Stránka 1 z 1

Prosím kontrolu logu

Napsal: 30 dub 2012 12:09
od postak4
Dobrý den,
mám problémy se samovolným spouštěním OS (nevím jestli je problém HW, nebo SW) a tak jsem dal hloubkovou analízu AVASTu po restartu (PC jsem se nažil vyčistit a defrag.). Našel mi malware, tak jsem ho dal odstranit. Prosím Vás o kontrolu logu, abych mohl lepší identifikovat příčinu :wink: ..
Děkuji Postak4

Logfile of random's system information tool 1.09 (written by random/random)
Run by Postak 4 at 2012-04-30 12:58:47
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 5 GB (18%) free of 30 GB
Total RAM: 3071 MB (67% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:58:54, on 30.4.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Intel\AMT\atchksrv.exe
C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\StkCSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Intel\AMT\UNS.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\WINDOWS\system32\ACEngSvr.exe
C:\Program Files\Intel\AMT\atchk.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Program Files\ATK Hotkey\WDC.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Total CMA Pack\TOTALCMD.EXE
K:\SLOZKA\Download\Bezpečnost\RSIT_32bit.exe
C:\Program Files\trend micro\Postak 4.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACMON] "C:\Program Files\ASUS\Splendid\ACMON.exe"
O4 - HKLM\..\Run: [Wireless Console 2] "C:\Program Files\Wireless Console 2\wcourier.exe"
O4 - HKLM\..\Run: [atchk] "C:\Program Files\Intel\AMT\atchk.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [ATKHOTKEY] "C:\Program Files\ATK Hotkey\Hcontrol.exe"
O4 - HKLM\..\Run: [MsgTranAgt] "C:\Program Files\ATK Hotkey\MsgTranAgt.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: IconPackager.lnk = C:\Program Files\Stardock\Object Desktop\MyColors\IconPackager.exe (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A07942C7-7372-4936-8687-8DC48AD58223}: NameServer = 212.111.0.10,194.213.32.237
O17 - HKLM\System\CCS\Services\Tcpip\..\{AECB3CBC-EF3D-433D-A7E6-0C3537425A79}: NameServer = 212.111.0.10,194.213.32.237
O17 - HKLM\System\CCS\Services\Tcpip\..\{E35B569D-CFCD-49D5-BBE2-25283209E265}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{367244FB-A1B7-474F-B5AA-FE79CA940D02}: NameServer = 212.111.0.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{2533FA51-6393-4A5C-A6EC-56BA9FFCB39F}: NameServer = 212.111.0.10
O17 - HKLM\System\CS4\Services\Tcpip\..\{367244FB-A1B7-474F-B5AA-FE79CA940D02}: NameServer = 212.111.0.10
O17 - HKLM\System\CS5\Services\Tcpip\..\{367244FB-A1B7-474F-B5AA-FE79CA940D02}: NameServer = 212.111.0.10,194.213.32.237
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O20 - AppInit_DLLs: "C:\PROGRA~1\Google\Google Desktop Search\GoogleDesktopNetwork3.dll" C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: OneCard - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll
O23 - Service: 2CkyYL - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 2e4wvD - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 2QPxj1 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 2rYNSl - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 2tFv6t - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 51CXHY - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 52MZvf - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 5FrWSE - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 5G1Y6M - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 5T1Vdu - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 8bz8pY - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 8d9ATg - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 8PVBI0 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 8qe70F - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: 8ro9es - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: Intel(R) Active Management Technology System Status Service (atchksrv) - Intel Corporation - C:\Program Files\Intel\AMT\atchksrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BCGiqZ - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: BQRh2F - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: c6681V - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: cJaaY3 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: cKl8CB - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Cl7m8L - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: COMODO System - Cleaner Service (Cleaner_Validator) - Unknown owner - C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: cXFZjj - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: cZQ7Nr - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: f82flk - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: FaYrr2 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: FbjtVg - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: FH3oOa - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Fojq2E - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: FqusgM - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: fTikNp - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: i3VKPq - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: IBLSP3 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: ICWU2g - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: iIAJaW - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: ikzHwP - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: IP0RaF - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: IQhTDN - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: iWLIlD - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: iyeG75 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: L0n1bG - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: L1y3FN - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: l7ctJj - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: l8Iuxr - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: LKT6ip - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Ll82Qa - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: lLmsUQ - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Intel(R) Active Management Technology Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\AMT\LMS.exe
O23 - Service: LnJ44h - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: LSdzxc - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: lsxu8X - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: LYe5t1 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: mfTwaV - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: mu7vmB - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: p254xK - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: P9RfR2 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: PBcD4A - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: PckdnO - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: pGG38W - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: pj51Us - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: PN6eci - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: pTkUf4 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: pUu2JC - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: s5hcLD - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: scsezq - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: SCXkKv - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: sIBZsl - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: sJMbWt - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: SlOoch - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: sr3dAX - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkCSrv.exe
O23 - Service: SXEpRU - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: sYXah5 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: Intel(R) Active Management Technology User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\AMT\UNS.exe
O23 - Service: V81PzV - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: VaqNpO - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: VKVM04 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: VMfOeh - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: VtMQop - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: vu9C4Q - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: VZgLBG - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
O23 - Service: y26oFY - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: YBdxMO - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: yGHnQE - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: Yioz02 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: yISp4s - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: YPIwY5 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: YU90pq - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: YxSyBi - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: z4nqtC - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe
O23 - Service: zpcri0 - CPUID - C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe

--
End of file - 21551 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1275210071-725345543-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-329068152-1275210071-725345543-1003UA.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Postak 4\Data aplikací\Mozilla\Firefox\Profiles\6ljcoynq.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14, {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19, illimitux@illimitux.net:4.0, {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.1, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16, nasanightlaunch@example.com:0.6.20101009"
prefs.js - "keyword.URL" - "http://search.sweetim.com/search.asp?src=2&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.233 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_233.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.4]
"Description"=Office Live Update v1.4
"Path"=C:\Program Files\Microsoft\Office Live\npOLW.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
quickstores@quickstores.de
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt
nsILegitCheckPlugin.xpt
nsIOGAPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npLegitCheckPlugin.dll
NPOFF12.DLL
npOGAPlugin.dll
nppdf32.dll
npwachk.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Postak 4\Data aplikací\Mozilla\Firefox\Profiles\6ljcoynq.default\extensions\
illimitux@illimitux.net
{1018e4d6-728f-4b20-ad56-37578a4de76b}
{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-04-24 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-04-24 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
ASUS Security Protect Manager - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll [2006-11-21 70928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-04-24 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"CognizanceTS"=C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll [2003-12-22 17920]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-05-25 786521]
"ACMON"=C:\Program Files\ASUS\Splendid\ACMON.exe [2007-07-10 851968]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2007-07-05 1040384]
"atchk"=C:\Program Files\Intel\AMT\atchk.exe [2007-06-11 404248]
"JMB36X IDE Setup"=C:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"Power_Gear"=C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [2006-07-26 90112]
"ATKHOTKEY"=C:\Program Files\ATK Hotkey\Hcontrol.exe [2007-11-28 229376]
"MsgTranAgt"=C:\Program Files\ATK Hotkey\MsgTranAgt.exe [2007-11-04 106496]
"IntelZeroConfig"=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2007-06-01 823296]
"IntelWireless"=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2007-06-01 974848]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2008-03-06 241664]
"PAC7302_Monitor"=C:\WINDOWS\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-03-11 6749512]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-12-12 16859136]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-05-01 13750272]
"nwiz"=nwiz.exe /installquiet []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-08-19 86016]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2011-06-09 30192]
"googletalk"=C:\Program Files\Google\Google Talk\googletalk.exe [2007-01-01 3739648]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-27 152872]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Advanced SystemCare 5"=C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe [2012-03-06 574296]
"Google Update"=C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2009-04-26 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-11-02 61440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
C:\Program Files\Google\Google Talk\googletalk.exe [2007-01-01 3739648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-02-28 1987976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2009-09-05 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Total CMA Pack]
C:\Program Files\Total CMA Pack\Total CMA Pack.exe [2009-09-01 43255]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WatcherHelper]
C:\Program Files\Sierra Wireless Inc\3G Watcher\WaHelper.exe [2007-03-28 114688]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Postak 4^Nabídka Start^Programy^Po spuštění^MagicDisc.lnk]
[]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "C:\PROGRA~1\Google\Google Desktop Search\GoogleDesktopNetwork3.dll" C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OneCard]
C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll [2007-02-07 74240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WB]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=scecli
ASWLNPkg

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll"="C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin"
"C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"D:\Program Files\Activision\Wolfenstein\MP\Wolf2MP.exe"="D:\Program Files\Activision\Wolfenstein\MP\Wolf2MP.exe:*:Enabled:Wolfenstein(TM) "
"D:\Program Files\Activision\Wolfenstein\MP\Wolf2MPLite.exe"="D:\Program Files\Activision\Wolfenstein\MP\Wolf2MPLite.exe:*:Enabled:Wolfenstein(TM) "
"E:\Program Files\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe"="E:\Program Files\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Call of Pripyat (CLI)"
"E:\Program Files\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe"="E:\Program Files\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Call of Pripyat (SRV)"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"D:\Program Files\Splinter Cell Conviction\src\system\conviction_game.exe"="D:\Program Files\Splinter Cell Conviction\src\system\conviction_game.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction"
"D:\Program Files\Splinter Cell Conviction\src\system\gu.exe"="D:\Program Files\Splinter Cell Conviction\src\system\gu.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction aktualizace"
"D:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe"="D:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2"
"D:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe"="D:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe:*:Enabled:Call of Duty: Modern Warfare 2 - Multiplayer"
"D:\Program Files\Steam\SteamApps\common\crysis 2 - demo\Bin32\Crysis2Demo.exe"="D:\Program Files\Steam\SteamApps\common\crysis 2 - demo\Bin32\Crysis2Demo.exe:*:Enabled:Crysis 2 Demo"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe"="D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe"="D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=serwvdrv.dll
"wave7"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"aux3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======List of files/folders created in the last 1 month======

2012-04-30 12:54:10 ----D---- C:\rsit
2012-04-30 10:17:22 ----A---- C:\WINDOWS\system32\RegistryDefragBootTime.exe
2012-04-30 10:00:35 ----D---- C:\Program Files\Common Files\Adobe
2012-04-30 09:52:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2012-04-30 09:51:59 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-04-30 08:59:25 ----AC---- C:\WINDOWS\system32\OLD1A.tmp
2012-04-30 08:59:25 ----AC---- C:\WINDOWS\system32\OLD17.tmp
2012-04-29 13:00:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2012-04-29 12:59:55 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\IObit
2012-04-29 12:59:43 ----D---- C:\Program Files\IObit
2012-04-29 12:43:27 ----D---- C:\Program Files\RegCleaner
2012-04-29 10:25:56 ----N---- C:\WINDOWS\system32\pxwma.dll
2012-04-29 10:25:43 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\OpenCandy
2012-04-28 09:56:26 ----D---- C:\Program Files\Common Files\Skype
2012-04-25 20:11:56 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\DDMSettings
2012-04-25 16:58:23 ----D---- C:\Program Files\Internet Camera
2012-04-25 00:30:20 ----D---- C:\WINDOWS\DD1865F0AD7340FBB23E1822E02396FF.TMP
2012-04-24 20:32:28 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2012-04-24 20:32:28 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2012-04-24 20:32:27 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2012-04-24 20:32:26 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2012-04-24 20:32:25 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2012-04-24 20:32:24 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2012-04-24 20:32:23 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2012-04-24 20:32:22 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2012-04-24 20:32:21 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2012-04-24 20:32:21 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2012-04-24 20:32:19 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2012-04-24 20:32:17 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2012-04-24 20:16:39 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-04-24 20:16:38 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-04-24 20:16:32 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-04-24 20:16:32 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-04-24 20:16:30 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2012-04-24 20:16:29 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-04-24 20:16:29 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-04-24 20:16:26 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-04-24 20:15:40 ----A---- C:\WINDOWS\avastSS.scr
2012-04-24 20:15:38 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-04-24 19:53:32 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-04-24 19:53:06 ----D---- C:\Program Files\Common Files\Java
2012-04-24 19:52:22 ----A---- C:\WINDOWS\system32\javaws.exe
2012-04-24 19:52:22 ----A---- C:\WINDOWS\system32\javaw.exe
2012-04-24 19:52:22 ----A---- C:\WINDOWS\system32\java.exe
2012-04-24 19:40:22 ----N---- C:\WINDOWS\system32\iacenc.dll
2012-04-24 19:23:27 ----D---- C:\Program Files\LogMeIn Hamachi

======List of files/folders modified in the last 1 month======

2012-04-30 12:58:48 ----D---- C:\Program Files\trend micro
2012-04-30 12:57:56 ----AC---- C:\WINDOWS\NeroDigital.ini
2012-04-30 12:57:33 ----D---- C:\WINDOWS\Temp
2012-04-30 12:56:11 ----D---- C:\WINDOWS\system32\LogFiles
2012-04-30 12:56:10 ----D---- C:\WINDOWS\system32
2012-04-30 12:56:10 ----D---- C:\WINDOWS
2012-04-30 12:49:32 ----D---- C:\WINDOWS\system32\CatRoot2
2012-04-30 12:42:50 ----AC---- C:\WINDOWS\system32\log.txt
2012-04-30 12:42:25 ----D---- C:\WINDOWS\system32\config
2012-04-30 10:40:24 ----RD---- C:\Program Files
2012-04-30 10:40:00 ----SHD---- C:\WINDOWS\Installer
2012-04-30 10:40:00 ----SHD---- C:\Config.Msi
2012-04-30 10:38:51 ----SD---- C:\WINDOWS\Tasks
2012-04-30 10:20:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-04-30 10:19:34 ----HD---- C:\WINDOWS\inf
2012-04-30 10:19:33 ----HD---- C:\WINDOWS\$hf_mig$
2012-04-30 10:19:20 ----D---- C:\Program Files\Internet Explorer
2012-04-30 10:19:09 ----D---- C:\WINDOWS\ie8updates
2012-04-30 10:08:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-04-30 10:07:00 ----D---- C:\Program Files\Microsoft Silverlight
2012-04-30 10:00:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-04-30 10:00:35 ----D---- C:\Program Files\Common Files
2012-04-30 10:00:35 ----D---- C:\Program Files\Adobe
2012-04-30 09:51:28 ----D---- C:\Program Files\Mozilla Firefox
2012-04-30 09:05:47 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-04-30 08:46:22 ----D---- C:\WINDOWS\Prefetch
2012-04-30 08:31:54 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-04-30 08:30:54 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\Winamp
2012-04-29 22:14:19 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\HLSW
2012-04-29 21:42:37 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2012-04-29 21:01:51 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\ICQ
2012-04-29 13:14:17 ----D---- C:\WINDOWS\system32\oodag
2012-04-29 13:00:06 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\Skype
2012-04-29 12:43:04 ----D---- C:\Program Files\Registry Mechanic
2012-04-29 10:54:58 ----D---- C:\WINDOWS\Logs
2012-04-29 10:54:58 ----D---- C:\WINDOWS\Debug
2012-04-29 10:26:43 ----D---- C:\Program Files\Winamp
2012-04-29 10:26:14 ----D---- C:\Program Files\Winamp Detect
2012-04-28 09:56:26 ----RD---- C:\Program Files\Skype
2012-04-28 09:56:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2012-04-25 20:10:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2012-04-25 20:10:46 ----D---- C:\Program Files\DivX
2012-04-25 20:10:04 ----D---- C:\Program Files\Common Files\DivX Shared
2012-04-25 19:25:36 ----RSD---- C:\WINDOWS\assembly
2012-04-25 19:25:36 ----D---- C:\WINDOWS\Microsoft.NET
2012-04-25 00:31:33 ----D---- C:\WINDOWS\Help
2012-04-25 00:30:16 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2012-04-25 00:29:52 ----D---- C:\WINDOWS\system32\drivers
2012-04-25 00:29:42 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-04-24 23:23:28 ----A---- C:\autoexec.bat
2012-04-24 22:45:16 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-04-24 22:44:50 ----D---- C:\WINDOWS\WinSxS
2012-04-24 21:25:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-04-24 21:04:28 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-04-24 21:01:00 ----C---- C:\WINDOWS\win.ini
2012-04-24 21:00:59 ----D---- C:\Program Files\Common Files\System
2012-04-24 20:32:30 ----D---- C:\WINDOWS\system32\DirectX
2012-04-24 20:15:20 ----D---- C:\Program Files\AVAST Software
2012-04-24 20:15:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2012-04-24 19:57:07 ----D---- C:\Program Files\CCleaner
2012-04-24 19:52:10 ----AC---- C:\WINDOWS\system32\deployJava1.dll
2012-04-16 17:04:48 ----SHD---- C:\System Volume Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2012-03-11 97760]
R0 JGOGO;JMicron Hot-Plug Driver; C:\WINDOWS\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\WINDOWS\system32\DRIVERS\jraid.sys [2009-08-13 96368]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 risdptsk;risdptsk; C:\WINDOWS\system32\DRIVERS\risdptsk.sys [2005-07-14 27904]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2006-02-21 19968]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-11-04 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920]
R1 Amfilter;A4Tech Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\Amfilter.sys [2007-01-24 8704]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 CFRMD;CFRMD; C:\WINDOWS\system32\DRIVERS\CFRMD.sys [2010-12-09 66584]
R1 CFRPD;CFRPD; C:\WINDOWS\system32\DRIVERS\CFRPD.sys [2010-12-09 33232]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2012-03-11 494968]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2012-03-11 31704]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ItSDisk;ItSDisk; C:\WINDOWS\System32\Drivers\ItSDisk.sys [2006-05-17 23232]
R1 kbfilter;Keyboard Filter Driver; C:\WINDOWS\system32\drivers\kbfilter.sys [2002-07-11 12856]
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R1 Tosrfcom;Bluetooth RFCOMM; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2007-05-24 64000]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.4.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-10-30 21393]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
R2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2007-05-29 12416]
R3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\WINDOWS\system32\DRIVERS\Amusbprt.sys [2007-12-25 14336]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys [2007-06-16 146824]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-04-13 254872]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HECI;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2007-04-06 44800]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2007-01-23 36608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-12-12 4635648]
R3 kbfiltr;Keyboard Filter; C:\WINDOWS\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-08-24 5760]
R3 NETw4x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-06-21 2208512]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-04-30 8055584]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 SMCIRDA;SMSC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2006-03-12 48128]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-11-22 982272]
R3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam; C:\WINDOWS\System32\Drivers\StkCMini.sys [2007-06-06 1260672]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-05-25 193088]
R3 tosporte;Bluetooth COM Port; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 ALSysIO;ALSysIO; \??\C:\DOCUME~1\POSTAK~1\LOCALS~1\Temp\ALSysIO.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys []
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys []
S3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2009-05-28 4203392]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 PAC7302;iLook 310; C:\WINDOWS\system32\DRIVERS\PAC7302.SYS [2009-04-28 461824]
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 PSSDK42;PSSDK42; \??\C:\WINDOWS\system32\Drivers\pssdk42.sys []
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
S3 sfcure01;StarForce Cure Driver (version 1.x); C:\WINDOWS\System32\drivers\sfcure01.sys [2005-10-01 3072]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2008-04-13 11904]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2008-04-13 11008]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SWUMX20;Sierra Wireless USB MUX Driver (UMTS20); C:\WINDOWS\system32\DRIVERS\swumx20.sys []
S3 tosrfbd;Bluetooth RFBUS; C:\WINDOWS\system32\DRIVERS\tosrfbd.sys [2007-04-24 113920]
S3 tosrfbnp;Bluetooth RFBNEP; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]
S3 Tosrfhid;Bluetooth RFHID; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]
S3 tosrfnds;Bluetooth Personal Area Network; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
S3 TosRfSnd;Bluetooth Audio; C:\WINDOWS\system32\drivers\tosrfsnd.sys [2007-01-22 53376]
S3 tosrfusb;Bluetooth USB Controller; C:\WINDOWS\system32\DRIVERS\tosrfusb.sys [2007-06-11 41856]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files\IObit\Advanced SystemCare 5\ASCService.exe [2012-03-14 913752]
R2 ASBroker;Logon Session Broker; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 ASChannel;Local Communication Channel; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 atchksrv;Intel(R) Active Management Technology System Status Service; C:\Program Files\Intel\AMT\atchksrv.exe [2007-06-11 183064]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 Cleaner_Validator;COMODO System - Cleaner Service; C:\Program Files\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe [2010-12-09 305600]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-03-11 1983232]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2007-06-01 647168]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 1373576]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2012-04-24 153376]
R2 LMS;Intel(R) Active Management Technology Local Management Service; C:\Program Files\Intel\AMT\LMS.exe [2007-06-11 121624]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-08-19 168004]
R2 O&O Defrag;O&O Defrag; C:\WINDOWS\system32\oodag.exe [2007-05-11 1050120]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-04 75136]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2012-04-29 214520]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2007-06-01 327680]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2007-06-01 987136]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service; C:\WINDOWS\System32\StkCSrv.exe [2007-04-19 24576]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]
R2 UNS;Intel(R) Active Management Technology User Notification Service; C:\Program Files\Intel\AMT\UNS.exe [2007-06-11 1489688]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-02-29 158856]
S3 2CkyYL;2CkyYL; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 2e4wvD;2e4wvD; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 2QPxj1;2QPxj1; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 2rYNSl;2rYNSl; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 2tFv6t;2tFv6t; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 51CXHY;51CXHY; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 52MZvf;52MZvf; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 5FrWSE;5FrWSE; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 5G1Y6M;5G1Y6M; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 5T1Vdu;5T1Vdu; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 8bz8pY;8bz8pY; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 8d9ATg;8d9ATg; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 8PVBI0;8PVBI0; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 8qe70F;8qe70F; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 8ro9es;8ro9es; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 BCGiqZ;BCGiqZ; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 BQRh2F;BQRh2F; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 c6681V;c6681V; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 cJaaY3;cJaaY3; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 cKl8CB;cKl8CB; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 Cl7m8L;Cl7m8L; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 cXFZjj;cXFZjj; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 cZQ7Nr;cZQ7Nr; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 f82flk;f82flk; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 FaYrr2;FaYrr2; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 FbjtVg;FbjtVg; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 FH3oOa;FH3oOa; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 Fojq2E;Fojq2E; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 FqusgM;FqusgM; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 fTikNp;fTikNp; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2011-06-09 30192]
S3 i3VKPq;i3VKPq; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 IBLSP3;IBLSP3; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 ICWU2g;ICWU2g; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iIAJaW;iIAJaW; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 ikzHwP;ikzHwP; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 IP0RaF;IP0RaF; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 IQhTDN;IQhTDN; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 iWLIlD;iWLIlD; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 iyeG75;iyeG75; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 L0n1bG;L0n1bG; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 L1y3FN;L1y3FN; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 l7ctJj;l7ctJj; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 l8Iuxr;l8Iuxr; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 LKT6ip;LKT6ip; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 Ll82Qa;Ll82Qa; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 lLmsUQ;lLmsUQ; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 LnJ44h;LnJ44h; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 LSdzxc;LSdzxc; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 lsxu8X;lsxu8X; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 LYe5t1;LYe5t1; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 mfTwaV;mfTwaV; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-30 129976]
S3 mu7vmB;mu7vmB; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 p254xK;p254xK; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 P9RfR2;P9RfR2; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 PBcD4A;PBcD4A; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 PckdnO;PckdnO; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 pGG38W;pGG38W; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 pj51Us;pj51Us; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 PN6eci;PN6eci; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 pTkUf4;pTkUf4; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 pUu2JC;pUu2JC; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 s5hcLD;s5hcLD; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 scsezq;scsezq; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 SCXkKv;SCXkKv; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 sIBZsl;sIBZsl; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 sJMbWt;sJMbWt; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 SlOoch;SlOoch; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 sr3dAX;sr3dAX; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 SXEpRU;SXEpRU; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 sYXah5;sYXah5; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 V81PzV;V81PzV; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 VaqNpO;VaqNpO; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 VKVM04;VKVM04; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 VMfOeh;VMfOeh; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 VtMQop;VtMQop; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 vu9C4Q;vu9C4Q; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S3 VZgLBG;VZgLBG; C:\Program Files\PC Wizard 2010\Data\pcwizntl.exe [2009-09-05 53248]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Re: Prosím kontrolu logu

Napsal: 01 kvě 2012 08:05
od vyosek
Zdravim a pekny den preji :)

:arrow: Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

Re: Prosím kontrolu logu

Napsal: 02 kvě 2012 19:17
od postak4
Nebylo to úplně bez problémů.. ComboFix zůstal pořád viset na : Nevypínejte počítač .. restartuje se sám atd.. dvě hodiny. Vyskákalo asi 15 errorů aplikací nechal jsem všechno být .. nakonec jsem ho vypnul a po restartu najel klasicky do výpisu logu.. Pokud jsem to zdrbal tak napište a já to zopakuji ;-) .. Děkuji



ComboFix 12-05-02.02 - Postak 4 02.05.2012 17:06:53.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3071.2092 [GMT 2:00]
Spuštěný z: c:\documents and settings\Postak 4\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\msvrc20.dll
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\ST6UNST.000
c:\windows\system32\IWPDGINA.DLL
c:\windows\system32\OLD17.tmp
c:\windows\system32\OLD1A.tmp
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-04-02 do 2012-05-02 )))))))))))))))))))))))))))))))
.
.
2012-04-30 10:54 . 2012-04-30 10:55 -------- d-----w- C:\rsit
2012-04-30 08:17 . 2012-02-23 12:25 21336 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2012-04-30 08:00 . 2012-04-30 08:00 -------- d-----w- c:\program files\Common Files\Adobe
2012-04-30 07:51 . 2012-04-30 07:52 -------- d-----w- c:\program files\Mozilla Maintenance Service
2012-04-30 07:51 . 2012-04-30 07:51 588728 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll
2012-04-30 07:51 . 2012-04-30 07:51 157352 ----a-w- c:\program files\Mozilla Firefox\maintenanceservice_installer.exe
2012-04-30 07:51 . 2012-04-30 07:51 129976 ----a-w- c:\program files\Mozilla Firefox\maintenanceservice.exe
2012-04-30 07:51 . 2012-04-30 07:51 626688 ----a-w- c:\program files\Mozilla Firefox\msvcr80.dll
2012-04-30 07:51 . 2012-04-30 07:51 548864 ----a-w- c:\program files\Mozilla Firefox\msvcp80.dll
2012-04-30 07:51 . 2012-04-30 07:51 479232 ----a-w- c:\program files\Mozilla Firefox\msvcm80.dll
2012-04-30 07:51 . 2012-04-30 07:51 43960 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll
2012-04-29 19:10 . 2012-04-29 19:10 -------- d-----w- c:\documents and settings\Postak 4\Local Settings\Data aplikací\GHISLER
2012-04-29 18:32 . 2012-04-29 18:32 -------- d-----w- c:\windows\system32\config\systemprofile\Data aplikací\IObit
2012-04-29 11:00 . 2012-04-29 11:00 -------- d-----w- c:\documents and settings\All Users\Data aplikací\IObit
2012-04-29 10:59 . 2012-04-29 11:01 -------- d-----w- c:\documents and settings\Postak 4\Data aplikací\IObit
2012-04-29 10:59 . 2012-04-29 10:59 -------- d-----w- c:\program files\IObit
2012-04-29 10:43 . 2012-04-29 10:47 -------- d-----w- c:\program files\RegCleaner
2012-04-29 08:25 . 2011-03-04 19:44 59888 ------w- c:\windows\system32\pxwma.dll
2012-04-29 08:25 . 2012-04-29 08:26 -------- d-----w- c:\documents and settings\Postak 4\Data aplikací\OpenCandy
2012-04-28 07:56 . 2012-04-28 07:56 -------- d-----w- c:\program files\Common Files\Skype
2012-04-25 18:11 . 2012-04-25 18:11 -------- d-----w- c:\documents and settings\Postak 4\Data aplikací\DDMSettings
2012-04-25 14:58 . 2012-04-25 16:31 -------- d-----w- c:\program files\Internet Camera
2012-04-24 22:30 . 2012-04-24 22:30 -------- d-----w- c:\windows\DD1865F0AD7340FBB23E1822E02396FF.TMP
2012-04-24 19:05 . 2012-04-24 19:05 -------- d-----w- c:\documents and settings\Default User\Local Settings\Data aplikací\Microsoft Help
2012-04-24 18:42 . 2012-04-24 18:42 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2012-04-24 18:32 . 2010-06-02 02:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2012-04-24 18:32 . 2010-06-02 02:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2012-04-24 18:32 . 2010-06-02 02:55 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2012-04-24 18:32 . 2010-05-26 09:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2012-04-24 18:32 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2012-04-24 18:32 . 2010-05-26 09:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2012-04-24 18:32 . 2010-05-26 09:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2012-04-24 18:32 . 2010-05-26 09:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2012-04-24 18:32 . 2010-02-04 08:01 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2012-04-24 18:32 . 2010-02-04 08:01 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2012-04-24 18:32 . 2010-02-04 08:01 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2012-04-24 18:32 . 2010-02-04 08:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2012-04-24 18:16 . 2012-03-06 23:01 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-04-24 18:16 . 2012-03-06 23:03 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-04-24 18:16 . 2012-03-06 23:02 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-04-24 18:16 . 2012-03-06 23:01 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-04-24 18:16 . 2012-03-06 23:03 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-04-24 18:16 . 2012-03-06 23:01 95704 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-04-24 18:16 . 2012-03-06 23:01 89048 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-04-24 18:16 . 2012-03-06 22:58 24920 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-04-24 18:15 . 2012-03-06 23:15 41184 ----a-w- c:\windows\avastSS.scr
2012-04-24 18:15 . 2012-03-06 23:15 201352 ----a-w- c:\windows\system32\aswBoot.exe
2012-04-24 17:53 . 2012-04-24 17:53 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-04-24 17:53 . 2012-04-24 17:53 -------- d-----w- c:\program files\Common Files\Java
2012-04-24 17:52 . 2012-04-24 17:52 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-04-24 17:40 . 2012-01-11 19:07 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2012-04-24 17:40 . 2012-01-11 19:07 3072 ------w- c:\windows\system32\iacenc.dll
2012-04-24 17:23 . 2012-04-24 17:23 -------- d-----w- c:\program files\LogMeIn Hamachi
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-30 20:16 . 2010-03-28 16:01 138160 -c--a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-04-30 20:16 . 2010-03-28 16:01 271200 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-04-30 20:16 . 2009-02-27 21:52 271200 -c--a-w- c:\windows\system32\PnkBstrB.xtr
2012-04-30 19:31 . 2010-03-28 16:01 214520 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-04-24 17:53 . 2011-05-14 08:33 70304 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-24 17:52 . 2010-06-04 09:43 472808 -c--a-w- c:\windows\system32\deployJava1.dll
2012-03-11 21:13 . 2011-01-06 16:37 97760 -c--a-w- c:\windows\system32\drivers\inspect.sys
2012-03-11 21:13 . 2010-03-03 15:54 31704 -c--a-w- c:\windows\system32\drivers\cmdhlp.sys
2012-03-11 21:13 . 2010-03-23 16:40 494968 -c--a-w- c:\windows\system32\drivers\cmdGuard.sys
2012-03-11 21:13 . 2010-03-03 15:54 18056 -c--a-w- c:\windows\system32\drivers\cmderd.sys
2012-03-11 21:13 . 2011-10-23 09:53 33984 ----a-w- c:\windows\system32\cmdcsr.dll
2012-03-11 21:13 . 2010-03-03 15:54 301224 ----a-w- c:\windows\system32\guard32.dll
2012-03-01 10:59 . 2004-08-17 13:49 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-03-01 10:59 . 2004-08-17 13:49 916992 ----a-w- c:\windows\system32\wininet.dll
2012-03-01 10:59 . 2004-08-17 13:49 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-02-29 14:10 . 2004-08-17 13:49 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10 . 2004-08-17 13:49 148480 ----a-w- c:\windows\system32\imagehlp.dll
2012-02-29 12:17 . 2004-08-17 13:44 385024 ----a-w- c:\windows\system32\html.iec
2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-02-03 09:57 . 2004-08-17 13:44 1860096 ----a-w- c:\windows\system32\win32k.sys
2012-04-30 07:51 . 2011-03-27 17:58 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2011-06-09 14:00 . 2011-06-09 14:00 119808 -c--a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-06 23:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\Postak 4\Data aplikací\Dropbox\bin\DropboxExt.13.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\Postak 4\Data aplikací\Dropbox\bin\DropboxExt.13.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\Postak 4\Data aplikací\Dropbox\bin\DropboxExt.13.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Secure Disks]
@="{666C7836-A9B6-4AB4-94ED-DC238C81E925}"
[HKEY_CLASSES_ROOT\CLSID\{666C7836-A9B6-4AB4-94ED-DC238C81E925}]
2006-10-26 23:35 391168 ----a-r- c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]
"Advanced SystemCare 5"="c:\program files\IObit\Advanced SystemCare 5\ASCTray.exe" [2012-03-06 574296]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"CognizanceTS"="c:\progra~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll" [2003-12-22 17920]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-05-25 786521]
"ACMON"="c:\program files\ASUS\Splendid\ACMON.exe" [2007-07-10 851968]
"Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2007-07-05 1040384]
"atchk"="c:\program files\Intel\AMT\atchk.exe" [2007-06-11 404248]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2006-07-26 90112]
"ATKHOTKEY"="c:\program files\ATK Hotkey\Hcontrol.exe" [2007-11-28 229376]
"MsgTranAgt"="c:\program files\ATK Hotkey\MsgTranAgt.exe" [2007-11-04 106496]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-06-01 823296]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-06-01 974848]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2008-03-05 241664]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2007-12-10 323584]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-03-11 6749512]
"RTHDCPL"="RTHDCPL.EXE" [2007-12-12 16859136]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-06 4241512]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13750272]
"nwiz"="nwiz.exe" [2009-08-19 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-08-19 86016]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2011-06-09 30192]
"googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Default User\Nabídka Start\Programy\Po spuštění\
IconPackager.lnk - c:\program files\Stardock\Object Desktop\MyColors\IconPackager.exe [N/A]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2007-6-14 425984]
.
c:\documents and settings\Default User\Nabídka Start\Programy\Po spuštění\
IconPackager.lnk - c:\program files\Stardock\Object Desktop\MyColors\IconPackager.exe [N/A]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard]
2007-02-07 00:30 74240 ----a-r- c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
[HKLM\~\startupfolder\C:^Documents and Settings^Postak 4^Nabídka Start^Programy^Po spuštění^MagicDisc.lnk]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2006-11-02 07:27 61440 -c--a-w- c:\program files\ASUS\ATK Media\DMedia.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2010-04-01 09:16 357696 -c--a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2011-07-28 23:08 1259376 -c--a-w- c:\program files\DivX\DivX Update\DivXUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
2007-01-01 21:22 3739648 -c--a-w- c:\program files\Google\Google Talk\googletalk.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2012-02-28 15:38 1987976 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2007-03-01 13:57 153136 -c--a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2009-09-04 23:54 417792 -c--a-w- c:\program files\QuickTime\QTTask.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-01-18 12:02 254696 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Total CMA Pack]
2009-09-01 15:18 43255 -c--a-w- c:\program files\Total CMA Pack\Total CMA Pack.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WatcherHelper]
2007-03-28 13:14 114688 -c--a-w- c:\program files\Sierra Wireless Inc\3G Watcher\WaHelper.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Documents and Settings\\Postak 4\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Postak 4\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"d:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"d:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MP.exe"=
"d:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MPLite.exe"=
"e:\\Program Files\\S.T.A.L.K.E.R. - Call of Pripyat\\bin\\xrEngine.exe"=
"e:\\Program Files\\S.T.A.L.K.E.R. - Call of Pripyat\\bin\\dedicated\\xrEngine.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\Program Files\\Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"d:\\Program Files\\Splinter Cell Conviction\\src\\system\\gu.exe"=
"d:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 2\\iw4sp.exe"=
"d:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 2\\iw4mp.exe"=
"d:\\Program Files\\Steam\\SteamApps\\common\\crysis 2 - demo\\Bin32\\Crysis2Demo.exe"=
"c:\\Program Files\\ICQ7.4\\ICQ.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"d:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"d:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [24.1.2009 17:28 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [24.4.2012 20:16 612184]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [24.4.2012 20:16 337880]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [23.3.2010 18:40 494968]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [3.3.2010 17:54 31704]
R1 ItSDisk;ItSDisk;c:\windows\system32\drivers\itsdisk.sys [17.5.2006 2:14 23232]
R1 kbfilter;Keyboard Filter Driver;c:\windows\system32\drivers\kbfilter.sys [16.1.2010 15:39 12856]
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files\IObit\Advanced SystemCare 5\ASCService.exe [29.4.2012 12:59 913752]
R2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe -k Cognizance [17.8.2004 15:49 14336]
R2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe -k Cognizance [17.8.2004 15:49 14336]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [24.4.2012 20:16 20696]
R2 atchksrv;Intel(R) Active Management Technology System Status Service;c:\program files\Intel\AMT\atchksrv.exe [22.2.2009 18:47 183064]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [28.2.2012 17:38 1373576]
R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service;c:\windows\system32\StkCSrv.exe [24.1.2009 21:03 24576]
R2 UNS;Intel(R) Active Management Technology User Notification Service;c:\program files\Intel\AMT\UNS.exe [22.2.2009 18:47 1489688]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [24.1.2009 21:36 36608]
R3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam;c:\windows\system32\drivers\StkCMini.sys [24.1.2009 21:03 1260672]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [29.2.2012 8:50 158856]
S3 2CkyYL;2CkyYL;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 2e4wvD;2e4wvD;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 2QPxj1;2QPxj1;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 2rYNSl;2rYNSl;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 2tFv6t;2tFv6t;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 51CXHY;51CXHY;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 52MZvf;52MZvf;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 5FrWSE;5FrWSE;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 5G1Y6M;5G1Y6M;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 5T1Vdu;5T1Vdu;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 8bz8pY;8bz8pY;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 8d9ATg;8d9ATg;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 8PVBI0;8PVBI0;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 8qe70F;8qe70F;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 8ro9es;8ro9es;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 ALSysIO;ALSysIO;\??\c:\docume~1\POSTAK~1\LOCALS~1\Temp\ALSysIO.sys --> c:\docume~1\POSTAK~1\LOCALS~1\Temp\ALSysIO.sys [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [9.6.2009 21:36 1684736]
S3 BCGiqZ;BCGiqZ;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 BQRh2F;BQRh2F;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 c6681V;c6681V;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 cJaaY3;cJaaY3;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 cKl8CB;cKl8CB;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 Cl7m8L;Cl7m8L;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 cXFZjj;cXFZjj;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 cZQ7Nr;cZQ7Nr;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 f82flk;f82flk;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 FaYrr2;FaYrr2;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 FbjtVg;FbjtVg;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 FH3oOa;FH3oOa;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 Fojq2E;Fojq2E;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 FqusgM;FqusgM;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 fTikNp;fTikNp;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [9.6.2011 16:00 30192]
S3 i3VKPq;i3VKPq;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 IBLSP3;IBLSP3;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 ICWU2g;ICWU2g;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 iIAJaW;iIAJaW;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 ikzHwP;ikzHwP;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 IP0RaF;IP0RaF;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 IQhTDN;IQhTDN;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 iWLIlD;iWLIlD;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 iyeG75;iyeG75;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 L0n1bG;L0n1bG;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 L1y3FN;L1y3FN;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 l7ctJj;l7ctJj;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 l8Iuxr;l8Iuxr;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 LKT6ip;LKT6ip;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 Ll82Qa;Ll82Qa;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 lLmsUQ;lLmsUQ;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 LnJ44h;LnJ44h;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 LSdzxc;LSdzxc;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 lsxu8X;lsxu8X;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 LYe5t1;LYe5t1;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 mfTwaV;mfTwaV;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [30.4.2012 9:51 129976]
S3 mu7vmB;mu7vmB;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 p254xK;p254xK;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 P9RfR2;P9RfR2;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 PBcD4A;PBcD4A;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 PckdnO;PckdnO;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 pGG38W;pGG38W;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 pj51Us;pj51Us;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 PN6eci;PN6eci;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 PSSDK42;PSSDK42;c:\windows\system32\drivers\pssdk42.sys [12.10.2009 18:00 38976]
S3 pTkUf4;pTkUf4;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 pUu2JC;pUu2JC;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 s5hcLD;s5hcLD;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 scsezq;scsezq;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 SCXkKv;SCXkKv;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 sIBZsl;sIBZsl;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 sJMbWt;sJMbWt;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 SlOoch;SlOoch;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 sr3dAX;sr3dAX;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 SXEpRU;SXEpRU;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 sYXah5;sYXah5;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 V81PzV;V81PzV;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 VaqNpO;VaqNpO;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 VKVM04;VKVM04;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 VMfOeh;VMfOeh;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 VtMQop;VtMQop;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 vu9C4Q;vu9C4Q;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 VZgLBG;VZgLBG;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S3 y26oFY;y26oFY;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 YBdxMO;YBdxMO;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 yGHnQE;yGHnQE;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 Yioz02;Yioz02;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 yISp4s;yISp4s;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 YPIwY5;YPIwY5;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 YU90pq;YU90pq;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 YxSyBi;YxSyBi;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 z4nqtC;z4nqtC;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
S3 zpcri0;zpcri0;c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s --> c:\program files\PC Wizard 2010\Data\pcwizntl.exe -s [?]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - d:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files\ICQ7.4\ICQ.exe
TCP: Interfaces\{A07942C7-7372-4936-8687-8DC48AD58223}: NameServer = 212.111.0.10,194.213.32.237
TCP: Interfaces\{AECB3CBC-EF3D-433D-A7E6-0C3537425A79}: NameServer = 212.111.0.10,194.213.32.237
TCP: Interfaces\{E35B569D-CFCD-49D5-BBE2-25283209E265}: NameServer = 8.26.56.26,156.154.70.22
FF - ProfilePath - c:\documents and settings\Postak 4\Data aplikací\Mozilla\Firefox\Profiles\6ljcoynq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Notify-WB - (no file)
MSConfigStartUp-Adobe ARM - c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
MSConfigStartUp-Adobe Reader Speed Launcher - c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-05-02 19:53
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwClose
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,55,ca,2e,2a,22,5e,c6,4e,ba,bb,55,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,55,ca,2e,2a,22,5e,c6,4e,ba,bb,55,\
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1316)
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\bin\ItMsg.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\TrayIcon.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll
.
- - - - - - - > 'lsass.exe'(1372)
c:\windows\system32\MPR.dll
c:\windows\system32\guard32.dll
.
- - - - - - - > 'explorer.exe'(4040)
c:\windows\system32\guard32.dll
c:\windows\system32\nview.dll
c:\windows\system32\NVWRSCS.DLL
c:\windows\system32\APSHook.dll
c:\windows\system32\msi.dll
c:\documents and settings\Postak 4\Data aplikací\Dropbox\bin\DropboxExt.13.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll
c:\windows\system32\MPR.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll
c:\windows\system32\wpdshext.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\Audiodev.dll
c:\windows\system32\WMVCore.DLL
c:\windows\system32\WMASF.DLL
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\Amhooker.dll
c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll
c:\windows\system32\StkCWIA.dll
.
- - - - - - - > 'csrss.exe'(1284)
c:\windows\system32\cmdcsr.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Intel\AMT\LMS.exe
c:\windows\system32\oodag.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\ASUS\NB Probe\SPM\spmgr.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
c:\program files\Intel\Wireless\Bin\WLKeeper.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\SearchIndexer.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\System32\SCardSvr.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\ACEngSvr.exe
c:\program files\ATK Hotkey\ATKOSD.exe
c:\program files\Intel\Wireless\Bin\Dot1XCfg.exe
c:\program files\ATK Hotkey\KBFiltr.exe
c:\program files\ATK Hotkey\WDC.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\rundll32.exe
c:\program files\Common Files\Ahead\Lib\NMIndexingService.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
c:\windows\system32\wscntfy.exe
c:\program files\COMODO\COMODO Internet Security\cfpupdat.exe
.
**************************************************************************
.
Celkový čas: 2012-05-02 20:01:50 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-05-02 18:01
.
Před spuštěním: 7 189 942 272
Po spuštění: 7 085 785 088
.
- - End Of File - - BB6D6A6482DD50527B13F64968AF79CF

Re: Prosím kontrolu logu

Napsal: 03 kvě 2012 13:48
od vyosek
:arrow: Odinstalujte Advanced SystemCare 5 a nasledne i vse od IOBit - jsou to cinske smejdy a spise jen skodi nez jsou uzitkem. Hledaji nesmyslne a neexistujici problemy, databazi haveti ukradli jine renomovane spolecnosti

:arrow: Pokud nemate, tak presunte Combofix na plochu
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize
  • Kód: Vybrat vše

    KillAll::
    
    Folder::
    c:\windows\DD1865F0AD7340FBB23E1822E02396FF.TMP
    c:\windows\system32\config\systemprofile\Data aplikací\IObit
    c:\documents and settings\All Users\Data aplikací\IObit
    c:\documents and settings\Postak 4\Data aplikací\IObit
    c:\program files\IObit
    c:\program files\PC Wizard 2010
    
    Driver::
    2CkyYL
    2e4wvD
    2QPxj1
    2rYNSl
    2tFv6t
    51CXHY
    52MZvf
    5FrWSE
    5G1Y6M
    5T1Vdu
    8bz8pY
    8d9ATg
    8PVBI0
    8qe70F
    8ro9es
    ALSysIO
    BCGiqZ
    BQRh2F
    c6681V
    cJaaY3
    cKl8CB
    Cl7m8L
    cXFZjj
    cZQ7Nr
    f82flk
    FaYrr2
    FbjtVg
    FH3oOa
    Fojq2E
    FqusgM
    fTikNp
    i3VKPq
    IBLSP3
    ICWU2g
    iIAJaW
    ikzHwP
    IP0RaF
    IQhTDN
    iWLIlD
    iyeG75
    L0n1bG
    L1y3FN
    l7ctJj
    l8Iuxr
    LKT6ip
    Ll82Qa
    lLmsUQ
    LnJ44h
    LSdzxc
    lsxu8X
    LYe5t1
    mfTwaV
    mu7vmB
    p254xK
    P9RfR2
    PBcD4A
    PckdnO
    pGG38W
    pj51Us
    PN6eci
    pTkUf4
    pUu2JC
    s5hcLD
    scsezq
    SCXkKv
    sIBZsl
    sJMbWt
    SlOoch
    sr3dAX
    SXEpRU
    sYXah5
    V81PzV
    VaqNpO
    VKVM04
    VMfOeh
    VtMQop
    vu9C4Q
    VZgLBG
    y26oFY
    YBdxMO
    yGHnQE
    Yioz02
    yISp4s
    YPIwY5
    YU90pq
    YxSyBi
    z4nqtC
    zpcri0
    
    Registry::
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=-
    "Advanced SystemCare 5"=-
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\googletalk]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    
    Firefox::
    FF - ProfilePath - c:\documents and settings\Postak 4\Data aplikací\Mozilla\Firefox\Profiles\6ljcoynq.default\
    FF - prefs.js: keyword.URL - hxxp://search.sweetim.com/search.asp?src=2&q=
    
    RegLock::
    [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
    
    RegNull::
    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
    
    ClearJavaCache::
    
    Reboot::
    
  • Ulozte vytvoreny TXT jako CFScript.txt
  • Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
    Obrázek
  • Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
:arrow: Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

Re: Prosím kontrolu logu

Napsal: 04 kvě 2012 21:11
od postak4
Dobrý den,
tak jsem vše udělal jak jste napsal a průběh byl bez problémů. Před tím jsem ještě odinstaloval aplikaci PcWizard. Nb se restartoval bez problémů a už od první aplikace ComboFixu jsem nezaznamenal samovolné spuštění .. Systém startuje svižněji..

ComboFix 12-05-02.02 - Postak 4 04.05.2012 21:50:05.3.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3071.1946 [GMT 2:00]
Spuštěný z: c:\documents and settings\Postak 4\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Postak 4\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: COMODO Firewall *Enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\IObit
c:\program files\IObit\Advanced SystemCare 5\ASCServiceLog\2012-04-29.log
c:\program files\IObit\Advanced SystemCare 5\ASCServiceLog\2012-04-30.log
c:\program files\IObit\Advanced SystemCare 5\ASCServiceLog\2012-05-01.log
c:\program files\IObit\Advanced SystemCare 5\ASCServiceLog\2012-05-02.log
c:\program files\IObit\Advanced SystemCare 5\ASCServiceLog\2012-05-03.log
c:\program files\IObit\Advanced SystemCare 5\ASCv5ExtMenu.tmp
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-04-30 03-24-39
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-04-30 08-50-16
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-04-30 12-49-10
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-04-30 21-01-28
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-05-01 14-29-10
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-05-02 17-01-51
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-05-02 20-10-24
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-05-03 08-57-00
c:\program files\IObit\Advanced SystemCare 5\Boottime\BootTimeData\2012-05-04 21-38-36
c:\program files\IObit\Advanced SystemCare 5\Boottime\path.ini
c:\program files\IObit\Advanced SystemCare 5\BootTimeLog\Defrag2012-04-30(10-46-31).log
c:\program files\IObit\Advanced SystemCare 5\checkinfo.txt
c:\program files\IObit\Advanced SystemCare 5\LatestNews\imagenews.png
c:\program files\IObit\Advanced SystemCare 5\LatestNews\LatestNews.ini
c:\program files\IObit\Advanced SystemCare 5\SecurityHole_Backup\KB2598845.exe
c:\program files\IObit\Advanced SystemCare 5\SecurityHole_Backup\KB2632503.exe
c:\program files\IObit\Advanced SystemCare 5\SecurityHole_Backup\KB931125.exe
c:\program files\IObit\Advanced SystemCare 5\SecurityHoleScan.log
c:\program files\IObit\Advanced SystemCare 5\sh.dat
c:\program files\IObit\Advanced SystemCare 5\Uninstall.log
c:\program files\IObit\Advanced SystemCare 5\Update\Update.Ini
c:\program files\IObit\Advanced SystemCare 5\UpdateHistory.txt
c:\windows\DD1865F0AD7340FBB23E1822E02396FF.TMP
c:\windows\DD1865F0AD7340FBB23E1822E02396FF.TMP\WiseCustomCalla.dll
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_2CKYYL
-------\Legacy_2E4WVD
-------\Legacy_2QPXJ1
-------\Legacy_2RYNSL
-------\Legacy_2TFV6T
-------\Legacy_51CXHY
-------\Legacy_52MZVF
-------\Legacy_5FRWSE
-------\Legacy_5G1Y6M
-------\Legacy_5T1VDU
-------\Legacy_8BZ8PY
-------\Legacy_8D9ATG
-------\Legacy_8PVBI0
-------\Legacy_8QE70F
-------\Legacy_8RO9ES
-------\Legacy_ALSYSIO
-------\Legacy_BCGIQZ
-------\Legacy_BQRH2F
-------\Legacy_C6681V
-------\Legacy_CJAAY3
-------\Legacy_CKL8CB
-------\Legacy_CL7M8L
-------\Legacy_CXFZJJ
-------\Legacy_CZQ7NR
-------\Legacy_F82FLK
-------\Legacy_FAYRR2
-------\Legacy_FBJTVG
-------\Legacy_FH3OOA
-------\Legacy_FOJQ2E
-------\Legacy_FQUSGM
-------\Legacy_FTIKNP
-------\Legacy_I3VKPQ
-------\Legacy_IBLSP3
-------\Legacy_ICWU2G
-------\Legacy_IIAJAW
-------\Legacy_IKZHWP
-------\Legacy_IP0RAF
-------\Legacy_IQHTDN
-------\Legacy_IWLILD
-------\Legacy_IYEG75
-------\Legacy_L0N1BG
-------\Legacy_L1Y3FN
-------\Legacy_L7CTJJ
-------\Legacy_L8IUXR
-------\Legacy_LKT6IP
-------\Legacy_LL82QA
-------\Legacy_LLMSUQ
-------\Legacy_LNJ44H
-------\Legacy_LSDZXC
-------\Legacy_LSXU8X
-------\Legacy_LYE5T1
-------\Legacy_MFTWAV
-------\Legacy_MU7VMB
-------\Legacy_P254XK
-------\Legacy_P9RFR2
-------\Legacy_PBCD4A
-------\Legacy_PCKDNO
-------\Legacy_PGG38W
-------\Legacy_PJ51US
-------\Legacy_PN6ECI
-------\Legacy_PTKUF4
-------\Legacy_PUU2JC
-------\Legacy_S5HCLD
-------\Legacy_SCSEZQ
-------\Legacy_SCXKKV
-------\Legacy_SIBZSL
-------\Legacy_SJMBWT
-------\Legacy_SLOOCH
-------\Legacy_SR3DAX
-------\Legacy_SXEPRU
-------\Legacy_SYXAH5
-------\Legacy_V81PZV
-------\Legacy_VAQNPO
-------\Legacy_VKVM04
-------\Legacy_VMFOEH
-------\Legacy_VTMQOP
-------\Legacy_VU9C4Q
-------\Legacy_VZGLBG
-------\Legacy_Y26OFY
-------\Legacy_YBDXMO
-------\Legacy_YGHNQE
-------\Legacy_YIOZ02
-------\Legacy_YISP4S
-------\Legacy_YPIWY5
-------\Legacy_YU90PQ
-------\Legacy_YXSYBI
-------\Legacy_Z4NQTC
-------\Legacy_ZPCRI0
-------\Service_ALSysIO
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-04-04 do 2012-05-04 )))))))))))))))))))))))))))))))
.
.
2012-05-03 08:32 . 2011-06-21 09:24 32768 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2012-05-03 08:32 . 2012-05-03 08:32 -------- d-----w- c:\documents and settings\Postak 4\Data aplikací\Spyware Terminator
2012-05-03 08:32 . 2012-05-04 19:36 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spyware Terminator
2012-05-03 08:31 . 2012-05-03 08:32 -------- d-----w- c:\program files\Spyware Terminator
2012-04-30 10:54 . 2012-04-30 10:55 -------- d-----w- C:\rsit
2012-04-30 08:17 . 2012-02-23 12:25 21336 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2012-04-30 08:00 . 2012-04-30 08:00 -------- d-----w- c:\program files\Common Files\Adobe
2012-04-30 07:51 . 2012-04-30 07:52 -------- d-----w- c:\program files\Mozilla Maintenance Service
2012-04-30 07:51 . 2012-04-30 07:51 588728 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll
2012-04-30 07:51 . 2012-04-30 07:51 157352 ----a-w- c:\program files\Mozilla Firefox\maintenanceservice_installer.exe
2012-04-30 07:51 . 2012-04-30 07:51 129976 ----a-w- c:\program files\Mozilla Firefox\maintenanceservice.exe
2012-04-30 07:51 . 2012-04-30 07:51 626688 ----a-w- c:\program files\Mozilla Firefox\msvcr80.dll
2012-04-30 07:51 . 2012-04-30 07:51 548864 ----a-w- c:\program files\Mozilla Firefox\msvcp80.dll
2012-04-30 07:51 . 2012-04-30 07:51 479232 ----a-w- c:\program files\Mozilla Firefox\msvcm80.dll
2012-04-30 07:51 . 2012-04-30 07:51 43960 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll
2012-04-29 19:10 . 2012-04-29 19:10 -------- d-----w- c:\documents and settings\Postak 4\Local Settings\Data aplikací\GHISLER
2012-04-29 18:32 . 2012-04-29 18:32 -------- d-----w- c:\windows\system32\config\systemprofile\Data aplikací\IObit
2012-04-29 11:00 . 2012-04-29 11:00 -------- d-----w- c:\documents and settings\All Users\Data aplikací\IObit
2012-04-29 10:59 . 2012-04-29 11:01 -------- d-----w- c:\documents and settings\Postak 4\Data aplikací\IObit
2012-04-29 10:43 . 2012-04-29 10:47 -------- d-----w- c:\program files\RegCleaner
2012-04-29 08:25 . 2011-03-04 19:44 59888 ------w- c:\windows\system32\pxwma.dll
2012-04-29 08:25 . 2012-04-29 08:26 -------- d-----w- c:\documents and settings\Postak 4\Data aplikací\OpenCandy
2012-04-28 07:56 . 2012-04-28 07:56 -------- d-----w- c:\program files\Common Files\Skype
2012-04-25 18:11 . 2012-04-25 18:11 -------- d-----w- c:\documents and settings\Postak 4\Data aplikací\DDMSettings
2012-04-24 19:05 . 2012-04-24 19:05 -------- d-----w- c:\documents and settings\Default User\Local Settings\Data aplikací\Microsoft Help
2012-04-24 18:42 . 2012-04-24 18:42 -------- d-sh--w- c:\documents and settings\Default User\IETldCache
2012-04-24 18:32 . 2010-06-02 02:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2012-04-24 18:32 . 2010-06-02 02:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2012-04-24 18:32 . 2010-06-02 02:55 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2012-04-24 18:32 . 2010-05-26 09:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2012-04-24 18:32 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2012-04-24 18:32 . 2010-05-26 09:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2012-04-24 18:32 . 2010-05-26 09:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2012-04-24 18:32 . 2010-05-26 09:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2012-04-24 18:32 . 2010-02-04 08:01 74072 ----a-w- c:\windows\system32\XAPOFX1_4.dll
2012-04-24 18:32 . 2010-02-04 08:01 528216 ----a-w- c:\windows\system32\XAudio2_6.dll
2012-04-24 18:32 . 2010-02-04 08:01 238936 ----a-w- c:\windows\system32\xactengine3_6.dll
2012-04-24 18:32 . 2010-02-04 08:01 22360 ----a-w- c:\windows\system32\X3DAudio1_7.dll
2012-04-24 18:16 . 2012-03-06 23:01 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-04-24 18:16 . 2012-03-06 23:03 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-04-24 18:16 . 2012-03-06 23:02 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-04-24 18:16 . 2012-03-06 23:01 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-04-24 18:16 . 2012-03-06 23:03 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-04-24 18:16 . 2012-03-06 23:01 95704 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-04-24 18:16 . 2012-03-06 23:01 89048 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-04-24 18:16 . 2012-03-06 22:58 24920 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-04-24 18:15 . 2012-03-06 23:15 41184 ----a-w- c:\windows\avastSS.scr
2012-04-24 18:15 . 2012-03-06 23:15 201352 ----a-w- c:\windows\system32\aswBoot.exe
2012-04-24 17:53 . 2012-04-24 17:53 418464 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-04-24 17:53 . 2012-04-24 17:53 -------- d-----w- c:\program files\Common Files\Java
2012-04-24 17:52 . 2012-04-24 17:52 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-04-24 17:40 . 2012-01-11 19:07 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2012-04-24 17:40 . 2012-01-11 19:07 3072 ------w- c:\windows\system32\iacenc.dll
2012-04-24 17:23 . 2012-04-24 17:23 -------- d-----w- c:\program files\LogMeIn Hamachi
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-04-30 20:16 . 2010-03-28 16:01 138160 -c--a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-04-30 20:16 . 2010-03-28 16:01 271200 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-04-30 20:16 . 2009-02-27 21:52 271200 -c--a-w- c:\windows\system32\PnkBstrB.xtr
2012-04-30 19:31 . 2010-03-28 16:01 214520 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-04-24 17:53 . 2011-05-14 08:33 70304 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-24 17:52 . 2010-06-04 09:43 472808 -c--a-w- c:\windows\system32\deployJava1.dll
2012-03-11 21:13 . 2011-01-06 16:37 97760 -c--a-w- c:\windows\system32\drivers\inspect.sys
2012-03-11 21:13 . 2010-03-03 15:54 31704 -c--a-w- c:\windows\system32\drivers\cmdhlp.sys
2012-03-11 21:13 . 2010-03-23 16:40 494968 -c--a-w- c:\windows\system32\drivers\cmdGuard.sys
2012-03-11 21:13 . 2010-03-03 15:54 18056 -c--a-w- c:\windows\system32\drivers\cmderd.sys
2012-03-11 21:13 . 2011-10-23 09:53 33984 ----a-w- c:\windows\system32\cmdcsr.dll
2012-03-11 21:13 . 2010-03-03 15:54 301224 ----a-w- c:\windows\system32\guard32.dll
2012-03-01 10:59 . 2004-08-17 13:49 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-03-01 10:59 . 2004-08-17 13:49 916992 ----a-w- c:\windows\system32\wininet.dll
2012-03-01 10:59 . 2004-08-17 13:49 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-02-29 14:10 . 2004-08-17 13:49 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-02-29 14:10 . 2004-08-17 13:49 148480 ----a-w- c:\windows\system32\imagehlp.dll
2012-02-29 12:17 . 2004-08-17 13:44 385024 ----a-w- c:\windows\system32\html.iec
2012-02-07 09:02 . 2012-02-07 09:02 1070352 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2012-04-30 07:51 . 2011-03-27 17:58 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
2011-06-09 14:00 . 2011-06-09 14:00 119808 -c--a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-06 23:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\Postak 4\Data aplikací\Dropbox\bin\DropboxExt.13.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\Postak 4\Data aplikací\Dropbox\bin\DropboxExt.13.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2009-12-09 01:19 94208 ----a-w- c:\documents and settings\Postak 4\Data aplikací\Dropbox\bin\DropboxExt.13.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\Secure Disks]
@="{666C7836-A9B6-4AB4-94ED-DC238C81E925}"
[HKEY_CLASSES_ROOT\CLSID\{666C7836-A9B6-4AB4-94ED-DC238C81E925}]
2006-10-26 23:35 391168 ----a-r- c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 630784]
"CognizanceTS"="c:\progra~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll" [2003-12-22 17920]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-05-25 786521]
"ACMON"="c:\program files\ASUS\Splendid\ACMON.exe" [2007-07-10 851968]
"Wireless Console 2"="c:\program files\Wireless Console 2\wcourier.exe" [2007-07-05 1040384]
"atchk"="c:\program files\Intel\AMT\atchk.exe" [2007-06-11 404248]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]
"Power_Gear"="c:\program files\ASUS\Power4 Gear\BatteryLife.exe" [2006-07-26 90112]
"ATKHOTKEY"="c:\program files\ATK Hotkey\Hcontrol.exe" [2007-11-28 229376]
"MsgTranAgt"="c:\program files\ATK Hotkey\MsgTranAgt.exe" [2007-11-04 106496]
"IntelZeroConfig"="c:\program files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-06-01 823296]
"IntelWireless"="c:\program files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-06-01 974848]
"WheelMouse"="c:\program files\A4Tech\Mouse\Amoumain.exe" [2008-03-05 241664]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2007-12-10 323584]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2012-03-11 6749512]
"RTHDCPL"="RTHDCPL.EXE" [2007-12-12 16859136]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-06 4241512]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-04-30 13750272]
"nwiz"="nwiz.exe" [2009-08-19 1657376]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-08-19 86016]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2011-06-09 30192]
"googletalk"="c:\program files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"SpywareTerminatorUpdater"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2012-03-28 3669680]
"SpywareTerminatorShield"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2012-03-28 2786480]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Default User\Nabídka Start\Programy\Po spuštění\
IconPackager.lnk - c:\program files\Stardock\Object Desktop\MyColors\IconPackager.exe [N/A]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2007-6-14 425984]
.
c:\documents and settings\Default User\Nabídka Start\Programy\Po spuštění\
IconPackager.lnk - c:\program files\Stardock\Object Desktop\MyColors\IconPackager.exe [N/A]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\OneCard]
2007-02-07 00:30 74240 ----a-r- c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
[HKLM\~\startupfolder\C:^Documents and Settings^Postak 4^Nabídka Start^Programy^Po spuštění^MagicDisc.lnk]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
2006-11-02 07:27 61440 -c--a-w- c:\program files\ASUS\ATK Media\DMedia.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Total CMA Pack]
2009-09-01 15:18 43255 -c--a-w- c:\program files\Total CMA Pack\Total CMA Pack.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WatcherHelper]
2007-03-28 13:14 114688 -c--a-w- c:\program files\Sierra Wireless Inc\3G Watcher\WaHelper.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Google\\Google Talk\\googletalk.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Documents and Settings\\Postak 4\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.dll"=
"c:\\Documents and Settings\\Postak 4\\Local Settings\\Data aplikací\\Google\\Google Talk Plugin\\googletalkplugin.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"d:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"d:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MP.exe"=
"d:\\Program Files\\Activision\\Wolfenstein\\MP\\Wolf2MPLite.exe"=
"e:\\Program Files\\S.T.A.L.K.E.R. - Call of Pripyat\\bin\\xrEngine.exe"=
"e:\\Program Files\\S.T.A.L.K.E.R. - Call of Pripyat\\bin\\dedicated\\xrEngine.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Activision\\Call of Duty 2\\CoD2MP_s.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\Program Files\\Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"d:\\Program Files\\Splinter Cell Conviction\\src\\system\\gu.exe"=
"d:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 2\\iw4sp.exe"=
"d:\\Program Files\\Steam\\SteamApps\\common\\call of duty modern warfare 2\\iw4mp.exe"=
"c:\\Program Files\\ICQ7.4\\ICQ.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version6\\TeamViewer_Service.exe"=
"d:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaW.exe"=
"d:\\Program Files\\Activision\\Call of Duty - World at War\\CoDWaWmp.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminator.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [24.1.2009 17:28 691696]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [24.4.2012 20:16 612184]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [24.4.2012 20:16 337880]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [23.3.2010 18:40 494968]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [3.3.2010 17:54 31704]
R1 ItSDisk;ItSDisk;c:\windows\system32\drivers\itsdisk.sys [17.5.2006 2:14 23232]
R1 kbfilter;Keyboard Filter Driver;c:\windows\system32\drivers\kbfilter.sys [16.1.2010 15:39 12856]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver;c:\windows\system32\drivers\sp_rsdrv2.sys [3.5.2012 10:32 32768]
R2 ASBroker;Logon Session Broker;c:\windows\System32\svchost.exe -k Cognizance [17.8.2004 15:49 14336]
R2 ASChannel;Local Communication Channel;c:\windows\System32\svchost.exe -k Cognizance [17.8.2004 15:49 14336]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [24.4.2012 20:16 20696]
R2 atchksrv;Intel(R) Active Management Technology System Status Service;c:\program files\Intel\AMT\atchksrv.exe [22.2.2009 18:47 183064]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [28.2.2012 17:38 1373576]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files\Spyware Terminator\st_rsser.exe [3.5.2012 10:32 482992]
R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service;c:\windows\system32\StkCSrv.exe [24.1.2009 21:03 24576]
R2 UNS;Intel(R) Active Management Technology User Notification Service;c:\program files\Intel\AMT\UNS.exe [22.2.2009 18:47 1489688]
R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [24.1.2009 21:36 36608]
R3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam;c:\windows\system32\drivers\StkCMini.sys [24.1.2009 21:03 1260672]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [29.2.2012 8:50 158856]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [9.6.2009 21:36 1684736]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [9.6.2011 16:00 30192]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [30.4.2012 9:51 129976]
S3 PSSDK42;PSSDK42;c:\windows\system32\drivers\pssdk42.sys [12.10.2009 18:00 38976]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Cognizance REG_MULTI_SZ ASBroker ASChannel
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = <local>
IE: E&xportovat do aplikace Microsoft Excel - d:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files\ICQ7.4\ICQ.exe
TCP: Interfaces\{A07942C7-7372-4936-8687-8DC48AD58223}: NameServer = 212.111.0.10,194.213.32.237
TCP: Interfaces\{AECB3CBC-EF3D-433D-A7E6-0C3537425A79}: NameServer = 212.111.0.10,194.213.32.237
TCP: Interfaces\{E35B569D-CFCD-49D5-BBE2-25283209E265}: NameServer = 8.26.56.26,156.154.70.22
FF - ProfilePath - c:\documents and settings\Postak 4\Data aplikací\Mozilla\Firefox\Profiles\6ljcoynq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-05-04 21:57
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwClose
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1268)
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\bin\ItMsg.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\TrayIcon.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\bin\brand.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsChnl.dll
.
- - - - - - - > 'lsass.exe'(1324)
c:\windows\system32\MPR.dll
c:\windows\system32\guard32.dll
.
- - - - - - - > 'explorer.exe'(5492)
c:\windows\system32\guard32.dll
c:\windows\system32\nview.dll
c:\windows\system32\NVWRSCS.DLL
c:\windows\system32\APSHook.dll
c:\windows\system32\msi.dll
c:\documents and settings\Postak 4\Data aplikací\Dropbox\bin\DropboxExt.13.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\SFSShell.dll
c:\windows\system32\MPR.dll
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItMsg.dll
c:\windows\system32\wpdshext.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\Audiodev.dll
c:\windows\system32\WMVCore.DLL
c:\windows\system32\WMASF.DLL
c:\windows\system32\Amhooker.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
.
- - - - - - - > 'csrss.exe'(1236)
c:\windows\system32\cmdcsr.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\program files\Intel\Wireless\Bin\S24EvMon.exe
c:\program files\ATKGFNEX\GFNEXSrv.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
c:\program files\Intel\Wireless\Bin\EvtEng.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Intel\AMT\LMS.exe
c:\windows\system32\oodag.exe
c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Intel\Wireless\Bin\RegSrvc.exe
c:\program files\ASUS\NB Probe\SPM\spmgr.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
c:\program files\Intel\Wireless\Bin\WLKeeper.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\SearchIndexer.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\System32\SCardSvr.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\ACEngSvr.exe
c:\windows\system32\wscntfy.exe
c:\program files\Intel\Wireless\Bin\Dot1XCfg.exe
c:\program files\ATK Hotkey\ATKOSD.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATK Hotkey\KBFiltr.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\ATK Hotkey\WDC.exe
c:\windows\system32\rundll32.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
c:\windows\system32\SearchProtocolHost.exe
c:\windows\system32\SearchFilterHost.exe
.
**************************************************************************
.
Celkový čas: 2012-05-04 22:03:08 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-05-04 20:03
ComboFix2.txt 2012-05-02 18:01
.
Před spuštěním: 8 204 443 648
Po spuštění: 8 346 759 168
.
- - End Of File - - B4EC8D6F6F536B3CE47F2112649DF426

Re: Prosím kontrolu logu

Napsal: 05 kvě 2012 19:00
od vyosek
:arrow: Odinstalujte Combofix
  • Prejmenujte ComboFix na Uninstall
  • Spustte jej
  • Tohle smaze Combofix a jeho slozky
:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: Dejte novy log z RSIT a napiste co PC

Re: Prosím kontrolu logu

Napsal: 05 kvě 2012 22:35
od postak4
Dobrý den,
tak jsem opět vše udělal jak jste mi napsal. Nb startuje asi za 3 min a po restartu se mi zobrazovala chyba Spyware Terminatora a tak jsem ho odebral. Po několika restartech a zkoušky nb se mi jeví vcelku v kondici samo starty se neobjevují, brouzdání na netu ok a výkon je v pořádku a zdá se mi, že už ani tolik netopí resp. nespouštějí tolik větráky při zátěži.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Postak 4 at 2012-05-05 23:27:45
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 11 GB (36%) free of 30 GB
Total RAM: 3071 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:27:54, on 5.5.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Intel\AMT\atchksrv.exe
C:\Program Files\Intel\AMT\atchk.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\WINDOWS\system32\ACEngSvr.exe
C:\Program Files\ATK Hotkey\MsgTranAgt.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\A4Tech\Mouse\Amoumain.exe
C:\WINDOWS\PixArt\PAC7302\Monitor.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\ATK Hotkey\WDC.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\StkCSrv.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Intel\AMT\UNS.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\NOTEPAD.EXE
E:\Downloads\Programy\RSIT.exe
C:\Program Files\trend micro\Postak 4.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ACMON] "C:\Program Files\ASUS\Splendid\ACMON.exe"
O4 - HKLM\..\Run: [Wireless Console 2] "C:\Program Files\Wireless Console 2\wcourier.exe"
O4 - HKLM\..\Run: [atchk] "C:\Program Files\Intel\AMT\atchk.exe"
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [ATKHOTKEY] "C:\Program Files\ATK Hotkey\Hcontrol.exe"
O4 - HKLM\..\Run: [MsgTranAgt] "C:\Program Files\ATK Hotkey\MsgTranAgt.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: IconPackager.lnk = C:\Program Files\Stardock\Object Desktop\MyColors\IconPackager.exe (User 'Default user')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files\ICQ7.4\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {90EBA220-5AF1-475B-A421-C68F8D1C8C45} (IPCamPluginTMPT Control) - http://212.111.8.234/IPCamPluginTMPT.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A07942C7-7372-4936-8687-8DC48AD58223}: NameServer = 212.111.0.10,194.213.32.237
O17 - HKLM\System\CCS\Services\Tcpip\..\{AECB3CBC-EF3D-433D-A7E6-0C3537425A79}: NameServer = 212.111.0.10,194.213.32.237,172.10.13.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{E35B569D-CFCD-49D5-BBE2-25283209E265}: NameServer = 8.26.56.26,156.154.70.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{367244FB-A1B7-474F-B5AA-FE79CA940D02}: NameServer = 212.111.0.10
O17 - HKLM\System\CS2\Services\Tcpip\..\{2533FA51-6393-4A5C-A6EC-56BA9FFCB39F}: NameServer = 212.111.0.10
O17 - HKLM\System\CS4\Services\Tcpip\..\{367244FB-A1B7-474F-B5AA-FE79CA940D02}: NameServer = 212.111.0.10
O17 - HKLM\System\CS5\Services\Tcpip\..\{367244FB-A1B7-474F-B5AA-FE79CA940D02}: NameServer = 212.111.0.10,194.213.32.237
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: OneCard - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Intel(R) Active Management Technology System Status Service (atchksrv) - Intel Corporation - C:\Program Files\Intel\AMT\atchksrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel(R) Active Management Technology Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\AMT\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkCSrv.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: Intel(R) Active Management Technology User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\AMT\UNS.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 13585 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Postak 4\Data aplikací\Mozilla\Firefox\Profiles\6ljcoynq.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, {CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}:6.0.14, {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19, illimitux@illimitux.net:4.0, {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.1, {20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.8, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16, nasanightlaunch@example.com:0.6.20101009"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.233 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_233.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.4]
"Description"=Office Live Update v1.4
"Path"=C:\Program Files\Microsoft\Office Live\npOLW.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
quickstores@quickstores.de
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
GoogleDesktopMozilla.dll
GoogleDesktopMozillaStub.js
GoogleDesktopMozillaStub.xpt
nsILegitCheckPlugin.xpt
nsIOGAPlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
npLegitCheckPlugin.dll
NPOFF12.DLL
npOGAPlugin.dll
nppdf32.dll
npwachk.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
googledesktop.xml
heureka-cz.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Postak 4\Data aplikací\Mozilla\Firefox\Profiles\6ljcoynq.default\extensions\
illimitux@illimitux.net
{1018e4d6-728f-4b20-ad56-37578a4de76b}
{ef62e1ce-d2a4-4cdd-b7ec-92b120366b66}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-04-24 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-03-30 403824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-04-24 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]
ASUS Security Protect Manager - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll [2006-11-21 70928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-04-24 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL"=C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe [2006-11-22 630784]
"CognizanceTS"=C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll [2003-12-22 17920]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-05-25 786521]
"ACMON"=C:\Program Files\ASUS\Splendid\ACMON.exe [2007-07-10 851968]
"Wireless Console 2"=C:\Program Files\Wireless Console 2\wcourier.exe [2007-07-05 1040384]
"atchk"=C:\Program Files\Intel\AMT\atchk.exe [2007-06-11 404248]
"JMB36X IDE Setup"=C:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"Power_Gear"=C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe [2006-07-26 90112]
"ATKHOTKEY"=C:\Program Files\ATK Hotkey\Hcontrol.exe [2007-11-28 229376]
"MsgTranAgt"=C:\Program Files\ATK Hotkey\MsgTranAgt.exe [2007-11-04 106496]
"IntelZeroConfig"=C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe [2007-06-01 823296]
"IntelWireless"=C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe [2007-06-01 974848]
"WheelMouse"=C:\Program Files\A4Tech\Mouse\Amoumain.exe [2008-03-06 241664]
"PAC7302_Monitor"=C:\WINDOWS\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2012-03-11 6749512]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-12-12 16859136]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-05-01 13750272]
"nwiz"=nwiz.exe /installquiet []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-08-19 86016]
"Google Desktop Search"=C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2011-06-09 30192]
"googletalk"=C:\Program Files\Google\Google Talk\googletalk.exe [2007-01-01 3739648]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKMEDIA]
C:\Program Files\ASUS\ATK Media\DMEDIA.EXE [2006-11-02 61440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Total CMA Pack]
C:\Program Files\Total CMA Pack\Total CMA Pack.exe [2009-09-01 43255]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WatcherHelper]
C:\Program Files\Sierra Wireless Inc\3G Watcher\WaHelper.exe [2007-03-28 114688]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Postak 4^Nabídka Start^Programy^Po spuštění^MagicDisc.lnk]
[]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\WINDOWS\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OneCard]
C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWLNPkg.dll [2007-02-07 74240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
WgaLogon.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
UPnPMonitor - {e57ce738-33e8-4c51-8354-bb4de9d215d1} - C:\WINDOWS\system32\upnpui.dll [2008-04-14 239616]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoResolveSearch"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Google\Google Talk\googletalk.exe"="C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll"="C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.dll:*:Enabled:Google Talk Plugin"
"C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Postak 4\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"D:\Program Files\Activision\Wolfenstein\MP\Wolf2MP.exe"="D:\Program Files\Activision\Wolfenstein\MP\Wolf2MP.exe:*:Enabled:Wolfenstein(TM) "
"D:\Program Files\Activision\Wolfenstein\MP\Wolf2MPLite.exe"="D:\Program Files\Activision\Wolfenstein\MP\Wolf2MPLite.exe:*:Enabled:Wolfenstein(TM) "
"E:\Program Files\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe"="E:\Program Files\S.T.A.L.K.E.R. - Call of Pripyat\bin\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Call of Pripyat (CLI)"
"E:\Program Files\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe"="E:\Program Files\S.T.A.L.K.E.R. - Call of Pripyat\bin\dedicated\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Call of Pripyat (SRV)"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"D:\Program Files\Splinter Cell Conviction\src\system\conviction_game.exe"="D:\Program Files\Splinter Cell Conviction\src\system\conviction_game.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction"
"D:\Program Files\Splinter Cell Conviction\src\system\gu.exe"="D:\Program Files\Splinter Cell Conviction\src\system\gu.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction aktualizace"
"D:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe"="D:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2"
"D:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe"="D:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe:*:Enabled:Call of Duty: Modern Warfare 2 - Multiplayer"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe"="D:\Program Files\Activision\Call of Duty - World at War\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe"="D:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) "
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\ICQ7.4\ICQ.exe"="C:\Program Files\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux"=wdmaud.drv
"wave5"=serwvdrv.dll
"wave7"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux2"=wdmaud.drv
"aux3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======List of files/folders created in the last 1 month======

2012-05-05 23:26:41 ----D---- C:\rsit
2012-05-05 23:26:41 ----D---- C:\Program Files\trend micro
2012-05-05 23:21:39 ----D---- C:\Program Files\CCleaner
2012-05-05 23:00:22 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-05-05 22:39:26 ----SHD---- C:\RECYCLER
2012-05-05 22:37:43 ----SD---- C:\Uninstall
2012-05-04 21:53:56 ----D---- C:\WINDOWS\temp
2012-05-03 10:32:35 ----A---- C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2012-04-30 10:17:22 ----A---- C:\WINDOWS\system32\RegistryDefragBootTime.exe
2012-04-30 10:00:35 ----D---- C:\Program Files\Common Files\Adobe
2012-04-30 09:52:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2012-04-30 09:51:59 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-04-29 13:00:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\IObit
2012-04-29 12:59:55 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\IObit
2012-04-29 12:43:27 ----D---- C:\Program Files\RegCleaner
2012-04-29 10:25:56 ----N---- C:\WINDOWS\system32\pxwma.dll
2012-04-29 10:25:43 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\OpenCandy
2012-04-28 09:56:26 ----D---- C:\Program Files\Common Files\Skype
2012-04-25 20:11:56 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\DDMSettings
2012-04-24 20:32:28 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2012-04-24 20:32:28 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2012-04-24 20:32:27 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2012-04-24 20:32:26 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2012-04-24 20:32:25 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2012-04-24 20:32:24 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2012-04-24 20:32:23 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2012-04-24 20:32:22 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2012-04-24 20:32:21 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2012-04-24 20:32:21 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2012-04-24 20:32:19 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2012-04-24 20:32:17 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2012-04-24 20:16:39 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2012-04-24 20:16:38 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2012-04-24 20:16:32 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2012-04-24 20:16:32 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2012-04-24 20:16:30 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2012-04-24 20:16:29 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2012-04-24 20:16:29 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2012-04-24 20:16:26 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2012-04-24 20:15:40 ----A---- C:\WINDOWS\avastSS.scr
2012-04-24 20:15:38 ----A---- C:\WINDOWS\system32\aswBoot.exe
2012-04-24 19:53:32 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-04-24 19:53:06 ----D---- C:\Program Files\Common Files\Java
2012-04-24 19:52:22 ----A---- C:\WINDOWS\system32\javaws.exe
2012-04-24 19:52:22 ----A---- C:\WINDOWS\system32\javaw.exe
2012-04-24 19:52:22 ----A---- C:\WINDOWS\system32\java.exe
2012-04-24 19:40:22 ----N---- C:\WINDOWS\system32\iacenc.dll
2012-04-24 19:23:27 ----D---- C:\Program Files\LogMeIn Hamachi

======List of files/folders modified in the last 1 month======

2012-05-05 23:26:41 ----RD---- C:\Program Files
2012-05-05 23:22:09 ----D---- C:\WINDOWS
2012-05-05 23:21:39 ----D---- C:\WINDOWS\Prefetch
2012-05-05 23:16:14 ----D---- C:\WINDOWS\system32\CatRoot2
2012-05-05 23:15:00 ----AC---- C:\WINDOWS\system32\log.txt
2012-05-05 23:15:00 ----AC---- C:\WINDOWS\system32\acovcnt.exe
2012-05-05 23:13:26 ----N---- C:\WINDOWS\SchedLgU.Txt
2012-05-05 23:00:57 ----D---- C:\WINDOWS\system32\LogFiles
2012-05-05 23:00:22 ----D---- C:\WINDOWS\system32
2012-05-05 22:56:32 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\DAEMON Tools Lite
2012-05-05 22:38:05 ----D---- C:\WINDOWS\system32\Restore
2012-05-05 22:37:40 ----D---- C:\WINDOWS\system32\drivers
2012-05-05 22:33:11 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\ICQ
2012-05-05 20:56:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\TrackMania
2012-05-05 20:33:39 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2012-05-05 20:33:00 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\HLSW
2012-05-05 16:42:37 ----HD---- C:\WINDOWS\inf
2012-05-05 15:49:43 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-05-04 22:20:00 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\Skype
2012-05-04 21:56:41 ----N---- C:\WINDOWS\system.ini
2012-05-04 21:56:11 ----D---- C:\WINDOWS\system32\drivers\etc
2012-05-04 21:54:22 ----D---- C:\WINDOWS\system32\config
2012-05-04 21:52:13 ----D---- C:\WINDOWS\AppPatch
2012-05-04 21:52:03 ----D---- C:\Program Files\Common Files
2012-05-03 09:30:14 ----D---- C:\Program Files\Registry Mechanic
2012-05-03 08:58:56 ----D---- C:\Program Files\Mozilla Firefox
2012-05-02 19:57:35 ----SD---- C:\WINDOWS\Tasks
2012-04-30 15:01:39 ----AC---- C:\WINDOWS\NeroDigital.ini
2012-04-30 14:09:01 ----SHD---- C:\WINDOWS\Installer
2012-04-30 14:09:01 ----D---- C:\Program Files\COMODO
2012-04-30 10:40:00 ----D---- C:\Config.Msi
2012-04-30 10:20:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-04-30 10:19:33 ----HD---- C:\WINDOWS\$hf_mig$
2012-04-30 10:19:20 ----D---- C:\Program Files\Internet Explorer
2012-04-30 10:19:09 ----D---- C:\WINDOWS\ie8updates
2012-04-30 10:08:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2012-04-30 10:07:00 ----D---- C:\Program Files\Microsoft Silverlight
2012-04-30 10:00:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-04-30 10:00:35 ----D---- C:\Program Files\Adobe
2012-04-30 08:30:54 ----D---- C:\Documents and Settings\Postak 4\Data aplikací\Winamp
2012-04-29 13:14:17 ----D---- C:\WINDOWS\system32\oodag
2012-04-29 10:54:58 ----D---- C:\WINDOWS\Logs
2012-04-29 10:54:58 ----D---- C:\WINDOWS\Debug
2012-04-29 10:26:43 ----D---- C:\Program Files\Winamp
2012-04-29 10:26:14 ----D---- C:\Program Files\Winamp Detect
2012-04-28 09:56:26 ----RD---- C:\Program Files\Skype
2012-04-28 09:56:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2012-04-25 20:10:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\DivX
2012-04-25 20:10:46 ----D---- C:\Program Files\DivX
2012-04-25 20:10:04 ----D---- C:\Program Files\Common Files\DivX Shared
2012-04-25 19:25:36 ----RSD---- C:\WINDOWS\assembly
2012-04-25 19:25:36 ----D---- C:\WINDOWS\Microsoft.NET
2012-04-25 00:31:33 ----D---- C:\WINDOWS\Help
2012-04-25 00:30:16 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2012-04-25 00:29:42 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-04-24 22:45:16 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-04-24 22:44:50 ----D---- C:\WINDOWS\WinSxS
2012-04-24 21:25:29 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-04-24 21:04:28 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-04-24 21:01:00 ----C---- C:\WINDOWS\win.ini
2012-04-24 21:00:59 ----D---- C:\Program Files\Common Files\System
2012-04-24 20:32:30 ----D---- C:\WINDOWS\system32\DirectX
2012-04-24 20:15:20 ----D---- C:\Program Files\AVAST Software
2012-04-24 20:15:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2012-04-24 19:52:10 ----AC---- C:\WINDOWS\system32\deployJava1.dll
2012-04-16 17:04:48 ----SHD---- C:\System Volume Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2012-03-11 97760]
R0 JGOGO;JMicron Hot-Plug Driver; C:\WINDOWS\system32\DRIVERS\JGOGO.sys [2006-02-07 6912]
R0 JRAID;JRAID; C:\WINDOWS\system32\DRIVERS\jraid.sys [2009-08-13 96368]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-07-12 45648]
R0 risdptsk;risdptsk; C:\WINDOWS\system32\DRIVERS\risdptsk.sys [2005-07-14 27904]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\System32\drivers\sfdrv01.sys [2005-08-10 50688]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\System32\drivers\sfhlp02.sys [2005-05-16 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); C:\WINDOWS\System32\drivers\sfsync02.sys [2006-02-21 19968]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-11-04 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920]
R1 Amfilter;A4Tech Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\Amfilter.sys [2007-01-24 8704]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2012-03-11 494968]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2012-03-11 31704]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ItSDisk;ItSDisk; C:\WINDOWS\System32\Drivers\ItSDisk.sys [2006-05-17 23232]
R1 kbfilter;Keyboard Filter Driver; C:\WINDOWS\system32\drivers\kbfilter.sys [2002-07-11 12856]
R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys [2002-09-16 4228]
R1 Tosrfcom;Bluetooth RFCOMM; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2007-05-24 64000]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.4.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-10-30 21393]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2007-05-29 12416]
R3 Amusbprt;A4Tech HID-compliant Mouse Driver; C:\WINDOWS\system32\DRIVERS\Amusbprt.sys [2007-12-25 14336]
R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\WINDOWS\system32\DRIVERS\ATSwpDrv.sys [2007-06-16 146824]
R3 e1express;Intel(R) PRO/1000 PCI Express Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e1e5132.sys [2007-04-13 254872]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HECI;Intel(R) Management Engine Interface; C:\WINDOWS\system32\DRIVERS\HECI.sys [2007-04-06 44800]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IFXTPM;IFXTPM; C:\WINDOWS\system32\DRIVERS\IFXTPM.SYS [2007-01-23 36608]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-12-12 4635648]
R3 kbfiltr;Keyboard Filter; C:\WINDOWS\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-08-24 5760]
R3 NETw4x32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw4x32.sys [2007-06-21 2208512]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-04-30 8055584]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 SMCIRDA;SMSC IrCC Miniport Device Driver; C:\WINDOWS\system32\DRIVERS\smcirda.sys [2006-03-12 48128]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-11-22 982272]
R3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam; C:\WINDOWS\System32\Drivers\StkCMini.sys [2007-06-06 1260672]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2006-05-25 193088]
R3 tosporte;Bluetooth COM Port; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2006-10-10 41600]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S2 rimmptsk;rimmptsk; C:\WINDOWS\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936]
S2 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
S2 rismxdp;Ricoh xD-Picture Card Driver; C:\WINDOWS\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]
S3 a6xiltux;a6xiltux; C:\WINDOWS\system32\drivers\a6xiltux.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.sys []
S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys []
S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\WINDOWS\system32\DRIVERS\mcdbus.sys []
S3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSIRCOMM;Microsoft IR Communications Driver; C:\WINDOWS\system32\DRIVERS\MSIRCOMM.sys [2008-04-13 22016]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit; C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2009-05-28 4203392]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
S3 PAC7302;iLook 310; C:\WINDOWS\system32\DRIVERS\PAC7302.SYS [2009-04-28 461824]
S3 PSSDK42;PSSDK42; \??\C:\WINDOWS\system32\Drivers\pssdk42.sys []
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
S3 sfcure01;StarForce Cure Driver (version 1.x); C:\WINDOWS\System32\drivers\sfcure01.sys [2005-10-01 3072]
S3 sffdisk;Ovladač třídy úložiště SFF; C:\WINDOWS\system32\DRIVERS\sffdisk.sys [2008-04-13 11904]
S3 sffp_sd;Ovladač protokolu úložiště SFF pro paměť sběrnici SDBus; C:\WINDOWS\system32\DRIVERS\sffp_sd.sys [2008-04-13 11008]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 SWUMX20;Sierra Wireless USB MUX Driver (UMTS20); C:\WINDOWS\system32\DRIVERS\swumx20.sys []
S3 tosrfbd;Bluetooth RFBUS; C:\WINDOWS\system32\DRIVERS\tosrfbd.sys [2007-04-24 113920]
S3 tosrfbnp;Bluetooth RFBNEP; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2006-11-20 36480]
S3 Tosrfhid;Bluetooth RFHID; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2007-03-01 73728]
S3 tosrfnds;Bluetooth Personal Area Network; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-07 18612]
S3 TosRfSnd;Bluetooth Audio; C:\WINDOWS\system32\drivers\tosrfsnd.sys [2007-01-22 53376]
S3 tosrfusb;Bluetooth USB Controller; C:\WINDOWS\system32\DRIVERS\tosrfusb.sys [2007-06-11 41856]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-13 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASBroker;Logon Session Broker; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 ASChannel;Local Communication Channel; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 atchksrv;Intel(R) Active Management Technology System Status Service; C:\Program Files\Intel\AMT\atchksrv.exe [2007-06-11 183064]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2012-03-11 1983232]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\Wireless\Bin\EvtEng.exe [2007-06-01 647168]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 1373576]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2012-04-24 153376]
R2 LMS;Intel(R) Active Management Technology Local Management Service; C:\Program Files\Intel\AMT\LMS.exe [2007-06-11 121624]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-08-19 168004]
R2 O&O Defrag;O&O Defrag; C:\WINDOWS\system32\oodag.exe [2007-05-11 1050120]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-12-04 75136]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe [2007-06-01 327680]
R2 S24EventMonitor;Intel(R) PROSet/Wireless Service; C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe [2007-06-01 987136]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service; C:\WINDOWS\System32\StkCSrv.exe [2007-04-19 24576]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2007-02-25 125048]
R2 UNS;Intel(R) Active Management Technology User Notification Service; C:\Program Files\Intel\AMT\UNS.exe [2007-06-11 1489688]
R2 WLANKEEPER;Intel(R) PROSet/Wireless SSO Service; C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe [2007-06-01 294912]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-03-30 1533808]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-02-29 158856]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [2011-06-09 30192]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-30 129976]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Re: Prosím kontrolu logu

Napsal: 06 kvě 2012 21:27
od vyosek
Doporucuji chladici podlozku pod ntb...A mrknete jestli nejsou ventilatory a vetraci pruduchy zaneseny prachem

Log jiz vypada na havet i zbytecnosti cisty...

Re: Prosím kontrolu logu

Napsal: 09 kvě 2012 21:33
od postak4
Dobrý večer,
chladící podložku samozřejmě používám ;-).. Jinak co se týče stroje, po výmazech jsem musel opravit některé ovladače, vesměs ve spojitosti s funkční klávesou Fn. Potom jsem byl trošku rozpačitý, protože se nb choval nestandartně (dlouhé najíždění programů po startu už ve win, chybové hlášky paměti..). Ale po několikerém najetí se, zdáse, vše dalo do kupy. Některé soubory byli blokované firewallem. Několik programů jsem odstranil.. Rád bych se ještě zeptal na nějaký nástroj, (nebo radu) který by funkčně byl schopný pomoci s výkonem nb? Jinak moc děkuji za pomoc Postak4

Re: Prosím kontrolu logu

Napsal: 10 kvě 2012 06:50
od vyosek
:arrow: Na cisteni a udrzbu PC\ntb pouzivam CCleaner+Deffragler

Jinak nemate zac, rado se stalo :)