabled:ENABLE"
"C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\Driver\Setup.exe"="C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\Driver\Setup.exe:*:Enabled:ENABLE"
"C:\Program Files\Common Files\InstallShield\engine\6\Intel 32\IKernel.exe"="C:\Program Files\Common Files\InstallShield\engine\6\Intel 32\IKernel.exe:*:Enabled:ENABLE"
"C:\WINDOWS\regedit.exe"="C:\WINDOWS\regedit.exe:*:Enabled:ENABLE"
"C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\CCC\setup.exe"="C:\ATI\9-3_1_legacy_xp32-64_dd_ccc\CCC\setup.exe:*:Enabled:ENABLE"
"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCCInstall.exe"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCCInstall.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\dumprep.exe"="C:\WINDOWS\system32\dumprep.exe:*:Enabled:ENABLE"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:ENABLE"
"D:\Tune Up Utilities 2008 Full\OneClick.exe"="D:\Tune Up Utilities 2008 Full\OneClick.exe:*:Enabled:ENABLE"
"D:\Tune Up Utilities 2008 Full\RegistryCleaner.exe"="D:\Tune Up Utilities 2008 Full\RegistryCleaner.exe:*:Enabled:ENABLE"
"D:\Call of Juarez 2\CoJBiBGame_x86.exe"="D:\Call of Juarez 2\CoJBiBGame_x86.exe:*:Enabled:ENABLE"
"D:\Czech Soccer Manager 2002 FE\Csm2002.exe"="D:\Czech Soccer Manager 2002 FE\Csm2002.exe:*:Enabled:ENABLE"
"C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe"="C:\Program Files\Ahead\Nero StartSmart\NeroStartSmart.exe:*:Enabled:ENABLE"
"C:\Program Files\Ahead\nero\nero.exe"="C:\Program Files\Ahead\nero\nero.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\verclsid.exe"="C:\WINDOWS\system32\verclsid.exe:*:Enabled:ENABLE"
"C:\Program Files\Windows Media Player\wmplayer.exe"="C:\Program Files\Windows Media Player\wmplayer.exe:*:Enabled:ENABLE"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\MsiExec.exe"="C:\WINDOWS\system32\MsiExec.exe:*:Enabled:ENABLE"
"C:\Program Files\The KMPlayer\KMPlayer.exe"="C:\Program Files\The KMPlayer\KMPlayer.exe:*:Enabled:ENABLE"
"C:\Program Files\PowerQuest\PartitionMagic 7.0\WinNT\PMagicNT.exe"="C:\Program Files\PowerQuest\PartitionMagic 7.0\WinNT\PMagicNT.exe:*:Enabled:ENABLE"
"D:\WinRAR\WinRAR.exe"="D:\WinRAR\WinRAR.exe:*:Enabled:ENABLE"
"C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe"="C:\Program Files\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\netsh.exe"="C:\WINDOWS\system32\netsh.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\dwwin.exe"="C:\WINDOWS\system32\dwwin.exe:*:Enabled:ENABLE"
"C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE"="C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE:*:Enabled:ENABLE"
"C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe"="C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe:*:Enabled:ENABLE"
"C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe"="C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe:*:Enabled:ENABLE"
"C:\Program Files\HP\Digital Imaging\bin\HP Promotions\JourneySoftware\HPpromo.exe"="C:\Program Files\HP\Digital Imaging\bin\HP Promotions\JourneySoftware\HPpromo.exe:*:Enabled:ENABLE"
"C:\Program Files\Analog Devices\Core\smax4pnp.exe"="C:\Program Files\Analog Devices\Core\smax4pnp.exe:*:Enabled:ENABLE"
"C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe:*:Enabled:ENABLE"
"C:\Program Files\QuickTime\qttask.exe"="C:\Program Files\QuickTime\qttask.exe:*:Enabled:ENABLE"
"C:\Program Files\Analog Devices\SoundMAX\smax4.exe"="C:\Program Files\Analog Devices\SoundMAX\smax4.exe:*:Enabled:ENABLE"
"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe:*:Enabled:ENABLE"
"C:\Program Files\Logitech\SetPoint\SetPoint.exe"="C:\Program Files\Logitech\SetPoint\SetPoint.exe:*:Enabled:ENABLE"
"C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE"="C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE:*:Enabled:ENABLE"
"C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\wscntfy.exe"="C:\WINDOWS\system32\wscntfy.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\control.exe"="C:\WINDOWS\system32\control.exe:*:Enabled:ENABLE"
"C:\WINDOWS\system32\wuauclt.exe"="C:\WINDOWS\system32\wuauclt.exe:*:Enabled:ENABLE"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\WWP\Worms World Party\WWP\wwp.exe"="D:\WWP\Worms World Party\WWP\wwp.exe:*:Enabled:Worms World Party"
"E:\Dirt 2\dirt2_game.exe"="E:\Dirt 2\dirt2_game.exe:*:Enabled:DiRT2 Executable"
"C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Program Files\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Program Files\Common Files\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"K:\ICQ7.2\ICQ.exe"="K:\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"K:\ICQ7.2\aolload.exe"="K:\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"K:\Steam\Steam.exe"="K:\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe"="C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe:*:Enabled:Nokia Ovi Suite 2"
"C:\Documents and Settings\Alois\Data aplikací\IMVUClient\1VivoxVoice.exe"="C:\Documents and Settings\Alois\Data aplikací\IMVUClient\1VivoxVoice.exe:*:Enabled:1VivoxVoice"
"K:\F1 2010\F1_2010_game.exe"="K:\F1 2010\F1_2010_game.exe:*:Enabled:F1 2010"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"K:\Assassins.Creed.II.CloneDVD.CZ\AssassinsCreedIIGame.exe"="K:\Assassins.Creed.II.CloneDVD.CZ\AssassinsCreedIIGame.exe:*:Enabled:Assassin's Creed II"
"K:\Assassins.Creed.II.CloneDVD.CZ\AssassinsCreedII.exe"="K:\Assassins.Creed.II.CloneDVD.CZ\AssassinsCreedII.exe:*:Enabled:Assassin's Creed II Update"
"K:\Assassins.Creed.II.CloneDVD.CZ\UPlayBrowser.exe"="K:\Assassins.Creed.II.CloneDVD.CZ\UPlayBrowser.exe:*:Enabled:Assassin's Creed II Uplay"
"C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe"="C:\Program Files\EA Sports\FIFA 11\Game\fifa.exe:*:Enabled:FIFA 11"
"C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\DeviceSetup.exe"="C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\DeviceSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe"="C:\Program Files\HP\HP Officejet Pro 8500 A910\Bin\HPNetworkCommunicator.exe:LocalSubNet:Enabled:Síťový komunikátor HP"
"K:\OlyVIA\xvViewer.exe"="K:\OlyVIA\xvViewer.exe:*:Enabled:XV Image Viewer"
"C:\Program Files\Google\Google Earth\plugin\geplugin.exe"="C:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"C:\Program Files\Google\Google Earth\client\googleearth.exe"="C:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"C:\Program Files\Electronic Arts\Need for Speed(TM) Hot Pursuit\Launcher.exe"="C:\Program Files\Electronic Arts\Need for Speed(TM) Hot Pursuit\Launcher.exe:*:Enabled:Need for Speed(TM) Hot Pursuit"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\NeXt\FlashFXP\flashfxp.exe"="D:\NeXt\FlashFXP\flashfxp.exe:*:Enabled:FlashFXP v3"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"K:\ICQ7.2\ICQ.exe"="K:\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"K:\ICQ7.2\aolload.exe"="K:\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.MJPG"=Pvmjpg30.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.dvacm"=C:\PROGRA~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm
"msacm.MPEGacm"=C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\MPEGacm.acm
"msacm.ulmp3acm"=C:\PROGRA~1\COMMON~1\ULEADS~1\MPEG\ulmp3acm.acm
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll

======List of files/folders created in the last 1 month======

2011-10-24 20:04:19 ----RA---- C:\WINDOWS\system32\drivers\athuw.sys
2011-10-24 20:04:16 ----D---- C:\WINDOWS\LastGood
2011-10-24 20:04:07 ----RA---- C:\WINDOWS\system32\athuw.sys
2011-10-24 20:03:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\TP-LINK
2011-10-20 21:26:08 ----A---- C:\WINDOWS\mn5321.ini
2011-10-13 20:03:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2011-10-13 19:55:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2567053$
2011-10-13 19:55:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2011-09-30 20:07:44 ----D---- C:\Documents and Settings\Alois\Data aplikací\Zoner
2011-09-30 20:07:00 ----D---- C:\Program Files\Zoner
2011-09-25 16:15:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\EA Core
2011-09-25 13:32:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Solidshield

======List of files/folders modified in the last 1 month======

2011-10-24 21:22:14 ----D---- C:\WINDOWS\Prefetch
2011-10-24 21:22:10 ----D---- C:\Program Files\trend micro
2011-10-24 20:44:46 ----D---- C:\WINDOWS\temp
2011-10-24 20:14:20 ----HD---- C:\WINDOWS\inf
2011-10-24 20:05:28 ----D---- C:\WINDOWS\system32
2011-10-24 20:05:28 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-24 20:04:37 ----D---- C:\Program Files
2011-10-24 20:04:29 ----SHD---- C:\WINDOWS\Installer
2011-10-24 20:04:29 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-10-24 20:04:29 ----D---- C:\Config.Msi
2011-10-24 20:04:19 ----D---- C:\WINDOWS\system32\drivers
2011-10-24 20:04:16 ----D---- C:\WINDOWS
2011-10-24 20:04:05 ----HD---- C:\Program Files\InstallShield Installation Information
2011-10-24 19:56:46 ----D---- C:\WINDOWS\system32\CatRoot2
2011-10-24 00:00:51 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-10-22 22:53:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Installations
2011-10-22 22:53:14 ----D---- C:\Program Files\Nokia
2011-10-13 22:56:09 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-13 22:56:02 ----RSD---- C:\WINDOWS\assembly
2011-10-13 22:48:06 ----D---- C:\Program Files\Microsoft Silverlight
2011-10-13 22:48:05 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-10-13 20:02:55 ----D---- C:\WINDOWS\WinSxS
2011-10-13 19:55:39 ----A---- C:\WINDOWS\system32\MRT.exe
2011-10-13 19:55:30 ----A---- C:\WINDOWS\imsins.BAK
2011-10-13 19:55:11 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-13 19:55:04 ----D---- C:\Program Files\Internet Explorer
2011-10-13 19:54:50 ----D---- C:\WINDOWS\ie8updates
2011-10-12 23:07:02 ----SD---- C:\WINDOWS\system32\Microsoft
2011-10-03 10:31:24 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-09-30 22:51:31 ----A---- C:\WINDOWS\NeroDigital.ini
2011-09-30 19:54:44 ----D---- C:\Documents and Settings\Alois\Data aplikací\HpUpdate
2011-09-26 11:41:42 ----A---- C:\WINDOWS\system32\uiautomationcore.dll
2011-09-26 11:41:42 ----A---- C:\WINDOWS\system32\oleaccrc.dll
2011-09-26 11:41:20 ----A---- C:\WINDOWS\system32\oleacc.dll
2011-09-25 16:15:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Electronic Arts
2011-09-25 13:34:15 ----D---- C:\WINDOWS\system32\DirectX
2011-09-25 13:33:06 ----D---- C:\Program Files\Electronic Arts

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 mv614x;mv614x; C:\WINDOWS\system32\DRIVERS\mv614x.sys [2006-02-16 35200]
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-04-24 100736]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-03-03 48640]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2004-12-03 20544]
R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x); C:\WINDOWS\System32\drivers\sfsync03.sys [2005-12-06 35328]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2005-06-15 4096]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-01-15 691696]
R0 Vax347b;Vax347b; C:\WINDOWS\system32\DRIVERS\Vax347b.sys [2005-04-25 159616]
R0 Vax347s;Vax347s; C:\WINDOWS\System32\Drivers\Vax347s.sys [2004-04-30 5248]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-09-06 30808]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-09-06 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-09-06 442200]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-09-06 320856]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-09-06 52568]
R1 NVTCP;NVIDIA TCP/IP Protocol Driver; C:\WINDOWS\System32\DRIVERS\NVTcp.sys [2006-03-22 109568]
R1 PCLEPCI;PCLEPCI; \??\C:\WINDOWS\system32\drivers\pclepci.sys []
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2001-08-10 3252]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-09-06 110552]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2006-11-16 165376]
R2 cpuz134;cpuz134; \??\C:\WINDOWS\system32\drivers\cpuz134_x32.sys []
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2006-11-16 18048]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ASAPIW2K;ASAPIW2K; C:\WINDOWS\System32\Drivers\ASAPIW2K.sys [2005-02-23 11264]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-02-11 3565056]
R3 ATIAVAIW;ATI T200 Unified AVStream service; C:\WINDOWS\system32\DRIVERS\atinavt2.sys [2009-02-04 170496]
R3 BENDER;Pinnacle AV/DV2 Capture; C:\WINDOWS\system32\drivers\bender.sys [2005-08-18 200320]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-01-20 5027840]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\System32\Drivers\L8042Kbd.sys [2005-05-20 13056]
R3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\System32\Drivers\L8042mou.sys [2005-05-20 54528]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\WINDOWS\System32\Drivers\LMouKE.sys [2005-05-20 68352]
R3 MarvinBus;Pinnacle Marvin Bus; C:\WINDOWS\system32\DRIVERS\MarvinBus.sys [2005-07-13 171008]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 ADILOADER;General Purpose USB Driver (adildr.sys); C:\WINDOWS\System32\Drivers\adildr.sys []
S3 61883;61883 Unit Device; C:\WINDOWS\system32\DRIVERS\61883.sys [2008-04-14 48128]
S3 a5e69ghf;a5e69ghf; C:\WINDOWS\system32\drivers\a5e69ghf.sys []
S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2006-05-02 229888]
S3 adiusbaw;USB ADSL WAN Adapter; C:\WINDOWS\system32\DRIVERS\adiusbaw.sys []
S3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2006-04-27 93824]
S3 AR9271;Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw.sys [2010-01-05 1714176]
S3 arxhs8q8;arxhs8q8; C:\WINDOWS\system32\drivers\arxhs8q8.sys []
S3 Avc;AVC Device; C:\WINDOWS\system32\DRIVERS\avc.sys [2008-04-14 38912]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\D:\MediaCoder\SysInfo.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2007-10-24 25544]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-13 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-13 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-13 21568]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\system32\DRIVERS\msdv.sys [2008-04-14 51200]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nm;Ovladač programu Sledování sítě; C:\WINDOWS\system32\DRIVERS\NMnt.sys [2008-04-14 40320]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-05-18 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-05-18 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2011-05-18 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2011-05-18 8576]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-03-22 52736]
S3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-03-22 18944]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 Pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\Pcouffin.sys [2009-08-12 47360]
S3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-17 392960]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 snpstd2;VideoCAM Look; C:\WINDOWS\system32\DRIVERS\snpstd2.sys [2004-07-28 334080]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-05-18 8192]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-05-18 8192]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2010-02-11 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-09-06 44768]
R2 Capture Device Service;Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [2007-03-06 198168]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe [2006-03-30 143360]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-02-07 20543]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-03-28 246520]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-02-17 73728]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-03-30 131131]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]
R2 StarWindService;StarWind iSCSI Service; D:\Alcohol\Alcohol 120\StarWind\StarWindService.exe [2005-04-02 217600]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-02-25 1047880]
R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2007-03-03 67056]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2010-02-10 593920]
S2 gupdate1c9c8e82b147a60;Služba Google Update (gupdate1c9c8e82b147a60); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-04-29 133104]
S2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-03-30 65599]
S2 PinnacleSys.MediaServer;Pinnacle Systems Media Service; C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe [2006-01-19 49152]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-04-29 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 SQLAgent$PINNACLESYS;SQLAgent$PINNACLESYS; C:\Program Files\Pinnacle\MediaServer\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlagent.EXE [2005-05-03 323584]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-04-11 435016]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe []
S4 MSSQLServerADHelper;MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe []
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------


Mnohokrát děkuji za pomoc.

Také zdravím!
Poprosím o log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Je tady...


ComboFix 11-10-24.04 - Alois 24.10.2011 23:21:39.15.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1022.341 [GMT 2:00]
Spuštěný z: E:\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ActiveArmor Firewall *Enabled* {EDC10449-64D1-46c7-A59A-EC20D662F26D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Alois\WINDOWS
c:\windows\bwUnin-7.2.0.137-8876480SL.exe
c:\windows\bwUnin-7.2.0.157-8876480SL.exe
c:\windows\bwUnin-8.1.1.50-8876480SL.exe
c:\windows\IsUn0405.exe
c:\windows\system32\CF22258.exe
c:\windows\system32\UACRegAccess.dll
c:\windows\UA000079.DLL
K:\setup.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-24 do 2011-10-24 )))))))))))))))))))))))))))))))
.
.
2011-10-24 18:04 . 2010-01-05 01:31 1714176 ----a-r- c:\windows\system32\drivers\athuw.sys
2011-10-24 18:04 . 2010-01-05 01:31 1714176 ----a-r- c:\windows\system32\athuw.sys
2011-10-24 18:03 . 2011-10-24 18:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\TP-LINK
2011-10-13 21:07 . 2011-10-13 21:07 -------- d-----w- c:\documents and settings\Alois\Local Settings\Data aplikací\PCHealth
2011-09-30 18:07 . 2011-09-30 18:08 -------- d-----w- c:\documents and settings\Alois\Data aplikací\Zoner
2011-09-30 18:07 . 2011-09-30 18:07 -------- d-----w- c:\documents and settings\Alois\Local Settings\Data aplikací\Zoner
2011-09-30 18:07 . 2011-09-30 18:07 -------- d-----w- c:\program files\Zoner
2011-09-29 21:15 . 2011-09-29 21:15 -------- d-----w- c:\documents and settings\Alois\Pictures
2011-09-29 21:15 . 2011-09-29 21:15 -------- d-----w- c:\documents and settings\Alois\Documents
2011-09-29 21:14 . 2011-09-29 21:14 -------- d-----w- c:\documents and settings\Alois\AppData
2011-09-25 14:15 . 2011-09-25 14:15 -------- d-----w- c:\documents and settings\All Users\Data aplikací\EA Core
2011-09-25 11:32 . 2011-09-25 11:32 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Solidshield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2036-02-07 01:58 . 2008-03-10 11:32 4103823 ----a-r- c:\windows\system32\KAMENAK3.scr
2011-09-26 09:41 . 2008-07-29 17:59 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2006-03-02 12:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2006-03-02 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-09 09:12 . 2006-03-02 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-06 20:45 . 2010-06-29 18:30 41184 ----a-w- c:\windows\avastSS.scr
2011-09-06 20:45 . 2006-11-01 22:37 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-06 20:38 . 2011-05-15 12:11 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-06 20:37 . 2008-04-26 11:58 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-06 20:36 . 2006-11-01 22:37 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-06 20:36 . 2006-11-01 22:37 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-06 20:36 . 2006-11-01 22:37 110552 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-09-06 20:36 . 2006-11-01 22:37 104536 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-09-06 20:36 . 2008-04-26 11:58 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-09-06 20:33 . 2006-11-01 22:37 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-09-06 14:10 . 2006-03-02 12:00 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-08-22 23:41 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2011-08-22 23:41 . 2006-03-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-08-22 23:41 . 2006-03-02 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-08-22 11:56 . 2006-03-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2011-08-17 13:49 . 2006-03-02 12:00 138496 ----a-w- c:\windows\system32\drivers\afd.sys
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-05-14 1479680]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 61440]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-06-29 286720]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"NSU_agent"="c:\program files\Nokia\Nokia Software Updater\nsu3ui_agent.exe" [2011-08-11 169264]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2006-11-14 450560]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" /background
"NBJ"="c:\program files\Ahead\Nero BackItUp\NBJ.exe"
"Steam"="k:\steam\steam.exe" -silent
"NokiaOviSuite2"=c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
"ICQ"="k:\icq7.2\ICQ.exe" silent loginmode=4
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SNPSTD2"=c:\windows\vsnpstd2.exe
"StartCCC"=c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"HPDJ Taskbar Utility"=c:\windows\system32\spool\drivers\w32x86\3\hpztsb05.exe
"NeroFilterCheck"=c:\windows\system32\NeroCheck.exe
"PinnacleDriverCheck"=c:\windows\system32\PSDrvCheck.exe -CheckReg
"USBToolTip"="c:\program files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe"
"UVS11 Preload"=c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
"SoundMAXPnP"=c:\program files\Analog Devices\Core\smax4pnp.exe
"NokiaMServer"=c:\program files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"=
"c:\\Program Files\\Pinnacle\\Shared Files\\Programs\\MediaManager\\PMSManager.exe"=
"c:\\Program Files\\Electronic Arts\\Need for Speed Carbon\\NFSC.exe"=
"d:\\Test Drive Unlimited\\TestDriveUnlimited.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"d:\\Race Driver GRID\\GRID.exe"=
"d:\\Burnout Paradise\\BurnoutLauncher.exe"=
"d:\\Burnout Paradise\\BurnoutConfigTool.exe"=
"d:\\Burnout Paradise\\BurnoutParadise.exe"=
"d:\\Alcohol\\Alcohol 120\\Alcohol.exe"=
"c:\\Program Files\\Java\\jre1.5.0_09\\bin\\javaw.exe"=
"c:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AcroRd32Info.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpHost.exe"=
"c:\\WINDOWS\\system32\\Restore\\rstrui.exe"=
"c:\\Program Files\\Mafia\\MafiaDataXTractor.exe"=
"c:\\Program Files\\Mafia\\Game.exe"=
"c:\\Program Files\\Windows Media Player\\setup_wm.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\taskmgr.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\Setup.exe"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\issetup.exe"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\AtiCim.bin"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\Driver\\Setup.exe"=
"c:\\Program Files\\Common Files\\InstallShield\\engine\\6\\Intel 32\\IKernel.exe"=
"c:\\WINDOWS\\regedit.exe"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\CCC\\setup.exe"=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CCCInstall.exe"=
"c:\\WINDOWS\\system32\\dumprep.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"d:\\Tune Up Utilities 2008 Full\\OneClick.exe"=
"d:\\Tune Up Utilities 2008 Full\\RegistryCleaner.exe"=
"d:\\Call of Juarez 2\\CoJBiBGame_x86.exe"=
"d:\\Czech Soccer Manager 2002 FE\\Csm2002.exe"=
"c:\\Program Files\\Ahead\\Nero StartSmart\\NeroStartSmart.exe"=
"c:\\Program Files\\Ahead\\nero\\nero.exe"=
"c:\\WINDOWS\\system32\\verclsid.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\WINDOWS\\system32\\MsiExec.exe"=
"c:\\Program Files\\The KMPlayer\\KMPlayer.exe"=
"c:\\Program Files\\PowerQuest\\PartitionMagic 7.0\\WinNT\\PMagicNT.exe"=
"d:\\WinRAR\\WinRAR.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\WINDOWS\\system32\\netsh.exe"=
"c:\\WINDOWS\\system32\\dwwin.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\WINWORD.EXE"=
"c:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Common Files\\Nokia\\MPAPI\\MPAPI3s.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\HP Promotions\\JourneySoftware\\HPpromo.exe"=
"c:\\Program Files\\Analog Devices\\Core\\smax4pnp.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"=
"c:\\Program Files\\QuickTime\\qttask.exe"=
"c:\\Program Files\\Analog Devices\\SoundMAX\\smax4.exe"=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\MOM.exe"=
"c:\\Program Files\\Logitech\\SetPoint\\SetPoint.exe"=
"c:\\Program Files\\Common Files\\Logitech\\KHAL\\KHALMNPR.EXE"=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\ccc.exe"=
"c:\\WINDOWS\\system32\\wscntfy.exe"=
"c:\\WINDOWS\\system32\\control.exe"=
"c:\\WINDOWS\\system32\\wuauclt.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\WWP\\Worms World Party\\WWP\\wwp.exe"=
"e:\\Dirt 2\\dirt2_game.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"k:\\ICQ7.2\\ICQ.exe"=
"k:\\ICQ7.2\\aolload.exe"=
"k:\\Steam\\Steam.exe"=
"c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"k:\\F1 2010\\F1_2010_game.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"k:\\Assassins.Creed.II.CloneDVD.CZ\\AssassinsCreedIIGame.exe"=
"k:\\Assassins.Creed.II.CloneDVD.CZ\\AssassinsCreedII.exe"=
"k:\\Assassins.Creed.II.CloneDVD.CZ\\UPlayBrowser.exe"=
"c:\\Program Files\\EA Sports\\FIFA 11\\Game\\fifa.exe"=
"k:\\OlyVIA\\xvViewer.exe"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Electronic Arts\\Need for Speed(TM) Hot Pursuit\\Launcher.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"17763:TCP"= 17763:TCP:BitComet 17763 TCP
"17763:UDP"= 17763:UDP:BitComet 17763 UDP
"25111:TCP"= 25111:TCP:BitComet 25111 TCP
"25111:UDP"= 25111:UDP:BitComet 25111 UDP
.
R0 mv614x;mv614x;c:\windows\system32\drivers\mv614x.sys [2.11.2006 0:17 35200]
R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [6.12.2005 17:11 35328]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [15.6.2009 20:22 691696]
R0 Vax347b;Vax347b;c:\windows\system32\drivers\Vax347b.sys [18.11.2006 16:52 159616]
R0 Vax347s;Vax347s;c:\windows\system32\drivers\Vax347s.sys [18.11.2006 16:52 5248]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [15.5.2011 14:11 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [26.4.2008 13:58 320856]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [26.4.2008 13:58 20568]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [24.9.2010 20:35 20328]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2.12.2008 18:36 246520]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [25.2.2010 11:59 1047880]
R3 BENDER;Pinnacle AV/DV2 Capture;c:\windows\system32\drivers\bender.sys [13.11.2006 21:16 200320]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [14.10.2009 7:24 10064]
S2 gupdate1c9c8e82b147a60;Služba Google Update (gupdate1c9c8e82b147a60);c:\program files\Google\Update\GoogleUpdate.exe [29.4.2009 18:32 133104]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [24.10.2011 20:04 1714176]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [29.4.2009 18:32 133104]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [18.8.2011 19:57 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [18.8.2011 19:57 8576]
S3 Pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [12.8.2009 23:27 47360]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-09-09 c:\windows\Tasks\1-Click Maintenance.job
- d:\tune up utilities 2008 full\OneClick.exe [2007-12-21 12:49]
.
2011-10-17 c:\windows\Tasks\At1.job
- c:\program files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-06-14 15:07]
.
2011-10-24 c:\windows\Tasks\At2.job
- c:\program files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-06-14 15:07]
.
2011-10-24 c:\windows\Tasks\At3.job
- c:\program files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-06-14 15:07]
.
2011-10-23 c:\windows\Tasks\At4.job
- c:\program files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-06-14 15:07]
.
2011-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-29 16:31]
.
2011-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-29 16:31]
.
2011-10-24 c:\windows\Tasks\HPpromotions journeysoftware.job
- c:\program files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe [2005-04-22 16:36]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: &Block This Image (ABP) - c:\program files\Adblock Pro\blockimg.html
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout pomocí BitSpiritu - d:\bitspirit\BitSpirit\bsurl.htm
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Alois\Nabídka Start\Programy\IMVU\Run IMVU.lnk
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
Trusted Zone: servis24.cz\www
TCP: DhcpNameServer = 10.0.0.138
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\documents and settings\Alois\Data aplikací\Mozilla\Firefox\Profiles\ekbq4b7f.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=utf-8&fr=megaup&p=
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.interval - 600000
FF - user.js: content.switch.threshold - 1000000
FF - user.js: nglayout.initialpaint.delay - 600
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKU-Default-Run-PcSync - c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe
AddRemove-Adobe Photoshop 6.0.1 CE - c:\windows\ISUN0405.EXE
AddRemove-Jízdní řády - ProgramTT - c:\windows\IsUn0405.exe
AddRemove-2009 - c:\windows\IsUn0405.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-24 23:34
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\## aswSnx private storage
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: ST3320620AS rev.3.AAE -> Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T0L0-3
.
device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user != kernel MBR !!!
sectors 625142446 (+1): user != kernel
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1757981266-879983540-839522115-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:04,eb,a7,99,80,b7,ce,b5,58,90,ff,c3,bc,6c,bc,8e,6c,41,1c,cf,ce,50,4e,
77,07,3c,63,ef,d3,00,83,52,85,0d,7a,69,8a,54,ad,ef,eb,be,ed,60,06,cc,d1,98,\
"??"=hex:02,d9,3d,07,b6,b4,06,e1,cc,c9,09,50,52,f8,77,55
.
[HKEY_USERS\S-1-5-21-1757981266-879983540-839522115-1004\Software\SecuROM\License information*]
"datasecu"=hex:79,aa,fd,e6,7a,32,52,42,bd,a7,fe,75,bb,21,d3,d8,6f,12,28,60,50,
88,40,87,e0,db,04,92,75,1f,7e,05,c3,f2,d3,8f,70,4b,3f,64,3c,ed,ea,70,d4,7a,\
"rkeysecu"=hex:7c,69,34,4e,ff,9b,aa,09,ba,ec,72,b9,ce,87,61,f4
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1488)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2011-10-24 23:38:50
ComboFix-quarantined-files.txt 2011-10-24 21:38
ComboFix2.txt 2010-08-22 12:35
.
Před spuštěním: Volných bajtů: 10 000 887 808
Po spuštění: Volných bajtů: 10 392 899 584
.
Current=4 Default=4 Failed=2 LastKnownGood=1 Sets=1,2,4,5
- - End Of File - - CE894CD7604A3F3F09A516C25E5915E5

PROBLÉM VYŘEŠEN!!!
Jedeme jak přes kabel, tak přes wifi, obojí krásně frčí, děkuji!

Ještě to ale není vše. Přesuňteš ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Firefox::
FF - ProfilePath - c:\documents and settings\Alois\Data aplikací\Mozilla\Firefox\Profiles\ekbq4b7f.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=utf-8&fr=megaup&p=
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.notify.interval - 600000
FF - user.js: content.switch.threshold - 1000000
FF - user.js: nglayout.initialpaint.delay - 600

AtJob::

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

PC bude restartován. Po něm stáhněte, rozbalte a spusťte TDSSKiller: http://support.kaspersky.com/downloads/ ... killer.zip . Zvolte možnost "Cure" a nechte pracovat. Nakonec dejte log.

Omlouvám se za prodlevu, pokusím se reagovat rychleji U toho TDSSKilleru jsem nenašel možnost "Cure", tak jsem dal Start scan". Přikládám tedy nejdříve CF, potom TDSSKiller.


ComboFix 11-10-24.04 - Alois 26.10.2011 20:57:20.16.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.1022.499 [GMT 2:00]
Spuštěný z: E:\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Alois\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ActiveArmor Firewall *Enabled* {EDC10449-64D1-46c7-A59A-EC20D662F26D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-09-26 do 2011-10-26 )))))))))))))))))))))))))))))))
.
.
2011-10-24 18:04 . 2010-01-05 01:31 1714176 ----a-r- c:\windows\system32\drivers\athuw.sys
2011-10-24 18:04 . 2010-01-05 01:31 1714176 ----a-r- c:\windows\system32\athuw.sys
2011-10-24 18:03 . 2011-10-24 18:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\TP-LINK
2011-10-13 21:07 . 2011-10-13 21:07 -------- d-----w- c:\documents and settings\Alois\Local Settings\Data aplikací\PCHealth
2011-09-30 18:07 . 2011-09-30 18:08 -------- d-----w- c:\documents and settings\Alois\Data aplikací\Zoner
2011-09-30 18:07 . 2011-09-30 18:07 -------- d-----w- c:\documents and settings\Alois\Local Settings\Data aplikací\Zoner
2011-09-30 18:07 . 2011-09-30 18:07 -------- d-----w- c:\program files\Zoner
2011-09-29 21:15 . 2011-09-29 21:15 -------- d-----w- c:\documents and settings\Alois\Pictures
2011-09-29 21:15 . 2011-09-29 21:15 -------- d-----w- c:\documents and settings\Alois\Documents
2011-09-29 21:14 . 2011-09-29 21:14 -------- d-----w- c:\documents and settings\Alois\AppData
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2036-02-07 01:58 . 2008-03-10 11:32 4103823 ----a-r- c:\windows\system32\KAMENAK3.scr
2011-09-26 09:41 . 2008-07-29 17:59 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2006-03-02 12:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2006-03-02 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-09 09:12 . 2006-03-02 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-06 20:45 . 2010-06-29 18:30 41184 ----a-w- c:\windows\avastSS.scr
2011-09-06 20:45 . 2006-11-01 22:37 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-06 20:38 . 2011-05-15 12:11 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-06 20:37 . 2008-04-26 11:58 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-06 20:36 . 2006-11-01 22:37 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-06 20:36 . 2006-11-01 22:37 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-06 20:36 . 2006-11-01 22:37 110552 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-09-06 20:36 . 2006-11-01 22:37 104536 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-09-06 20:36 . 2008-04-26 11:58 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-09-06 20:33 . 2006-11-01 22:37 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-09-06 14:10 . 2006-03-02 12:00 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-08-22 23:41 . 2006-03-02 12:00 916480 ----a-w- c:\windows\system32\wininet.dll
2011-08-22 23:41 . 2006-03-02 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-08-22 23:41 . 2006-03-02 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2011-08-22 11:56 . 2006-03-02 12:00 385024 ----a-w- c:\windows\system32\html.iec
2011-08-17 13:49 . 2006-03-02 12:00 138496 ----a-w- c:\windows\system32\drivers\afd.sys
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\opera\program\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\opera\program\plugins\ssldivx.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-10-24_21.34.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-10-26 19:11 . 2011-10-26 19:11 16384 c:\windows\temp\Perflib_Perfdata_278.dat
+ 2011-10-25 14:48 . 2011-10-25 14:48 22016 c:\windows\Installer\2609f1.msi
+ 2006-03-02 12:00 . 2011-10-26 19:15 189572 c:\windows\system32\perfc009.dat
+ 2006-03-02 12:00 . 2011-10-26 19:15 777544 c:\windows\system32\perfc005.dat
+ 2006-03-02 12:00 . 2011-10-26 19:15 1538608 c:\windows\system32\perfh009.dat
+ 2006-03-02 12:00 . 2011-10-26 19:15 1832722 c:\windows\system32\perfh005.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2010-05-14 1479680]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-02-10 61440]
"RTHDCPL"="RTHDCPL.EXE" [2009-01-13 18084864]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2010-03-12 49208]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2007-06-29 286720]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"NSU_agent"="c:\program files\Nokia\Nokia Software Updater\nsu3ui_agent.exe" [2011-08-11 169264]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2006-11-14 450560]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" /background
"NBJ"="c:\program files\Ahead\Nero BackItUp\NBJ.exe"
"Steam"="k:\steam\steam.exe" -silent
"NokiaOviSuite2"=c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
"ICQ"="k:\icq7.2\ICQ.exe" silent loginmode=4
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" -autorun
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SNPSTD2"=c:\windows\vsnpstd2.exe
"StartCCC"=c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" -atboottime
"HPDJ Taskbar Utility"=c:\windows\system32\spool\drivers\w32x86\3\hpztsb05.exe
"NeroFilterCheck"=c:\windows\system32\NeroCheck.exe
"PinnacleDriverCheck"=c:\windows\system32\PSDrvCheck.exe -CheckReg
"USBToolTip"="c:\program files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe"
"UVS11 Preload"=c:\program files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
"SoundMAXPnP"=c:\program files\Analog Devices\Core\smax4pnp.exe
"NokiaMServer"=c:\program files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\RM.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\Studio.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\PMSRegisterFile.exe"=
"c:\\Program Files\\Pinnacle\\Studio 10\\programs\\umi.exe"=
"c:\\Program Files\\Pinnacle\\Shared Files\\Programs\\MediaManager\\PMSManager.exe"=
"c:\\Program Files\\Electronic Arts\\Need for Speed Carbon\\NFSC.exe"=
"d:\\Test Drive Unlimited\\TestDriveUnlimited.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"c:\\Program Files\\Electronic Arts\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"d:\\Race Driver GRID\\GRID.exe"=
"d:\\Burnout Paradise\\BurnoutLauncher.exe"=
"d:\\Burnout Paradise\\BurnoutConfigTool.exe"=
"d:\\Burnout Paradise\\BurnoutParadise.exe"=
"d:\\Alcohol\\Alcohol 120\\Alcohol.exe"=
"c:\\Program Files\\Java\\jre1.5.0_09\\bin\\javaw.exe"=
"c:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AcroRd32Info.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\helpctr.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpHost.exe"=
"c:\\WINDOWS\\system32\\Restore\\rstrui.exe"=
"c:\\Program Files\\Mafia\\MafiaDataXTractor.exe"=
"c:\\Program Files\\Mafia\\Game.exe"=
"c:\\Program Files\\Windows Media Player\\setup_wm.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\taskmgr.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\Setup.exe"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\issetup.exe"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\AtiCim.bin"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\Driver\\Setup.exe"=
"c:\\Program Files\\Common Files\\InstallShield\\engine\\6\\Intel 32\\IKernel.exe"=
"c:\\WINDOWS\\regedit.exe"=
"c:\\ATI\\9-3_1_legacy_xp32-64_dd_ccc\\CCC\\setup.exe"=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CCCInstall.exe"=
"c:\\WINDOWS\\system32\\dumprep.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"d:\\Tune Up Utilities 2008 Full\\OneClick.exe"=
"d:\\Tune Up Utilities 2008 Full\\RegistryCleaner.exe"=
"d:\\Call of Juarez 2\\CoJBiBGame_x86.exe"=
"d:\\Czech Soccer Manager 2002 FE\\Csm2002.exe"=
"c:\\Program Files\\Ahead\\Nero StartSmart\\NeroStartSmart.exe"=
"c:\\Program Files\\Ahead\\nero\\nero.exe"=
"c:\\WINDOWS\\system32\\verclsid.exe"=
"c:\\Program Files\\Windows Media Player\\wmplayer.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\WINDOWS\\system32\\MsiExec.exe"=
"c:\\Program Files\\The KMPlayer\\KMPlayer.exe"=
"c:\\Program Files\\PowerQuest\\PartitionMagic 7.0\\WinNT\\PMagicNT.exe"=
"d:\\WinRAR\\WinRAR.exe"=
"c:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
"c:\\WINDOWS\\system32\\netsh.exe"=
"c:\\WINDOWS\\system32\\dwwin.exe"=
"c:\\Program Files\\Microsoft Office\\OFFICE11\\WINWORD.EXE"=
"c:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AcroRd32.exe"=
"c:\\Program Files\\Common Files\\Nokia\\MPAPI\\MPAPI3s.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\HP Promotions\\JourneySoftware\\HPpromo.exe"=
"c:\\Program Files\\Analog Devices\\Core\\smax4pnp.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"=
"c:\\Program Files\\QuickTime\\qttask.exe"=
"c:\\Program Files\\Analog Devices\\SoundMAX\\smax4.exe"=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\MOM.exe"=
"c:\\Program Files\\Logitech\\SetPoint\\SetPoint.exe"=
"c:\\Program Files\\Common Files\\Logitech\\KHAL\\KHALMNPR.EXE"=
"c:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\ccc.exe"=
"c:\\WINDOWS\\system32\\wscntfy.exe"=
"c:\\WINDOWS\\system32\\control.exe"=
"c:\\WINDOWS\\system32\\wuauclt.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\WWP\\Worms World Party\\WWP\\wwp.exe"=
"e:\\Dirt 2\\dirt2_game.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"k:\\ICQ7.2\\ICQ.exe"=
"k:\\ICQ7.2\\aolload.exe"=
"k:\\Steam\\Steam.exe"=
"c:\\Program Files\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"k:\\F1 2010\\F1_2010_game.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"k:\\Assassins.Creed.II.CloneDVD.CZ\\AssassinsCreedIIGame.exe"=
"k:\\Assassins.Creed.II.CloneDVD.CZ\\AssassinsCreedII.exe"=
"k:\\Assassins.Creed.II.CloneDVD.CZ\\UPlayBrowser.exe"=
"c:\\Program Files\\EA Sports\\FIFA 11\\Game\\fifa.exe"=
"k:\\OlyVIA\\xvViewer.exe"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\Electronic Arts\\Need for Speed(TM) Hot Pursuit\\Launcher.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"17763:TCP"= 17763:TCP:BitComet 17763 TCP
"17763:UDP"= 17763:UDP:BitComet 17763 UDP
"25111:TCP"= 25111:TCP:BitComet 25111 TCP
"25111:UDP"= 25111:UDP:BitComet 25111 UDP
.
R0 mv614x;mv614x;c:\windows\system32\drivers\mv614x.sys [2.11.2006 0:17 35200]
R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [6.12.2005 17:11 35328]
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [15.6.2009 20:22 691696]
R0 Vax347b;Vax347b;c:\windows\system32\drivers\Vax347b.sys [18.11.2006 16:52 159616]
R0 Vax347s;Vax347s;c:\windows\system32\drivers\Vax347s.sys [18.11.2006 16:52 5248]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [15.5.2011 14:11 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [26.4.2008 13:58 320856]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [26.4.2008 13:58 20568]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [24.9.2010 20:35 20328]
R2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2.12.2008 18:36 246520]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [25.2.2010 11:59 1047880]
R3 BENDER;Pinnacle AV/DV2 Capture;c:\windows\system32\drivers\bender.sys [13.11.2006 21:16 200320]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [14.10.2009 7:24 10064]
S2 gupdate1c9c8e82b147a60;Služba Google Update (gupdate1c9c8e82b147a60);c:\program files\Google\Update\GoogleUpdate.exe [29.4.2009 18:32 133104]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [24.10.2011 20:04 1714176]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [29.4.2009 18:32 133104]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [18.8.2011 19:57 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [18.8.2011 19:57 8576]
S3 Pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [12.8.2009 23:27 47360]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-09-09 c:\windows\Tasks\1-Click Maintenance.job
- d:\tune up utilities 2008 full\OneClick.exe [2007-12-21 12:49]
.
2011-10-17 c:\windows\Tasks\At1.job
- c:\program files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-06-14 15:07]
.
2011-10-26 c:\windows\Tasks\At2.job
- c:\program files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-06-14 15:07]
.
2011-10-26 c:\windows\Tasks\At3.job
- c:\program files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-06-14 15:07]
.
2011-10-26 c:\windows\Tasks\At4.job
- c:\program files\HP\HP Officejet Pro 8500 A910\Bin\HPCustPartic.exe [2010-06-14 15:07]
.
2011-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-29 16:31]
.
2011-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-29 16:31]
.
2011-10-26 c:\windows\Tasks\HPpromotions journeysoftware.job
- c:\program files\hp\digital imaging\bin\hp promotions\journeysoftware\HPpromo.exe [2005-04-22 16:36]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: &Block This Image (ABP) - c:\program files\Adblock Pro\blockimg.html
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout pomocí BitSpiritu - d:\bitspirit\BitSpirit\bsurl.htm
IE: {{d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\documents and settings\Alois\Nabídka Start\Programy\IMVU\Run IMVU.lnk
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
Trusted Zone: servis24.cz\www
TCP: DhcpNameServer = 10.0.0.138
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\documents and settings\Alois\Data aplikací\Mozilla\Firefox\Profiles\ekbq4b7f.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-10-26 21:23
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: ST3320620AS rev.3.AAE -> Harddisk1\DR1 -> \Device\Ide\IdeDeviceP0T0L0-3
.
device: opened successfully
user: MBR read successfully
kernel: MBR read successfully
user != kernel MBR !!!
sectors 625142446 (+1): user != kernel
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-1757981266-879983540-839522115-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"??"=hex:04,eb,a7,99,80,b7,ce,b5,58,90,ff,c3,bc,6c,bc,8e,6c,41,1c,cf,ce,50,4e,
77,07,3c,63,ef,d3,00,83,52,85,0d,7a,69,8a,54,ad,ef,eb,be,ed,60,06,cc,d1,98,\
"??"=hex:02,d9,3d,07,b6,b4,06,e1,cc,c9,09,50,52,f8,77,55
.
[HKEY_USERS\S-1-5-21-1757981266-879983540-839522115-1004\Software\SecuROM\License information*]
"datasecu"=hex:79,aa,fd,e6,7a,32,52,42,bd,a7,fe,75,bb,21,d3,d8,6f,12,28,60,50,
88,40,87,e0,db,04,92,75,1f,7e,05,c3,f2,d3,8f,70,4b,3f,64,3c,ed,ea,70,d4,7a,\
"rkeysecu"=hex:7c,69,34,4e,ff,9b,aa,09,ba,ec,72,b9,ce,87,61,f4
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1304)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(3880)
c:\program files\Logitech\SetPoint\lgscroll.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\InterVideo\DeviceService\DevSvc.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\LightScribe\LSSrvc.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
c:\windows\system32\HPZipm12.exe
d:\alcohol\Alcohol 120\StarWind\StarWindService.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
c:\program files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\windows\RTHDCPL.EXE
c:\program files\Common Files\Nokia\MPlatform\NokiaMServer.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
c:\program files\Common Files\Logitech\KHAL\KHALMNPR.EXE
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\Common Files\Java\Java Update\jucheck.exe
.
**************************************************************************
.
Celkový čas: 2011-10-26 21:30:54 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-10-26 19:30
ComboFix2.txt 2011-10-24 21:38
ComboFix3.txt 2010-08-22 12:35
.
Před spuštěním: Volných bajtů: 10 151 092 224
Po spuštění: Volných bajtů: 10 080 223 232
.
Current=4 Default=4 Failed=2 LastKnownGood=1 Sets=1,2,4,5
- - End Of File - - 8B4AA218F53E66ACE1BF42264F642AA2


_____________________________________________________________________________________________________________________________________
_____________________________________________________________________________________________________________________________________



21:32:26.0750 3100 TDSS rootkit removing tool 2.6.13.0 Oct 25 2011 13:56:21
21:32:27.0078 3100 ============================================================
21:32:27.0078 3100 Current date / time: 2011/10/26 21:32:27.0078
21:32:27.0078 3100 SystemInfo:
21:32:27.0078 3100
21:32:27.0078 3100 OS Version: 5.1.2600 ServicePack: 3.0
21:32:27.0078 3100 Product type: Workstation
21:32:27.0078 3100 ComputerName: XYZ
21:32:27.0078 3100 UserName: Alois
21:32:27.0078 3100 Windows directory: C:\WINDOWS
21:32:27.0078 3100 System windows directory: C:\WINDOWS
21:32:27.0078 3100 Processor architecture: Intel x86
21:32:27.0078 3100 Number of processors: 2
21:32:27.0078 3100 Page size: 0x1000
21:32:27.0078 3100 Boot type: Normal boot
21:32:27.0078 3100 ============================================================
21:32:29.0437 3100 Initialize success
21:33:17.0703 2964 ============================================================
21:33:17.0703 2964 Scan started
21:33:17.0703 2964 Mode: Manual;
21:33:17.0703 2964 ============================================================
21:33:17.0921 2964 61883 (914a9709fc3bf419ad2f85547f2a4832) C:\WINDOWS\system32\DRIVERS\61883.sys
21:33:17.0937 2964 61883 - ok
21:33:17.0984 2964 Aavmker4 (95d1de2a6613494e853a9738d5d9acd4) C:\WINDOWS\system32\drivers\Aavmker4.sys
21:33:17.0984 2964 Aavmker4 - ok
21:33:18.0031 2964 Abiosdsk - ok
21:33:18.0062 2964 abp480n5 - ok
21:33:18.0156 2964 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
21:33:18.0156 2964 ACPI - ok
21:33:18.0187 2964 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
21:33:18.0187 2964 ACPIEC - ok
21:33:18.0250 2964 ADIHdAudAddService (8ce0a2c740e6e2683b4def4e485ea331) C:\WINDOWS\system32\drivers\ADIHdAud.sys
21:33:18.0250 2964 ADIHdAudAddService - ok
21:33:18.0296 2964 ADILOADER - ok
21:33:18.0390 2964 adiusbaw - ok
21:33:18.0421 2964 adpu160m - ok
21:33:18.0468 2964 AEAudio (03be587e90c8b37c7ff1fe2e9c1d1c90) C:\WINDOWS\system32\drivers\AEAudio.sys
21:33:18.0468 2964 AEAudio - ok
21:33:18.0515 2964 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
21:33:18.0515 2964 aec - ok
21:33:18.0578 2964 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
21:33:18.0578 2964 AFD - ok
21:33:18.0625 2964 Aha154x - ok
21:33:18.0656 2964 aic78u2 - ok
21:33:18.0703 2964 aic78xx - ok
21:33:18.0734 2964 AliIde - ok
21:33:18.0812 2964 AmdK8 (fcffa85cfd4bf7a4711012847048dca3) C:\WINDOWS\system32\DRIVERS\AmdK8.sys
21:33:18.0812 2964 AmdK8 - ok
21:33:18.0843 2964 amsint - ok
21:33:18.0968 2964 AR9271 (8e2257584b2c52d44b4cb1949947d885) C:\WINDOWS\system32\DRIVERS\athuw.sys
21:33:19.0031 2964 AR9271 - ok
21:33:19.0078 2964 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
21:33:19.0078 2964 Arp1394 - ok
21:33:19.0109 2964 ASAPIW2K (875f9079cabee679d34b49e466b61701) C:\WINDOWS\system32\Drivers\ASAPIW2K.sys
21:33:19.0109 2964 ASAPIW2K - ok
21:33:19.0140 2964 asc - ok
21:33:19.0171 2964 asc3350p - ok
21:33:19.0187 2964 asc3550 - ok
21:33:19.0250 2964 Aspi32 (b979979ab8027f7f53fb16ec4229b7db) C:\WINDOWS\system32\drivers\Aspi32.sys
21:33:19.0250 2964 Aspi32 - ok
21:33:19.0312 2964 aswFsBlk (c47623ffd181a1e7d63574dde2a0a711) C:\WINDOWS\system32\drivers\aswFsBlk.sys
21:33:19.0312 2964 aswFsBlk - ok
21:33:19.0343 2964 aswMon2 (fff2dbb17a3c89f87f78d5fa72ca47fd) C:\WINDOWS\system32\drivers\aswMon2.sys
21:33:19.0359 2964 aswMon2 - ok
21:33:19.0390 2964 aswRdr (36239e24470a3dd81fae37510953cc6c) C:\WINDOWS\system32\drivers\aswRdr.sys
21:33:19.0390 2964 aswRdr - ok
21:33:19.0453 2964 aswSnx (caa846e9c83836bdc3d2d700c678db65) C:\WINDOWS\system32\drivers\aswSnx.sys
21:33:19.0468 2964 aswSnx - ok
21:33:19.0515 2964 aswSP (748ae7f2d7da33adb063fe05704a9969) C:\WINDOWS\system32\drivers\aswSP.sys
21:33:19.0515 2964 aswSP - ok
21:33:19.0562 2964 aswTdi (ca9925ce1dbd07ffe1eb357752cf5577) C:\WINDOWS\system32\drivers\aswTdi.sys
21:33:19.0562 2964 aswTdi - ok
21:33:19.0625 2964 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
21:33:19.0625 2964 AsyncMac - ok
21:33:19.0671 2964 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
21:33:19.0671 2964 atapi - ok
21:33:19.0718 2964 Atdisk - ok
21:33:19.0875 2964 ati2mtag (c0b86ecb324e50f6bbd529f9d5c6b24b) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
21:33:19.0953 2964 ati2mtag - ok
21:33:20.0031 2964 ATIAVAIW (befb648d5a40b816d66283b571bbe38a) C:\WINDOWS\system32\DRIVERS\atinavt2.sys
21:33:20.0031 2964 ATIAVAIW - ok
21:33:20.0078 2964 atksgt (5b80e84af6b02ecab72dae9afee06309) C:\WINDOWS\system32\DRIVERS\atksgt.sys
21:33:20.0078 2964 atksgt - ok
21:33:20.0093 2964 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
21:33:20.0109 2964 Atmarpc - ok
21:33:20.0140 2964 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
21:33:20.0140 2964 audstub - ok
21:33:20.0187 2964 Avc (f8e6956a614f15a0860474c5e2a7de6b) C:\WINDOWS\system32\DRIVERS\avc.sys
21:33:20.0187 2964 Avc - ok
21:33:20.0250 2964 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
21:33:20.0250 2964 Beep - ok
21:33:20.0328 2964 BENDER (010a4575b0ff2341e55546698980e594) C:\WINDOWS\system32\drivers\bender.sys
21:33:20.0390 2964 BENDER - ok
21:33:20.0406 2964 catchme - ok
21:33:20.0546 2964 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
21:33:20.0546 2964 cbidf2k - ok
21:33:20.0609 2964 CCDECODE (0be5aef125be881c4f854c554f2b025c) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
21:33:20.0609 2964 CCDECODE - ok
21:33:20.0640 2964 cd20xrnt - ok
21:33:20.0671 2964 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
21:33:20.0671 2964 Cdaudio - ok
21:33:20.0750 2964 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
21:33:20.0750 2964 Cdfs - ok
21:33:20.0796 2964 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
21:33:20.0796 2964 Cdrom - ok
21:33:20.0828 2964 Changer (2a5815ca6fff24b688c01f828b96819c) C:\WINDOWS\system32\drivers\Changer.sys
21:33:20.0828 2964 Changer - ok
21:33:20.0875 2964 CmdIde - ok
21:33:20.0906 2964 Cpqarray - ok
21:33:20.0968 2964 cpuz134 (75fa19142531cbf490770c2988a7db64) C:\WINDOWS\system32\drivers\cpuz134_x32.sys
21:33:20.0984 2964 cpuz134 - ok
21:33:20.0984 2964 CrystalSysInfo - ok
21:33:21.0031 2964 dac2w2k - ok
21:33:21.0078 2964 dac960nt - ok
21:33:21.0140 2964 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
21:33:21.0156 2964 Disk - ok
21:33:21.0203 2964 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
21:33:21.0218 2964 dmboot - ok
21:33:21.0265 2964 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
21:33:21.0265 2964 dmio - ok
21:33:21.0312 2964 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
21:33:21.0312 2964 dmload - ok
21:33:21.0359 2964 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
21:33:21.0359 2964 DMusic - ok
21:33:21.0390 2964 dpti2o - ok
21:33:21.0421 2964 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
21:33:21.0421 2964 drmkaud - ok
21:33:21.0484 2964 ENTECH (16ebd8bf1d5090923694cc972c7ce1b4) C:\WINDOWS\system32\DRIVERS\ENTECH.sys
21:33:21.0484 2964 ENTECH - ok
21:33:21.0515 2964 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
21:33:21.0515 2964 Fastfat - ok
21:33:21.0546 2964 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys
21:33:21.0546 2964 Fdc - ok
21:33:21.0562 2964 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
21:33:21.0562 2964 Fips - ok
21:33:21.0593 2964 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
21:33:21.0593 2964 Flpydisk - ok
21:33:21.0640 2964 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys
21:33:21.0640 2964 FltMgr - ok
21:33:21.0671 2964 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
21:33:21.0671 2964 Fs_Rec - ok
21:33:21.0703 2964 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
21:33:21.0703 2964 Ftdisk - ok
21:33:21.0734 2964 gdrv (c6e3105b8c68c35cc1eb26a00fd1a8c6) C:\WINDOWS\gdrv.sys
21:33:22.0000 2964 gdrv - ok
21:33:22.0062 2964 giveio (77ebf3e9386daa51551af429052d88d0) C:\WINDOWS\system32\giveio.sys
21:33:22.0093 2964 giveio - ok
21:33:22.0156 2964 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
21:33:22.0156 2964 Gpc - ok
21:33:22.0218 2964 hamachi (64b48a0d899deca24c424a2cac3ecffa) C:\WINDOWS\system32\DRIVERS\hamachi.sys
21:33:22.0234 2964 hamachi - ok
21:33:22.0296 2964 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
21:33:22.0312 2964 HDAudBus - ok
21:33:22.0359 2964 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
21:33:22.0359 2964 HidUsb - ok
21:33:22.0390 2964 hpn - ok
21:33:22.0468 2964 HPZid412 (30ca91e657cede2f95359d6ef186f650) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
21:33:22.0484 2964 HPZid412 - ok
21:33:22.0531 2964 HPZipr12 (efd31afa752aa7c7bbb57bcbe2b01c78) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
21:33:22.0531 2964 HPZipr12 - ok
21:33:22.0593 2964 HPZius12 (7ac43c38ca8fd7ed0b0a4466f753e06e) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
21:33:22.0593 2964 HPZius12 - ok
21:33:22.0671 2964 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
21:33:22.0671 2964 HTTP - ok
21:33:22.0734 2964 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys
21:33:22.0734 2964 i2omgmt - ok
21:33:22.0781 2964 i2omp - ok
21:33:22.0859 2964 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
21:33:22.0859 2964 i8042prt - ok
21:33:22.0968 2964 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
21:33:22.0984 2964 Imapi - ok
21:33:23.0015 2964 ini910u - ok
21:33:23.0171 2964 IntcAzAudAddService (2feb5bf0312e1cb76cd2caa875cbaa5d) C:\WINDOWS\system32\drivers\RtkHDAud.sys
21:33:23.0281 2964 IntcAzAudAddService - ok
21:33:23.0296 2964 IntelIde - ok
21:33:23.0343 2964 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys
21:33:23.0359 2964 Ip6Fw - ok
21:33:23.0437 2964 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
21:33:23.0437 2964 IpFilterDriver - ok
21:33:23.0484 2964 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
21:33:23.0484 2964 IpInIp - ok
21:33:23.0546 2964 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
21:33:23.0546 2964 IpNat - ok
21:33:23.0593 2964 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
21:33:23.0593 2964 IPSec - ok
21:33:23.0609 2964 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
21:33:23.0625 2964 IRENUM - ok
21:33:23.0671 2964 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
21:33:23.0671 2964 isapnp - ok
21:33:23.0703 2964 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
21:33:23.0703 2964 Kbdclass - ok
21:33:23.0734 2964 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
21:33:23.0734 2964 kbdhid - ok
21:33:23.0765 2964 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
21:33:23.0781 2964 kmixer - ok
21:33:23.0812 2964 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
21:33:23.0812 2964 KSecDD - ok
21:33:23.0859 2964 L8042Kbd (5a11400ea1f0a106fe7edb28c270f7b8) C:\WINDOWS\system32\Drivers\L8042Kbd.sys
21:33:23.0859 2964 L8042Kbd - ok
21:33:23.0906 2964 L8042mou (20c919b52897b72ebcb2ad2fc29d8ef0) C:\WINDOWS\system32\Drivers\L8042mou.sys
21:33:23.0906 2964 L8042mou - ok
21:33:23.0968 2964 lbrtfdc (406598827a1b5f77954de11dde115ced) C:\WINDOWS\system32\drivers\lbrtfdc.sys
21:33:23.0984 2964 lbrtfdc - ok
21:33:24.0015 2964 lirsgt (975b6cf65f44e95883f3855bae8cecaf) C:\WINDOWS\system32\DRIVERS\lirsgt.sys
21:33:24.0031 2964 lirsgt - ok
21:33:24.0046 2964 LMouKE (90a794d0a0bf3531c4ba1c0510449629) C:\WINDOWS\system32\Drivers\LMouKE.sys
21:33:24.0046 2964 LMouKE - ok
21:33:24.0078 2964 MarvinBus (269c14d512b74cc28d2812ff7d1eb066) C:\WINDOWS\system32\DRIVERS\MarvinBus.sys
21:33:24.0093 2964 MarvinBus - ok
21:33:24.0109 2964 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
21:33:24.0125 2964 mnmdd - ok
21:33:24.0187 2964 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
21:33:24.0187 2964 Modem - ok
21:33:24.0312 2964 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
21:33:24.0312 2964 Mouclass - ok
21:33:24.0390 2964 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
21:33:24.0406 2964 mouhid - ok
21:33:24.0437 2964 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
21:33:24.0437 2964 MountMgr - ok
21:33:24.0453 2964 MPE (c0f8e0c2c3c0437cf37c6781896dc3ec) C:\WINDOWS\system32\DRIVERS\MPE.sys
21:33:24.0453 2964 MPE - ok
21:33:24.0468 2964 mraid35x - ok
21:33:24.0515 2964 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
21:33:24.0515 2964 MRxDAV - ok
21:33:24.0578 2964 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
21:33:24.0578 2964 MRxSmb - ok
21:33:24.0625 2964 MSDV (1477849772712bac69c144dcf2c9ce81) C:\WINDOWS\system32\DRIVERS\msdv.sys
21:33:24.0625 2964 MSDV - ok
21:33:24.0656 2964 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
21:33:24.0656 2964 Msfs - ok
21:33:24.0734 2964 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
21:33:24.0734 2964 MSKSSRV - ok
21:33:24.0781 2964 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
21:33:24.0781 2964 MSPCLOCK - ok
21:33:24.0843 2964 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
21:33:24.0843 2964 MSPQM - ok
21:33:24.0890 2964 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
21:33:24.0890 2964 mssmbios - ok
21:33:24.0937 2964 MSTEE (e53736a9e30c45fa9e7b5eac55056d1d) C:\WINDOWS\system32\drivers\MSTEE.sys
21:33:24.0937 2964 MSTEE - ok
21:33:25.0000 2964 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\WINDOWS\system32\DRIVERS\ASACPI.sys
21:33:25.0000 2964 MTsensor - ok
21:33:25.0046 2964 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
21:33:25.0046 2964 Mup - ok
21:33:25.0078 2964 mv614x (30a697b2ef5a24292aa7fa506e443044) C:\WINDOWS\system32\DRIVERS\mv614x.sys
21:33:25.0078 2964 mv614x - ok
21:33:25.0140 2964 NABTSFEC (5b50f1b2a2ed47d560577b221da734db) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
21:33:25.0140 2964 NABTSFEC - ok
21:33:25.0203 2964 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
21:33:25.0203 2964 NDIS - ok
21:33:25.0265 2964 NdisIP (7ff1f1fd8609c149aa432f95a8163d97) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
21:33:25.0265 2964 NdisIP - ok
21:33:25.0296 2964 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
21:33:25.0296 2964 NdisTapi - ok
21:33:25.0328 2964 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
21:33:25.0328 2964 Ndisuio - ok
21:33:25.0328 2964 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
21:33:25.0343 2964 NdisWan - ok
21:33:25.0375 2964 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
21:33:25.0375 2964 NDProxy - ok
21:33:25.0390 2964 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
21:33:25.0390 2964 NetBIOS - ok
21:33:25.0421 2964 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
21:33:25.0437 2964 NetBT - ok
21:33:25.0468 2964 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
21:33:25.0468 2964 NIC1394 - ok
21:33:25.0500 2964 nm (1e421a6bcf2203cc61b821ada9de878b) C:\WINDOWS\system32\DRIVERS\NMnt.sys
21:33:25.0500 2964 nm - ok
21:33:25.0546 2964 nmwcd (cfe3462a9e94a57dcd9676f6b7fe7f67) C:\WINDOWS\system32\drivers\ccdcmb.sys
21:33:25.0546 2964 nmwcd - ok
21:33:25.0609 2964 nmwcdc (8f2a94f991f8c73cec26b4b5620d1edc) C:\WINDOWS\system32\drivers\ccdcmbo.sys
21:33:25.0609 2964 nmwcdc - ok
21:33:25.0656 2964 nmwcdnsu (99145c5d4b6c4d6f5ce83ee6abffe294) C:\WINDOWS\system32\drivers\nmwcdnsu.sys
21:33:25.0656 2964 nmwcdnsu - ok
21:33:25.0703 2964 nmwcdnsuc (faee7b61c6885b091cec1ff06da2e1ab) C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
21:33:25.0703 2964 nmwcdnsuc - ok
21:33:25.0765 2964 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
21:33:25.0765 2964 Npfs - ok
21:33:25.0812 2964 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
21:33:25.0812 2964 Ntfs - ok
21:33:25.0843 2964 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
21:33:25.0859 2964 Null - ok
21:33:25.0875 2964 nvata (c03e15101f6d9e82cd9b0e7d715f5de3) C:\WINDOWS\system32\DRIVERS\nvata.sys
21:33:25.0875 2964 nvata - ok
21:33:25.0906 2964 NVENETFD (cc34564bca235ebad8b308d871efa2df) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
21:33:25.0921 2964 NVENETFD - ok
21:33:25.0953 2964 nvnetbus (46fdb8d07dd4fc81093b0acb243a525d) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
21:33:25.0953 2964 nvnetbus - ok
21:33:25.0968 2964 NVTCP (57d0fb1b75420db651a71d5517afdf8a) C:\WINDOWS\system32\DRIVERS\NVTcp.sys
21:33:25.0968 2964 NVTCP - ok
21:33:26.0015 2964 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
21:33:26.0015 2964 NwlnkFlt - ok
21:33:26.0062 2964 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
21:33:26.0078 2964 NwlnkFwd - ok
21:33:26.0109 2964 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
21:33:26.0109 2964 ohci1394 - ok
21:33:26.0171 2964 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\DRIVERS\parport.sys
21:33:26.0171 2964 Parport - ok
21:33:26.0203 2964 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
21:33:26.0203 2964 PartMgr - ok
21:33:26.0218 2964 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
21:33:26.0234 2964 ParVdm - ok
21:33:26.0265 2964 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
21:33:26.0265 2964 pccsmcfd - ok
21:33:26.0296 2964 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
21:33:26.0296 2964 PCI - ok
21:33:26.0328 2964 PCIDump - ok
21:33:26.0359 2964 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
21:33:26.0359 2964 PCIIde - ok
21:33:26.0421 2964 PCLEPCI (1bebe7de8508a02650cdce45c664c2a2) C:\WINDOWS\system32\drivers\pclepci.sys
21:33:26.0437 2964 PCLEPCI - ok
21:33:26.0468 2964 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\drivers\Pcmcia.sys
21:33:26.0468 2964 Pcmcia - ok
21:33:26.0515 2964 Pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\Pcouffin.sys
21:33:26.0515 2964 Pcouffin - ok
21:33:26.0531 2964 PDCOMP - ok
21:33:26.0562 2964 PDFRAME - ok
21:33:26.0625 2964 PDRELI - ok
21:33:26.0671 2964 PDRFRAME - ok
21:33:26.0734 2964 perc2 - ok
21:33:26.0781 2964 perc2hib - ok
21:33:26.0875 2964 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
21:33:26.0875 2964 PptpMiniport - ok
21:33:26.0921 2964 PQNTDrv (474543751522111dd7c0cf09e17f6d9f) C:\WINDOWS\system32\drivers\PQNTDrv.sys
21:33:26.0921 2964 PQNTDrv - ok
21:33:26.0937 2964 Processor (7eb15dce4ec3a0220bd796a15c18186e) C:\WINDOWS\system32\DRIVERS\processr.sys
21:33:26.0953 2964 Processor - ok
21:33:26.0984 2964 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
21:33:27.0000 2964 PSched - ok
21:33:27.0031 2964 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
21:33:27.0031 2964 Ptilink - ok
21:33:27.0062 2964 ql1080 - ok
21:33:27.0109 2964 Ql10wnt - ok
21:33:27.0156 2964 ql12160 - ok
21:33:27.0187 2964 ql1240 - ok
21:33:27.0234 2964 ql1280 - ok
21:33:27.0281 2964 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
21:33:27.0281 2964 RasAcd - ok
21:33:27.0328 2964 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
21:33:27.0328 2964 Rasl2tp - ok
21:33:27.0359 2964 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
21:33:27.0375 2964 RasPppoe - ok
21:33:27.0390 2964 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
21:33:27.0390 2964 Raspti - ok
21:33:27.0453 2964 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
21:33:27.0453 2964 Rdbss - ok
21:33:27.0468 2964 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
21:33:27.0468 2964 RDPCDD - ok
21:33:27.0531 2964 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
21:33:27.0531 2964 RDPWD - ok
21:33:27.0562 2964 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
21:33:27.0562 2964 redbook - ok
21:33:27.0625 2964 RTLE8023xp (839141088ad7ee90f5b441b2d1afd22c) C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
21:33:27.0625 2964 RTLE8023xp - ok
21:33:27.0671 2964 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
21:33:27.0671 2964 Secdrv - ok
21:33:27.0718 2964 SenFiltService (b6a6b409fda9d9ebd3aadb838d3d7173) C:\WINDOWS\system32\drivers\Senfilt.sys
21:33:27.0734 2964 SenFiltService - ok
21:33:27.0765 2964 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
21:33:27.0765 2964 serenum - ok
21:33:27.0781 2964 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\DRIVERS\serial.sys
21:33:27.0781 2964 Serial - ok
21:33:27.0843 2964 sfdrv01 (00de597b81b381053cb5b21a7f20e365) C:\WINDOWS\system32\drivers\sfdrv01.sys
21:33:27.0843 2964 sfdrv01 - ok
21:33:27.0890 2964 sfhlp02 (15be2b5e4dc5b8623cf167720682abc9) C:\WINDOWS\system32\drivers\sfhlp02.sys
21:33:27.0890 2964 sfhlp02 - ok
21:33:27.0937 2964 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
21:33:27.0937 2964 Sfloppy - ok
21:33:27.0984 2964 sfsync02 (798d918d8f20380008277ce3ce5319d1) C:\WINDOWS\system32\drivers\sfsync02.sys
21:33:28.0000 2964 sfsync02 - ok
21:33:28.0046 2964 sfsync03 (b27f70092a84b2a381d1fcdbbb82f876) C:\WINDOWS\system32\drivers\sfsync03.sys
21:33:28.0046 2964 sfsync03 - ok
21:33:28.0093 2964 Simbad - ok
21:33:28.0140 2964 SLIP (866d538ebe33709a5c9f5c62b73b7d14) C:\WINDOWS\system32\DRIVERS\SLIP.sys
21:33:28.0156 2964 SLIP - ok
21:33:28.0203 2964 snpstd2 (46de6152af860ebd24b5d72d46b26f10) C:\WINDOWS\system32\DRIVERS\snpstd2.sys
21:33:28.0203 2964 snpstd2 - ok
21:33:28.0234 2964 Sparrow - ok
21:33:28.0281 2964 speedfan (d703f972d23867dfd4ee9a9ef9cb767e) C:\WINDOWS\system32\speedfan.sys
21:33:28.0359 2964 speedfan - ok
21:33:28.0421 2964 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
21:33:28.0421 2964 splitter - ok
21:33:28.0500 2964 sptd (cdddec541bc3c96f91ecb48759673505) C:\WINDOWS\system32\Drivers\sptd.sys
21:33:28.0500 2964 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: cdddec541bc3c96f91ecb48759673505
21:33:28.0500 2964 sptd ( LockedFile.Multi.Generic ) - warning
21:33:28.0500 2964 sptd - detected LockedFile.Multi.Generic (1)
21:33:28.0546 2964 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
21:33:28.0562 2964 sr - ok
21:33:28.0640 2964 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
21:33:28.0640 2964 Srv - ok
21:33:28.0687 2964 streamip (77813007ba6265c4b6098187e6ed79d2) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
21:33:28.0703 2964 streamip - ok
21:33:28.0750 2964 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
21:33:28.0750 2964 swenum - ok
21:33:28.0781 2964 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
21:33:28.0781 2964 swmidi - ok
21:33:28.0796 2964 symc810 - ok
21:33:28.0812 2964 symc8xx - ok
21:33:28.0859 2964 sym_hi - ok
21:33:28.0906 2964 sym_u3 - ok
21:33:28.0984 2964 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
21:33:28.0984 2964 sysaudio - ok
21:33:29.0062 2964 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
21:33:29.0078 2964 Tcpip - ok
21:33:29.0140 2964 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
21:33:29.0140 2964 TDPIPE - ok
21:33:29.0187 2964 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
21:33:29.0187 2964 TDTCP - ok
21:33:29.0203 2964 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
21:33:29.0203 2964 TermDD - ok
21:33:29.0234 2964 TosIde - ok
21:33:29.0359 2964 TuneUpUtilitiesDrv (f2107c9d85ec0df116939ccce06ae697) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys
21:33:29.0375 2964 TuneUpUtilitiesDrv - ok
21:33:29.0578 2964 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
21:33:29.0593 2964 Udfs - ok
21:33:29.0625 2964 ultra - ok
21:33:29.0671 2964 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
21:33:29.0687 2964 Update - ok
21:33:29.0734 2964 upperdev (ec01da44b090d2651fc032c8b9257232) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
21:33:29.0750 2964 upperdev - ok
21:33:29.0812 2964 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys
21:33:29.0812 2964 usbaudio - ok
21:33:29.0890 2964 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
21:33:29.0890 2964 usbccgp - ok
21:33:29.0937 2964 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
21:33:29.0937 2964 usbehci - ok
21:33:29.0984 2964 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
21:33:29.0984 2964 usbhub - ok
21:33:30.0015 2964 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
21:33:30.0015 2964 usbohci - ok
21:33:30.0078 2964 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
21:33:30.0078 2964 usbprint - ok
21:33:30.0109 2964 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
21:33:30.0109 2964 usbscan - ok
21:33:30.0125 2964 usbser (1c888b000c2f9492f4b15b5b6b84873e) C:\WINDOWS\system32\drivers\usbser.sys
21:33:30.0140 2964 usbser - ok
21:33:30.0171 2964 UsbserFilt (4abd37cfbd710e64f01f9da8710c73f7) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
21:33:30.0171 2964 UsbserFilt - ok
21:33:30.0218 2964 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
21:33:30.0218 2964 USBSTOR - ok
21:33:30.0296 2964 Vax347b (cb3400d696bee266c38cae330c2b4337) C:\WINDOWS\system32\DRIVERS\Vax347b.sys
21:33:30.0312 2964 Vax347b - ok
21:33:30.0343 2964 Vax347s (113e4b318bbaa7483ca4e582a4d63f49) C:\WINDOWS\system32\Drivers\Vax347s.sys
21:33:30.0343 2964 Vax347s - ok
21:33:30.0375 2964 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
21:33:30.0375 2964 VgaSave - ok
21:33:30.0390 2964 ViaIde - ok
21:33:30.0421 2964 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
21:33:30.0421 2964 VolSnap - ok
21:33:30.0468 2964 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
21:33:30.0484 2964 Wanarp - ok
21:33:30.0515 2964 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\DRIVERS\Wdf01000.sys
21:33:30.0531 2964 Wdf01000 - ok
21:33:30.0562 2964 WDICA - ok
21:33:30.0640 2964 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
21:33:30.0640 2964 wdmaud - ok
21:33:30.0718 2964 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
21:33:30.0734 2964 WmiAcpi - ok
21:33:30.0796 2964 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\DRIVERS\wpdusb.sys
21:33:30.0796 2964 WpdUsb - ok
21:33:30.0828 2964 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
21:33:30.0828 2964 WS2IFSL - ok
21:33:30.0906 2964 WSTCODEC (c98b39829c2bbd34e454150633c62c78) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
21:33:30.0906 2964 WSTCODEC - ok
21:33:30.0968 2964 WudfPf (eaa6324f51214d2f6718977ec9ce0def) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
21:33:30.0968 2964 WudfPf - ok
21:33:30.0984 2964 WudfRd (f91ff1e51fca30b3c3981db7d5924252) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
21:33:31.0000 2964 WudfRd - ok
21:33:31.0046 2964 MBR (0x1B8) (8f558eb6672622401da993e1e865c861) \Device\Harddisk0\DR0
21:33:31.0046 2964 \Device\Harddisk0\DR0 - ok
21:33:31.0062 2964 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk1\DR1
21:33:31.0125 2964 \Device\Harddisk1\DR1 - ok
21:33:31.0140 2964 Boot (0x1200) (ce4026f405e0a89d2e0884e544054be3) \Device\Harddisk0\DR0\Partition0
21:33:31.0140 2964 \Device\Harddisk0\DR0\Partition0 - ok
21:33:31.0171 2964 Boot (0x1200) (e3fa16fe7dc77669ccec4e9fcc272ddf) \Device\Harddisk0\DR0\Partition1
21:33:31.0171 2964 \Device\Harddisk0\DR0\Partition1 - ok
21:33:31.0171 2964 Boot (0x1200) (02910fc57bf60efeca8697a7269a4069) \Device\Harddisk1\DR1\Partition0
21:33:31.0171 2964 \Device\Harddisk1\DR1\Partition0 - ok
21:33:31.0187 2964 Boot (0x1200) (faf1aa8b2018e7ee7650005de22f143b) \Device\Harddisk1\DR1\Partition1
21:33:31.0187 2964 \Device\Harddisk1\DR1\Partition1 - ok
21:33:31.0187 2964 ============================================================
21:33:31.0187 2964 Scan finished
21:33:31.0187 2964 ============================================================
21:33:31.0203 0932 Detected object count: 1
21:33:31.0203 0932 Actual detected object count: 1
21:33:37.0953 0932 sptd ( LockedFile.Multi.Generic ) - skipped by user
21:33:37.0953 0932 sptd ( LockedFile.Multi.Generic ) - User select action: Skip

Ta možnost by tam měla být:

Ať koukám jak koukám, nevidím... má to být až po tom scanu?

Stáhněte MBR: http://www2.gmer.net/mbr/mbr.exe a uložte na plochu. Potom Start>spustit>(napsat) "%userprofile%\plocha\mbr" -f >OK. Utilita se spustí a vykoná léčení MBR sektoru.

Provedl jsem, spustilo se to, pak zase zavřelo, výsledek bohužel žádný nevidím... Udělal jsem screenshoty toho, co vidím i TDSSKilleru... zapnu, dám "start scan", jiná možnost není, provede se...

a vyskočí toto...

V nabídce je kromě "Skip" ještě "Copy to quarantine" a "Deelete"... Pokus dám continue, otevře se mi okno s "no threads found" a mám opět možnost udělat nový scan...

Jde o soubor, který patří Daemon Tools. Zkuste reinstalovat, nějak se TDSS nelíbil.

Reinstalovat Daemon Tools?

Jj.

Úplně jsem to odinstaloval, ale je to pořád stejné.

vajco píše:Úplně jsem to odinstaloval, ale je to pořád stejné.

Rychlost internetu?