VIRY.CZ

Dobrý den.
V PC už mi nějakou dobu přetrvává problém s ovládacími panely. Z nabídky start úplně zmizely a nejdou spustit. Když chci spustit přes tento počítač přidat nebo odebrat programy napíše mi to tuto chybovou hlášku: "Operace byla zrušena z důvodu omezeních platných pro tento počítač. Obraťte se na správce systému." Na pc jsem nastaven jako správce systému já a navíc jsem tam jako jediný uživatel. Dále také když dám zkratku ctrl alt delete tak to napíše: "správce tohoto systému zakázal správce úloh" a tak podobně. Předem děkuji za jakoukoliv pomoc.
log:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-02-05 12:49:37
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 3 GB (8%) free of 40 GB
Total RAM: 447 MB (14% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:50:18, on 5.2.2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\PROGRA~1\AVG\AVG9\avgtray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\AVG\AVG9\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe
C:\Program Files\AVG\AVG9\avgemc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Orbitdownloader\orbitdm.exe
C:\Program Files\Orbitdownloader\orbitnet.exe
C:\Downloads\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=ddrnw
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.9\pdfforgeToolbarIE.dll
R3 - URLSearchHook: ESCOFLiP Toolbar - {d47a8d7d-f7b2-48a9-b8d6-b44484d51b89} - C:\Program Files\ESCOFLiP\prxtbESCO.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: AVG Safe Search - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.9\pdfforgeToolbarIE.dll
O2 - BHO: ESCOFLiP - {d47a8d7d-f7b2-48a9-b8d6-b44484d51b89} - C:\Program Files\ESCOFLiP\prxtbESCO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\IE\4.9\pdfforgeToolbarIE.dll
O3 - Toolbar: ESCOFLiP Toolbar - {d47a8d7d-f7b2-48a9-b8d6-b44484d51b89} - C:\Program Files\ESCOFLiP\prxtbESCO.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [facemoods] "C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201
O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204
O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203
O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - avgrsstx.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: UltiDev Cassini Web Server for ASP.NET 2.0 - UltiDev LLC - C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe

--
End of file - 8768 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cce1b77d9e37cc.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Norton Security Scan for Administrator.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\z639qzy5.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =827316&p="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"fe_5.0@nokia.com"=C:\Program Files\Nokia\Nokia Suite\Connectors\Bookmarks Connector\FirefoxExtension_5.0


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
fcmdSrch.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\z639qzy5.default\extensions\
ffxtlbr@Facemoods.com
{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
{ea614400-e918-4741-9a97-7a972ff7c30b}(2)
{EEE6C361-6118-11DC-9C72-001320C79847}

C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\z639qzy5.default\searchplugins\
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{000123B4-9B42-4900-B3F7-F4B073EFC214}]
Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll [2011-06-28 241464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll [2003-05-11 50376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-03 175400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2011-04-25 1623392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486b-A045-B233BD0DA8FC}]
CescrtHlpr Object - C:\Program Files\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll [2011-09-05 265944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}]
pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\IE\4.9\pdfforgeToolbarIE.dll [2011-12-13 1071456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d47a8d7d-f7b2-48a9-b8d6-b44484d51b89}]
ESCOFLiP Toolbar - C:\Program Files\ESCOFLiP\prxtbESCO.dll [2011-01-03 175400]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-08-24 1299248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-08-24 1299248]
{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - facemoods Toolbar - C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll [2011-09-05 220888]
{B922D405-6D13-4A2B-AE89-08A030DA4402} - pdfforge Toolbar - C:\Program Files\pdfforge Toolbar\IE\4.9\pdfforgeToolbarIE.dll [2011-12-13 1071456]
{d47a8d7d-f7b2-48a9-b8d6-b44484d51b89} - ESCOFLiP Toolbar - C:\Program Files\ESCOFLiP\prxtbESCO.dll [2011-01-03 175400]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-03 175400]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2011-04-21 18790432]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2011-04-21 1466368]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2012-01-26 2077536]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2011-08-01 114992]
"facemoods"=C:\Program Files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe [2011-09-05 362200]
""= []
"SearchSettings"=C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [2011-12-13 922976]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-15 1955208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [1980-01-01 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [1980-01-01 1694208]
"PlayNC Launcher"= []
""= []
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2011-06-19 399736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-01-10 1083264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2011-06-16 1500160]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2011-06-19 399736]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.3.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-12-13 1198592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-07-04 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\avgrsstarter]
C:\WINDOWS\system32\avgrsstx.dll [2011-04-25 12536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=1
"DisableRegistryTools"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"ConsentPromptBehaviorAdmin"=0
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoControlPanel"=1
"DisallowRun"=1
"NoInstrumentation"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG9\avgemc.exe"="C:\Program Files\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG9\avgupd.exe"="C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG9\avgnsx.exe"="C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe"
"D:\Program Files\Bohemia Interactive\ArmA\arma.exe"="D:\Program Files\Bohemia Interactive\ArmA\arma.exe:*:Enabled:ArmA"
"D:\Program Files\Bohemia Interactive\ArmA\arma_server.exe"="D:\Program Files\Bohemia Interactive\ArmA\arma_server.exe:*:Enabled:ArmA_Server"
"C:\Program Files\Metin2\metin2.bin"="C:\Program Files\Metin2\metin2.bin:*:Disabled:metin2"
"C:\Program Files\Metin2\metin2client.bin"="C:\Program Files\Metin2\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"D:\QuadCoreM2\pack\core.bin"="D:\QuadCoreM2\pack\core.bin:*:Enabled:core"
"H:\Skype\Phone\Skype.exe"="H:\Skype\Phone\Skype.exe:*:Enabled:Skype "
"D:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe"="D:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\FarCry.exe:*:Enabled:Far Cry"
"C:\Documents and Settings\Administrator\Plocha\Skype\Phone\Skype.exe"="C:\Documents and Settings\Administrator\Plocha\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\Editor.exe"="D:\Program Files\Ubisoft\Crytek\Far Cry\Bin32\Editor.exe:*:Enabled:CryEngine Sanbdbox(tm)."
"C:\Program Files\PSPdisp\bin\app\PSPdisp.exe"="C:\Program Files\PSPdisp\bin\app\PSPdisp.exe:*:Enabled:PSPdisp"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (CLI)"
"C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe"="C:\Program Files\THQ\S.T.A.L.K.E.R. - Shadow of Chernobyl\bin\dedicated\XR_3DA.exe:*:Enabled:S.T.A.L.K.E.R. - Shadow of Chernobyl (SRV)"
"D:\Games\World_of_Tanks\WorldOfTanks.exe"="D:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks"
"D:\hp 6 heslo je anatomie\Half-Life 2\hl2-steam-console.exe.exe"="D:\hp 6 heslo je anatomie\Half-Life 2\hl2-steam-console.exe.exe:*:Enabled:hl2-steam-console.exe"
"C:\Program Files\QuadCoreM2\pack\core.bin"="C:\Program Files\QuadCoreM2\pack\core.bin:*:Enabled:core"
"C:\Program Files\Counter-Strike 1.6\hl.exe"="C:\Program Files\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher"
"G:\QuadCoreM2\pack\core.bin"="G:\QuadCoreM2\pack\core.bin:*:Enabled:core"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe"="C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe:LocalSubNet:Enabled:UltiDev Cassini Web Server for ASP.NET 2.0"
"C:\Games\World_of_Tanks\WOTLauncher.exe"="C:\Games\World_of_Tanks\WOTLauncher.exe:*:Enabled:World of Tanks Launcher"
"C:\Games\World_of_Tanks\WorldOfTanks.exe"="C:\Games\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit"
"C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll

======List of files/folders created in the last 1 month======

2012-02-05 12:49:43 ----D---- C:\Program Files\trend micro
2012-02-05 12:49:37 ----D---- C:\rsit
2012-02-01 21:35:22 ----D---- C:\Documents and Settings\Administrator\Data aplikací\ProgSense
2012-02-01 21:35:16 ----D---- C:\downloads
2012-02-01 21:35:16 ----D---- C:\Documents and Settings\Administrator\Data aplikací\GrabPro
2012-02-01 21:34:56 ----D---- C:\Program Files\Orbitdownloader
2012-02-01 21:34:55 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Orbit
2012-01-26 16:59:47 ----D---- C:\Documents and Settings\Administrator\Data aplikací\LolClient
2012-01-21 16:07:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nokia
2012-01-21 16:05:07 ----A---- C:\WINDOWS\system32\drivers\pccsmcfd.sys
2012-01-21 16:05:01 ----D---- C:\Program Files\PC Connectivity Solution
2012-01-21 16:04:14 ----A---- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
2012-01-21 16:04:13 ----A---- C:\WINDOWS\system32\drivers\nmwcdnsu.sys
2012-01-21 16:04:12 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys
2012-01-21 16:04:11 ----A---- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys
2012-01-21 16:04:10 ----A---- C:\WINDOWS\system32\drivers\ccdcmbo.sys
2012-01-21 16:04:08 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2012-01-21 16:02:59 ----N---- C:\WINDOWS\system32\spmsg.dll
2012-01-21 16:02:49 ----HDC---- C:\WINDOWS\$NtUninstallKB926239$
2012-01-21 16:00:54 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2012-01-21 15:59:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\NokiaInstallerCache
2012-01-20 22:33:02 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2012-01-20 22:32:47 ----D---- C:\Program Files\Pando Networks
2012-01-20 22:28:06 ----D---- C:\Documents and Settings\Administrator\Data aplikací\InstallShield
2012-01-20 20:26:33 ----D---- C:\WINDOWS\system32\cs-CZ
2012-01-20 20:16:35 ----D---- C:\Program Files\Microsoft.NET
2012-01-20 18:45:26 ----D---- C:\Program Files\Conduit
2012-01-20 18:45:18 ----D---- C:\Program Files\ConduitEngine
2012-01-20 18:45:15 ----D---- C:\Program Files\ESCOFLiP
2012-01-17 17:55:46 ----D---- C:\Documents and Settings\Administrator\Data aplikací\OpenOffice.org
2012-01-17 17:53:49 ----D---- C:\Program Files\OpenOffice.org 3
2012-01-17 17:48:12 ----D---- C:\Documents and Settings\Administrator\Data aplikací\TP
2012-01-13 19:43:05 ----D---- C:\Program Files\LogMeIn Hamachi
2012-01-09 19:17:24 ----D---- C:\Program Files\Zeallsoft

======List of files/folders modified in the last 1 month======

2012-02-05 12:50:23 ----D---- C:\Documents and Settings\Administrator\Data aplikací\uTorrent
2012-02-05 12:49:43 ----RD---- C:\Program Files
2012-02-05 12:40:06 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2012-02-05 10:30:15 ----D---- C:\WINDOWS\system32\drivers\Avg
2012-02-04 18:39:39 ----D---- C:\WINDOWS\Temp
2012-02-04 17:34:02 ----D---- C:\Documents and Settings\Administrator\Data aplikací\.minecraft
2012-02-04 17:34:00 ----A---- C:\moduleName.txt
2012-02-03 12:12:00 ----D---- C:\Program Files\Counter-Strike 1.6
2012-02-02 15:33:59 ----SHD---- C:\WINDOWS\Installer
2012-02-02 15:32:29 ----SD---- C:\WINDOWS\Tasks
2012-02-01 21:46:32 ----D---- C:\WINDOWS\system32
2012-02-01 21:44:35 ----D---- C:\Program Files\Free FLV to AVI MP4 3GP WMV MP3 Converter
2012-01-29 20:55:01 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Wise Disk Cleaner
2012-01-26 07:36:33 ----D---- C:\WINDOWS
2012-01-25 19:28:22 ----D---- C:\WINDOWS\system32\DirectX
2012-01-25 19:28:20 ----HD---- C:\WINDOWS\inf
2012-01-25 19:28:13 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-25 19:19:04 ----HD---- C:\Program Files\InstallShield Installation Information
2012-01-24 19:04:38 ----D---- C:\Program Files\QuadCoreM2
2012-01-22 12:52:59 ----D---- C:\WINDOWS\pss
2012-01-21 16:24:28 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-01-21 16:24:28 ----D---- C:\WINDOWS\AppPatch
2012-01-21 16:16:56 ----D---- C:\Documents and Settings\Administrator\Data aplikací\PC Suite
2012-01-21 16:13:21 ----D---- C:\WINDOWS\system32\drivers
2012-01-21 16:09:13 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Nokia
2012-01-21 16:07:44 ----D---- C:\Program Files\Common Files\Nokia
2012-01-21 16:07:25 ----D---- C:\Program Files\Nokia
2012-01-21 16:05:07 ----DC---- C:\WINDOWS\system32\DRVSTORE
2012-01-21 16:03:32 ----D---- C:\WINDOWS\WinSxS
2012-01-21 16:02:04 ----A---- C:\WINDOWS\imsins.BAK
2012-01-21 16:01:36 ----D---- C:\WINDOWS\system32\drivers\UMDF
2012-01-21 16:01:35 ----D---- C:\Program Files\Windows Media Player
2012-01-20 23:24:40 ----RSD---- C:\WINDOWS\assembly
2012-01-20 23:20:30 ----D---- C:\WINDOWS\Microsoft.NET
2012-01-20 20:35:39 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-20 20:16:52 ----D---- C:\WINDOWS\system32\en-US
2012-01-20 18:45:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\SweetIM
2012-01-18 12:30:21 ----D---- C:\Program Files\Mozilla Firefox
2012-01-17 17:54:19 ----RSD---- C:\WINDOWS\Fonts
2012-01-14 15:11:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
2012-01-13 19:24:05 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Hamachi
2012-01-10 15:01:41 ----RD---- C:\Program Files\Skype
2012-01-10 15:01:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-01-18 77696]
R1 AvgLdx86;AVG Free AVI Loader Driver x86; C:\WINDOWS\System32\Drivers\avgldx86.sys [2011-04-25 216400]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; C:\WINDOWS\System32\Drivers\avgmfx86.sys [2011-09-15 29712]
R1 AvgTdiX;AVG Free Network Redirector; C:\WINDOWS\System32\Drivers\avgtdix.sys [2011-05-07 243152]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [1980-01-01 39936]
R2 Ethpdrv;Ethernet Packet Driver; C:\WINDOWS\system32\DRIVERS\ethpdrv.sys [2005-09-08 9728]
R2 NwlnkIpx;Transportní protokol kompatibilní s NWLink IPX/SPX/NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [1980-01-01 88448]
R2 NwlnkNb;Služba NWLink pro rozhraní NetBIOS; C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [1980-01-01 63232]
R2 NwlnkSpx;Protokol NWLink SPX/SPXII; C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [1980-01-01 55936]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2011-04-21 43008]
R2 risdptsk;risdptsk; C:\WINDOWS\system32\DRIVERS\risdptsk.sys [2011-04-21 46592]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-10-26 549184]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-07-04 2304000]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2011-04-21 5818400]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-08-24 5760]
R3 pspdisp;pspdisp; C:\WINDOWS\system32\DRIVERS\pspdisp.sys [2011-01-18 3072]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2011-04-21 1095808]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2011-04-21 1691480]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 ipw_bus;IPWireless; C:\WINDOWS\system32\DRIVERS\ipw_bus.sys [2005-09-27 58320]
S3 ipw_mdfl;Wireless Broadband Modem Filter; C:\WINDOWS\system32\DRIVERS\ipw_mdfl.sys [2005-09-27 8272]
S3 ipw_mdm;Wireless Broadband Modem (WDM); C:\WINDOWS\system32\DRIVERS\ipw_mdm.sys [2005-09-27 95440]
S3 IpwP;IPWireless 3G PCMCIA Network Adapter; C:\WINDOWS\system32\DRIVERS\ipwpnet.sys [2005-07-30 43184]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2011-04-21 1395800]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2011-11-01 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2011-11-01 23168]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\WINDOWS\system32\drivers\nmwcdnsu.sys [2011-11-01 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic; C:\WINDOWS\system32\drivers\nmwcdnsuc.sys [2011-11-01 8576]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 Revolution1;Revolution1; \??\G:\QuadCoreM2\Revolution_Engine_8.3_ShaK3\SHAK3.sys []
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [1980-01-01 67584]
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2011-11-01 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2004-08-03 25600]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2011-11-01 8192]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WinUSB;WinUSB driver; C:\WINDOWS\system32\DRIVERS\WinUSB.sys [2006-11-02 39368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-01-18 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2011-12-14 748440]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-07-04 483328]
R2 avg9emc;AVG Free E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2011-04-25 921952]
R2 avg9wd;AVG Free WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2011-04-25 308136]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 153376]
R2 UltiDev Cassini Web Server for ASP.NET 2.0;UltiDev Cassini Web Server for ASP.NET 2.0; C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe [2010-08-25 49152]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [1980-01-01 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-07 136176]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-07 136176]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Vše jsem udělal ale problém přetrvává po stisknutí ctrl alt delete pořád vyskakuje chybová hláška.

log:

ComboFix 12-02-05.02 - Administrator 05.02.2012 15:24:08.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.420.1029.18.447.199 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\facemoods.com
c:\program files\facemoods.com\facemoods\1.4.17.11\bh\facemoods.dll
c:\program files\facemoods.com\facemoods\1.4.17.11\facemoods.crx
c:\program files\facemoods.com\facemoods\1.4.17.11\facemoods.png
c:\program files\facemoods.com\facemoods\1.4.17.11\facemoodsApp.dll
c:\program files\facemoods.com\facemoods\1.4.17.11\facemoodsEng.dll
c:\program files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe
c:\program files\facemoods.com\facemoods\1.4.17.11\facemoodsTlbr.dll
c:\program files\facemoods.com\facemoods\1.4.17.11\uninstall.exe
c:\windows\msmqinst.log
c:\windows\system\WINSPOOL.DRV
c:\windows\system32\msconfig.exe
c:\windows\system32\SET181.tmp
c:\windows\system32\SET184.tmp
c:\windows\system32\SET190.tmp
c:\windows\system32\SET192.tmp
c:\windows\system32\SET199.tmp
c:\windows\system32\SET19A.tmp
c:\windows\system32\SET19B.tmp
c:\windows\system32\SET19E.tmp
c:\windows\system32\SET1AB.tmp
c:\windows\system32\SET1B4.tmp
c:\windows\system32\system32
c:\windows\system32\tmp6.tmp
c:\windows\system32\tmp7.tmp
c:\windows\XSxS
.
Nakažená kopie c:\windows\system32\msgsvc.dll byla nalezena a vyléčena.
Obnovena kopie z - c:\system volume information\_restore{E5E7C662-9904-4EA1-8250-E6E97217C707}\RP102\A0105284.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-01-05 do 2012-02-05 )))))))))))))))))))))))))))))))
.
.
2012-02-05 11:49 . 2012-02-05 11:50 -------- d-----w- c:\program files\trend micro
2012-02-05 11:49 . 2012-02-05 11:50 -------- d-----w- C:\rsit
2012-02-01 20:35 . 2012-02-01 20:35 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\ProgSense
2012-02-01 20:35 . 2012-02-05 14:08 -------- d-----w- C:\downloads
2012-02-01 20:35 . 2012-02-01 20:35 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\GrabPro
2012-02-01 20:34 . 2012-02-01 20:34 -------- d-----w- c:\program files\Orbitdownloader
2012-02-01 20:34 . 2012-02-05 14:08 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Orbit
2012-01-26 16:01 . 2012-01-26 16:01 -------- d-----w- c:\documents and settings\Administrator\riotsGamesLogs
2012-01-26 15:59 . 2012-01-26 15:59 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\LolClient
2012-01-21 15:09 . 2012-01-21 15:09 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Nokia
2012-01-21 15:05 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2012-01-21 15:05 . 2012-01-21 15:05 -------- d-----w- c:\program files\PC Connectivity Solution
2012-01-21 15:04 . 2011-11-01 09:07 8576 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2012-01-21 15:04 . 2011-11-01 09:07 137600 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2012-01-21 15:04 . 2011-11-01 09:07 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2012-01-21 15:04 . 2011-11-01 09:07 8192 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2012-01-21 15:04 . 2011-11-01 09:07 23168 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2012-01-21 15:04 . 2011-11-01 09:07 18176 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2012-01-20 21:33 . 2012-02-03 12:03 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\PMB Files
2012-01-20 21:32 . 2012-01-20 21:32 -------- d-----w- c:\documents and settings\All Users\Data aplikac
2012-01-20 21:32 . 2012-01-20 21:32 -------- d-----w- c:\program files\Pando Networks
2012-01-20 21:32 . 2012-01-20 21:32 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Pando_Temp
2012-01-20 21:29 . 2012-01-20 21:29 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\assembly
2012-01-20 21:28 . 2012-01-20 21:28 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\InstallShield
2012-01-20 19:26 . 2012-01-20 19:26 -------- d-----w- c:\windows\system32\cs-CZ
2012-01-20 19:16 . 2012-01-20 19:16 -------- d-----w- c:\program files\Microsoft.NET
2012-01-20 17:45 . 2012-01-20 17:45 -------- d-----w- c:\program files\Conduit
2012-01-20 17:45 . 2012-01-30 15:35 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\ESCOFLiP
2012-01-20 17:45 . 2012-01-20 17:45 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Conduit
2012-01-20 17:45 . 2012-01-20 17:45 -------- d-----w- c:\program files\ESCOFLiP
2012-01-17 16:55 . 2012-01-17 16:55 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\OpenOffice.org
2012-01-17 16:53 . 2012-01-17 16:54 -------- d-----w- c:\program files\OpenOffice.org 3
2012-01-17 16:48 . 2012-01-17 16:48 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\TP
2012-01-13 18:44 . 2012-02-05 14:37 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\LogMeIn Hamachi
2012-01-13 18:44 . 2012-02-05 14:36 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\LogMeIn Hamachi
2012-01-13 18:43 . 2012-01-13 18:43 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-01-09 18:17 . 2012-01-09 18:17 -------- d-----w- c:\program files\Zeallsoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-02-01 15:42 . 2011-06-20 13:00 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2010-11-28 14:04 . 2011-04-27 09:24 26926882 ----a-w- c:\program files\Win7codecs_v269.exe
2009-10-01 05:43 . 2011-04-27 09:23 21305259 ----a-w- c:\program files\Vista-Codec-Package_5.4.3.exe
2009-10-01 05:41 . 2011-04-27 09:24 7855400 ----a-w- c:\program files\XP-Codec-Pack-2.5.0.exe
2011-08-01 11:33 . 2011-04-25 11:30 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 1980-01-01 . A77219A971029DC2FB683E8513713803 . 215552 . . [5.1.2600.2055] . . c:\windows\system32\termsrv.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{d47a8d7d-f7b2-48a9-b8d6-b44484d51b89}"= "c:\program files\ESCOFLiP\prxtbESCO.dll" [2011-01-03 175400]
"{EEE6C35D-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll" [2011-08-24 130864]
.
[HKEY_CLASSES_ROOT\clsid\{d47a8d7d-f7b2-48a9-b8d6-b44484d51b89}]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35d-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SweetIM_URLSearchHook.ToolbarURLSearchHook]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-03 09:16 175400 ----a-w- c:\program files\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{d47a8d7d-f7b2-48a9-b8d6-b44484d51b89}]
2011-01-03 09:16 175400 ----a-w- c:\program files\ESCOFLiP\prxtbESCO.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
2011-08-24 17:21 1299248 ----a-r- c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
"{d47a8d7d-f7b2-48a9-b8d6-b44484d51b89}"= "c:\program files\ESCOFLiP\prxtbESCO.dll" [2011-01-03 175400]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-03 175400]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CLASSES_ROOT\clsid\{d47a8d7d-f7b2-48a9-b8d6-b44484d51b89}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D47A8D7D-F7B2-48A9-B8D6-B44484D51B89}"= "c:\program files\ESCOFLiP\prxtbESCO.dll" [2011-01-03 175400]
"{EEE6C35B-6118-11DC-9C72-001320C79847}"= "c:\program files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll" [2011-08-24 1299248]
.
[HKEY_CLASSES_ROOT\clsid\{d47a8d7d-f7b2-48a9-b8d6-b44484d51b89}]
.
[HKEY_CLASSES_ROOT\clsid\{eee6c35b-6118-11dc-9c72-001320c79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar.1]
[HKEY_CLASSES_ROOT\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}]
[HKEY_CLASSES_ROOT\SWEETIE.IEToolbar]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2011-06-19 399736]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"RTHDCPL"="RTHDCPL.EXE" [2011-04-21 18790432]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2011-04-21 1466368]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2012-01-26 2077536]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"SweetIM"="c:\program files\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992]
"SearchSettings"="c:\program files\Common Files\Spigot\Search Settings\SearchSettings.exe" [2011-12-13 922976]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2011-08-15 1955208]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [1980-01-01 15360]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2011-04-25 11:19 12536 ----a-w- c:\windows\system32\avgrsstx.dll
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Nabídka Start^Programy^Po spuštění^OpenOffice.org 3.3.lnk]
path=c:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.3.lnk
backup=c:\windows\pss\OpenOffice.org 3.3.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe]
2012-01-10 17:36 1083264 ----a-w- c:\program files\Nokia\Nokia Suite\NokiaSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2011-06-16 13:21 1500160 ----a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2011-06-19 15:13 399736 ----a-w- c:\program files\uTorrent\uTorrent.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Program Files\\Metin2\\metin2.bin"=
"c:\\Program Files\\Metin2\\metin2client.bin"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\Program Files\\Ubisoft\\Crytek\\Far Cry\\Bin32\\FarCry.exe"=
"d:\\Program Files\\Ubisoft\\Crytek\\Far Cry\\Bin32\\Editor.exe"=
"c:\\Program Files\\PSPdisp\\bin\\app\\PSPdisp.exe"=
"c:\\Program Files\\QuadCoreM2\\pack\\core.bin"=
"c:\\Program Files\\Counter-Strike 1.6\\hl.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"58849:TCP"= 58849:TCP:Pando Media Booster
"58849:UDP"= 58849:UDP:Pando Media Booster
.
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [21.4.2011 22:16 216400]
R1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\drivers\avgtdix.sys [21.4.2011 22:16 243152]
R2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [14.12.2011 13:13 748440]
R2 avg9emc;AVG Free E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [21.4.2011 22:19 921952]
R2 avg9wd;AVG Free WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [21.4.2011 22:20 308136]
R2 Ethpdrv;Ethernet Packet Driver;c:\windows\system32\drivers\ethpdrv.sys [25.4.2011 12:15 9728]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [15.8.2011 16:18 1361288]
R2 UltiDev Cassini Web Server for ASP.NET 2.0;UltiDev Cassini Web Server for ASP.NET 2.0;c:\program files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe [8.2.2007 00:06 49152]
R3 pspdisp;pspdisp;c:\windows\system32\drivers\pspdisp.sys [18.1.2011 14:47 3072]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [7.9.2011 19:57 136176]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [21.4.2011 21:53 1691480]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [7.9.2011 19:57 136176]
S3 ipw_bus;IPWireless;c:\windows\system32\drivers\ipw_bus.sys [25.4.2011 12:15 58320]
S3 ipw_mdfl;Wireless Broadband Modem Filter;c:\windows\system32\drivers\ipw_mdfl.sys [25.4.2011 12:15 8272]
S3 ipw_mdm;Wireless Broadband Modem (WDM);c:\windows\system32\drivers\ipw_mdm.sys [25.4.2011 12:15 95440]
S3 IpwP;IPWireless 3G PCMCIA Network Adapter;c:\windows\system32\drivers\ipwpnet.sys [25.4.2011 12:15 43184]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [21.1.2012 16:04 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [21.1.2012 16:04 8576]
S3 Revolution1;Revolution1;\??\g:\quadcorem2\Revolution_Engine_8.3_ShaK3\SHAK3.sys --> g:\quadcorem2\Revolution_Engine_8.3_ShaK3\SHAK3.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-02-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cce1b77d9e37cc.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-09-07 18:57]
.
2011-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-09-07 18:57]
.
2011-09-11 c:\windows\Tasks\Norton Security Scan for Administrator.job
- c:\progra~1\NORTON~2\Engine\352~1.10\Nss.exe [2011-09-08 15:16]
.
.
------- Doplňkový sken -------
.
uLocal Page = about:blank
uStart Page = about:blank
mLocal Page = about:blank
mStart Page = about:blank
IE: &Download by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/204
IE: Do&wnload selected by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\program files\Orbitdownloader\orbitmxt.dll/202
IE: Search the Web - c:\program files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
TCP: DhcpNameServer = 192.168.1.1 62.240.184.2
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\z639qzy5.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=827316&p=
FF - prefs.js: network.proxy.type - 1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-PlayNC Launcher - (no file)
HKLM-Run-facemoods - c:\program files\facemoods.com\facemoods\1.4.17.11\facemoodssrv.exe
AddRemove-facemoods - c:\program files\facemoods.com\facemoods\1.4.17.11\uninstall.exe
AddRemove-Ultra Video Splitter_is1 - c:\docume~1\ADMINI~1\LOCALS~1\Temp\is-4MMR4.tmp\uvsplitter-trial\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-02-05 15:38
Windows 5.1.2600 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(736)
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(2516)
c:\program files\SweetIM\Messenger\mgAdaptersProxy.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\msi.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\AVG\AVG9\avgchsvx.exe
c:\program files\AVG\AVG9\avgrsx.exe
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\AVG\AVG9\avgnsx.exe
c:\windows\RTHDCPL.EXE
c:\program files\AVG\AVG9\avgcsrvx.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2012-02-05 15:44:10 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-02-05 14:44
.
Před spuštěním: 7 710 208 000
Po spuštění: Volných bajtů: 11 638 046 720
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 0EC9BC3E75A9259772A87B8F2E3955C1


Vážně moc děkuji za rady. Už vše funguje jak má včetně ovládacích panelů a správce úloh. Problém je vyřešen.

z http://www.virustotal.com/ je odkaz tady: https://www.virustotal.com/file/1eba9a9 ... 328462293/

log z MbrScanu: TDSSKiller log:
18:41:22.0234 3796 TDSS rootkit removing tool 2.7.9.0 Feb 1 2012 09:28:49
18:41:22.0671 3796 ============================================================
18:41:22.0671 3796 Current date / time: 2012/02/05 18:41:22.0671
18:41:22.0671 3796 SystemInfo:
18:41:22.0671 3796
18:41:22.0671 3796 OS Version: 5.1.2600 ServicePack: 2.0
18:41:22.0671 3796 Product type: Workstation
18:41:22.0671 3796 ComputerName: ASUS
18:41:22.0796 3796 UserName: Administrator
18:41:22.0796 3796 Windows directory: C:\WINDOWS
18:41:22.0796 3796 System windows directory: C:\WINDOWS
18:41:22.0796 3796 Processor architecture: Intel x86
18:41:22.0796 3796 Number of processors: 1
18:41:22.0796 3796 Page size: 0x1000
18:41:22.0796 3796 Boot type: Normal boot
18:41:22.0796 3796 ============================================================
18:41:26.0781 3796 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
18:41:26.0796 3796 \Device\Harddisk0\DR0:
18:41:26.0796 3796 MBR used
18:41:26.0796 3796 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x4E1EDEC
18:41:26.0812 3796 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x4E1EE6A, BlocksNum 0x46EB796
18:41:26.0890 3796 Initialize success
18:41:26.0890 3796 ============================================================
18:42:13.0953 0884 ============================================================
18:42:13.0953 0884 Scan started
18:42:13.0953 0884 Mode: Manual; SigCheck; TDLFS;
18:42:13.0953 0884 ============================================================
18:42:14.0796 0884 Abiosdsk - ok
18:42:14.0890 0884 abp480n5 - ok
18:42:14.0953 0884 ACPI (fa2fbcda96d2385f773b059fe5a125a6) C:\WINDOWS\system32\DRIVERS\ACPI.sys
18:42:16.0671 0884 ACPI - ok
18:42:16.0968 0884 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
18:42:17.0187 0884 ACPIEC - ok
18:42:17.0703 0884 adpu160m - ok
18:42:17.0812 0884 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
18:42:19.0734 0884 aec - ok
18:42:20.0375 0884 AFD (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys
18:42:20.0531 0884 AFD - ok
18:42:21.0046 0884 Aha154x - ok
18:42:21.0609 0884 aic78u2 - ok
18:42:21.0734 0884 aic78xx - ok
18:42:21.0765 0884 AliIde - ok
18:42:21.0984 0884 Ambfilt (267fc636801edc5ab28e14036349e3be) C:\WINDOWS\system32\drivers\Ambfilt.sys
18:42:23.0390 0884 Ambfilt - ok
18:42:23.0593 0884 amsint - ok
18:42:23.0812 0884 AR5211 (bd4a059b937a64f403e693dcaa26fe38) C:\WINDOWS\system32\DRIVERS\ar5211.sys
18:42:24.0296 0884 AR5211 - ok
18:42:24.0515 0884 asc - ok
18:42:24.0640 0884 asc3350p - ok
18:42:24.0765 0884 asc3550 - ok
18:42:24.0953 0884 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
18:42:25.0109 0884 AsyncMac - ok
18:42:25.0359 0884 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
18:42:25.0515 0884 atapi - ok
18:42:25.0718 0884 Atdisk - ok
18:42:25.0953 0884 ati2mtag (01526c7a691913a7b09d0eb22b70c5d7) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
18:42:26.0140 0884 ati2mtag - ok
18:42:26.0421 0884 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
18:42:26.0578 0884 Atmarpc - ok
18:42:26.0843 0884 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
18:42:27.0000 0884 audstub - ok
18:42:27.0203 0884 AvgLdx86 (b8c187439d27aba430dd69fdcf1fa657) C:\WINDOWS\System32\Drivers\avgldx86.sys
18:42:27.0250 0884 AvgLdx86 - ok
18:42:27.0468 0884 AvgMfx86 (80ff2b1b7eeda966394f0baa895bbf4b) C:\WINDOWS\System32\Drivers\avgmfx86.sys
18:42:27.0468 0884 AvgMfx86 - ok
18:42:27.0843 0884 AvgTdiX (9a7a93388f503a34e7339ae7f9997449) C:\WINDOWS\System32\Drivers\avgtdix.sys
18:42:28.0000 0884 AvgTdiX - ok
18:42:28.0218 0884 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
18:42:28.0359 0884 Beep - ok
18:42:28.0375 0884 catchme - ok
18:42:28.0625 0884 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
18:42:28.0765 0884 cbidf2k - ok
18:42:28.0890 0884 cd20xrnt - ok
18:42:29.0062 0884 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
18:42:29.0234 0884 Cdaudio - ok
18:42:29.0421 0884 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
18:42:29.0562 0884 Cdfs - ok
18:42:29.0828 0884 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
18:42:29.0968 0884 Cdrom - ok
18:42:30.0125 0884 Changer - ok
18:42:30.0406 0884 CmBatt (4266be808f85826aedf3c64c1e240203) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
18:42:30.0562 0884 CmBatt - ok
18:42:30.0812 0884 CmdIde - ok
18:42:30.0984 0884 Compbatt (df1b1a24bf52d0ebc01ed4ece8979f50) C:\WINDOWS\system32\DRIVERS\compbatt.sys
18:42:31.0125 0884 Compbatt - ok
18:42:31.0343 0884 Cpqarray - ok
18:42:31.0359 0884 dac2w2k - ok
18:42:31.0390 0884 dac960nt - ok
18:42:31.0437 0884 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
18:42:31.0609 0884 Disk - ok
18:42:32.0078 0884 dmboot (e1968edec81c430108feb23ab07bdb14) C:\WINDOWS\system32\drivers\dmboot.sys
18:42:32.0359 0884 dmboot - ok
18:42:32.0609 0884 dmio (1b1520a82e396e46b9ae9fa6b03ff6c6) C:\WINDOWS\system32\drivers\dmio.sys
18:42:32.0765 0884 dmio - ok
18:42:32.0937 0884 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
18:42:33.0062 0884 dmload - ok
18:42:33.0359 0884 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
18:42:33.0531 0884 DMusic - ok
18:42:33.0718 0884 dpti2o - ok
18:42:34.0343 0884 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
18:42:34.0484 0884 drmkaud - ok
18:42:34.0593 0884 EagleNT - ok
18:42:34.0781 0884 Ethpdrv (076b1a923259f7a10998fa234a01d629) C:\WINDOWS\system32\DRIVERS\ethpdrv.sys
18:42:34.0812 0884 Ethpdrv ( UnsignedFile.Multi.Generic ) - warning
18:42:34.0812 0884 Ethpdrv - detected UnsignedFile.Multi.Generic (1)
18:42:35.0031 0884 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
18:42:35.0171 0884 Fastfat - ok
18:42:35.0390 0884 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\drivers\Fdc.sys
18:42:35.0531 0884 Fdc - ok
18:42:35.0765 0884 Fips (266dab58619b17bdf37fabbd48d875ca) C:\WINDOWS\system32\drivers\Fips.sys
18:42:35.0890 0884 Fips - ok
18:42:36.0046 0884 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\drivers\Flpydisk.sys
18:42:36.0187 0884 Flpydisk - ok
18:42:36.0468 0884 FltMgr (3d234fb6d6ee875eb009864a299bea29) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
18:42:36.0562 0884 FltMgr - ok
18:42:36.0859 0884 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
18:42:37.0000 0884 Fs_Rec - ok
18:42:37.0296 0884 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
18:42:37.0437 0884 Ftdisk - ok
18:42:37.0843 0884 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
18:42:38.0031 0884 Gpc - ok
18:42:38.0312 0884 hamachi (833051c6c6c42117191935f734cfbd97) C:\WINDOWS\system32\DRIVERS\hamachi.sys
18:42:38.0312 0884 hamachi - ok
18:42:38.0609 0884 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
18:42:38.0640 0884 HDAudBus - ok
18:42:38.0906 0884 HidUsb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
18:42:39.0031 0884 HidUsb - ok
18:42:39.0234 0884 hpn - ok
18:42:39.0312 0884 HTTP (cb77bb47e67e84deb17ba29632501730) C:\WINDOWS\system32\Drivers\HTTP.sys
18:42:39.0359 0884 HTTP - ok
18:42:39.0609 0884 i2omgmt - ok
18:42:39.0750 0884 i2omp - ok
18:42:39.0921 0884 i8042prt (0f42de9909b5dbf2c48dd1a79d491af5) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
18:42:40.0062 0884 i8042prt - ok
18:42:40.0296 0884 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
18:42:40.0437 0884 Imapi - ok
18:42:40.0671 0884 ini910u - ok
18:42:41.0078 0884 IntcAzAudAddService (c42f37a1f345219b4888188bf297ddef) C:\WINDOWS\system32\drivers\RtkHDAud.sys
18:42:41.0625 0884 IntcAzAudAddService - ok
18:42:41.0828 0884 IntelIde - ok
18:42:41.0984 0884 intelppm (10a3ac0f0df720ad3c3fd13861d50eb9) C:\WINDOWS\system32\DRIVERS\intelppm.sys
18:42:42.0140 0884 intelppm - ok
18:42:42.0390 0884 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
18:42:42.0515 0884 Ip6Fw - ok
18:42:42.0812 0884 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
18:42:42.0937 0884 IpFilterDriver - ok
18:42:43.0062 0884 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
18:42:43.0218 0884 IpInIp - ok
18:42:43.0468 0884 IpNat (e2168cbc7098ffe963c6f23f472a3593) C:\WINDOWS\system32\DRIVERS\ipnat.sys
18:42:43.0500 0884 IpNat - ok
18:42:43.0750 0884 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
18:42:43.0875 0884 IPSec - ok
18:42:44.0125 0884 IpwP (a2c9e03fbc87b6ea82db90407273dc01) C:\WINDOWS\system32\DRIVERS\ipwpnet.sys
18:42:44.0156 0884 IpwP - ok
18:42:44.0375 0884 ipw_bus (64b449fd93d0d5fbd52e4fb389386af4) C:\WINDOWS\system32\DRIVERS\ipw_bus.sys
18:42:44.0421 0884 ipw_bus - ok
18:42:44.0656 0884 ipw_mdfl (3ff9c1eeb937815bafb721645500060b) C:\WINDOWS\system32\DRIVERS\ipw_mdfl.sys
18:42:44.0687 0884 ipw_mdfl - ok
18:42:44.0921 0884 ipw_mdm (99185676893c72dfcc60b3054f08a98e) C:\WINDOWS\system32\DRIVERS\ipw_mdm.sys
18:42:44.0953 0884 ipw_mdm - ok
18:42:45.0203 0884 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
18:42:45.0265 0884 IRENUM - ok
18:42:45.0546 0884 isapnp (1091528512e4dd7ed5fddcc4df1c53d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
18:42:45.0671 0884 isapnp - ok
18:42:45.0968 0884 Kbdclass (6f877bf8dc01a550cd666f3bedb2213c) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
18:42:46.0109 0884 Kbdclass - ok
18:42:46.0296 0884 kbdhid (065b5a83aa78c0c7047bf22e0ab5c821) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
18:42:46.0546 0884 kbdhid - ok
18:42:46.0859 0884 kmixer (ba5deda4d934e6288c2f66caf58d2562) C:\WINDOWS\system32\drivers\kmixer.sys
18:42:46.0921 0884 kmixer - ok
18:42:47.0171 0884 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys
18:42:47.0312 0884 KSecDD - ok
18:42:47.0484 0884 lbrtfdc - ok
18:42:47.0671 0884 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
18:42:47.0812 0884 mnmdd - ok
18:42:48.0171 0884 Modem (60210deb037846afe521ebf349964f6b) C:\WINDOWS\system32\drivers\Modem.sys
18:42:48.0296 0884 Modem - ok
18:42:48.0546 0884 Monfilt (c7d9f9717916b34c1b00dd4834af485c) C:\WINDOWS\system32\drivers\Monfilt.sys
18:42:48.0625 0884 Monfilt - ok
18:42:48.0875 0884 Mouclass (b160ec94114715675509115986400fd9) C:\WINDOWS\system32\DRIVERS\mouclass.sys
18:42:49.0015 0884 Mouclass - ok
18:42:49.0171 0884 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
18:42:49.0296 0884 mouhid - ok
18:42:49.0531 0884 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
18:42:49.0687 0884 MountMgr - ok
18:42:49.0796 0884 mraid35x - ok
18:42:49.0984 0884 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
18:42:50.0125 0884 MRxDAV - ok
18:42:50.0343 0884 MRxSmb (025af03ce51645c62f3b6907a7e2be5e) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
18:42:50.0437 0884 MRxSmb - ok
18:42:50.0703 0884 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
18:42:50.0843 0884 Msfs - ok
18:42:51.0109 0884 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
18:42:51.0234 0884 MSKSSRV - ok
18:42:51.0437 0884 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
18:42:51.0593 0884 MSPCLOCK - ok
18:42:52.0250 0884 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
18:42:52.0406 0884 MSPQM - ok
18:42:53.0250 0884 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
18:42:53.0437 0884 mssmbios - ok
18:42:54.0546 0884 MTsensor (1c0f480b7c6136ddb5fb909995af014a) C:\WINDOWS\system32\DRIVERS\ATKACPI.sys
18:42:54.0578 0884 MTsensor - ok
18:42:55.0328 0884 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
18:42:55.0468 0884 Mup - ok
18:42:55.0718 0884 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
18:42:55.0890 0884 NDIS - ok
18:42:56.0187 0884 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
18:42:56.0312 0884 NdisTapi - ok
18:42:56.0578 0884 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
18:42:57.0000 0884 Ndisuio - ok
18:42:57.0265 0884 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
18:42:57.0406 0884 NdisWan - ok
18:42:57.0843 0884 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
18:42:57.0984 0884 NDProxy - ok
18:42:58.0234 0884 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
18:42:58.0359 0884 NetBIOS - ok
18:42:58.0609 0884 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
18:42:58.0750 0884 NetBT - ok
18:42:59.0093 0884 nmwcd (f6c40e0a565ee3ce5aeeb325e10054f2) C:\WINDOWS\system32\drivers\ccdcmb.sys
18:42:59.0328 0884 nmwcd - ok
18:42:59.0578 0884 nmwcdc (2a394e9e1fa3565e4b2fea470ffe4d6b) C:\WINDOWS\system32\drivers\ccdcmbo.sys
18:42:59.0656 0884 nmwcdc - ok
18:42:59.0953 0884 nmwcdnsu (99b224f8026cb534724aa3c408561e45) C:\WINDOWS\system32\drivers\nmwcdnsu.sys
18:43:00.0031 0884 nmwcdnsu - ok
18:43:00.0250 0884 nmwcdnsuc (d23257682d349a5e2e4507ed33decc16) C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
18:43:00.0343 0884 nmwcdnsuc - ok
18:43:00.0578 0884 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
18:43:00.0718 0884 Npfs - ok
18:43:00.0937 0884 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
18:43:01.0109 0884 Ntfs - ok
18:43:01.0375 0884 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
18:43:01.0546 0884 Null - ok
18:43:02.0828 0884 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
18:43:03.0078 0884 NwlnkFlt - ok
18:43:03.0343 0884 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
18:43:03.0468 0884 NwlnkFwd - ok
18:43:03.0781 0884 NwlnkIpx (79ea3fcda7067977625b3363a2657c80) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
18:43:03.0906 0884 NwlnkIpx - ok
18:43:04.0187 0884 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
18:43:04.0312 0884 NwlnkNb - ok
18:43:04.0656 0884 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
18:43:04.0812 0884 NwlnkSpx - ok
18:43:05.0109 0884 Parport (76a18caa2fefb28a4ced38d76837e86e) C:\WINDOWS\system32\drivers\Parport.sys
18:43:05.0234 0884 Parport - ok
18:43:05.0359 0884 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
18:43:05.0484 0884 PartMgr - ok
18:43:05.0703 0884 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
18:43:05.0812 0884 ParVdm - ok
18:43:05.0984 0884 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
18:43:06.0031 0884 pccsmcfd - ok
18:43:06.0281 0884 PCI (b7979f37bb7b9df2230046134955e6e7) C:\WINDOWS\system32\DRIVERS\pci.sys
18:43:06.0421 0884 PCI - ok
18:43:06.0671 0884 PCIDump - ok
18:43:06.0781 0884 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
18:43:06.0906 0884 PCIIde - ok
18:43:07.0078 0884 Pcmcia (90505755634407d4ef4c6dea60fc1df9) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
18:43:07.0203 0884 Pcmcia - ok
18:43:07.0406 0884 PDCOMP - ok
18:43:07.0453 0884 PDFRAME - ok
18:43:07.0468 0884 PDRELI - ok
18:43:07.0484 0884 PDRFRAME - ok
18:43:07.0500 0884 perc2 - ok
18:43:07.0515 0884 perc2hib - ok
18:43:07.0609 0884 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
18:43:07.0734 0884 PptpMiniport - ok
18:43:08.0000 0884 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
18:43:08.0125 0884 PSched - ok
18:43:08.0328 0884 pspdisp (30c867c08b13e66710e3210c8938e902) C:\WINDOWS\system32\DRIVERS\pspdisp.sys
18:43:08.0359 0884 pspdisp ( UnsignedFile.Multi.Generic ) - warning
18:43:08.0359 0884 pspdisp - detected UnsignedFile.Multi.Generic (1)
18:43:08.0578 0884 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
18:43:09.0515 0884 Ptilink - ok
18:43:09.0718 0884 ql1080 - ok
18:43:09.0859 0884 Ql10wnt - ok
18:43:10.0000 0884 ql12160 - ok
18:43:10.0109 0884 ql1240 - ok
18:43:10.0234 0884 ql1280 - ok
18:43:10.0375 0884 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
18:43:10.0500 0884 RasAcd - ok
18:43:10.0750 0884 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
18:43:10.0875 0884 Rasl2tp - ok
18:43:10.0984 0884 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
18:43:11.0093 0884 RasPppoe - ok
18:43:11.0203 0884 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
18:43:11.0343 0884 Raspti - ok
18:43:11.0500 0884 Rdbss (03b965b1ca47f6ef60eb5e51cb50e0af) C:\WINDOWS\system32\DRIVERS\rdbss.sys
18:43:11.0546 0884 Rdbss - ok
18:43:11.0796 0884 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
18:43:11.0937 0884 RDPCDD - ok
18:43:12.0093 0884 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
18:43:12.0218 0884 rdpdr - ok
18:43:12.0484 0884 RDPWD (b54cd38a9ebfbf2b3561426e3fe26f62) C:\WINDOWS\system32\drivers\RDPWD.sys
18:43:12.0500 0884 RDPWD - ok
18:43:12.0781 0884 redbook (aba13d33e1f888c9a68599a48a8840d6) C:\WINDOWS\system32\DRIVERS\redbook.sys
18:43:12.0890 0884 redbook - ok
18:43:12.0906 0884 Revolution1 - ok
18:43:13.0078 0884 rimsptsk (c398bca91216755b098679a8da8a2300) C:\WINDOWS\system32\DRIVERS\rimsptsk.sys
18:43:13.0093 0884 rimsptsk ( UnsignedFile.Multi.Generic ) - warning
18:43:13.0093 0884 rimsptsk - detected UnsignedFile.Multi.Generic (1)
18:43:13.0390 0884 risdptsk (53ea7c7d1d3c4b11ae0ea7c8d75c4e82) C:\WINDOWS\system32\DRIVERS\risdptsk.sys
18:43:13.0421 0884 risdptsk - ok
18:43:13.0906 0884 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
18:43:14.0062 0884 rtl8139 - ok
18:43:14.0640 0884 sdbus (02fc71b020ec8700ee8a46c58bc6f276) C:\WINDOWS\system32\DRIVERS\sdbus.sys
18:43:14.0750 0884 sdbus - ok
18:43:15.0015 0884 Secdrv (07f7f501ad50de2ba2d5842d9b6d6155) C:\WINDOWS\system32\DRIVERS\secdrv.sys
18:43:15.0046 0884 Secdrv ( UnsignedFile.Multi.Generic ) - warning
18:43:15.0046 0884 Secdrv - detected UnsignedFile.Multi.Generic (1)
18:43:15.0218 0884 Serial (c1ddbc85251551a840212999da3d95f3) C:\WINDOWS\system32\drivers\Serial.sys
18:43:15.0328 0884 Serial - ok
18:43:15.0625 0884 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
18:43:15.0750 0884 Sfloppy - ok
18:43:15.0890 0884 Simbad - ok
18:43:16.0125 0884 smserial (a101744ebdbf48275715ab8f7824d223) C:\WINDOWS\system32\DRIVERS\smserial.sys
18:43:16.0234 0884 smserial - ok
18:43:16.0531 0884 SONYPVU1 (a1eceeaa5c5e74b2499eb51d38185b84) C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS
18:43:16.0640 0884 SONYPVU1 - ok
18:43:17.0390 0884 Sparrow - ok
18:43:17.0812 0884 splitter (0ce218578fff5f4f7e4201539c45c78f) C:\WINDOWS\system32\drivers\splitter.sys
18:43:17.0859 0884 splitter - ok
18:43:18.0140 0884 sr (a74035ea526db97d9d50d2143a55f5cf) C:\WINDOWS\system32\DRIVERS\sr.sys
18:43:18.0203 0884 sr - ok
18:43:18.0421 0884 Srv (ea554a3ffc3f536fe8320eb38f5e4843) C:\WINDOWS\system32\DRIVERS\srv.sys
18:43:18.0500 0884 Srv - ok
18:43:18.0765 0884 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
18:43:18.0890 0884 swenum - ok
18:43:19.0093 0884 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
18:43:19.0203 0884 swmidi - ok
18:43:19.0421 0884 symc810 - ok
18:43:19.0437 0884 symc8xx - ok
18:43:19.0453 0884 sym_hi - ok
18:43:19.0484 0884 sym_u3 - ok
18:43:19.0531 0884 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
18:43:19.0671 0884 sysaudio - ok
18:43:19.0953 0884 Tcpip (1dbf125862891817f374f407626967f4) C:\WINDOWS\system32\DRIVERS\tcpip.sys
18:43:20.0046 0884 Tcpip - ok
18:43:20.0250 0884 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
18:43:20.0375 0884 TDPIPE - ok
18:43:20.0421 0884 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
18:43:20.0546 0884 TDTCP - ok
18:43:20.0765 0884 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
18:43:20.0890 0884 TermDD - ok
18:43:21.0062 0884 TosIde - ok
18:43:21.0265 0884 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
18:43:21.0375 0884 Udfs - ok
18:43:21.0625 0884 ultra - ok
18:43:21.0703 0884 Update (a4815a4884898f355a3513e60843a4fd) C:\WINDOWS\system32\DRIVERS\update.sys
18:43:21.0718 0884 Update - ok
18:43:21.0984 0884 upperdev (47f5f9d837d80ffd5882a14db9da0a67) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
18:43:22.0078 0884 upperdev - ok
18:43:22.0468 0884 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
18:43:22.0640 0884 usbccgp - ok
18:43:22.0906 0884 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
18:43:23.0015 0884 usbehci - ok
18:43:23.0343 0884 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
18:43:23.0468 0884 usbhub - ok
18:43:23.0750 0884 usbohci (bdfe799a8531bad8a5a985821fe78760) C:\WINDOWS\system32\DRIVERS\usbohci.sys
18:43:23.0890 0884 usbohci - ok
18:43:24.0906 0884 usbscan (a6bc71402f4f7dd5b77fd7f4a8ddba85) C:\WINDOWS\system32\DRIVERS\usbscan.sys
18:43:25.0062 0884 usbscan - ok
18:43:26.0187 0884 usbser (49106ee29074e6a3d3ac9e24c6d791d8) C:\WINDOWS\system32\drivers\usbser.sys
18:43:26.0359 0884 usbser - ok
18:43:27.0718 0884 UsbserFilt (e44f0d17be0908b58dcc99ccb99c6c32) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
18:43:27.0843 0884 UsbserFilt - ok
18:43:28.0812 0884 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
18:43:29.0031 0884 USBSTOR - ok
18:43:30.0109 0884 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
18:43:31.0593 0884 VgaSave - ok
18:43:33.0031 0884 ViaIde - ok
18:43:34.0015 0884 VolSnap (cd8cce067f7e9cbd762c00bdddecaa34) C:\WINDOWS\system32\drivers\VolSnap.sys
18:43:34.0171 0884 VolSnap - ok
18:43:35.0187 0884 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
18:43:35.0421 0884 Wanarp - ok
18:43:36.0078 0884 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\Drivers\wdf01000.sys
18:43:36.0156 0884 Wdf01000 - ok
18:43:36.0609 0884 WDICA - ok
18:43:37.0343 0884 wdmaud (efd235ca22b57c81118c1aeb4798f1c1) C:\WINDOWS\system32\drivers\wdmaud.sys
18:43:37.0390 0884 wdmaud - ok
18:43:37.0718 0884 WinUSB (fd600b032e741eb6aab509fc630f7c42) C:\WINDOWS\system32\DRIVERS\WinUSB.sys
18:43:37.0734 0884 WinUSB - ok
18:43:38.0578 0884 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys
18:43:38.0671 0884 WpdUsb - ok
18:43:39.0062 0884 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
18:43:39.0203 0884 WS2IFSL - ok
18:43:39.0578 0884 WudfPf (6ff66513d372d479ef1810223c8d20ce) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
18:43:39.0671 0884 WudfPf - ok
18:43:39.0937 0884 WudfRd (ac13cb789d93412106b0fb6c7eb2bcb6) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
18:43:39.0984 0884 WudfRd - ok
18:43:40.0062 0884 MBR (0x1B8) (413fc2a0c716421b3158746d63736515) \Device\Harddisk0\DR0
18:43:40.0296 0884 \Device\Harddisk0\DR0 - ok
18:43:40.0312 0884 Boot (0x1200) (f514ae1f44b095f8f69585e6764f200a) \Device\Harddisk0\DR0\Partition0
18:43:40.0312 0884 \Device\Harddisk0\DR0\Partition0 - ok
18:43:40.0359 0884 Boot (0x1200) (e495b441edf79cabceafb2d96322440e) \Device\Harddisk0\DR0\Partition1
18:43:40.0375 0884 \Device\Harddisk0\DR0\Partition1 - ok
18:43:40.0390 0884 ============================================================
18:43:40.0390 0884 Scan finished
18:43:40.0390 0884 ============================================================
18:43:40.0500 3752 Detected object count: 4
18:43:40.0500 3752 Actual detected object count: 4
18:43:53.0984 3752 Ethpdrv ( UnsignedFile.Multi.Generic ) - skipped by user
18:43:53.0984 3752 Ethpdrv ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:43:53.0984 3752 pspdisp ( UnsignedFile.Multi.Generic ) - skipped by user
18:43:53.0984 3752 pspdisp ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:43:53.0984 3752 rimsptsk ( UnsignedFile.Multi.Generic ) - skipped by user
18:43:53.0984 3752 rimsptsk ( UnsignedFile.Multi.Generic ) - User select action: Skip
18:43:54.0000 3752 Secdrv ( UnsignedFile.Multi.Generic ) - skipped by user
18:43:54.0000 3752 Secdrv ( UnsignedFile.Multi.Generic ) - User select action: Skip