VIRY.CZ

Dobré odpoledne ve spolek,


Dostal se mi do rukou PC (WXP PRO), který byl zavirovaný potvorami typu mywebsearch a ještě určitě spousty dalších..
Podotýkám, že není můj a viděl jsem jej jen pár hodin přes vzdálené připojení.

Současý stav je takový, že by měl být bez virů (testováno několika metodami), avšak:
Nejde zvuk - ve správci zařízení je několik zařízení (Microsoft Streaming Clock Proxy, Microsoft Streaming Quality Manager Proxy, Microsoft streaming Service Proxy a Realtek High Definition Audio) s chybou. Ten poslední, Realtek HD audio, ovladače mám přímo od výrobce, ale při pokusu instalovat, tato instalace skončí chybou 39. Ostatní jsem se pokusil najít v čistém systému a tyto ovladače nahradit, avšak bezúspěšně - taktéž chyba (kód) 39.

Jsem z toho zoufalý, nemůžu přijít na řešení (googlení jsem zkoušel, miliony tipů..ale bezúspěšně). System restore je na tom PC vypnutý, takže body obnovení nejsou ..
Přeinstalace je až poslední řešení, které bych byl ochoten podstoupit (už jen vzhledem ktomu, že já jsem v Praze a PC v Košicích..).
No, pokouším se obrátit na Vás, jistě odborníky. Snad budeme úspěšní.
Předem máte mé velké díky.
______________________________
Log z HijackThis:

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 4:52:30, on 2.11.2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.17103)

Boot mode: Normal



Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

C:\Program Files\Alwil Software\Avast5\avastUI.exe

C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\TeamViewer\Version6\TeamViewer.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe

C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

C:\WINDOWS\system32\rserver30\RServer3.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\rserver30\FamItrfc.Exe

C:\WINDOWS\system32\ctfmon.exe

c:\program files\teamviewer\version6\TeamViewer_Desktop.exe

C:\Program Files\TeamViewer\Version6\tv_w32.exe

C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

C:\Documents and Settings\miau131313\Plocha\HijackThis.exe



R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://downloads.phpnuke.org/en/index.php?rvs=google

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://downloads.phpnuke.org/en/index.php?rvs=google

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://downloads.phpnuke.org/en/index.php?rvs=google

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy

R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\TRANSLAT\WEBIE.DLL

O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLAT\WEBIE.DLL

O3 - Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)

O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui

O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun

O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

O4 - Global Startup: TeamViewer 6.lnk = C:\Program Files\TeamViewer\Version6\TeamViewer.exe

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files\SmarThru 4\WebCapture.dll2.htm

O8 - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files\SmarThru 4\WebCapture.dll1.htm

O8 - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files\SmarThru 4\WebCapture.dll.htm

O8 - Extra context menu item: SmarThru4 Web Capture - C:\Program Files\SmarThru 4\WebCapture.dll

O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll

O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\TRANSLAT\WEBIE.DLL

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)

O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL

O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL

O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL

O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL

O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL

O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{7B03518D-B041-4815-BFE9-0EA835877B2F}: NameServer = 192.168.2.1

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (file missing)

O20 - Winlogon Notify: TPSvc - TPSvc.dll (file missing)

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe

O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

O23 - Service: avast! Firewall - Unknown owner - C:\Program Files\Alwil Software\Avast5\afwServ.exe (file missing)

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe

O23 - Service: LVSrvLauncher - Unknown owner - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe (file missing)

O23 - Service: Radmin Server V3 (RServer3) - Famatech Corp. - C:\WINDOWS\system32\rserver30\RServer3.exe

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe



--

End of file - 9994 bytes

Z logu HJT vidím pouze to, že tam je spousta prázdných klíčů. Pro lepší přehled by byl vhodnější log z RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895 . Je podrobnější.

Rudy píše:Z logu HJT vidím pouze to, že tam je spousta prázdných klíčů. Pro lepší přehled by byl vhodnější log z RSIT: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895 . Je podrobnější.

Az se k tomu PC dostanu, udelam log z RSIT,
Zatim diky za odpoved.

OK.

Tak tady je ten log - záměrně pokrývá období třech měsíců, protože problémy jsou "někdy od léta"..:

Logfile of random's system information tool 1.09 (written by random/random)
Run by miau131313 at 2011-11-02 21:03:34
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 34 GB (67%) free of 50 GB
Total RAM: 1917 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:03:35, on 2.11.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17103)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe
C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\rserver30\RServer3.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\rserver30\FamItrfc.Exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TeamViewer\Version6\TeamViewer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\Office12\WINWORD.EXE
c:\program files\teamviewer\version6\TeamViewer_Desktop.exe
C:\Program Files\TeamViewer\Version6\tv_w32.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\miau131313\Plocha\RSIT.exe
C:\Program Files\trend micro\miau131313.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://downloads.phpnuke.org/en/index.php?rvs=google
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://downloads.phpnuke.org/en/index.php?rvs=google
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://downloads.phpnuke.org/en/index.php?rvs=google
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\TRANSLAT\WEBIE.DLL
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLAT\WEBIE.DLL
O3 - Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: TeamViewer 6.lnk = C:\Program Files\TeamViewer\Version6\TeamViewer.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: SmarThru4 Capture Selection - C:\Program Files\SmarThru 4\WebCapture.dll2.htm
O8 - Extra context menu item: SmarThru4 Save as HTML - C:\Program Files\SmarThru 4\WebCapture.dll1.htm
O8 - Extra context menu item: SmarThru4 Save Selected Text - C:\Program Files\SmarThru 4\WebCapture.dll.htm
O8 - Extra context menu item: SmarThru4 Web Capture - C:\Program Files\SmarThru 4\WebCapture.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7B03518D-B041-4815-BFE9-0EA835877B2F}: NameServer = 192.168.2.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL (file missing)
O20 - Winlogon Notify: TPSvc - TPSvc.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Firewall - Unknown owner - C:\Program Files\Alwil Software\Avast5\afwServ.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LVSrvLauncher - Unknown owner - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe (file missing)
O23 - Service: Radmin Server V3 (RServer3) - Famatech Corp. - C:\WINDOWS\system32\rserver30\RServer3.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 10110 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Úklid 1 kliknutím.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\miau131313\Data aplikací\Mozilla\Firefox\Profiles\9mmw2ccj.default

prefs.js - "browser.search.suggest.enabled" - false
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.sk/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, jqs@sun.com:1.0, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, personas@christopher.beard:1.6.2, bkmrksync@nokia.com:1.0.0.732, {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.1.1, {028c30a5-31f7-4b00-8390-dd997568cb3a}:3.3.3.2, engine@conduit.com:3.3.3.2, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.609]
"Description"=RealPlayer(tm) HTML5VideoShim Plug-In
"Path"=C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
npdeploytk.dll
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\miau131313\Data aplikací\Mozilla\Firefox\Profiles\9mmw2ccj.default\extensions\
engine@conduit.com
personas@christopher.beard
{20a82645-c095-46ed-80e3-08825760534b}

C:\Documents and Settings\miau131313\Data aplikací\Mozilla\Firefox\Profiles\9mmw2ccj.default\searchplugins\
askcom.xml
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-14.xml
icqplugin-15.xml
icqplugin-2.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\TRANSLAT\WEBIE.DLL [2009-12-12 360448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-10-11 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-10-11 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\TRANSLAT\WEBIE.DLL [2009-12-12 360448]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-09-06 3722416]
"Samsung PanelMgr"=C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [2009-08-27 614400]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2011-03-21 20053096]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2011-04-22 129536]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2011-04-22 163328]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2011-04-22 138752]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
TeamViewer 6.lnk - C:\Program Files\TeamViewer\Version6\TeamViewer.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2011-04-22 214016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\TPSvc]
TPSvc.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-08-24 133120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\13024190.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\13024190.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableCMD"=0
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableCAD"=0
"DisableTaskMgr"=0
"DisableCMD"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"StartMenuLogoff"=1
"ForceStartMenuLogoff"=0
"NoDriveTypeAutoRun"=0x91000000
"NoFolderOptions"=0
"NoSetActiveDesktop"=0
"NoActiveDesktopChanges"=0
"NoRun"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoFolderOptions"=0
"NoSetActiveDesktop"=0
"NoActiveDesktopChanges"=0
"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\rserver30\rserver3.exe"="C:\WINDOWS\system32\rserver30\rserver3.exe:*:Enabled:Radmin Server 3"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Documents and Settings\miau131313\Local Settings\Data aplikací\AntikVirtualSTB\AntikVirtualSTB.exe"="C:\Documents and Settings\miau131313\Local Settings\Data aplikací\AntikVirtualSTB\AntikVirtualSTB.exe:*:Enabled:AntikVirtualSTB"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"C:\Documents and Settings\miau131313\temp\TeamViewer\Version5\TeamViewer.exe"="C:\Documents and Settings\miau131313\temp\TeamViewer\Version5\TeamViewer.exe:*:Enabled:TeamViewer"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Documents and Settings\miau131313\Plocha\3213213484541546896-JPG-www.facebook.com.exe"="C:\WINDOWS\jusched.exe:*:Enabled:Java developer Script Browse"
"C:\Program Files\Java\jre6\launch4j-tmp\frd.exe"="C:\Program Files\Java\jre6\launch4j-tmp\frd.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Documents and Settings\miau131313\Plocha\P185623111.JPG-www.facebook.exe"="C:\WINDOWS\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"vidc.VP60"=vp6vfw.dll
"vidc.VP61"=vp6vfw.dll
"vidc.VP62"=vp6vfw.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux7"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux8"=wdmaud.drv
"wave9"=wdmaud.drv
"midi9"=wdmaud.drv
"mixer9"=wdmaud.drv
"aux9"=wdmaud.drv

======List of files/folders created in the last 3 months======

2011-11-02 20:55:55 ----D---- C:\rsit
2011-11-02 20:55:55 ----D---- C:\Program Files\trend micro
2011-11-02 13:51:06 ----D---- C:\Program Files\SystemRequirementsLab
2011-11-02 06:45:41 ----A---- C:\WINDOWS\system32\igxprd32.dll
2011-11-02 06:45:41 ----A---- C:\WINDOWS\system32\igfxtray.exe
2011-11-02 06:45:41 ----A---- C:\WINDOWS\system32\igfxpers.exe
2011-11-02 06:45:41 ----A---- C:\WINDOWS\system32\igfxext.exe
2011-11-02 06:45:41 ----A---- C:\WINDOWS\system32\igfxexps.dll
2011-11-02 06:45:41 ----A---- C:\WINDOWS\system32\IGFXDEVLib.dll
2011-11-02 06:45:41 ----A---- C:\WINDOWS\system32\gfxSrvc.dll
2011-11-02 06:45:41 ----A---- C:\WINDOWS\system32\drivers\igxpmp32.sys
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igxpgd32.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igxpdx32.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igxpdv32.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igfxsrvc.exe
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igfxsrvc.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igfxress.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igfxpph.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igfxdo.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igfxdev.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\igfxCoIn_v5355.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\ig4icd32.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\hkcmd.exe
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\hccutils.dll
2011-11-02 06:45:40 ----A---- C:\WINDOWS\system32\GfxUI.exe
2011-11-02 04:36:54 ----A---- C:\WINDOWS\RtlExUpd.dll
2011-11-02 04:07:21 ----A---- C:\WINDOWS\system32\drivers\TrueSight.sys
2011-11-02 03:13:29 ----D---- C:\WINDOWS\system32\RTCOM
2011-11-02 02:27:09 ----D---- C:\Program Files\Conduit
2011-11-02 02:20:25 ----D---- C:\WINDOWS\system32\CatRoot_bak
2011-11-02 02:10:15 ----D---- C:\Program Files\Analog Devices
2011-11-02 00:59:28 ----D---- C:\Program Files\Driver-Soft
2011-11-01 13:34:13 ----AH---- C:\WINDOWS\system32\hamachi.sys
2011-10-31 22:58:12 ----A---- C:\WINDOWS\system32\ICAutoUpdate.log.bak
2011-10-31 22:57:34 ----D---- C:\Documents and Settings\miau131313\Data aplikací\DesktopPwrMgr
2011-10-31 22:53:36 ----A---- C:\sysiclog.txt
2011-10-31 22:52:46 ----A---- C:\WINDOWS\system32\drivers\pmemnt.sys
2011-10-31 22:48:49 ----D---- C:\Program Files\ThinkPad
2011-10-31 21:26:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Drivers HeadQuarters
2011-10-31 12:09:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
2011-10-31 00:25:46 ----A---- C:\WINDOWS\system32\ptpusd.dll
2011-10-31 00:25:46 ----A---- C:\WINDOWS\system32\ptpusb.dll
2011-10-30 12:36:35 ----A---- C:\WINDOWS\control.ini
2011-10-30 00:33:39 ----D---- C:\WINDOWS\pss
2011-10-30 00:10:09 ----D---- C:\Program Files\Common Files\Lenovo
2011-10-29 21:40:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\SuperIO
2011-10-29 21:38:57 ----D---- C:\Program Files\Marvell
2011-10-29 19:07:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\PCDr
2011-10-29 19:06:58 ----D---- C:\Program Files\PC-Doctor
2011-10-29 19:04:59 ----D---- C:\Documents and Settings\miau131313\Data aplikací\Update
2011-10-29 19:04:50 ----D---- C:\Documents and Settings\miau131313\Data aplikací\PCDr
2011-10-29 10:30:13 ----A---- C:\WINDOWS\mixerdef.ini
2011-10-28 19:33:21 ----D---- C:\WINDOWS\system32\(null)
2011-10-28 19:33:10 ----A---- C:\WINDOWS\system32\drivers\psadd.sys
2011-10-28 19:13:07 ----D---- C:\SWTOOLS
2011-10-28 16:25:48 ----A---- C:\WINDOWS\system32\drivers\SAMSfPa.dat
2011-10-28 16:24:26 ----A---- C:\WINDOWS\system32\VoipUpdate.ini
2011-10-28 16:24:25 ----A---- C:\WINDOWS\system32\drivers\Mixer.ini
2011-10-28 16:24:25 ----A---- C:\WINDOWS\system32\drivers\Altmixer.ini
2011-10-28 13:26:57 ----D---- C:\Documents and Settings\miau131313\Data aplikací\OpenCandy
2011-10-28 11:42:40 ----D---- C:\Program Files\Realtek
2011-10-28 10:37:20 ----D---- C:\Documents and Settings\miau131313\Data aplikací\ElevatedDiagnostics
2011-10-28 10:36:05 ----D---- C:\WINDOWS\system32\windowspowershell
2011-10-28 10:36:03 ----HDC---- C:\WINDOWS\$NtUninstallKB926139-v2$
2011-10-28 05:33:47 ----A---- C:\WINDOWS\SIGVERIF.TXT
2011-10-28 03:42:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2492386$
2011-10-28 03:24:46 ----A---- C:\WINDOWS\system32\RtkCoInstXP.dll
2011-10-28 02:37:35 ----D---- C:\Drivers
2011-10-28 01:41:00 ----A---- C:\WINDOWS\system32\drivers\RTHDAEQ0.dat
2011-10-28 01:40:41 ----D---- C:\swsetup
2011-10-28 00:35:58 ----A---- C:\WINDOWS\system32\drivers\DgivEcp.sys
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\PCDLIB32.DLL
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lttwn13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LTTLB13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LTRPR13n.DLL
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LTRIO13N.DLL
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LTR13N.DLL
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\Ltpnt13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\ltpdg13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LTOCR13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\ltefx13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LTCLR13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\ltbar13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lftif13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfpsd13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LFPNM13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\Lfpng13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfpcx13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfpcx13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfpcd13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfpcd13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfmsp13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfjbg13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LFJ2K13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfitg13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfitg13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfimg13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfimg13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfiff13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfiff13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lffax13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lffax13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfeps13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfeps13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\LFCMP13s.DLL
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfclp13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfclp13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfbmp13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfavi13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfavi13n.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfani13s.dll
2011-10-28 00:35:46 ----A---- C:\WINDOWS\system32\lfani13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\Mfcoleui.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\Ltwvc13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\lttmb13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\ltlst13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\ltkrn13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\ltimg13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\ltfil13n.DLL
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\ltdlg13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\LTDIS13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\lftif13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\lfpsd13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\LFPNM13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\Lfpng13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\lfmsp13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\lfjbg13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\LFJ2K13n.dll
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\LFCMP13n.DLL
2011-10-28 00:35:45 ----A---- C:\WINDOWS\system32\lfbmp13n.dll
2011-10-28 00:34:53 ----A---- C:\WINDOWS\ssndii.exe
2011-10-28 00:34:52 ----D---- C:\Program Files\SamsungPrinterLiveUpdate
2011-10-28 00:34:52 ----A---- C:\WINDOWS\system32\msxml2a.dll
2011-10-28 00:34:50 ----D---- C:\WINDOWS\Samsung
2011-10-28 00:33:34 ----D---- C:\WINDOWS\system32\drivers\Samsung
2011-10-28 00:33:25 ----D---- C:\Program Files\Samsung
2011-10-27 23:46:24 ----D---- C:\WINDOWS\system32\NtmsData
2011-10-27 22:51:02 ----A---- C:\WINDOWS\system32\drivers\02420336.sys
2011-10-27 22:02:12 ----SHD---- C:\Config.Msi
2011-10-12 20:10:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2011-10-12 20:06:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2567053$
2011-10-12 20:06:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2011-09-14 07:18:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2616676$
2011-09-14 07:14:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2011-09-11 12:53:12 ----A---- C:\WINDOWS\system32\drivers\aswFW.sys
2011-09-11 12:53:02 ----A---- C:\WINDOWS\system32\drivers\aswNdis2.sys
2011-09-06 20:00:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-08-26 19:11:14 ----D---- C:\Program Files\SUPERAntiSpyware
2011-08-26 19:11:14 ----D---- C:\Documents and Settings\miau131313\Data aplikací\SUPERAntiSpyware.com
2011-08-26 19:11:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-08-26 15:25:49 ----HD---- C:\WINDOWS\PIF
2011-08-26 13:57:47 ----D---- C:\Documents and Settings\miau131313\Data aplikací\QuickScan
2011-08-24 16:19:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-23 15:24:53 ----RD---- C:\Program Files\Skype
2011-08-12 20:31:15 ----D---- C:\Documents and Settings\All Users\Data aplikací\Phenomedia
2011-08-12 20:29:49 ----D---- C:\Program Files\phenomedia
2011-08-12 20:29:49 ----D---- C:\Program Files\bellaundben
2011-08-11 00:03:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-11 00:03:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-11 00:02:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-11 00:01:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-11 00:01:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-10 03:02:33 ----D---- C:\Documents and Settings\All Users\Data aplikací\Global Graphics
2011-08-10 02:14:07 ----D---- C:\Program Files\WordToPDF
2011-08-10 01:59:17 ----D---- C:\Documents and Settings\miau131313\Data aplikací\SmartSoftOCRHelper
2011-08-10 01:53:05 ----D---- C:\Documents and Settings\miau131313\Data aplikací\Smart PDF Converter
2011-08-10 01:52:47 ----D---- C:\Program Files\Smart PDF Converter
2011-08-03 23:19:12 ----D---- C:\Documents and Settings\miau131313\Data aplikací\DDMSettings

======List of files/folders modified in the last 3 months======

2011-11-02 20:55:59 ----D---- C:\WINDOWS\Prefetch
2011-11-02 20:55:55 ----RD---- C:\Program Files
2011-11-02 20:42:59 ----D---- C:\Documents and Settings\miau131313\Data aplikací\Skype
2011-11-02 19:43:39 ----D---- C:\WINDOWS\Temp
2011-11-02 14:33:28 ----D---- C:\WINDOWS
2011-11-02 14:33:28 ----A---- C:\WINDOWS\TRNCOM.INI
2011-11-02 13:51:10 ----D---- C:\WINDOWS\system32\CatRoot2
2011-11-02 13:51:07 ----SHD---- C:\WINDOWS\Installer
2011-11-02 13:42:03 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-02 06:45:57 ----D---- C:\WINDOWS\system32
2011-11-02 06:45:51 ----D---- C:\WINDOWS\system32\drivers
2011-11-02 06:45:43 ----HD---- C:\WINDOWS\inf
2011-11-02 06:45:40 ----HD---- C:\Intel
2011-11-02 06:45:40 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-11-02 06:45:23 ----D---- C:\WINDOWS\AppPatch
2011-11-02 06:39:02 ----SHD---- C:\WINDOWS\CSC
2011-11-02 06:38:59 ----D---- C:\Program Files\Intel
2011-11-02 06:32:36 ----D---- C:\WINDOWS\system32\CatRoot
2011-11-02 06:02:17 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-11-02 04:36:57 ----HD---- C:\Program Files\InstallShield Installation Information
2011-11-02 03:41:27 ----D---- C:\WINDOWS\system32\drivers\etc
2011-11-02 03:11:00 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-11-02 03:10:58 ----D---- C:\Program Files\MagicDisc
2011-11-02 03:00:57 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-11-02 02:52:27 ----SD---- C:\WINDOWS\Tasks
2011-11-02 02:20:25 ----D---- C:\WINDOWS\Debug
2011-11-02 01:18:50 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-11-02 01:11:21 ----D---- C:\WINDOWS\WinSxS
2011-11-02 01:11:04 ----SHD---- C:\System Volume Information
2011-11-02 01:11:04 ----D---- C:\WINDOWS\system32\Restore
2011-11-02 00:34:07 ----D---- C:\Documents and Settings\miau131313\Data aplikací\TeamViewer
2011-11-02 00:34:00 ----D---- C:\Program Files\TeamViewer
2011-11-01 01:39:25 ----D---- C:\WINDOWS\Help
2011-10-31 23:05:05 ----D---- C:\Program Files\Common Files\InstallShield
2011-10-31 22:52:23 ----D---- C:\WINDOWS\Downloaded Installations
2011-10-31 22:48:51 ----D---- C:\WINDOWS\Media
2011-10-31 21:26:47 ----RSD---- C:\WINDOWS\assembly
2011-10-30 12:54:59 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-30 00:10:09 ----D---- C:\Program Files\Common Files
2011-10-29 23:43:48 ----D---- C:\Program Files\Nokia
2011-10-29 23:38:55 ----D---- C:\WINDOWS\system32\Lang
2011-10-28 14:49:47 ----D---- C:\WINDOWS\Registration
2011-10-28 11:52:45 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-28 10:36:08 ----D---- C:\WINDOWS\system32\config
2011-10-28 04:05:28 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-10-28 03:42:53 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-28 03:30:44 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-10-28 00:05:14 ----D---- C:\WINDOWS\system32\cs-cz
2011-10-27 23:59:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-10-27 23:58:47 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-27 23:56:43 ----D---- C:\Program Files\Common Files\System
2011-10-27 23:56:43 ----A---- C:\WINDOWS\win.ini
2011-10-27 21:55:30 ----D---- C:\Documents and Settings\miau131313\Data aplikací\Samsung
2011-10-27 21:51:12 ----SD---- C:\Documents and Settings\miau131313\Data aplikací\Microsoft
2011-10-27 21:43:07 ----D---- C:\Program Files\Labtec
2011-10-12 20:40:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2011-10-12 20:40:34 ----D---- C:\Documents and Settings\miau131313\Data aplikací\TuneUp Software
2011-10-12 20:14:16 ----D---- C:\Program Files\Microsoft Silverlight
2011-10-12 20:07:05 ----AC---- C:\WINDOWS\system32\MRT.exe
2011-10-12 20:05:29 ----D---- C:\Program Files\Internet Explorer
2011-10-12 20:04:35 ----D---- C:\WINDOWS\ie7updates
2011-09-30 08:03:07 ----D---- C:\Program Files\Mozilla Firefox
2011-09-26 10:41:42 ----A---- C:\WINDOWS\system32\uiautomationcore.dll
2011-09-26 10:41:42 ----A---- C:\WINDOWS\system32\oleaccrc.dll
2011-09-26 10:41:20 ----A---- C:\WINDOWS\system32\oleacc.dll
2011-09-13 01:24:39 ----D---- C:\WINDOWS\system32\wbem
2011-09-09 10:12:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-09-09 07:45:05 ----D---- C:\Documents and Settings\miau131313\Data aplikací\PC Suite
2011-09-09 07:40:38 ----D---- C:\WINDOWS\system32\drivers\umdf
2011-09-06 21:45:29 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-09-05 08:45:04 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-09-03 10:39:28 ----D---- C:\WINDOWS\system32\rserver30
2011-08-31 15:20:52 ----AC---- C:\WINDOWS\system32\CSVer.dll
2011-08-23 15:24:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-08-17 22:25:11 ----N---- C:\WINDOWS\system32\pngfilt.dll
2011-08-17 22:25:11 ----N---- C:\WINDOWS\system32\mstime.dll
2011-08-17 22:25:11 ----A---- C:\WINDOWS\system32\wininet.dll
2011-08-17 22:25:11 ----A---- C:\WINDOWS\system32\webcheck.dll
2011-08-17 22:25:11 ----A---- C:\WINDOWS\system32\urlmon.dll
2011-08-17 22:25:11 ----A---- C:\WINDOWS\system32\url.dll
2011-08-17 22:25:11 ----A---- C:\WINDOWS\system32\occache.dll
2011-08-17 22:25:10 ----N---- C:\WINDOWS\system32\msrating.dll
2011-08-17 22:25:10 ----A---- C:\WINDOWS\system32\mshtmled.dll
2011-08-17 22:25:10 ----A---- C:\WINDOWS\system32\msfeedsbs.dll
2011-08-17 22:25:10 ----A---- C:\WINDOWS\system32\msfeeds.dll
2011-08-17 22:25:10 ----A---- C:\WINDOWS\system32\jsproxy.dll
2011-08-17 22:25:10 ----A---- C:\WINDOWS\system32\iertutil.dll
2011-08-17 22:25:09 ----N---- C:\WINDOWS\system32\iernonce.dll
2011-08-17 22:25:09 ----N---- C:\WINDOWS\system32\iedkcs32.dll
2011-08-17 22:25:09 ----N---- C:\WINDOWS\system32\ieaksie.dll
2011-08-17 22:25:09 ----A---- C:\WINDOWS\system32\iepeers.dll
2011-08-17 22:25:09 ----A---- C:\WINDOWS\system32\ieframe.dll
2011-08-17 22:25:09 ----A---- C:\WINDOWS\system32\ieencode.dll
2011-08-17 22:25:09 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2011-08-17 22:25:08 ----N---- C:\WINDOWS\system32\ieakeng.dll
2011-08-17 22:25:08 ----N---- C:\WINDOWS\system32\extmgr.dll
2011-08-17 22:25:08 ----A---- C:\WINDOWS\system32\icardie.dll
2011-08-17 22:25:08 ----A---- C:\WINDOWS\system32\dxtrans.dll
2011-08-17 22:25:08 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2011-08-17 22:25:08 ----A---- C:\WINDOWS\system32\corpol.dll
2011-08-17 22:25:08 ----A---- C:\WINDOWS\system32\advpack.dll
2011-08-17 13:21:24 ----N---- C:\WINDOWS\system32\ie4uinit.exe
2011-08-17 13:21:24 ----A---- C:\WINDOWS\system32\ieudinit.exe
2011-08-17 12:00:04 ----N---- C:\WINDOWS\system32\ieakui.dll
2011-08-07 22:49:13 ----A---- C:\WINDOWS\NeroDigital.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys [2010-07-12 64288]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2009-12-13 158272]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258); C:\WINDOWS\system32\DRIVERS\tdrpm258.sys [2009-12-13 911680]
R0 timounter;Acronis Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys [2009-12-13 581984]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-09-06 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-09-06 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-09-06 442200]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-09-06 320856]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-09-06 52568]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 raddrvv3;raddrvv3; \??\C:\WINDOWS\system32\rserver30\raddrvv3.sys []
R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-09-06 110552]
R2 DgiVecp;DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys []
R2 pmem;pmem; \??\C:\WINDOWS\System32\drivers\pmemnt.sys []
R3 afcdp;afcdp; C:\WINDOWS\system32\DRIVERS\afcdp.sys [2009-12-13 160288]
R3 cpudrv;cpudrv; \??\C:\Program Files\SystemRequirementsLab\cpudrv.sys []
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2011-04-22 2016704]
R3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys [2009-02-24 116736]
R3 mirrorv3;mirrorv3; C:\WINDOWS\system32\DRIVERS\rminiv3.sys [2009-10-09 3328]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 psadd;Lenovo Parties Service Access Device Driver; C:\WINDOWS\system32\DRIVERS\psadd.sys [2011-10-31 30144]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
R3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2009-03-05 296320]
S0 is3srv;is3srv; C:\WINDOWS\system32\drivers\is3srv.sys []
S0 szkg5;szkg5; C:\WINDOWS\system32\DRIVERS\szkg.sys []
S0 szkgfs;szkgfs; C:\WINDOWS\system32\drivers\szkgfs.sys []
S1 aswFW;avast! TDI Firewall driver; C:\WINDOWS\system32\drivers\aswFW.sys [2011-09-06 111320]
S1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
S1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
S2 SSPORT;SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys []
S3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2008-04-24 308736]
S3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2008-04-24 103424]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys []
S3 AR9271;Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athuw.sys [2009-07-09 1668352]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\CHDRT32.sys []
S3 cpuz134;cpuz134; \??\C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys []
S3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2011-03-27 223128]
S3 gHidPnp;USB Device Enhanced Function Driver; C:\WINDOWS\System32\Drivers\gHidPnp.Sys []
S3 gMouPS2;PS2 Scroll Mouse Device; C:\WINDOWS\system32\DRIVERS\gMouPS2.sys []
S3 gMouUsb;USB Mouse Device Drv; C:\WINDOWS\system32\DRIVERS\gMouUsb.sys []
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2011-04-06 6388328]
S3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys []
S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys []
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys []
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2010-02-26 137344]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 PID_0928;Logitech QuickCam Express(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\WINDOWS\system32\DRIVERS\sscdbus.sys []
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\WINDOWS\system32\DRIVERS\sscdmdfl.sys []
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\WINDOWS\system32\DRIVERS\sscdmdm.sys []
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 SuperIO;Lenovo ASD HWM Driver; C:\WINDOWS\system32\DRIVERS\spio.sys [2008-03-06 5760]
S3 teamviewervpn;TeamViewer VPN Adapter; C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys [2010-03-11 25088]
S3 TrueSight;TrueSight; \??\c:\windows\system32\drivers\TrueSight.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-08-24 38656]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Služba Acronis Scheduler2; C:\Program Files\Common Files\Acronis\Plán2\schedul2.exe [2009-11-26 661008]
R2 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [2009-12-13 2480048]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-09-06 44768]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-10-11 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 RServer3;Radmin Server V3; C:\WINDOWS\system32\rserver30\RServer3.exe [2009-10-09 1242504]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 yksvc;Marvell Yukon Service; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S2 avast! Firewall;avast! Firewall; C:\Program Files\Alwil Software\Avast5\afwServ.exe []
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe [2011-09-02 2152152]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service; C:\WINDOWS\System32\TuneUpDefragService.exe [2009-12-12 306432]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE []
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Ještě (pokud můžete) bych poprosil o sken ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

RSIT vypadá čistý,jen je třeba se přesvědčit, zda tam po odvirování něco nezbylo.

Diky, ihned jak to pujde, udelam sken a vlozim sem log.
Jsem rad, ze to vypada dobre.. nicmene, a to me trapi v tuto chvili asi nejvice, stale je tu problem s temi ovladaci zvuku. Napada vas nejake reseni?

Uplna odinstalace, restart a nasledna instalace oficialnich driveru nepomaha - porad konci chybou 39. Instalovano jak pres Setup, tak rucnim vyberem ovladace - vysledek stejny.

Velmi pekne dekuji za spolupraci.

OK.

Dobré odpoledne, tak jsem zpět i s logem z ComboFixu:


ComboFix 11-11-03.02 - miau131313 03.11.2011 22:12:11.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1029.18.1917.1268 [GMT 1:00]
Running from: c:\documents and settings\miau131313\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
FW: avast! Antivirus *Enabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\09ce0ed7-58db-4be9-b311-80b4fd9fd9bc.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\0b2769c8-99f3-4a8f-b749-eca9816d1c9d.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\0e53a45b-5a41-43e5-96ab-776b00e48a6e.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\434b795d-fe06-4495-801e-fa92d93babbc.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\562ad818-216b-4d77-8b40-834630104d2c.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\746b3523-df66-4ed9-beaa-88464b84933f.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\7e36c7b4-f4c8-4324-9887-9cab89169ef6.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\83db0f34-4452-4946-92c2-31dcd99767dd.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\90110d4d-0aa3-42f8-b48a-92aebd9d59f3.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\97d3cc32-549b-4646-bc59-82ebb82b5d11.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\9ad80016-92d9-41a4-9436-c44907366397.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\b34a10f6-a592-424f-af97-b051783f9dd2.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\b96355f5-a46b-48d0-a3f2-b41eed57de73.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\bead45d2-b2dc-44e3-94f8-c7de6979be60.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\c2df4b77-65de-4a5b-8bf4-9aa6dbb14ab6.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\d754c4cc-ae68-4d17-afb7-55002296e1e2.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\ec6735a3-9204-4734-bb0f-5859e58b13b2.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\ef10e210-fbf0-4381-a325-fb25f839bb1a.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\f1d18230-9731-47f0-b9f4-b537abcbb39c.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\f64109b2-74cc-4638-ae17-228b7886774b.dll
c:\documents and settings\All Users\Data aplikací\PCDr\5849\AddOnDownloaded\fd85aea7-408e-4ff8-bdca-73b1320e8b27.dll
c:\documents and settings\miau131313\WINDOWS
c:\program files\FreeRapid
c:\program files\FreeRapid\app.log
c:\program files\FreeRapid\copyright
c:\program files\FreeRapid\doc\changes.txt
c:\program files\FreeRapid\doc\readme.cz.txt
c:\program files\FreeRapid\doc\readme.esp(LA).txt
c:\program files\FreeRapid\doc\readme.esp.txt
c:\program files\FreeRapid\doc\readme.fr.txt
c:\program files\FreeRapid\doc\readme.hr.txt
c:\program files\FreeRapid\doc\readme.ru.txt
c:\program files\FreeRapid\doc\readme.txt
c:\program files\FreeRapid\frd.exe
c:\program files\FreeRapid\frd.ico
c:\program files\FreeRapid\frd.jar
c:\program files\FreeRapid\frd.png
c:\program files\FreeRapid\frd.sh
c:\program files\FreeRapid\lib\appframework.jar
c:\program files\FreeRapid\lib\buttonpanel.jar
c:\program files\FreeRapid\lib\commons-cli-2.0-SNAPSHOT.jar
c:\program files\FreeRapid\lib\commons-codec-1.3.jar
c:\program files\FreeRapid\lib\commons-httpclient-3.1.jar
c:\program files\FreeRapid\lib\commons-logging-1.1.jar
c:\program files\FreeRapid\lib\forms.jar
c:\program files\FreeRapid\lib\jai_codec.jar
c:\program files\FreeRapid\lib\jgoodiesbinding.jar
c:\program files\FreeRapid\lib\jpf.jar
c:\program files\FreeRapid\lib\l2fprod-common-buttonbar.jar
c:\program files\FreeRapid\lib\l2fprod-common-directorychooser.jar
c:\program files\FreeRapid\lib\languages.jar
c:\program files\FreeRapid\lib\swingx.jar
c:\program files\FreeRapid\License
c:\program files\FreeRapid\lookandfeel\JTattoo.jar
c:\program files\FreeRapid\lookandfeel\kunststoff.jar
c:\program files\FreeRapid\lookandfeel\PgsLookAndFeel.jar
c:\program files\FreeRapid\lookandfeel\squareness.jar
c:\program files\FreeRapid\lookandfeel\substance-lite.jar
c:\program files\FreeRapid\lookandfeel\substance-swingx.jar
c:\program files\FreeRapid\plugins\anonym.frp
c:\program files\FreeRapid\plugins\badongo.frp
c:\program files\FreeRapid\plugins\bagruj.frp
c:\program files\FreeRapid\plugins\bebasupload.frp
c:\program files\FreeRapid\plugins\bigandfree.frp
c:\program files\FreeRapid\plugins\biggerupload.frp
c:\program files\FreeRapid\plugins\bitroad.frp
c:\program files\FreeRapid\plugins\co.frp
c:\program files\FreeRapid\plugins\cobrashare.frp
c:\program files\FreeRapid\plugins\czshare.frp
c:\program files\FreeRapid\plugins\czshare_profi.frp
c:\program files\FreeRapid\plugins\dailymotion.frp
c:\program files\FreeRapid\plugins\dataup.frp
c:\program files\FreeRapid\plugins\depositfiles.frp
c:\program files\FreeRapid\plugins\disperseit.frp
c:\program files\FreeRapid\plugins\divshare.frp
c:\program files\FreeRapid\plugins\easyshare.frp
c:\program files\FreeRapid\plugins\edisk.frp
c:\program files\FreeRapid\plugins\egoshare.frp
c:\program files\FreeRapid\plugins\enterupload.frp
c:\program files\FreeRapid\plugins\extabit.frp
c:\program files\FreeRapid\plugins\file2box.frp
c:\program files\FreeRapid\plugins\filebaseto.frp
c:\program files\FreeRapid\plugins\filebox.frp
c:\program files\FreeRapid\plugins\filefactory.frp
c:\program files\FreeRapid\plugins\fileflyer.frp
c:\program files\FreeRapid\plugins\filer.frp
c:\program files\FreeRapid\plugins\files.frp
c:\program files\FreeRapid\plugins\filesavr.frp
c:\program files\FreeRapid\plugins\filesend.frp
c:\program files\FreeRapid\plugins\fileshost.frp
c:\program files\FreeRapid\plugins\filesmonster.frp
c:\program files\FreeRapid\plugins\fileupload.frp
c:\program files\FreeRapid\plugins\flyshare.frp
c:\program files\FreeRapid\plugins\forshared.frp
c:\program files\FreeRapid\plugins\freakshare.frp
c:\program files\FreeRapid\plugins\gametrailers.frp
c:\program files\FreeRapid\plugins\gigapeta.frp
c:\program files\FreeRapid\plugins\gigasize.frp
c:\program files\FreeRapid\plugins\hamstershare.frp
c:\program files\FreeRapid\plugins\hellshare.frp
c:\program files\FreeRapid\plugins\hellshare_full.frp
c:\program files\FreeRapid\plugins\hotfile.frp
c:\program files\FreeRapid\plugins\ifile.frp
c:\program files\FreeRapid\plugins\ifile_login.frp
c:\program files\FreeRapid\plugins\ifolder.frp
c:\program files\FreeRapid\plugins\imagebam.frp
c:\program files\FreeRapid\plugins\imagehaven.frp
c:\program files\FreeRapid\plugins\imageshack.frp
c:\program files\FreeRapid\plugins\imagevenue.frp
c:\program files\FreeRapid\plugins\imzupload.frp
c:\program files\FreeRapid\plugins\indowebster.frp
c:\program files\FreeRapid\plugins\iskladka.frp
c:\program files\FreeRapid\plugins\jandown.frp
c:\program files\FreeRapid\plugins\kewlshare.frp
c:\program files\FreeRapid\plugins\kitaupload.frp
c:\program files\FreeRapid\plugins\leteckaposta.frp
c:\program files\FreeRapid\plugins\letitbit.frp
c:\program files\FreeRapid\plugins\linkbucks.frp
c:\program files\FreeRapid\plugins\loadto.frp
c:\program files\FreeRapid\plugins\mediafire.frp
c:\program files\FreeRapid\plugins\mega1280.frp
c:\program files\FreeRapid\plugins\megasharevn.frp
c:\program files\FreeRapid\plugins\megaupload.frp
c:\program files\FreeRapid\plugins\megavideo.frp
c:\program files\FreeRapid\plugins\multiload.frp
c:\program files\FreeRapid\plugins\myurl.frp
c:\program files\FreeRapid\plugins\nahraj.frp
c:\program files\FreeRapid\plugins\netgull.frp
c:\program files\FreeRapid\plugins\netloadin.frp
c:\program files\FreeRapid\plugins\novaup.frp
c:\program files\FreeRapid\plugins\o2musicstream.frp
c:\program files\FreeRapid\plugins\oron.frp
c:\program files\FreeRapid\plugins\paid4share.frp
c:\program files\FreeRapid\plugins\photobucket.frp
c:\program files\FreeRapid\plugins\picasa.frp
c:\program files\FreeRapid\plugins\plunder.frp
c:\program files\FreeRapid\plugins\przeklej.frp
c:\program files\FreeRapid\plugins\quickshare.frp
c:\program files\FreeRapid\plugins\quickshare_premium.frp
c:\program files\FreeRapid\plugins\radikalru.frp
c:\program files\FreeRapid\plugins\rapidlibrary.frp
c:\program files\FreeRapid\plugins\rapidshare.frp
c:\program files\FreeRapid\plugins\rapidshare_premium.frp
c:\program files\FreeRapid\plugins\rapidsharede.frp
c:\program files\FreeRapid\plugins\rapidshareuser.frp
c:\program files\FreeRapid\plugins\relink.frp
c:\program files\FreeRapid\plugins\remixshare.frp
c:\program files\FreeRapid\plugins\rsmonkey.frp
c:\program files\FreeRapid\plugins\savefile.frp
c:\program files\FreeRapid\plugins\saveqube.frp
c:\program files\FreeRapid\plugins\sdilej.frp
c:\program files\FreeRapid\plugins\sendspace.frp
c:\program files\FreeRapid\plugins\sendspacepl.frp
c:\program files\FreeRapid\plugins\serienjunkies.frp
c:\program files\FreeRapid\plugins\shareator.frp
c:\program files\FreeRapid\plugins\shareonline.frp
c:\program files\FreeRapid\plugins\sharerapid.frp
c:\program files\FreeRapid\plugins\sharingmatrix.frp
c:\program files\FreeRapid\plugins\storage.frp
c:\program files\FreeRapid\plugins\streamcz.frp
c:\program files\FreeRapid\plugins\subory.frp
c:\program files\FreeRapid\plugins\superfastfile.frp
c:\program files\FreeRapid\plugins\tinyurl.frp
c:\program files\FreeRapid\plugins\toshared.frp
c:\program files\FreeRapid\plugins\ugotfile.frp
c:\program files\FreeRapid\plugins\ulozcz.frp
c:\program files\FreeRapid\plugins\ulozisko.frp
c:\program files\FreeRapid\plugins\ulozto.frp
c:\program files\FreeRapid\plugins\ultrashare.frp
c:\program files\FreeRapid\plugins\up-file.com.frp
c:\program files\FreeRapid\plugins\uploadbox.frp
c:\program files\FreeRapid\plugins\uploadedto.frp
c:\program files\FreeRapid\plugins\uploading.frp
c:\program files\FreeRapid\plugins\uploadjockey.frp
c:\program files\FreeRapid\plugins\uploadline.frp
c:\program files\FreeRapid\plugins\uploadspace.frp
c:\program files\FreeRapid\plugins\upnito.frp
c:\program files\FreeRapid\plugins\uppit.frp
c:\program files\FreeRapid\plugins\usercash.frp
c:\program files\FreeRapid\plugins\usershare.frp
c:\program files\FreeRapid\plugins\vip-file.frp
c:\program files\FreeRapid\plugins\webshare.frp
c:\program files\FreeRapid\plugins\webshots.frp
c:\program files\FreeRapid\plugins\wiiupload.frp
c:\program files\FreeRapid\plugins\wikiupload.frp
c:\program files\FreeRapid\plugins\xtraupload.frp
c:\program files\FreeRapid\plugins\xun6.frp
c:\program files\FreeRapid\plugins\yourfiles.frp
c:\program files\FreeRapid\plugins\youtube.frp
c:\program files\FreeRapid\plugins\ziddu.frp
c:\program files\FreeRapid\plugins\zippyshare.frp
c:\program files\FreeRapid\plugins\zshare.frp
c:\program files\FreeRapid\readme.txt
c:\program files\FreeRapid\startup.properties
c:\program files\FreeRapid\syscmd.properties
c:\program files\FreeRapid\tools\gocr\gocr.exe
c:\program files\FreeRapid\tools\nircmd\NirCmd.chm
c:\program files\FreeRapid\tools\socks\setupproxy.sh
c:\windows\IsUn0407.exe
c:\windows\iun6002.exe
c:\windows\Me.jpg
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\regedit.com
c:\windows\system32\d3d9caps.dat
c:\windows\system32\miccyhook.dll
.
.
((((((((((((((((((((((((( Files Created from 2011-10-03 to 2011-11-03 )))))))))))))))))))))))))))))))
.
.
2011-11-02 20:56 . 2011-11-02 20:56 -------- d-----w- c:\program files\ESET
2011-11-02 19:55 . 2011-11-02 20:03 -------- d-----w- C:\rsit
2011-11-02 19:55 . 2011-11-02 20:03 -------- d-----w- c:\program files\trend micro
2011-11-02 12:51 . 2011-11-02 12:51 -------- d-----w- c:\program files\SystemRequirementsLab
2011-11-02 11:52 . 2011-11-02 12:36 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Deployment
2011-11-02 03:36 . 2011-02-25 18:37 1284712 ----a-w- c:\windows\RtlExUpd.dll
2011-11-02 03:07 . 2011-11-02 03:23 111872 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2011-11-02 02:13 . 2011-11-02 05:43 -------- d-----w- c:\windows\system32\RTCOM
2011-11-02 01:27 . 2011-11-02 01:27 -------- d-----w- c:\program files\Conduit
2011-11-02 01:27 . 2011-11-02 01:27 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\uTorrentBar
2011-11-02 01:20 . 2011-11-02 01:20 -------- d-----w- c:\windows\system32\CatRoot_bak
2011-11-02 01:10 . 2011-11-02 01:10 -------- d-----w- c:\program files\Analog Devices
2011-11-01 23:59 . 2011-11-01 23:59 -------- d-----w- c:\program files\Driver-Soft
2011-11-01 12:34 . 2009-03-18 16:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
2011-10-31 21:57 . 2011-10-31 21:57 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\DesktopPwrMgr
2011-10-31 21:52 . 2011-10-31 21:52 7012 ----a-w- c:\windows\system32\drivers\pmemnt.sys
2011-10-31 21:48 . 2011-10-31 21:48 -------- d-----w- c:\program files\ThinkPad
2011-10-31 20:26 . 2011-10-31 20:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Drivers HeadQuarters
2011-10-31 11:09 . 2011-10-31 11:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
2011-10-31 11:02 . 2011-10-31 11:02 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\PackageAware
2011-10-30 23:25 . 2008-04-14 07:51 159232 ----a-w- c:\windows\system32\ptpusd.dll
2011-10-30 23:25 . 2001-10-24 11:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2011-10-30 22:30 . 2011-10-31 13:37 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Facebook
2011-10-29 23:10 . 2011-11-01 00:39 -------- d-----w- c:\program files\Common Files\Lenovo
2011-10-29 20:40 . 2011-10-29 20:41 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SuperIO
2011-10-29 20:38 . 2011-10-29 20:38 -------- d-----w- c:\program files\Marvell
2011-10-29 18:07 . 2011-10-29 18:07 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCDr
2011-10-29 18:06 . 2011-11-02 01:51 -------- d-----w- c:\program files\PC-Doctor
2011-10-29 18:04 . 2011-10-29 18:07 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\Update
2011-10-29 18:04 . 2011-10-29 18:08 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\PCDr
2011-10-29 09:07 . 2010-08-22 11:48 114176 ----a-w- c:\windows\system32\PCWizard.cpl
2011-10-28 18:33 . 2011-10-28 18:33 -------- d-----w- c:\windows\system32\(null)
2011-10-28 18:33 . 2011-10-31 21:52 30144 ----a-w- c:\windows\system32\drivers\psadd.sys
2011-10-28 18:13 . 2011-10-28 18:13 -------- d-----w- C:\SWTOOLS
2011-10-28 15:25 . 2010-11-05 18:03 1552 ----a-w- c:\windows\system32\drivers\SAMSfPa.dat
2011-10-28 12:27 . 2011-10-28 12:27 -------- d-----w- c:\documents and settings\All Users\Uniblue
2011-10-28 12:26 . 2011-10-28 15:27 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\OpenCandy
2011-10-28 12:26 . 2011-10-28 12:26 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\OpenCandy
2011-10-28 10:42 . 2011-11-02 03:36 -------- d-----w- c:\program files\Realtek
2011-10-28 09:37 . 2011-10-28 14:01 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\ElevatedDiagnostics
2011-10-28 02:24 . 2011-03-24 15:03 56936 ----a-w- c:\windows\system32\RtkCoInstXP.dll
2011-10-28 01:37 . 2011-11-02 04:15 -------- d-----w- C:\Drivers
2011-10-28 01:23 . 2011-10-28 01:23 -------- d-----w- c:\documents and settings\miau131313\SystemRequirementsLab
2011-10-28 00:41 . 2010-01-11 09:36 176 ----a-w- c:\windows\system32\drivers\RTHDAEQ0.dat
2011-10-28 00:40 . 2011-10-28 00:40 -------- d-----w- C:\swsetup
2011-10-27 23:34 . 2009-09-07 11:48 482408 ----a-w- c:\windows\ssndii.exe
2011-10-27 23:34 . 2009-07-30 12:00 21776 ----a-w- c:\windows\system32\msxml2a.dll
2011-10-27 23:34 . 2011-10-27 23:34 -------- d-----w- c:\windows\Samsung
2011-10-27 23:33 . 2011-10-27 23:33 -------- d-----w- c:\windows\system32\drivers\Samsung
2011-10-27 23:33 . 2011-10-27 23:33 -------- d-----w- c:\program files\Samsung
2011-10-27 22:46 . 2011-10-29 21:23 -------- d-----w- c:\windows\system32\NtmsData
2011-10-27 21:51 . 2011-10-27 21:51 94768 ----a-w- c:\windows\system32\drivers\02420336.sys
2011-10-05 14:10 . 2011-10-05 14:10 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Apple
2011-10-05 14:07 . 2011-10-05 14:07 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Apple Computer
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-07 09:35 . 2011-05-23 12:05 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-09-26 09:41 . 2008-07-29 18:59 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2001-10-25 12:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2001-10-25 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-09 09:12 . 2008-04-14 06:51 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-06 20:45 . 2010-07-18 16:20 41184 ----a-w- c:\windows\avastSS.scr
2011-09-06 20:45 . 2009-12-12 13:50 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-06 20:38 . 2011-09-11 11:53 111320 ----a-w- c:\windows\system32\drivers\aswFW.sys
2011-09-06 20:38 . 2011-04-04 23:05 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-06 20:37 . 2009-12-12 13:51 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-06 20:37 . 2011-09-11 11:53 195416 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2011-09-06 20:36 . 2009-12-12 13:51 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-06 20:36 . 2009-12-12 13:51 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-06 20:36 . 2009-12-12 13:51 110552 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-09-06 20:36 . 2009-12-12 13:51 104536 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-09-06 20:36 . 2009-12-12 13:51 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-09-06 20:33 . 2009-12-12 13:51 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-09-06 14:10 . 2008-04-14 05:45 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-08-31 14:20 . 2009-12-12 13:15 53248 -c--a-w- c:\windows\system32\CSVer.dll
2011-08-17 21:25 . 2008-04-14 06:52 832512 ----a-w- c:\windows\system32\wininet.dll
2011-08-17 21:25 . 2008-04-14 06:52 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2011-08-17 21:25 . 2008-04-14 06:51 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-08-17 21:25 . 2008-04-14 06:51 17408 ----a-w- c:\windows\system32\corpol.dll
2011-08-17 13:49 . 2008-04-13 22:49 138496 ----a-w- c:\windows\system32\drivers\afd.sys
2011-08-17 12:22 . 2008-04-14 05:50 389120 ----a-w- c:\windows\system32\html.iec
2011-06-01 20:17 . 2011-06-01 20:16 20533281 ----a-w- c:\program files\vlc-1.1.9-win32.exe
2010-07-22 21:40 . 2010-09-24 17:59 2944904 ----a-w- c:\program files\Common Files\AskToolbarInstaller.exe
2010-03-15 03:23 . 2010-03-15 03:23 18499623 -c--a-w- c:\program files\vlc-1.0.5-win32.exe
2010-02-20 19:46 . 2010-02-20 19:46 7897671 -c--a-w- c:\program files\AntikVSTB.exe
2011-09-30 07:02 . 2011-04-20 10:06 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 4AFB3B0919649F95C1964AA1FAD27D73 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
.
[-] 2009-09-06 . D624FBF20A2D2CC6C5C88FA4FD792B14 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-09-06 3722416]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2009-08-27 614400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-22 129536]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-22 163328]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-22 138752]
"RTHDCPL"="RTHDCPL.EXE" [2011-03-21 20053096]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2011-08-17 124928]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
TeamViewer 6.lnk - c:\program files\TeamViewer\Version6\TeamViewer.exe [2011-8-30 8093056]
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"StartMenuLogoff"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\documents and settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"HPDJ Taskbar Utility"=c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\rserver30\\rserver3.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Documents and Settings\\miau131313\\Local Settings\\Data aplikací\\AntikVirtualSTB\\AntikVirtualSTB.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Documents and Settings\\miau131313\\temp\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [12.12.2009 12:41 64288]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [13.12.2009 11:24 911680]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [5.4.2011 0:05 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [12.12.2009 14:51 320856]
R1 raddrvv3;raddrvv3;c:\windows\system32\rserver30\raddrvv3.sys [9.10.2009 14:00 46304]
R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [13.12.2009 11:24 2480048]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [12.12.2009 14:51 20568]
R2 RServer3;Radmin Server V3;c:\windows\system32\rserver30\rserver3.exe [9.10.2009 14:00 1242504]
R2 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe -k yksvcs [14.4.2008 7:52 14336]
R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [13.12.2009 11:24 160288]
S0 is3srv;is3srv;c:\windows\system32\drivers\is3srv.sys --> c:\windows\system32\drivers\is3srv.sys [?]
S0 szkg5;szkg5;c:\windows\system32\DRIVERS\szkg.sys --> c:\windows\system32\DRIVERS\szkg.sys [?]
S0 szkgfs;szkgfs;c:\windows\system32\drivers\szkgfs.sys --> c:\windows\system32\drivers\szkgfs.sys [?]
S1 aswFW;avast! TDI Firewall driver;c:\windows\system32\drivers\aswFW.sys [11.9.2011 12:53 111320]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS --> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.SYS --> c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [?]
S2 avast! Firewall;avast! Firewall;"c:\program files\Alwil Software\Avast5\afwServ.exe" --> c:\program files\Alwil Software\Avast5\afwServ.exe [?]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys --> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys --> c:\windows\system32\drivers\Ambfilt.sys [?]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [12.3.2010 13:45 1668352]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [18.12.2009 11:58 11336]
S3 cpuz134;cpuz134;\??\c:\program files\CPUID\PC Wizard 2010\pcwiz_x32.sys --> c:\program files\CPUID\PC Wizard 2010\pcwiz_x32.sys [?]
S3 gHidPnp;USB Device Enhanced Function Driver;c:\windows\system32\Drivers\gHidPnp.Sys --> c:\windows\system32\Drivers\gHidPnp.Sys [?]
S3 gMouPS2;PS2 Scroll Mouse Device;c:\windows\system32\DRIVERS\gMouPS2.sys --> c:\windows\system32\DRIVERS\gMouPS2.sys [?]
S3 gMouUsb;USB Mouse Device Drv;c:\windows\system32\DRIVERS\gMouUsb.sys --> c:\windows\system32\DRIVERS\gMouUsb.sys [?]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [12.7.2010 9:55 2152152]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [14.8.2010 11:44 15232]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [15.9.2010 10:52 137344]
S3 SuperIO;Lenovo ASD HWM Driver;c:\windows\system32\drivers\spio.sys [6.3.2008 13:33 5760]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys [11.3.2010 10:17 25088]
S3 TrueSight;TrueSight;c:\windows\system32\drivers\TrueSight.sys [2.11.2011 4:07 111872]
S4 !SASCORE;SAS Core Service;"c:\program files\SUPERAntiSpyware\SASCORE.EXE" --> c:\program files\SUPERAntiSpyware\SASCORE.EXE [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
yksvcs REG_MULTI_SZ yksvc
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-03 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2008\OneClick.exe [2007-12-21 12:49]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
mStart Page = hxxp://downloads.phpnuke.org/en/index.php?rvs=google
mWindow Title = Microsoft Internet Explorer
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
IE: Převést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Převést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Připojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Připojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: SmarThru4 Capture Selection - (value not set)
IE: SmarThru4 Save as HTML - (value not set)
IE: SmarThru4 Save Selected Text - (value not set)
IE: SmarThru4 Web Capture - (value not set)
IE: ????3?? - c:\documents and settings\miau131313\Data aplikací\FlashGetBHO\GetUrl.htm
IE: ????3?????? - c:\documents and settings\miau131313\Data aplikací\FlashGetBHO\GetAllUrl.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\translat\WEBIE.DLL
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{7B03518D-B041-4815-BFE9-0EA835877B2F}: NameServer = 192.168.2.1
FF - ProfilePath - c:\documents and settings\miau131313\Data aplikací\Mozilla\Firefox\Profiles\9mmw2ccj.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 300
FF - user.js: content.notify.interval - 100000
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.switch.threshold - 650000
.
- - - - ORPHANS REMOVED - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
Toolbar-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - (no file)
Notify-!SASWinLogon - (no file)
Notify-TPSvc - TPSvc.dll
SafeBoot-13024190.sys
SafeBoot-WudfPf
SafeBoot-WudfRd
AddRemove-CM_DiskCleaner - c:\windows\iun6002.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-03 22:23
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}Ź]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
@="c:\\Documents and Settings\\miau131313\\Data aplikací\\FlashGetBHO\\GetUrl.htm"
"contexts"=dword:00000022
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\O(uë_fŹ3*N}ŹhQčţ”Ąc]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
@="c:\\Documents and Settings\\miau131313\\Data aplikací\\FlashGetBHO\\GetAllUrl.htm"
"contexts"=dword:000000f3
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
Completion time: 2011-11-03 22:30:13
ComboFix-quarantined-files.txt 2011-11-03 21:30
.
Pre-Run: Volných bajtů: 35 192 438 784
Post-Run: Volných bajtů: 35 222 478 848
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /TUTag=NLC3KF /Kernel=TUKernel.exe
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional (TuneUp Záloha)" /noexecute=optin /fastdetect /TUTag=NLC3KF-BAK
.
- - End Of File - - DE5A86B3F454665A95466E8071D1452F

Ještě dočistíme. Otevřte poznámkový blok a zkopírujte do něj:

Collect::
c:\windows\system32\drivers\02420336.sys

Driver::
02420336

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Log po aplikovani skriptu:


ComboFix 11-11-04.04 - miau131313 04.11.2011 21:58:04.4.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.421.1029.18.1917.1379 [GMT 1:00]
Running from: c:\documents and settings\miau131313\Plocha\ComboFix.exe
Command switches used :: c:\documents and settings\miau131313\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
FW: avast! Antivirus *Enabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Lavasoft Ad-Watch Live! *Disabled/Updated* {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
.
.
((((((((((((((((((((((((( Files Created from 2011-10-04 to 2011-11-04 )))))))))))))))))))))))))))))))
.
.
2011-11-02 20:56 . 2011-11-02 20:56 -------- d-----w- c:\program files\ESET
2011-11-02 19:55 . 2011-11-02 20:03 -------- d-----w- C:\rsit
2011-11-02 19:55 . 2011-11-02 20:03 -------- d-----w- c:\program files\trend micro
2011-11-02 12:51 . 2011-11-02 12:51 -------- d-----w- c:\program files\SystemRequirementsLab
2011-11-02 11:52 . 2011-11-02 12:36 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Deployment
2011-11-02 03:36 . 2011-02-25 18:37 1284712 ----a-w- c:\windows\RtlExUpd.dll
2011-11-02 03:07 . 2011-11-02 03:23 111872 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2011-11-02 02:13 . 2011-11-02 05:43 -------- d-----w- c:\windows\system32\RTCOM
2011-11-02 01:27 . 2011-11-02 01:27 -------- d-----w- c:\program files\Conduit
2011-11-02 01:27 . 2011-11-02 01:27 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\uTorrentBar
2011-11-02 01:20 . 2011-11-02 01:20 -------- d-----w- c:\windows\system32\CatRoot_bak
2011-11-02 01:10 . 2011-11-02 01:10 -------- d-----w- c:\program files\Analog Devices
2011-11-01 23:59 . 2011-11-01 23:59 -------- d-----w- c:\program files\Driver-Soft
2011-11-01 12:34 . 2009-03-18 16:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
2011-10-31 21:57 . 2011-10-31 21:57 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\DesktopPwrMgr
2011-10-31 21:52 . 2011-10-31 21:52 7012 ----a-w- c:\windows\system32\drivers\pmemnt.sys
2011-10-31 21:48 . 2011-10-31 21:48 -------- d-----w- c:\program files\ThinkPad
2011-10-31 20:26 . 2011-10-31 20:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Drivers HeadQuarters
2011-10-31 11:09 . 2011-10-31 11:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\{3C0AACBF-B491-4BE5-BAF9-AA46E0629E42}
2011-10-31 11:02 . 2011-10-31 11:02 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\PackageAware
2011-10-30 23:25 . 2008-04-14 07:51 159232 ----a-w- c:\windows\system32\ptpusd.dll
2011-10-30 23:25 . 2001-10-24 11:25 5632 ----a-w- c:\windows\system32\ptpusb.dll
2011-10-30 22:30 . 2011-10-31 13:37 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\Facebook
2011-10-29 23:10 . 2011-11-01 00:39 -------- d-----w- c:\program files\Common Files\Lenovo
2011-10-29 20:40 . 2011-10-29 20:41 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SuperIO
2011-10-29 20:38 . 2011-10-29 20:38 -------- d-----w- c:\program files\Marvell
2011-10-29 18:07 . 2011-10-29 18:07 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PCDr
2011-10-29 18:06 . 2011-11-02 01:51 -------- d-----w- c:\program files\PC-Doctor
2011-10-29 18:04 . 2011-10-29 18:07 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\Update
2011-10-29 18:04 . 2011-10-29 18:08 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\PCDr
2011-10-29 09:07 . 2010-08-22 11:48 114176 ----a-w- c:\windows\system32\PCWizard.cpl
2011-10-28 18:33 . 2011-10-28 18:33 -------- d-----w- c:\windows\system32\(null)
2011-10-28 18:33 . 2011-10-31 21:52 30144 ----a-w- c:\windows\system32\drivers\psadd.sys
2011-10-28 18:13 . 2011-10-28 18:13 -------- d-----w- C:\SWTOOLS
2011-10-28 15:25 . 2010-11-05 18:03 1552 ----a-w- c:\windows\system32\drivers\SAMSfPa.dat
2011-10-28 12:27 . 2011-10-28 12:27 -------- d-----w- c:\documents and settings\All Users\Uniblue
2011-10-28 12:26 . 2011-10-28 15:27 -------- d-----w- c:\documents and settings\miau131313\Local Settings\Data aplikací\OpenCandy
2011-10-28 12:26 . 2011-10-28 12:26 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\OpenCandy
2011-10-28 10:42 . 2011-11-02 03:36 -------- d-----w- c:\program files\Realtek
2011-10-28 09:37 . 2011-10-28 14:01 -------- d-----w- c:\documents and settings\miau131313\Data aplikací\ElevatedDiagnostics
2011-10-28 02:24 . 2011-03-24 15:03 56936 ----a-w- c:\windows\system32\RtkCoInstXP.dll
2011-10-28 01:37 . 2011-11-02 04:15 -------- d-----w- C:\Drivers
2011-10-28 01:23 . 2011-10-28 01:23 -------- d-----w- c:\documents and settings\miau131313\SystemRequirementsLab
2011-10-28 00:41 . 2010-01-11 09:36 176 ----a-w- c:\windows\system32\drivers\RTHDAEQ0.dat
2011-10-28 00:40 . 2011-10-28 00:40 -------- d-----w- C:\swsetup
2011-10-27 23:34 . 2009-09-07 11:48 482408 ----a-w- c:\windows\ssndii.exe
2011-10-27 23:34 . 2009-07-30 12:00 21776 ----a-w- c:\windows\system32\msxml2a.dll
2011-10-27 23:34 . 2011-10-27 23:34 -------- d-----w- c:\windows\Samsung
2011-10-27 23:33 . 2011-10-27 23:33 -------- d-----w- c:\windows\system32\drivers\Samsung
2011-10-27 23:33 . 2011-10-27 23:33 -------- d-----w- c:\program files\Samsung
2011-10-27 22:46 . 2011-11-03 23:16 -------- d-----w- c:\windows\system32\NtmsData
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-07 09:35 . 2011-05-23 12:05 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-09-26 09:41 . 2008-07-29 18:59 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2001-10-25 12:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2001-10-25 12:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-09 09:12 . 2008-04-14 06:51 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-06 20:45 . 2010-07-18 16:20 41184 ----a-w- c:\windows\avastSS.scr
2011-09-06 20:45 . 2009-12-12 13:50 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-09-06 20:38 . 2011-09-11 11:53 111320 ----a-w- c:\windows\system32\drivers\aswFW.sys
2011-09-06 20:38 . 2011-04-04 23:05 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-09-06 20:37 . 2009-12-12 13:51 320856 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-09-06 20:37 . 2011-09-11 11:53 195416 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2011-09-06 20:36 . 2009-12-12 13:51 34392 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-09-06 20:36 . 2009-12-12 13:51 52568 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-09-06 20:36 . 2009-12-12 13:51 110552 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-09-06 20:36 . 2009-12-12 13:51 104536 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-09-06 20:36 . 2009-12-12 13:51 20568 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-09-06 20:33 . 2009-12-12 13:51 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-09-06 14:10 . 2008-04-14 05:45 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-08-31 14:20 . 2009-12-12 13:15 53248 -c--a-w- c:\windows\system32\CSVer.dll
2011-08-17 21:25 . 2008-04-14 06:52 832512 ----a-w- c:\windows\system32\wininet.dll
2011-08-17 21:25 . 2008-04-14 06:52 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2011-08-17 21:25 . 2008-04-14 06:51 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-08-17 21:25 . 2008-04-14 06:51 17408 ----a-w- c:\windows\system32\corpol.dll
2011-08-17 13:49 . 2008-04-13 22:49 138496 ----a-w- c:\windows\system32\drivers\afd.sys
2011-08-17 12:22 . 2008-04-14 05:50 389120 ----a-w- c:\windows\system32\html.iec
2011-06-01 20:17 . 2011-06-01 20:16 20533281 ----a-w- c:\program files\vlc-1.1.9-win32.exe
2010-07-22 21:40 . 2010-09-24 17:59 2944904 ----a-w- c:\program files\Common Files\AskToolbarInstaller.exe
2010-03-15 03:23 . 2010-03-15 03:23 18499623 -c--a-w- c:\program files\vlc-1.0.5-win32.exe
2010-02-20 19:46 . 2010-02-20 19:46 7897671 -c--a-w- c:\program files\AntikVSTB.exe
2011-09-30 07:02 . 2011-04-20 10:06 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 . 4AFB3B0919649F95C1964AA1FAD27D73 . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
.
[-] 2009-09-06 . D624FBF20A2D2CC6C5C88FA4FD792B14 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2011-11-03_21.23.48 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-11-04 21:04 . 2011-11-04 21:04 16384 c:\windows\Temp\Perflib_Perfdata_3ec.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-09-06 20:45 122512 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2011-09-06 3722416]
"Samsung PanelMgr"="c:\windows\Samsung\PanelMgr\SSMMgr.exe" [2009-08-27 614400]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-04-22 129536]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-04-22 163328]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-04-22 138752]
"RTHDCPL"="RTHDCPL.EXE" [2011-03-21 20053096]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2011-08-17 124928]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštìní\
TeamViewer 6.lnk - c:\program files\TeamViewer\Version6\TeamViewer.exe [2011-8-30 8093056]
.
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"StartMenuLogoff"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\documents and settings\All Users\Data aplikací\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"ctfmon.exe"=c:\windows\system32\ctfmon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"HPDJ Taskbar Utility"=c:\windows\system32\spool\drivers\w32x86\3\hpztsb09.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\rserver30\\rserver3.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Documents and Settings\\miau131313\\Local Settings\\Data aplikací\\AntikVirtualSTB\\AntikVirtualSTB.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Documents and Settings\\miau131313\\temp\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Java\\jre6\\launch4j-tmp\\frd.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
.
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [12.12.2009 12:41 64288]
R0 tdrpman258;Acronis Try&Decide and Restore Points filter (build 258);c:\windows\system32\drivers\tdrpm258.sys [13.12.2009 11:24 911680]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [5.4.2011 0:05 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [12.12.2009 14:51 320856]
R1 raddrvv3;raddrvv3;c:\windows\system32\rserver30\raddrvv3.sys [9.10.2009 14:00 46304]
R2 afcdpsrv;Acronis Nonstop Backup service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [13.12.2009 11:24 2480048]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [12.12.2009 14:51 20568]
R2 RServer3;Radmin Server V3;c:\windows\system32\rserver30\rserver3.exe [9.10.2009 14:00 1242504]
R2 yksvc;Marvell Yukon Service;c:\windows\System32\svchost.exe -k yksvcs [14.4.2008 7:52 14336]
R3 afcdp;afcdp;c:\windows\system32\drivers\afcdp.sys [13.12.2009 11:24 160288]
S0 is3srv;is3srv;c:\windows\system32\drivers\is3srv.sys --> c:\windows\system32\drivers\is3srv.sys [?]
S0 szkg5;szkg5;c:\windows\system32\DRIVERS\szkg.sys --> c:\windows\system32\DRIVERS\szkg.sys [?]
S0 szkgfs;szkgfs;c:\windows\system32\drivers\szkgfs.sys --> c:\windows\system32\drivers\szkgfs.sys [?]
S1 aswFW;avast! TDI Firewall driver;c:\windows\system32\drivers\aswFW.sys [11.9.2011 12:53 111320]
S1 SASDIFSV;SASDIFSV;\??\c:\program files\SUPERAntiSpyware\SASDIFSV.SYS --> c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [?]
S1 SASKUTIL;SASKUTIL;\??\c:\program files\SUPERAntiSpyware\SASKUTIL.SYS --> c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [?]
S2 avast! Firewall;avast! Firewall;"c:\program files\Alwil Software\Avast5\afwServ.exe" --> c:\program files\Alwil Software\Avast5\afwServ.exe [?]
S2 SSPORT;SSPORT;\??\c:\windows\system32\Drivers\SSPORT.sys --> c:\windows\system32\Drivers\SSPORT.sys [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys --> c:\windows\system32\drivers\Ambfilt.sys [?]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [12.3.2010 13:45 1668352]
S3 cpudrv;cpudrv;c:\program files\SystemRequirementsLab\cpudrv.sys [18.12.2009 11:58 11336]
S3 cpuz134;cpuz134;\??\c:\program files\CPUID\PC Wizard 2010\pcwiz_x32.sys --> c:\program files\CPUID\PC Wizard 2010\pcwiz_x32.sys [?]
S3 gHidPnp;USB Device Enhanced Function Driver;c:\windows\system32\Drivers\gHidPnp.Sys --> c:\windows\system32\Drivers\gHidPnp.Sys [?]
S3 gMouPS2;PS2 Scroll Mouse Device;c:\windows\system32\DRIVERS\gMouPS2.sys --> c:\windows\system32\DRIVERS\gMouPS2.sys [?]
S3 gMouUsb;USB Mouse Device Drv;c:\windows\system32\DRIVERS\gMouUsb.sys --> c:\windows\system32\DRIVERS\gMouUsb.sys [?]
S3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [12.7.2010 9:55 2152152]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\program files\Lavasoft\Ad-Aware\kernexplorer.sys [14.8.2010 11:44 15232]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [15.9.2010 10:52 137344]
S3 SuperIO;Lenovo ASD HWM Driver;c:\windows\system32\drivers\spio.sys [6.3.2008 13:33 5760]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\drivers\teamviewervpn.sys [11.3.2010 10:17 25088]
S3 TrueSight;TrueSight;c:\windows\system32\drivers\TrueSight.sys [2.11.2011 4:07 111872]
S4 !SASCORE;SAS Core Service;"c:\program files\SUPERAntiSpyware\SASCORE.EXE" --> c:\program files\SUPERAntiSpyware\SASCORE.EXE [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
yksvcs REG_MULTI_SZ yksvc
.
Contents of the 'Scheduled Tasks' folder
.
2011-11-04 c:\windows\Tasks\Úklid 1 kliknutím.job
- c:\program files\TuneUp Utilities 2008\OneClick.exe [2007-12-21 12:49]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
mStart Page = hxxp://downloads.phpnuke.org/en/index.php?rvs=google
mWindow Title = Microsoft Internet Explorer
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MI1933~1\Office12\EXCEL.EXE/3000
IE: Pøevést cíl vazby do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Pøevést do Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Pøipojit cíl vazby k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Pøipojit k existujícímu PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: SmarThru4 Capture Selection - (value not set)
IE: SmarThru4 Save as HTML - (value not set)
IE: SmarThru4 Save Selected Text - (value not set)
IE: SmarThru4 Web Capture - (value not set)
IE: ????3?? - c:\documents and settings\miau131313\Data aplikací\FlashGetBHO\GetUrl.htm
IE: ????3?????? - c:\documents and settings\miau131313\Data aplikací\FlashGetBHO\GetAllUrl.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\translat\WEBIE.DLL
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\translat\WEBIE.DLL
TCP: DhcpNameServer = 192.168.2.1
TCP: Interfaces\{7B03518D-B041-4815-BFE9-0EA835877B2F}: NameServer = 192.168.2.1
FF - ProfilePath - c:\documents and settings\miau131313\Data aplikací\Mozilla\Firefox\Profiles\9mmw2ccj.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk/
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 300
FF - user.js: content.notify.interval - 100000
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.switch.threshold - 650000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-04 22:05
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\O(uë_f3*N}]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
@="c:\\Documents and Settings\\miau131313\\Data aplikací\\FlashGetBHO\\GetUrl.htm"
"contexts"=dword:00000022
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\Internet Explorer\MenuExt\O(uë_f3*N}hQèþ”¥c]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
@="c:\\Documents and Settings\\miau131313\\Data aplikací\\FlashGetBHO\\GetAllUrl.htm"
"contexts"=dword:000000f3
.
[HKEY_USERS\S-1-5-21-1229272821-1935655697-682003330-1003\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(3240)
c:\program files\PC-Doctor\PcdToolbar584923.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\System32\wudfhost.exe
c:\windows\System32\wudfhost.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\Acronis\Plán2\schedul2.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
c:\windows\system32\rserver30\FamItrfc.Exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2011-11-04 22:07:43 - machine was rebooted
ComboFix-quarantined-files.txt 2011-11-04 21:07
ComboFix2.txt 2011-11-04 20:40
ComboFix3.txt 2011-11-03 21:30
.
Pre-Run: Volných bajtù: 35 064 324 096
Post-Run: Volných bajtù: 35 044 335 616
.
- - End Of File - - 042227ABBEF99E06F246DE1766C3D8F9

Log již vypadá čistý. Nastala nějaká změna?

Rudy píše:Log již vypadá čistý. Nastala nějaká změna?

Diky za optani. Bohuzel ne. Stale "nejde" zvuk a nelze nainstalovat konci chybou 39...

http://support.microsoft.com/kb/310123/cs píše:Kód 39
Ovladač zařízení pro tento hardware nelze zavést. Ovladač je pravděpodobně poškozený nebo zcela chybí. (Kód 39)
Doporučené řešení

Mezi důvody této chyby patří chybějící ovladač, poškozený binární soubor, problém souboru se vstupem a výstupem nebo ovladač, který odkazuje na vstupní bod v jiném binárním souboru, který nebylo možné načíst.

Ovladač odinstalujte a potom klepněte na možnost Vyhledat změny hardwaru, abyste mohli znovu nainstalovat nebo upgradovat ovladač.

Na kartě zařízení Obecné vlastnosti spusťte klepnutím na položku Poradce při potížíchPrůvodce odstraňováním potíží.

Toto je rada přímo od Microsoftu.

Diky za snahu. Toto je prvni, co jsem k tomu nasel a co jsem vyzkousel.
At se pokousim nainstalovat ovladace jakymkoliv zpusobem (pres oficialni instalacni soubor, i vybranim primo konkretniho ovladace a to v jakemkoliv umisteni), vysledek je pokazde stejny - zarizeni nejde spustit - kod 39...