VIRY.CZ

Ahoj, už třetí den řeším potíže s ntb acer aspire 5670. Nejdříve začal tuhnout, někdy se seknul že nešel ani normálně vypnout. Taky přestala fungovat klávesnice a touchpad, taky začaly zlobit usb porty. Tak jsem zazálohoval data, zformátoval disk a nainstaloval nově win xp sp3. Jenže ouha potíže přetrvávají dále. Už jsem zkusil i přehrát bios na novější, jenže ani to nepomohlo. Nainstalovaný Eset Smart Security nic nehlásí, ale jámám podezření na nějakou havěť v MBR disku. Pokud spustím win v nouzovém režimu, chová se to úplně normálně, hw funguje i v nabootované live distribuci, takže by měl být ok. Jenže na to už moje síly nestačí, jsem zoufalý a někdy mám chuť to hodit z okna

Prosím tedy o nějakou radu, nebo pomoc. Děkuji Pepa

Přikládám log z RSIT

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-03-03 21:07:46
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 145 GB (96%) free of 150 GB
Total RAM: 2046 MB (88% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:07:53, on 3.3.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] "C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe

--
End of file - 3464 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-22 3080264]
"SynTPLpr"=C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [2005-11-02 102491]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2005-11-02 692315]
"LManager"=C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE [2005-12-06 458752]
"IntelZeroConfig"=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2005-11-28 667718]
"IntelWireless"=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2005-11-28 602182]
"EOUApp"=C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe [2005-11-28 569413]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-11-17 15600128]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\CTFMON.EXE [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2005-12-01 47104]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-03-03 21:07:47 ----D---- C:\Program Files\trend micro
2012-03-03 21:07:46 ----D---- C:\rsit
2012-03-03 20:27:27 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2012-03-03 18:41:29 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2012-03-03 18:41:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2012-03-03 18:41:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2012-03-03 18:41:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2012-03-03 18:41:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2660465$
2012-03-03 18:40:57 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2012-03-03 18:40:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2012-03-03 18:40:44 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2012-03-03 18:40:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2012-03-03 18:40:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2012-03-03 18:40:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2012-03-03 18:40:26 ----D---- C:\WINDOWS\system32\PreInstall
2012-03-03 18:40:24 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2012-03-03 18:40:23 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2012-03-03 18:40:17 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2012-03-03 18:40:09 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2012-03-03 18:40:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2012-03-03 18:39:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2012-03-03 18:39:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2012-03-03 18:39:45 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2012-03-03 18:39:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2012-03-03 18:39:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2012-03-03 18:39:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2012-03-03 18:39:04 ----N---- C:\WINDOWS\system32\spmsg.dll
2012-03-03 18:39:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2012-03-03 18:39:02 ----HD---- C:\WINDOWS\$hf_mig$
2012-03-03 13:31:13 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2012-03-03 13:31:08 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2012-03-03 13:31:04 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2012-03-03 13:31:01 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2012-03-03 13:30:55 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2012-03-03 13:17:37 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2012-03-03 13:09:40 ----D---- C:\WINDOWS\tiinst
2012-03-03 13:07:30 ----D---- C:\WINDOWS\system32\Lang
2012-03-03 13:06:02 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2012-03-03 13:05:43 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2012-03-03 13:01:25 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2012-03-03 13:01:25 ----A---- C:\WINDOWS\system32\ChCfg.exe
2012-03-03 13:01:02 ----D---- C:\WINDOWS\system32\RTCOM
2012-03-03 13:00:59 ----A---- C:\WINDOWS\system32\ksuser.dll
2012-03-03 13:00:59 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2012-03-03 13:00:58 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2012-03-03 13:00:54 ----A---- C:\WINDOWS\SoundMan.exe
2012-03-03 13:00:53 ----A---- C:\WINDOWS\RtlUpd.exe
2012-03-03 13:00:51 ----A---- C:\WINDOWS\RTLCPL.exe
2012-03-03 13:00:50 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.Sys
2012-03-03 13:00:45 ----A---- C:\WINDOWS\RTHDCPL.exe
2012-03-03 13:00:45 ----A---- C:\WINDOWS\MicCal.exe
2012-03-03 13:00:43 ----D---- C:\Program Files\Realtek
2012-03-03 13:00:43 ----A---- C:\WINDOWS\alcwzrd.exe
2012-03-03 13:00:43 ----A---- C:\WINDOWS\Alcmtr.exe
2012-03-03 13:00:31 ----A---- C:\WINDOWS\RtlExUpd.dll
2012-03-03 12:59:35 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Intel
2012-03-03 12:59:22 ----A---- C:\WINDOWS\system32\results.txt
2012-03-03 12:59:14 ----A---- C:\WINDOWS\system32\drivers\AegisP.sys
2012-03-03 12:57:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\Intel
2012-03-03 12:56:56 ----DC---- C:\WINDOWS\system32\DRVSTORE
2012-03-03 12:55:22 ----D---- C:\Program Files\CONEXANT
2012-03-03 12:54:09 ----D---- C:\WINDOWS\SMSC
2012-03-03 12:54:08 ----HD---- C:\Program Files\InstallShield Installation Information
2012-03-03 12:27:29 ----D---- C:\Program Files\Intel
2012-03-03 12:13:06 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2012-03-03 11:57:22 ----D---- C:\Program Files\Acer Inc
2012-03-03 11:53:56 ----A---- C:\WINDOWS\NT.INI
2012-03-03 11:51:54 ----D---- C:\Program Files\Launch Manager
2012-03-03 11:31:23 ----ASH---- C:\Documents and Settings\Administrator\Data aplikací\desktop.ini
2012-03-03 11:31:22 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2012-03-03 11:31:09 ----A---- C:\WINDOWS\ntbtlog.txt
2012-03-03 11:29:14 ----AD---- C:\downloads
2012-03-03 11:16:41 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-03-03 11:16:28 ----A---- C:\WINDOWS\system32\SynTPFcs.dll
2012-03-03 11:16:27 ----A---- C:\WINDOWS\system32\SynTPCo2.dll
2012-03-03 11:16:27 ----A---- C:\WINDOWS\system32\SynTPAPI.dll
2012-03-03 11:16:27 ----A---- C:\WINDOWS\system32\drivers\SynTP.sys
2012-03-03 11:16:26 ----A---- C:\WINDOWS\system32\SynCtrl.dll
2012-03-03 11:16:26 ----A---- C:\WINDOWS\system32\SynCOM.dll
2012-03-03 11:16:21 ----D---- C:\Program Files\Synaptics
2012-03-03 11:16:10 ----D---- C:\Program Files\Common Files\InstallShield
2012-03-03 11:15:19 ----A---- C:\WINDOWS\system32\wpa.bak
2012-03-03 11:14:40 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2012-03-03 11:09:46 ----D---- C:\Program Files\ESET
2012-03-03 11:09:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2012-03-03 11:07:16 ----A---- C:\WINDOWS\system32\drivers\rasirda.sys
2012-03-03 11:07:14 ----A---- C:\WINDOWS\system32\irmon.dll
2012-03-03 11:07:13 ----A---- C:\WINDOWS\system32\wshirda.dll
2012-03-03 11:07:13 ----A---- C:\WINDOWS\system32\irftp.exe
2012-03-03 11:07:13 ----A---- C:\WINDOWS\system32\drivers\irda.sys
2012-03-03 11:07:03 ----A---- C:\WINDOWS\system32\drivers\tmcomm.sys
2012-03-03 11:06:21 ----A---- C:\WINDOWS\system32\drivers\smcirda.sys
2012-03-03 10:48:47 ----A---- C:\WINDOWS\system32\h323log.txt
2012-03-03 10:47:25 ----A---- C:\WINDOWS\system32\hidserv.dll
2012-03-03 10:46:50 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2012-03-03 10:45:57 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2012-03-03 10:45:19 ----A---- C:\WINDOWS\system32\drivers\enum1394.sys
2012-03-03 10:44:26 ----A---- C:\WINDOWS\system32\usbui.dll
2012-03-03 10:44:20 ----A---- C:\WINDOWS\system32\drivers\wmiacpi.sys
2012-03-03 10:44:16 ----A---- C:\WINDOWS\system32\ativvaxx.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\ativcoxx.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\atitvo32.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\atipdlxx.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\atioglxx.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\atioglx1.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\atikvmag.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\atiiiexx.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\atiicdxx.dat
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\ATIDEMGR.dll
2012-03-03 10:44:15 ----A---- C:\WINDOWS\system32\ATIDDC.DLL
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\drivers\ati2erec.dll
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\ati3duag.dll
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\Ati2mdxx.exe
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\ati2evxx.exe
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\ati2evxx.dll
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\ati2edxx.dll
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\ati2dvag.dll
2012-03-03 10:44:14 ----A---- C:\WINDOWS\system32\ati2cqag.dll
2012-03-03 10:43:48 ----A---- C:\WINDOWS\system32\UCI32102.dll
2012-03-03 10:43:48 ----A---- C:\WINDOWS\system32\mdmxsdk.dll
2012-03-03 10:43:48 ----A---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2012-03-03 10:43:47 ----A---- C:\WINDOWS\system32\drivers\HSFHWAZL.sys
2012-03-03 10:43:47 ----A---- C:\WINDOWS\system32\drivers\HSF_DPV.sys
2012-03-03 10:43:47 ----A---- C:\WINDOWS\system32\drivers\HSF_CNXT.sys
2012-03-03 10:43:33 ----A---- C:\WINDOWS\UNINST32.EXE
2012-03-03 10:43:33 ----A---- C:\WINDOWS\system32\QtBtLib.dll
2012-03-03 10:43:33 ----A---- C:\WINDOWS\system32\FILTRCOI.DLL
2012-03-03 10:43:33 ----A---- C:\WINDOWS\system32\drivers\DKbFltr.SYS
2012-03-03 10:43:23 ----A---- C:\WINDOWS\system32\drivers\b57xp32.sys
2012-03-03 10:41:35 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys
2012-03-03 10:41:34 ----A---- C:\WINDOWS\system32\drivers\battc.sys
2012-03-03 10:41:33 ----A---- C:\WINDOWS\system32\drivers\CmBatt.sys
2012-03-03 10:41:16 ----A---- C:\WINDOWS\system32\drivers\tifm21.sys
2012-03-03 10:40:19 ----A---- C:\WINDOWS\imsins.BAK
2012-03-03 10:40:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-03-03 10:40:16 ----SHD---- C:\WINDOWS\Installer
2012-03-03 10:40:15 ----D---- C:\Program Files\Common Files\ODBC
2012-03-03 10:40:15 ----A---- C:\WINDOWS\ODBCINST.INI
2012-03-03 10:40:10 ----D---- C:\Program Files\Common Files\SpeechEngines
2012-03-03 10:40:10 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-03-03 10:40:09 ----RD---- C:\Program Files
2012-03-03 10:40:09 ----D---- C:\Program Files\Common Files
2012-03-03 10:40:04 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2012-03-03 10:40:04 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2012-03-03 10:40:04 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdur.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdru.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2012-03-03 10:40:00 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2012-03-03 10:39:56 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2012-03-03 10:39:56 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2012-03-03 10:39:56 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2012-03-03 10:39:56 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2012-03-03 10:39:56 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2012-03-03 10:39:56 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2012-03-03 10:39:56 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2012-03-03 10:39:54 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2012-03-03 10:39:54 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2012-03-03 10:39:54 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2012-03-03 10:39:54 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2012-03-03 10:39:54 ----RA---- C:\WINDOWS\system32\kbdest.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdycl.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdsl.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdro.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdpl.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdhu.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\kbdcr.dll
2012-03-03 10:39:48 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2012-03-03 10:39:46 ----A---- C:\WINDOWS\system32\irclass.dll
2012-03-03 10:39:46 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2012-03-03 10:39:45 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-03-03 10:39:45 ----A---- C:\WINDOWS\system32\dgsetup.dll
2012-03-03 10:39:44 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2012-03-03 10:39:40 ----A---- C:\WINDOWS\TASKMAN.EXE
2012-03-03 10:39:39 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2012-03-03 10:39:39 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2012-03-03 10:39:39 ----A---- C:\WINDOWS\system32\batt.dll
2012-03-03 10:39:37 ----A---- C:\WINDOWS\NOTEPAD.EXE
2012-03-03 10:39:36 ----A---- C:\WINDOWS\system32\storprop.dll
2012-03-03 10:39:20 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2012-03-03 10:39:15 ----RA---- C:\WINDOWS\SET8.tmp
2012-03-03 10:39:11 ----RA---- C:\WINDOWS\SET4.tmp
2012-03-03 10:39:08 ----RA---- C:\WINDOWS\SET3.tmp
2012-03-03 10:39:00 ----D---- C:\WINDOWS\system32\CatRoot2
2012-03-03 10:39:00 ----D---- C:\WINDOWS\system32\CatRoot
2012-03-03 10:38:55 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-03-03 10:38:12 ----A---- C:\WINDOWS\setuplog.txt
2012-03-03 10:38:09 ----SHD---- C:\System Volume Information
2012-03-03 10:38:09 ----D---- C:\Documents and Settings
2012-03-03 10:38:08 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-03-03 10:37:19 ----SH---- C:\boot.ini
2012-03-03 10:29:00 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-03-03 10:29:00 ----RSD---- C:\WINDOWS\Fonts
2012-03-03 10:29:00 ----RD---- C:\WINDOWS\Web
2012-03-03 10:29:00 ----HD---- C:\WINDOWS\inf
2012-03-03 10:29:00 ----D---- C:\WINDOWS\WinSxS
2012-03-03 10:29:00 ----D---- C:\WINDOWS\twain_32
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Temp
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\wins
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\wbem
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\usmt
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\spool
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\ShellExt
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\Setup
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\ras
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\oobe
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\npp
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\mui
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\inetsrv
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\IME
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\icsxml
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\ias
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\export
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\drivers\etc
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\drivers\disdn
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\drivers
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\dhcp
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\cs-cz
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\cs
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\config
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\3com_dmi
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\3076
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\2052
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1054
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1042
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1041
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1037
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1033
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1031
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1029
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1028
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32\1025
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system32
2012-03-03 10:29:00 ----D---- C:\WINDOWS\system
2012-03-03 10:29:00 ----D---- C:\WINDOWS\security
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Resources
2012-03-03 10:29:00 ----D---- C:\WINDOWS\repair
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Provisioning
2012-03-03 10:29:00 ----D---- C:\WINDOWS\pchealth
2012-03-03 10:29:00 ----D---- C:\WINDOWS\PeerNet
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Network Diagnostic
2012-03-03 10:29:00 ----D---- C:\WINDOWS\mui
2012-03-03 10:29:00 ----D---- C:\WINDOWS\msapps
2012-03-03 10:29:00 ----D---- C:\WINDOWS\msagent
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Media
2012-03-03 10:29:00 ----D---- C:\WINDOWS\L2Schemas
2012-03-03 10:29:00 ----D---- C:\WINDOWS\java
2012-03-03 10:29:00 ----D---- C:\WINDOWS\ime
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Help
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Driver Cache
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Debug
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Cursors
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Connection Wizard
2012-03-03 10:29:00 ----D---- C:\WINDOWS\Config
2012-03-03 10:29:00 ----D---- C:\WINDOWS\AppPatch
2012-03-03 10:29:00 ----D---- C:\WINDOWS\addins
2012-03-03 10:29:00 ----D---- C:\WINDOWS
2012-03-03 10:29:00 ----ASH---- C:\pagefile.sys
2012-03-03 10:07:50 ----HD---- C:\Program Files\Uninstall Information
2012-03-03 10:04:58 ----D---- C:\WINDOWS\SoftwareDistribution
2012-03-03 10:04:55 ----D---- C:\WINDOWS\Prefetch
2012-03-03 10:04:54 ----SD---- C:\WINDOWS\system32\Microsoft
2012-03-03 10:04:54 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-03-03 10:03:33 ----AS---- C:\WINDOWS\bootstat.dat
2012-03-03 10:01:13 ----D---- C:\WINDOWS\system32\xircom
2012-03-03 10:01:13 ----D---- C:\Program Files\xerox
2012-03-03 10:01:13 ----D---- C:\Program Files\microsoft frontpage
2012-03-03 10:00:54 ----RASH---- C:\MSDOS.SYS
2012-03-03 10:00:54 ----RASH---- C:\IO.SYS
2012-03-03 10:00:54 ----A---- C:\WINDOWS\control.ini
2012-03-03 10:00:54 ----A---- C:\CONFIG.SYS
2012-03-03 10:00:54 ----A---- C:\AUTOEXEC.BAT
2012-03-03 10:00:38 ----A---- C:\WINDOWS\OEWABLog.txt
2012-03-03 10:00:28 ----A---- C:\WINDOWS\system32\mapi32.dll
2012-03-03 09:59:18 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-03-03 09:59:18 ----RD---- C:\WINDOWS\Offline Web Pages
2012-03-03 09:59:02 ----HD---- C:\Program Files\WindowsUpdate
2012-03-03 09:58:53 ----D---- C:\Program Files\Online Services
2012-03-03 09:58:27 ----D---- C:\WINDOWS\system32\DirectX
2012-03-03 09:58:17 ----A---- C:\WINDOWS\system32\atrace.dll
2012-03-03 09:58:12 ----A---- C:\WINDOWS\system32\desktop.ini
2012-03-03 09:58:12 ----A---- C:\WINDOWS\desktop.ini
2012-03-03 09:57:56 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2012-03-03 09:57:54 ----A---- C:\WINDOWS\system32\acctres.dll
2012-03-03 09:57:53 ----D---- C:\Program Files\Common Files\Services
2012-03-03 09:57:47 ----SD---- C:\WINDOWS\Tasks
2012-03-03 09:57:47 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2012-03-03 09:57:45 ----D---- C:\Program Files\Common Files\MSSoap
2012-03-03 09:57:39 ----D---- C:\WINDOWS\srchasst
2012-03-03 09:57:37 ----D---- C:\WINDOWS\system32\Macromed
2012-03-03 09:57:31 ----A---- C:\WINDOWS\system32\wuweb.dll
2012-03-03 09:57:31 ----A---- C:\WINDOWS\system32\wucltui.dll
2012-03-03 09:57:31 ----A---- C:\WINDOWS\system32\wuauserv.dll
2012-03-03 09:57:31 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2012-03-03 09:57:30 ----A---- C:\WINDOWS\system32\wups.dll
2012-03-03 09:57:30 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-03-03 09:57:30 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2012-03-03 09:57:30 ----A---- C:\WINDOWS\system32\wuauclt.exe
2012-03-03 09:57:30 ----A---- C:\WINDOWS\system32\wuapi.dll
2012-03-03 09:57:29 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2012-03-03 09:57:29 ----A---- C:\WINDOWS\system32\qmgr.dll
2012-03-03 09:57:29 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2012-03-03 09:57:29 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2012-03-03 09:57:29 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2012-03-03 09:57:22 ----D---- C:\Program Files\Movie Maker
2012-03-03 09:56:48 ----A---- C:\WINDOWS\system32\safrslv.dll
2012-03-03 09:56:48 ----A---- C:\WINDOWS\system32\safrdm.dll
2012-03-03 09:56:48 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2012-03-03 09:56:48 ----A---- C:\WINDOWS\system32\racpldlg.dll
2012-03-03 09:56:42 ----A---- C:\WINDOWS\system32\fltMc.exe
2012-03-03 09:56:42 ----A---- C:\WINDOWS\system32\fltlib.dll
2012-03-03 09:56:42 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2012-03-03 09:56:41 ----D---- C:\WINDOWS\system32\Restore
2012-03-03 09:56:41 ----A---- C:\WINDOWS\system32\srsvc.dll
2012-03-03 09:56:41 ----A---- C:\WINDOWS\system32\srrstr.dll
2012-03-03 09:56:41 ----A---- C:\WINDOWS\system32\srclient.dll
2012-03-03 09:56:41 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2012-03-03 09:56:39 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2012-03-03 09:56:39 ----A---- C:\WINDOWS\system32\mnmdd.dll
2012-03-03 09:56:39 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2012-03-03 09:56:39 ----A---- C:\WINDOWS\system32\ils.dll
2012-03-03 09:56:38 ----A---- C:\WINDOWS\system32\msconf.dll
2012-03-03 09:56:38 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2012-03-03 09:56:31 ----D---- C:\Program Files\NetMeeting
2012-03-03 09:56:31 ----A---- C:\WINDOWS\system32\msoert2.dll
2012-03-03 09:56:31 ----A---- C:\WINDOWS\system32\msoeacct.dll
2012-03-03 09:56:29 ----A---- C:\WINDOWS\system32\inetres.dll
2012-03-03 09:56:29 ----A---- C:\WINDOWS\system32\inetcomm.dll
2012-03-03 09:56:26 ----D---- C:\Program Files\Outlook Express
2012-03-03 09:56:26 ----A---- C:\WINDOWS\system32\schedsvc.dll
2012-03-03 09:56:26 ----A---- C:\WINDOWS\system32\mstinit.exe
2012-03-03 09:56:26 ----A---- C:\WINDOWS\system32\mstask.dll
2012-03-03 09:56:24 ----A---- C:\WINDOWS\system32\isign32.dll
2012-03-03 09:56:24 ----A---- C:\WINDOWS\system32\inetcfg.dll
2012-03-03 09:56:24 ----A---- C:\WINDOWS\system32\icwphbk.dll
2012-03-03 09:56:24 ----A---- C:\WINDOWS\system32\icwdial.dll
2012-03-03 09:56:13 ----D---- C:\Program Files\Common Files\System
2012-03-03 09:56:03 ----D---- C:\Program Files\Internet Explorer
2012-03-03 09:55:59 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2012-03-03 09:55:37 ----D---- C:\Program Files\ComPlus Applications
2012-03-03 09:55:32 ----A---- C:\WINDOWS\vbaddin.ini
2012-03-03 09:55:32 ----A---- C:\WINDOWS\vb.ini
2012-03-03 09:55:21 ----D---- C:\WINDOWS\Registration
2012-03-03 09:54:18 ----D---- C:\Program Files\Windows Media Player
2012-03-03 09:54:07 ----D---- C:\Program Files\Messenger
2012-03-03 09:53:58 ----D---- C:\Program Files\MSN Gaming Zone
2012-03-03 09:53:58 ----A---- C:\WINDOWS\system32\write.exe
2012-03-03 09:53:38 ----A---- C:\WINDOWS\system32\sndvol32.exe
2012-03-03 09:53:38 ----A---- C:\WINDOWS\system32\hticons.dll
2012-03-03 09:53:37 ----A---- C:\WINDOWS\system32\avwav.dll
2012-03-03 09:53:37 ----A---- C:\WINDOWS\system32\avtapi.dll
2012-03-03 09:53:37 ----A---- C:\WINDOWS\system32\avmeter.dll
2012-03-03 09:53:36 ----A---- C:\WINDOWS\system32\winchat.exe
2012-03-03 09:53:23 ----A---- C:\WINDOWS\system32\getuname.dll
2012-03-03 09:53:22 ----A---- C:\WINDOWS\system32\sol.exe
2012-03-03 09:53:22 ----A---- C:\WINDOWS\system32\charmap.exe
2012-03-03 09:53:22 ----A---- C:\WINDOWS\system32\calc.exe
2012-03-03 09:53:21 ----A---- C:\WINDOWS\system32\winmine.exe
2012-03-03 09:53:21 ----A---- C:\WINDOWS\system32\mshearts.exe
2012-03-03 09:53:21 ----A---- C:\WINDOWS\system32\freecell.exe
2012-03-03 09:53:20 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2012-03-03 09:53:20 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2012-03-03 09:53:20 ----A---- C:\WINDOWS\system32\tslabels.ini
2012-03-03 09:53:20 ----A---- C:\WINDOWS\system32\tskill.exe
2012-03-03 09:53:20 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2012-03-03 09:53:20 ----A---- C:\WINDOWS\system32\tscon.exe
2012-03-03 09:53:20 ----A---- C:\WINDOWS\system32\shadow.exe
2012-03-03 09:53:20 ----A---- C:\WINDOWS\system32\reset.exe
2012-03-03 09:53:19 ----A---- C:\WINDOWS\system32\rwinsta.exe
2012-03-03 09:53:19 ----A---- C:\WINDOWS\system32\regini.exe
2012-03-03 09:53:19 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2012-03-03 09:53:19 ----A---- C:\WINDOWS\system32\qwinsta.exe
2012-03-03 09:53:19 ----A---- C:\WINDOWS\system32\qappsrv.exe
2012-03-03 09:53:19 ----A---- C:\WINDOWS\system32\msg.exe
2012-03-03 09:53:19 ----A---- C:\WINDOWS\system32\logoff.exe
2012-03-03 09:53:18 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2012-03-03 09:53:18 ----A---- C:\WINDOWS\system32\cdmodem.dll
2012-03-03 09:53:08 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2012-03-03 09:53:06 ----A---- C:\WINDOWS\system32\sndrec32.exe
2012-03-03 09:53:06 ----A---- C:\WINDOWS\system32\accwiz.exe
2012-03-03 09:53:05 ----A---- C:\WINDOWS\system32\mplay32.exe
2012-03-03 09:53:05 ----A---- C:\WINDOWS\system32\hypertrm.dll
2012-03-03 09:53:04 ----D---- C:\Program Files\Windows NT
2012-03-03 09:53:04 ----A---- C:\WINDOWS\system32\mspaint.exe
2012-03-03 09:53:03 ----A---- C:\WINDOWS\system32\clipbrd.exe
2012-03-03 09:53:02 ----A---- C:\WINDOWS\system32\spider.exe
2012-03-03 09:53:01 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2012-03-03 09:53:01 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2012-03-03 09:53:00 ----A---- C:\WINDOWS\system32\tsgqec.dll
2012-03-03 09:53:00 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2012-03-03 09:53:00 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2012-03-03 09:53:00 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2012-03-03 09:52:59 ----A---- C:\WINDOWS\system32\aaclient.dll
2012-03-03 09:52:58 ----A---- C:\WINDOWS\system32\remotepg.dll
2012-03-03 09:52:58 ----A---- C:\WINDOWS\system32\rdshost.exe
2012-03-03 09:52:58 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2012-03-03 09:52:58 ----A---- C:\WINDOWS\system32\mstscax.dll
2012-03-03 09:52:58 ----A---- C:\WINDOWS\system32\mstsc.exe
2012-03-03 09:52:57 ----A---- C:\WINDOWS\system32\termsrv.dll
2012-03-03 09:52:57 ----A---- C:\WINDOWS\system32\sessmgr.exe
2012-03-03 09:52:57 ----A---- C:\WINDOWS\system32\rdchost.dll
2012-03-03 09:52:56 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2012-03-03 09:52:56 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2012-03-03 09:52:56 ----A---- C:\WINDOWS\system32\rdpclip.exe
2012-03-03 09:52:56 ----A---- C:\WINDOWS\system32\qprocess.exe
2012-03-03 09:52:56 ----A---- C:\WINDOWS\system32\icaapi.dll
2012-03-03 09:52:55 ----D---- C:\WINDOWS\system32\MsDtc
2012-03-03 09:52:55 ----A---- C:\WINDOWS\system32\mtxoci.dll
2012-03-03 09:52:55 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2012-03-03 09:52:55 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2012-03-03 09:52:54 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2012-03-03 09:52:53 ----A---- C:\WINDOWS\system32\xolehlp.dll
2012-03-03 09:52:53 ----A---- C:\WINDOWS\system32\msdtctm.dll
2012-03-03 09:52:52 ----A---- C:\WINDOWS\system32\msdtclog.dll
2012-03-03 09:52:52 ----A---- C:\WINDOWS\system32\msdtc.exe
2012-03-03 09:52:51 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2012-03-03 09:52:50 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2012-03-03 09:52:50 ----A---- C:\WINDOWS\system32\mtxex.dll
2012-03-03 09:52:50 ----A---- C:\WINDOWS\system32\mtxdm.dll
2012-03-03 09:52:49 ----D---- C:\WINDOWS\system32\Com
2012-03-03 09:52:49 ----A---- C:\WINDOWS\system32\comrepl.dll
2012-03-03 09:52:49 ----A---- C:\WINDOWS\system32\comaddin.dll
2012-03-03 09:52:49 ----A---- C:\WINDOWS\system32\colbact.dll
2012-03-03 09:52:48 ----A---- C:\WINDOWS\system32\stclient.dll
2012-03-03 09:52:47 ----A---- C:\WINDOWS\system32\clbcatex.dll
2012-03-03 09:52:47 ----A---- C:\WINDOWS\system32\catsrvut.dll
2012-03-03 09:52:47 ----A---- C:\WINDOWS\system32\catsrvps.dll
2012-03-03 09:52:47 ----A---- C:\WINDOWS\system32\catsrv.dll
2012-03-03 09:52:46 ----A---- C:\WINDOWS\system32\comuid.dll
2012-03-03 09:52:46 ----A---- C:\WINDOWS\system32\comsvcs.dll
2012-03-03 09:52:46 ----A---- C:\WINDOWS\system32\comsnap.dll
2012-03-03 09:52:46 ----A---- C:\WINDOWS\system32\clbcatq.dll
2012-03-03 09:52:36 ----A---- C:\WINDOWS\system32\servdeps.dll
2012-03-03 09:52:36 ----A---- C:\WINDOWS\system32\mmfutil.dll
2012-03-03 09:52:35 ----A---- C:\WINDOWS\system32\licwmi.dll
2012-03-03 09:52:35 ----A---- C:\WINDOWS\system32\cmprops.dll
2012-03-03 09:52:26 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2012-03-03 09:52:26 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys

======List of files/folders modified in the last 1 month======

2012-03-03 10:40:07 ----A---- C:\WINDOWS\system.ini
2012-03-03 10:00:54 ----A---- C:\WINDOWS\win.ini
2012-03-03 10:00:10 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2011-08-04 61936]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2005-04-05 132352]
R3 DKbFltr;Dritek Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2004-12-08 16896]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2011-08-09 39824]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-11-02 191456]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 w39n51;Intel(R) PRO/Wireless 3945ABG Adapter Driver; C:\WINDOWS\system32\DRIVERS\w39n51.sys [2005-11-27 1427968]
S1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
S1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
S2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.9.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2012-03-03 21275]
S2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
S2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2011-08-04 147480]
S2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-14 88192]
S2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2005-10-05 12544]
S2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2005-11-28 13568]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-12-01 1412608]
S3 HSF_DPV;HSF_DPV; C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys [2005-11-08 997376]
S3 HSFHWAZL;HSFHWAZL; C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys [2005-11-08 202240]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-11-17 4069888]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 SMCIRDA;SMSC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2004-12-09 46592]
S3 tifm21;tifm21; C:\WINDOWS\system32\drivers\tifm21.sys [2005-06-23 162176]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2005-11-08 723712]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2005-12-01 393216]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2011-09-22 974944]
S2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2005-11-28 114753]
S2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2005-11-28 217164]
S2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2005-11-28 540745]

-----------------EOF-----------------

Zdravim

Postupujte podle navodu od kolegy vyoska

vyosek píše: Stahnete si TDSSKiller http://support.kaspersky.com/downloads/ ... killer.exe
Kliknete na volbu Change parametrs

V obou oknech (Objects to scan i Additional Option) zakliknete vsechny moznosti - ve vsech ctvereccich musi mit fajecka

Kliknete na OK

Utilite prikazte, at skenuje - klik na Start Scan

Po dokonceni skenu se objevi okno, zkontrolujte, zda-li je vsude moznost Skip

Pokud moznost Skip nebude primarne nastavena, prekliknete ji na Skip

Pokud mate vsude Skip, kliknete na Continue

Na disku, kde mate Windows (obvykle c:\) ve tvaru TDSSKiller.nejaka cisilka _log.txt bude log - jeho obsah sem vlozte

Zdravím. Tady je ten log:

13:02:25.0953 2024 TDSS rootkit removing tool 2.7.18.0 Mar 2 2012 09:40:07
13:02:27.0953 2024 ============================================================
13:02:27.0953 2024 Current date / time: 2012/03/04 13:02:27.0953
13:02:27.0953 2024 SystemInfo:
13:02:27.0953 2024
13:02:27.0953 2024 OS Version: 5.1.2600 ServicePack: 3.0
13:02:27.0953 2024 Product type: Workstation
13:02:27.0953 2024 ComputerName: MUDR
13:02:27.0968 2024 UserName: Vilím
13:02:27.0968 2024 Windows directory: C:\WINDOWS
13:02:27.0968 2024 System windows directory: C:\WINDOWS
13:02:27.0968 2024 Processor architecture: Intel x86
13:02:27.0968 2024 Number of processors: 2
13:02:27.0968 2024 Page size: 0x1000
13:02:27.0968 2024 Boot type: Normal boot
13:02:27.0968 2024 ============================================================
13:02:32.0906 2024 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
13:02:32.0906 2024 \Device\Harddisk0\DR0:
13:02:32.0906 2024 MBR used
13:02:32.0906 2024 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x124F6BF3
13:02:32.0921 2024 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x124F6C71, BlocksNum 0x12F36A50
13:02:33.0031 2024 Initialize success
13:02:33.0031 2024 ============================================================
13:02:50.0937 2136 ============================================================
13:02:50.0937 2136 Scan started
13:02:50.0937 2136 Mode: Manual; SigCheck; TDLFS;
13:02:50.0937 2136 ============================================================
13:02:53.0671 2136 Abiosdsk - ok
13:02:54.0718 2136 abp480n5 - ok
13:02:55.0828 2136 ACPI (4fe34f1f3126b61fcc6b2043aa8112c9) C:\WINDOWS\system32\DRIVERS\ACPI.sys
13:02:57.0093 2136 ACPI - ok
13:02:58.0156 2136 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
13:02:58.0375 2136 ACPIEC - ok
13:02:59.0515 2136 adpu160m - ok
13:03:00.0593 2136 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
13:03:00.0890 2136 aec - ok
13:03:02.0031 2136 AegisP (12dafd934641dcf61e446313bc261ec2) C:\WINDOWS\system32\DRIVERS\AegisP.sys
13:03:02.0078 2136 AegisP ( UnsignedFile.Multi.Generic ) - warning
13:03:02.0078 2136 AegisP - detected UnsignedFile.Multi.Generic (1)
13:03:03.0156 2136 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
13:03:03.0250 2136 AFD - ok
13:03:04.0359 2136 Aha154x - ok
13:03:05.0390 2136 aic78u2 - ok
13:03:06.0484 2136 aic78xx - ok
13:03:07.0546 2136 AliIde - ok
13:03:08.0593 2136 amsint - ok
13:03:09.0656 2136 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
13:03:09.0859 2136 Arp1394 - ok
13:03:10.0953 2136 asc - ok
13:03:12.0093 2136 asc3350p - ok
13:03:13.0140 2136 asc3550 - ok
13:03:14.0234 2136 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
13:03:14.0453 2136 AsyncMac - ok
13:03:15.0562 2136 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
13:03:15.0765 2136 atapi - ok
13:03:16.0890 2136 Atdisk - ok
13:03:18.0109 2136 ati2mtag (d81980c64543ba5c39dd2a92dc1d2daf) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
13:03:18.0312 2136 ati2mtag - ok
13:03:19.0437 2136 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
13:03:19.0687 2136 Atmarpc - ok
13:03:20.0765 2136 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
13:03:20.0984 2136 audstub - ok
13:03:22.0062 2136 b57w2k (48bf91cffbcdd12a710207f2a08fec4d) C:\WINDOWS\system32\DRIVERS\b57xp32.sys
13:03:22.0171 2136 b57w2k - ok
13:03:23.0265 2136 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
13:03:23.0453 2136 Beep - ok
13:03:24.0578 2136 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
13:03:24.0765 2136 cbidf2k - ok
13:03:25.0906 2136 cd20xrnt - ok
13:03:26.0968 2136 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
13:03:27.0187 2136 Cdaudio - ok
13:03:28.0296 2136 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
13:03:28.0515 2136 Cdfs - ok
13:03:29.0656 2136 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
13:03:29.0875 2136 Cdrom - ok
13:03:30.0968 2136 Changer - ok
13:03:32.0093 2136 CmBatt (0f6c187d38d98f8df904589a5f94d411) C:\WINDOWS\system32\DRIVERS\CmBatt.sys
13:03:32.0312 2136 CmBatt - ok
13:03:33.0390 2136 CmdIde - ok
13:03:34.0515 2136 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys
13:03:34.0687 2136 Compbatt - ok
13:03:35.0781 2136 Cpqarray - ok
13:03:36.0859 2136 dac2w2k - ok
13:03:37.0906 2136 dac960nt - ok
13:03:39.0031 2136 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
13:03:39.0265 2136 Disk - ok
13:03:40.0390 2136 DKbFltr (08d30af92c270f2e76787c81589dbad6) C:\WINDOWS\system32\DRIVERS\DKbFltr.sys
13:03:40.0468 2136 DKbFltr - ok
13:03:41.0671 2136 dmboot (db5fd2bf5b07dc54bfcb3664ff05bd7c) C:\WINDOWS\system32\drivers\dmboot.sys
13:03:42.0000 2136 dmboot - ok
13:03:43.0125 2136 dmio (fff1720af51171f32f1ead5cf71f2810) C:\WINDOWS\system32\drivers\dmio.sys
13:03:43.0359 2136 dmio - ok
13:03:44.0453 2136 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
13:03:44.0609 2136 dmload - ok
13:03:45.0703 2136 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
13:03:45.0968 2136 DMusic - ok
13:03:47.0078 2136 dpti2o - ok
13:03:48.0203 2136 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
13:03:48.0359 2136 drmkaud - ok
13:03:49.0453 2136 eamon (9309c5c9831203436e64cf2ae605c5d7) C:\WINDOWS\system32\DRIVERS\eamon.sys
13:04:04.0515 2136 eamon - ok
13:04:05.0656 2136 ehdrv (deff87f04ab5f6dd5edf2b80853bbe10) C:\WINDOWS\system32\DRIVERS\ehdrv.sys
13:04:05.0703 2136 ehdrv - ok
13:04:06.0828 2136 epfw (5ba193ca0ae31209aaa39939ce6736b2) C:\WINDOWS\system32\DRIVERS\epfw.sys
13:04:06.0875 2136 epfw - ok
13:04:08.0031 2136 Epfwndis (75d3bcd3e0eded0ab0f96d9a10ff01c9) C:\WINDOWS\system32\DRIVERS\Epfwndis.sys
13:04:08.0062 2136 Epfwndis - ok
13:04:09.0187 2136 epfwtdi (dc64f26f35e32c9472bbf8acd84060d3) C:\WINDOWS\system32\DRIVERS\epfwtdi.sys
13:04:09.0218 2136 epfwtdi - ok
13:04:10.0406 2136 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
13:04:10.0609 2136 Fastfat - ok
13:04:11.0718 2136 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
13:04:11.0953 2136 Fdc - ok
13:04:13.0078 2136 Fips (ac366695a0796560aa37215ad5762aaf) C:\WINDOWS\system32\drivers\Fips.sys
13:04:13.0265 2136 Fips - ok
13:04:15.0156 2136 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
13:05:30.0859 2136 Flpydisk - ok
13:05:32.0031 2136 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
13:05:32.0234 2136 FltMgr - ok
13:05:33.0312 2136 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
13:05:33.0437 2136 Fs_Rec - ok
13:05:34.0468 2136 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
13:05:34.0625 2136 Ftdisk - ok
13:05:35.0750 2136 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
13:05:35.0906 2136 Gpc - ok
13:05:37.0062 2136 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
13:05:37.0265 2136 HDAudBus - ok
13:05:38.0375 2136 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
13:05:38.0578 2136 hidusb - ok
13:05:39.0671 2136 hpn - ok
13:05:40.0906 2136 HSFHWAZL (a30d7011c1b80a0bc16602d99218d522) C:\WINDOWS\system32\DRIVERS\HSFHWAZL.sys
13:05:42.0281 2136 HSFHWAZL - ok
13:05:44.0484 2136 HSF_DPV (5a5a7721d9c62d77fc0faba9b2cf5be9) C:\WINDOWS\system32\DRIVERS\HSF_DPV.sys
13:05:44.0609 2136 HSF_DPV - ok
13:05:46.0625 2136 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys
13:05:46.0968 2136 HTTP - ok
13:05:48.0031 2136 i2omgmt - ok
13:05:49.0078 2136 i2omp - ok
13:05:50.0125 2136 i8042prt (c528e27945367191e7bae364930b6932) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
13:05:50.0390 2136 i8042prt - ok
13:05:51.0484 2136 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
13:05:51.0671 2136 Imapi - ok
13:05:54.0000 2136 ini910u - ok
13:05:58.0359 2136 IntcAzAudAddService (4078d4795e394bf2adbed6fcc9827f78) C:\WINDOWS\system32\drivers\RtkHDAud.sys
13:06:01.0515 2136 IntcAzAudAddService - ok
13:06:02.0562 2136 IntelIde - ok
13:06:03.0656 2136 intelppm (27b290d632af2cf3cf40bfddb7370985) C:\WINDOWS\system32\DRIVERS\intelppm.sys
13:06:03.0875 2136 intelppm - ok
13:06:04.0906 2136 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
13:06:05.0078 2136 Ip6Fw - ok
13:06:06.0156 2136 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
13:06:06.0312 2136 IpFilterDriver - ok
13:06:07.0343 2136 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
13:06:07.0546 2136 IpInIp - ok
13:06:08.0656 2136 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
13:06:08.0906 2136 IpNat - ok
13:06:09.0953 2136 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
13:06:10.0109 2136 IPSec - ok
13:06:11.0218 2136 irda (aca5e7b54409f9cb5eed97ed0c81120e) C:\WINDOWS\system32\DRIVERS\irda.sys
13:06:11.0343 2136 irda - ok
13:06:12.0468 2136 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
13:06:12.0593 2136 IRENUM - ok
13:06:13.0703 2136 isapnp (cc9f8a2d60aed1a51a3ac34c59b987ae) C:\WINDOWS\system32\DRIVERS\isapnp.sys
13:06:13.0828 2136 isapnp - ok
13:06:14.0906 2136 Kbdclass (1b6162fe7f66b1a71a4b70f941c4aa9b) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
13:06:15.0046 2136 Kbdclass - ok
13:06:16.0281 2136 kbdhid (86c8f23616c6c6e5b2776901c17b945b) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
13:06:16.0468 2136 kbdhid - ok
13:06:17.0609 2136 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
13:06:17.0859 2136 kmixer - ok
13:06:18.0953 2136 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
13:06:19.0046 2136 KSecDD - ok
13:06:20.0125 2136 lbrtfdc - ok
13:06:21.0250 2136 MBAMProtector (b7ca8cc3f978201856b6ab82f40953c3) C:\WINDOWS\system32\drivers\mbam.sys
13:06:36.0312 2136 MBAMProtector - ok
13:06:37.0437 2136 mdmxsdk (e246a32c445056996074a397da56e815) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
13:06:37.0484 2136 mdmxsdk - ok
13:06:38.0609 2136 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
13:08:09.0218 2136 mnmdd - ok
13:08:10.0359 2136 Modem (44032b0c6d9954d3fd26438330b99ee7) C:\WINDOWS\system32\drivers\Modem.sys
13:08:10.0515 2136 Modem - ok
13:08:11.0578 2136 Mouclass (4cb582831dbde63ce43b45d771218374) C:\WINDOWS\system32\DRIVERS\mouclass.sys
13:08:11.0718 2136 Mouclass - ok
13:08:12.0796 2136 mouhid (bb269eba740737ab749b214d568b6812) C:\WINDOWS\system32\DRIVERS\mouhid.sys
13:08:13.0000 2136 mouhid - ok
13:08:14.0046 2136 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
13:08:14.0187 2136 MountMgr - ok
13:08:15.0218 2136 mraid35x - ok
13:08:16.0281 2136 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
13:08:16.0546 2136 MRxDAV - ok
13:08:17.0625 2136 MRxSmb (68755f0ff16070178b54674fe5b847b0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
13:08:17.0921 2136 MRxSmb - ok
13:08:19.0000 2136 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
13:08:19.0234 2136 Msfs - ok
13:08:20.0359 2136 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
13:08:20.0562 2136 mssmbios - ok
13:08:21.0656 2136 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
13:08:21.0750 2136 Mup - ok
13:08:22.0812 2136 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
13:08:23.0046 2136 NDIS - ok
13:08:24.0125 2136 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
13:08:24.0187 2136 NdisTapi - ok
13:08:25.0312 2136 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
13:08:25.0515 2136 Ndisuio - ok
13:08:26.0562 2136 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
13:08:26.0796 2136 NdisWan - ok
13:08:27.0859 2136 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys
13:08:28.0093 2136 NDProxy - ok
13:08:29.0156 2136 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
13:08:29.0343 2136 NetBIOS - ok
13:08:30.0437 2136 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
13:08:30.0578 2136 NetBT - ok
13:08:31.0687 2136 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
13:08:31.0828 2136 NIC1394 - ok
13:08:32.0921 2136 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
13:08:33.0171 2136 Npfs - ok
13:08:34.0234 2136 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
13:08:34.0500 2136 Ntfs - ok
13:08:35.0562 2136 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
13:08:35.0734 2136 Null - ok
13:08:36.0812 2136 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
13:08:37.0000 2136 NwlnkFlt - ok
13:08:38.0062 2136 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
13:08:38.0218 2136 NwlnkFwd - ok
13:08:39.0281 2136 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
13:08:39.0421 2136 ohci1394 - ok
13:08:40.0484 2136 Parport (46f8db73b4a53e543f8e371dc7c75bae) C:\WINDOWS\system32\drivers\Parport.sys
13:08:40.0703 2136 Parport - ok
13:08:41.0781 2136 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
13:08:42.0015 2136 PartMgr - ok
13:08:43.0093 2136 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
13:08:43.0265 2136 ParVdm - ok
13:08:44.0359 2136 PCI (6ce351d149cb4befc702951e471e1730) C:\WINDOWS\system32\DRIVERS\pci.sys
13:08:44.0578 2136 PCI - ok
13:08:45.0593 2136 PCIDump - ok
13:08:46.0656 2136 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
13:08:46.0875 2136 PCIIde - ok
13:08:47.0968 2136 Pcmcia (4fc31e6c19a5ce5198b1abff94cae758) C:\WINDOWS\system32\DRIVERS\pcmcia.sys
13:08:48.0218 2136 Pcmcia - ok
13:08:49.0281 2136 PDCOMP - ok
13:08:50.0343 2136 PDFRAME - ok
13:08:51.0375 2136 PDRELI - ok
13:08:52.0437 2136 PDRFRAME - ok
13:08:53.0515 2136 perc2 - ok
13:08:54.0578 2136 perc2hib - ok
13:08:55.0671 2136 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
13:08:55.0890 2136 PptpMiniport - ok
13:08:56.0984 2136 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
13:08:57.0250 2136 PSched - ok
13:08:58.0359 2136 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
13:08:58.0578 2136 Ptilink - ok
13:08:59.0656 2136 ql1080 - ok
13:09:00.0718 2136 Ql10wnt - ok
13:09:01.0812 2136 ql12160 - ok
13:09:02.0890 2136 ql1240 - ok
13:09:03.0953 2136 ql1280 - ok
13:09:05.0062 2136 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
13:09:05.0265 2136 RasAcd - ok
13:09:06.0890 2136 Rasirda (0207d26ddf796a193ccd9f83047bb5fc) C:\WINDOWS\system32\DRIVERS\rasirda.sys
13:09:06.0968 2136 Rasirda - ok
13:09:08.0062 2136 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
13:09:08.0265 2136 Rasl2tp - ok
13:09:09.0359 2136 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
13:09:09.0609 2136 RasPppoe - ok
13:09:10.0750 2136 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
13:09:10.0921 2136 Raspti - ok
13:09:12.0015 2136 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
13:09:55.0843 2136 Rdbss - ok
13:09:57.0359 2136 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
13:09:57.0765 2136 RDPCDD - ok
13:09:58.0875 2136 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
13:09:58.0937 2136 RDPWD - ok
13:10:00.0078 2136 redbook (611bfd220305be3a85ae876ea47d4aa5) C:\WINDOWS\system32\DRIVERS\redbook.sys
13:10:00.0296 2136 redbook - ok
13:10:01.0718 2136 s24trans (1cc074e0d48383d4e9bffc6a26c2a58a) C:\WINDOWS\system32\DRIVERS\s24trans.sys
13:10:03.0203 2136 s24trans ( UnsignedFile.Multi.Generic ) - warning
13:10:03.0203 2136 s24trans - detected UnsignedFile.Multi.Generic (1)
13:10:04.0593 2136 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
13:10:04.0671 2136 Secdrv - ok
13:10:05.0765 2136 Serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
13:10:05.0984 2136 Serenum - ok
13:10:07.0078 2136 Serial (b842729337c9b921615c40d3c1a1af96) C:\WINDOWS\system32\DRIVERS\serial.sys
13:10:07.0312 2136 Serial - ok
13:10:08.0390 2136 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
13:10:08.0953 2136 Sfloppy - ok
13:10:09.0984 2136 Simbad - ok
13:10:11.0078 2136 SMCIRDA (62556d170f22c43a544481e4ee16d2e2) C:\WINDOWS\system32\DRIVERS\smcirda.sys
13:10:11.0125 2136 SMCIRDA - ok
13:10:12.0250 2136 Sparrow - ok
13:10:13.0312 2136 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
13:10:13.0500 2136 splitter - ok
13:10:14.0640 2136 sr (94610c8653635e4459316a0050d55ce7) C:\WINDOWS\system32\DRIVERS\sr.sys
13:10:14.0796 2136 sr - ok
13:10:15.0937 2136 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
13:10:16.0078 2136 Srv - ok
13:10:17.0250 2136 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
13:10:17.0484 2136 swenum - ok
13:10:18.0578 2136 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
13:10:18.0781 2136 swmidi - ok
13:10:19.0828 2136 symc810 - ok
13:10:20.0906 2136 symc8xx - ok
13:10:21.0890 2136 sym_hi - ok
13:10:22.0859 2136 sym_u3 - ok
13:10:23.0875 2136 SynTP (a63401d180863a2cefce51798542ae5f) C:\WINDOWS\system32\DRIVERS\SynTP.sys
13:10:24.0000 2136 SynTP - ok
13:10:25.0015 2136 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
13:10:25.0250 2136 sysaudio - ok
13:10:26.0359 2136 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
13:10:26.0468 2136 Tcpip - ok
13:10:27.0609 2136 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
13:10:27.0812 2136 TDPIPE - ok
13:10:28.0890 2136 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
13:10:29.0093 2136 TDTCP - ok
13:10:30.0156 2136 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
13:10:30.0359 2136 TermDD - ok
13:10:31.0515 2136 tifm21 (0edc3cf7b38f4260eb006c38e4a44de4) C:\WINDOWS\system32\drivers\tifm21.sys
13:10:31.0625 2136 tifm21 - ok
13:10:32.0703 2136 TosIde - ok
13:10:33.0796 2136 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
13:10:34.0015 2136 Udfs - ok
13:10:35.0078 2136 ultra - ok
13:10:36.0234 2136 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
13:10:36.0468 2136 Update - ok
13:10:37.0578 2136 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
13:10:37.0718 2136 usbccgp - ok
13:10:38.0781 2136 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
13:10:39.0000 2136 usbehci - ok
13:10:40.0046 2136 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
13:10:40.0250 2136 usbhub - ok
13:10:41.0343 2136 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
13:10:41.0578 2136 USBSTOR - ok
13:10:42.0671 2136 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
13:10:42.0875 2136 usbuhci - ok
13:10:43.0984 2136 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
13:10:44.0171 2136 VgaSave - ok
13:10:45.0218 2136 ViaIde - ok
13:10:46.0312 2136 VolSnap (28a4b296b47782173c346e376cb374d1) C:\WINDOWS\system32\drivers\VolSnap.sys
13:10:46.0578 2136 VolSnap - ok
13:10:47.0718 2136 w39n51 (73395a19fc86461a151d3c330604e8b3) C:\WINDOWS\system32\DRIVERS\w39n51.sys
13:10:47.0968 2136 w39n51 - ok
13:10:49.0093 2136 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
13:10:49.0265 2136 Wanarp - ok
13:10:50.0343 2136 WDICA - ok
13:10:51.0453 2136 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
13:10:51.0671 2136 wdmaud - ok
13:10:52.0765 2136 winachsf (e0a00b06ea067c84e124b407dffa1af1) C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys
13:10:52.0890 2136 winachsf - ok
13:10:54.0000 2136 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
13:10:54.0203 2136 WmiAcpi - ok
13:10:54.0265 2136 MBR (0x1B8) (09ce7397af23d4c0b331b89d0297cc7e) \Device\Harddisk0\DR0
13:10:54.0875 2136 \Device\Harddisk0\DR0 - ok
13:10:54.0890 2136 Boot (0x1200) (77a31038f9dd2135fc24280a2b61c4dd) \Device\Harddisk0\DR0\Partition0
13:10:54.0890 2136 \Device\Harddisk0\DR0\Partition0 - ok
13:10:54.0890 2136 Boot (0x1200) (bb1d02ba24cdafb2338fc9a9a302dc03) \Device\Harddisk0\DR0\Partition1
13:10:54.0890 2136 \Device\Harddisk0\DR0\Partition1 - ok
13:10:54.0890 2136 ============================================================
13:10:54.0890 2136 Scan finished
13:10:54.0890 2136 ============================================================
13:10:55.0015 2128 Detected object count: 2
13:10:55.0015 2128 Actual detected object count: 2
13:11:15.0296 2128 AegisP ( UnsignedFile.Multi.Generic ) - skipped by user
13:11:15.0296 2128 AegisP ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:11:15.0296 2128 s24trans ( UnsignedFile.Multi.Generic ) - skipped by user
13:11:15.0296 2128 s24trans ( UnsignedFile.Multi.Generic ) - User select action: Skip
13:11:20.0703 2020 Deinitialize success

Stahnete MBRScan http://eric71.geekstogo.com/tools/MbrScan.exe , ulozte ho na plochu a spustte.
Kliknete na Report
Za chvili vyskoci log s nazvem MBRScan.txt, ten mi sem zkopirujte

tady je:

Kód: Vybrat vše

MBRScan v1.1.1

OS             : Windows XP Home Service Pack 3 (32 bit)
PROCESSOR      : x86 Family 6 Model 14 Stepping 8, GenuineIntel
BOOT           : Safe Boot with network
DATE           : 2012/03/04 (ISO 8601) at 14:08:22
________________________________________________________________________________

DISK           : Device\Harddisk0\DR0 __WDC WD3200BUDT-63DPZY0 (01.01A01)
BUS_TYPE       : (0x03)  P-ATA
USE_PIO        : YES
MAX_TRANSFER   : 128 Kb
ALIGNMENT_MASK : word aligned
________________________________________________________________________________

Device\Harddisk0\DR0	298.1 Go  [Fixed] ==> XP MBR Code

MBR_MD5   : 0DFBC696762845E69345A18676511686
MBR_SHA1  : 2F86BB2CD94BF9E74400C8D25ABBF4581D28A3DE

Device\Harddisk0\Partition1	146.5 Go  	0x07 NTFS / HPFS __ BOOTABLE __
Device\Harddisk0\Partition2	151.6 Go  	0x07 NTFS / HPFS
________________________________________________________________________________

############################### Additional scan ################################

DRIVER  : C:\WINDOWS\System32\Drivers\dump_atapi.sys => Invisible on the disk
ADDRESS : 0xBA10B000
SIZE    : 96.0 Ko

DRIVER  : C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS => Invisible on the disk
ADDRESS : 0xF79AF000
SIZE    : 8.0 Ko

SystemStartOptions : NOEXECUTE=OPTIN  FASTDETECT SAFEBOOT:NETWORK SOS BOOTLOG NOGUIBOOT

________________________________________________________________________________

_______MBR   \Device\Harddisk0\DR0  

0x00000000   33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C   3À.Ð¼.|ûP.P.ü¾.|
0x00000010   BF 1B 06 50 57 B9 E5 01 F3 A4 CB BD BE 07 B1 04   ¿..PW¹å.ó¤Ë½¾.±.
0x00000020   38 6E 00 7C 09 75 13 83 C5 10 E2 F4 CD 18 8B F5   8n.|.u..Å.âôÍ..õ
0x00000030   83 C6 10 49 74 19 38 2C 74 F6 A0 B5 07 B4 07 8B   .Æ.It.8,tö.µ.´..
0x00000040   F0 AC 3C 00 74 FC BB 07 00 B4 0E CD 10 EB F2 88   ð¬<.tü»..´.Í.ëò.
0x00000050   4E 10 E8 46 00 73 2A FE 46 10 80 7E 04 0B 74 0B   N.èF.s*þF..~..t.
0x00000060   80 7E 04 0C 74 05 A0 B6 07 75 D2 80 46 02 06 83   .~..t..¶.uÒ.F...
0x00000070   46 08 06 83 56 0A 00 E8 21 00 73 05 A0 B6 07 EB   F...V..è!.s..¶.ë
0x00000080   BC 81 3E FE 7D 55 AA 74 0B 80 7E 10 00 74 C8 A0   ¼.>þ}Uªt..~..tÈ.
0x00000090   B7 07 EB A9 8B FC 1E 57 8B F5 CB BF 05 00 8A 56   ·.ë©.ü.W.õË¿...V
0x000000A0   00 B4 08 CD 13 72 23 8A C1 24 3F 98 8A DE 8A FC   .´.Í.r#.Á$?..Þ.ü
0x000000B0   43 F7 E3 8B D1 86 D6 B1 06 D2 EE 42 F7 E2 39 56   C÷ã.Ñ.Ö±.ÒîB÷â9V
0x000000C0   0A 77 23 72 05 39 46 08 73 1C B8 01 02 BB 00 7C   .w#r.9F.s.¸..».|
0x000000D0   8B 4E 02 8B 56 00 CD 13 73 51 4F 74 4E 32 E4 8A   .N..V.Í.sQOtN2ä.
0x000000E0   56 00 CD 13 EB E4 8A 56 00 60 BB AA 55 B4 41 CD   V.Í.ëä.V.`»ªU´AÍ
0x000000F0   13 72 36 81 FB 55 AA 75 30 F6 C1 01 74 2B 61 60   .r6.ûUªu0öÁ.t+a`
0x00000100   6A 00 6A 00 FF 76 0A FF 76 08 6A 00 68 00 7C 6A   j.j..v..v.j.h.|j
0x00000110   01 6A 10 B4 42 8B F4 CD 13 61 61 73 0E 4F 74 0B   .j.´B.ôÍ.aas.Ot.
0x00000120   32 E4 8A 56 00 CD 13 EB D6 61 F9 C3 49 6E 76 61   2ä.V.Í.ëÖaùÃInva
0x00000130   6C 69 64 20 70 61 72 74 69 74 69 6F 6E 20 74 61   lid partition ta
0x00000140   62 6C 65 00 45 72 72 6F 72 20 6C 6F 61 64 69 6E   ble.Error loadin
0x00000150   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74   g operating syst
0x00000160   65 6D 00 4D 69 73 73 69 6E 67 20 6F 70 65 72 61   em.Missing opera
0x00000170   74 69 6E 67 20 73 79 73 74 65 6D 00 00 00 00 00   ting system.....
0x00000180   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0x00000190   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0x000001A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0x000001B0   00 00 00 00 00 00 00 00 B1 A7 B1 A7 00 00 80 01   ........±§±§....
0x000001C0   01 00 07 FE FF FF 3F 00 00 00 F3 6B 4F 12 00 FE   ...þ..?...ókO..þ
0x000001D0   FF FF 0F FE FF FF 32 6C 4F 12 8F 6A F3 12 00 00   ...þ..2lO..jó...
0x000001E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00   ................
0x000001F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA   ..............Uª

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu a spustte.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi kratky test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte

tady je

RogueKiller V7.2.1 [02/29/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v: Normální režim
Uživatel: Vilím [Práva správce]
Mode: Kontrola -- Date: 03/04/2012 17:38:36

¤¤¤ Škodlivé procesy: 0 ¤¤¤

¤¤¤ Záznamy Registrů: 1 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač: [NAHRÁNO] ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
127.0.0.1 localhost

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD3200BUDT-63DPZY0 +++++
--- User ---
[MBR] 0dfbc696762845e69345a18676511686
[BSP] 41b26b917ff9d3ae77fdbb337cafd18e : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 149997 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 307194930 | Size: 155245 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[1].txt >>
RKreport[1].txt

Znovu spustte RogueKiller
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi kratky test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte

Provedeno

RogueKiller V7.2.1 [02/29/2012] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Podpora: http://www.geekstogo.com/forum/files/fi ... guekiller/
Operační systém: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v: Nouzový režim s prací v síti
Uživatel: Administrator [Práva správce]
Mode: Odebrat -- Date: 03/04/2012 18:26:19

¤¤¤ Škodlivé procesy: 0 ¤¤¤

¤¤¤ Záznamy Registrů: 1 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač: [NENAHRÁNO] ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
127.0.0.1 localhost

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD3200BUDT-63DPZY0 +++++
--- User ---
[MBR] 0dfbc696762845e69345a18676511686
[BSP] 41b26b917ff9d3ae77fdbb337cafd18e : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 149997 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 307194930 | Size: 155245 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

Co na to zatim pocitac?

Když ho spustím v normálním režimu, tak je to furt stejný. Fakt jsem v koncích, nevím co s tím. V nouzovém režimu se to chová normálně.

OK
Zkuste udelat uplnou kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte log. Predem nic nemazte, miva falesne detekce.
Kdyby to neslo, zkuste aspon rychlou kontrolu.
Pokud ani to ne, jeste pritvrdime

Nevadí, že to všechno dělám v nozovém režimu???

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.60.1.1000
www.malwarebytes.org

Verze databáze: v2012.03.04.04

Windows XP Service Pack 3 x86 NTFS (Safe Mode s podporou sítě)
Internet Explorer 6.0.2900.5512
Administrator :: MUDR [administrátor]

Ochrana: Zakázána

4.3.2012 18:54:24
mbam-log-2012-03-04 (18-54-24).txt

Typ: Úplná kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 191129
Uplynulý čas: 6 minut, 5 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

Nevadi

Co taky zbyva, kdyz ten normalni nejde

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Vypnete antivir i dalsi pripadne zabezpeceni.
Dvojklikem ho spustte.
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace

Nenašel jsem jak v nouzovém režimu vypnout eset, tak jsem to prubnul s ním.

ComboFix 12-03-04.01 - Administrator 04.03.2012 19:19:01.1.2 - x86 NETWORK
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2046.1617 [GMT 1:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: ESET Smart Security 5.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msxml4-KB954430-enu.LOG
c:\windows\msxml4-KB973688-enu.LOG
c:\windows\regopt.log
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-04 do 2012-03-04 )))))))))))))))))))))))))))))))
.
.
2012-03-04 10:32 . 2012-03-04 09:58 83968 ----a-w- C:\boot_cleaner.exe
2012-03-04 10:18 . 2012-03-04 10:18 -------- d-----w- C:\bootkit_remover
2012-03-04 09:48 . 2012-03-04 09:48 -------- d-----w- C:\TDSSKiller_Quarantine
2012-03-03 20:07 . 2012-03-03 20:07 -------- d-----w- C:\rsit
2012-03-03 10:29 . 2012-03-03 22:20 -------- d---a-w- C:\downloads
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-01-12 17:20 . 2008-04-14 12:00 1859968 ----a-w- c:\windows\system32\win32k.sys
2011-12-19 08:53 . 2008-04-14 12:00 81920 ----a-w- c:\windows\system32\ieencode.dll
2011-12-19 08:53 . 2008-04-14 12:00 668160 ----a-w- c:\windows\system32\wininet.dll
2011-12-19 08:53 . 2008-04-14 12:00 61952 ----a-w- c:\windows\system32\tdc.ocx
2011-12-19 08:53 . 2008-04-14 12:00 1510912 ----a-w- c:\windows\system32\shdocvw.dll
2011-12-19 08:52 . 2008-04-14 12:00 370176 ----a-w- c:\windows\system32\html.iec
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2011-09-22 3080264]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2005-11-02 102491]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2005-11-02 692315]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2005-12-06 458752]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2005-11-28 667718]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2005-11-28 602182]
"EOUApp"="c:\program files\Intel\Wireless\Bin\EOUWiz.exe" [2005-11-28 569413]
"RTHDCPL"="RTHDCPL.EXE" [2005-11-17 15600128]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
.
S1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [4.8.2011 9:20 118104]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [22.9.2011 12:03 974944]
S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [3.3.2012 23:11 652360]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [3.3.2012 23:11 20464]
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 81.92.155.1 192.168.0.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-04 19:21
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1124)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2012-03-04 19:22:20
ComboFix-quarantined-files.txt 2012-03-04 18:22
.
Před spuštěním: Volných bajtů: 151 018 336 256
Po spuštění: Volných bajtů: 150 997 045 248
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 7FCC1D7DE3F2EB0333742DAA55B8176B

VIRY.CZ

Prosím o pomoc, nebo radu

Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu

Re: Prosím o pomoc, nebo radu