VIRY.CZ

Zdravím,

mám problém se svým ntb. Neustále při startu systému mi vyskakují okna od avastu o spuštění nějakých programů, především winlogon32.exe a na tento program se mi to ptá asi 3x, poté i nějaký soubor startup.exe a dnes dokonce to mělo problém i s adobereadrem. Celkově ale v poslední dnech registruju rapidní zpomalení ntb a když otevřu správce úloh i při samotném spuštení systému je občas výkon na 100% ( může to být třeba rezidentní štít od avastu, ale to jen hádám). Přikládám rovnou log z RSIT, který jsem vytvořil před chvilkou.

Předem díky za pomoc.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Václav Franc at 2012-06-06 12:57:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 24 GB (20%) free of 120 GB
Total RAM: 1789 MB (38% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:57:33, on 6.6.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe
C:\Program Files\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\lkads.exe
C:\WINDOWS\system32\lktsrv.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
C:\WINDOWS\system32\nisvcloc.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\QipGuard\QipGuard.exe
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Data aplikací\Trend Micro Inc\Adobe Reader\1.0.1.8\AdobeReader.exe
C:\Documents and Settings\Václav Franc\Local Settings\Temp\winlogon32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Documents and Settings\Václav Franc\Data aplikací\QipGuard\QipGuard.exe
C:\Documents and Settings\Václav Franc\Data aplikací\winlogon32.exe
C:\Documents and Settings\Václav Franc\Data aplikací\Dropbox\bin\Dropbox.exe
C:\Documents and Settings\Václav Franc\Nabídka Start\Programy\Po spuštění\startup.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
C:\Program Files\QIP 2010\qip.exe
C:\Documents and Settings\Václav Franc\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Václav Franc.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Václav Franc\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Václav Franc\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [TouchPadHotKey] C:\Program Files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [01Lcex36JDslgdMH8TO49J2du2FQOE] C:\WINDOWS\system32\xe1kP.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
O4 - HKLM\..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader] C:\Documents and Settings\All Users\Data aplikací\Trend Micro Inc\Adobe Reader\1.0.1.8\AdobeReader.exe
O4 - HKLM\..\Run: [Windows-Anmeldeanwendung] C:\Documents and Settings\Václav Franc\Data aplikací\winlogon32.exe
O4 - HKLM\..\Run: [Windows-Securitykey] C:\Documents and Settings\Václav Franc\Local Settings\Temp\winlogon32.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKCU\..\Run: [JC2zysCrPJrBOhA0Vl] C:\WINDOWS\system32\xe1kP.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [QIP Internet Guardian] C:\Documents and Settings\Václav Franc\Data aplikací\QipGuard\QipGuard.exe /p
O4 - HKCU\..\Run: [Windows-Anmeldeanwendung] C:\Documents and Settings\Václav Franc\Data aplikací\winlogon32.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Dropbox.lnk = ?
O4 - Startup: startup.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: InterCasino EUR - {9536DF30-CF04-4A89-B26B-4781E242230C} - http://www.intercasino.com/?utm_source= ... d-casino-l (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: InterCasino EUR - {9536DF30-CF04-4A89-B26B-4781E242230C} - http://www.intercasino.com/?utm_source= ... d-casino-l (file missing) (HKCU)
O16 - DPF: {05317530-B882-449D-9421-18D94FA3ED34} (OSInfo Control) - http://w3.sis.com/ocis/OSInfo.cab
O16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} (SiS_OCX Control) - http://w3.sis.com/ocis/SiSAutodetectNT.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.co ... nos/gp.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlackfishSQL - CodeGear - C:\Program Files\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lookout Citadel Server (LkCitadelServer) - National Instruments, Inc. - C:\WINDOWS\system32\lkcitdl.exe
O23 - Service: National Instruments PSP Server Locator (lkClassAds) - National Instruments, Inc. - C:\WINDOWS\system32\lkads.exe
O23 - Service: National Instruments Time Synchronization (lkTimeSync) - National Instruments, Inc. - C:\WINDOWS\system32\lktsrv.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: National Instruments Domain Service (NIDomainService) - National Instruments, Inc. - C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
O23 - Service: NILM License Manager - Macrovision Corporation - C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments Corp. - C:\WINDOWS\system32\nisvcloc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: QipGuard - QIP.ru - C:\Program Files\QipGuard\QipGuard.exe
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files\Spyware Terminator\st_rsser.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe

--
End of file - 13135 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1273161150.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Václav Franc\Data aplikací\Mozilla\Firefox\Profiles\ydfkmf2x.default

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.2.202.235 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
NPLV80Win32.dll
NPLV82Win32.dll
NPOFF12.DLL

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-03-11 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Documents and Settings\Václav Franc\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2011-04-01 141184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-03-11 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-03-11 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-05-10 864256]
"TouchPadHotKey"=C:\Program Files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe [2007-08-13 364544]
"NeroFilterCheck"=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-03-25 570664]
"NBKeyScan"=C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-04-29 2221352]
"01Lcex36JDslgdMH8TO49J2du2FQOE"=C:\WINDOWS\system32\xe1kP.exe [2010-05-30 208896]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-08-10 16384000]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-03-07 4241512]
"SpywareTerminatorShield"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2012-02-20 2786480]
"SpywareTerminatorUpdater"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-02-20 3669680]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-18 254696]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"Adobe Reader"=C:\Documents and Settings\All Users\Data aplikací\Trend Micro Inc\Adobe Reader\1.0.1.8\AdobeReader.exe [2011-07-02 77824]
"Windows-Anmeldeanwendung"=C:\Documents and Settings\Václav Franc\Data aplikací\winlogon32.exe [2011-07-02 77824]
"Windows-Securitykey"=C:\Documents and Settings\Václav Franc\Local Settings\Temp\winlogon32.exe [2011-07-02 77824]
"SiSPower"=SiSPower.dll,ModeAgent []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"JC2zysCrPJrBOhA0Vl"=C:\WINDOWS\system32\xe1kP.exe [2010-05-30 208896]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools"=C:\Program Files\DAEMON Tools\daemon.exe [2007-09-18 171464]
"QIP Internet Guardian"=C:\Documents and Settings\Václav Franc\Data aplikací\QipGuard\QipGuard.exe [2012-01-12 191440]
"Windows-Anmeldeanwendung"=C:\Documents and Settings\Václav Franc\Data aplikací\winlogon32.exe [2011-07-02 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader]
C:\Documents and Settings\All Users\Data aplikací\Trend Micro Inc\Adobe Reader\1.0.1.8\AdobeReader.exe [2011-07-02 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-02-28 1987976]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows-Anmeldeanwendung]
C:\Documents and Settings\Václav Franc\Local Settings\Temp\winlogon32.exe [2011-07-02 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows-Securitykey]
C:\Documents and Settings\Václav Franc\Local Settings\Temp\winlogon32.exe [2011-07-02 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Y9IJJpmd0xBeX]
C:\WINDOWS\system32\RLae4.exe [2010-06-10 110592]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Václav Franc^Nabídka Start^Programy^Po spuštění^startup.exe]
C:\Documents and Settings\Václav Franc\Nabídka Start\Programy\Po spuštění\startup.exe [2011-07-02 77824]

C:\Documents and Settings\Václav Franc\Nabídka Start\Programy\Po spuštění
Dropbox.lnk - C:\Documents and Settings\Václav Franc\Data aplikací\Dropbox\bin\Dropbox.exe
startup.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\AVG\AVG8\avgemc.exe"="C:\Program Files\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe"
"C:\Program Files\AVG\AVG8\avgupd.exe"="C:\Program Files\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe"
"C:\Program Files\AVG\AVG8\avgnsx.exe"="C:\Program Files\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\BitLord\BitLord.exe"="C:\Program Files\BitLord\BitLord.exe:*:Enabled:BitLord"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Heroes 3 Complete\HEROES3.ICD"="C:\Heroes 3 Complete\HEROES3.ICD:*:Enabled:Heroes of Might and Magic® III"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\QIP 2010\qip.exe"="C:\Program Files\QIP 2010\qip.exe:*:Enabled:QIP 2010"
"D:\VERZE_20101202\Simulator.exe"="D:\VERZE_20101202\Simulator.exe:*:Enabled:Simulator"
"C:\Program Files\IHMC CmapTools\jre\bin\javaw.exe"="C:\Program Files\IHMC CmapTools\jre\bin\javaw.exe:*:Enabled:Java(TM) 2 Platform Standard Edition binary"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"
"D:\Škola\software\tchp2-simulator\Simulator.exe"="D:\Škola\software\tchp2-simulator\Simulator.exe:*:Enabled:Simulator"
"C:\Program Files\3DO\Heroes 3 Complete\HEROES3.ICD"="C:\Program Files\3DO\Heroes 3 Complete\HEROES3.ICD:*:Enabled:Heroes of Might and Magic® III"
"%windir%\explorer.exe"="%windir%\explorer.exe"
"C:\Program Files\Spyware Terminator\SpywareTerminator.exe"="C:\Program Files\Spyware Terminator\SpywareTerminator.exe:*:Enabled:Spyware Terminator 2012"
"C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe"="C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe:*:Enabled:Spyware Terminator 2012"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\EA GAMES\MOHAA\MOHAA.exe"="C:\Program Files\EA GAMES\MOHAA\MOHAA.exe:*:Enabled:Medal of Honor Allied Assault"
"C:\Documents and Settings\Václav Franc\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\Václav Franc\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Program Files\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\explorer.exe"="%windir%\explorer.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=L3codeca.acm
"vidc.divx"=divx.dll
"vidc.xvid"=xvid.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"vidc.div4"=DivXc32f.dll
"vidc.div3"=DivXc32.dll
"vidc.mp43"=mpg4c32.dll
"msacm.l3radius"=l3codecp.acm
"msacm.divxa"=divxa32.acm
"msacm.vorbis"=Vorbis.acm
"msacm.a3d"=a3d.dll
"msacm.ogg"=ogg.dll
"msacm.vorbisenc"=vorbisenc.dll

======File associations======

.js - open - %SystemRoot%\System32\CScript.exe "%1" %*
.vbs - open - %SystemRoot%\System32\CScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-06-06 12:02:33 ----D---- C:\Program Files\trend micro
2012-06-06 12:02:32 ----D---- C:\rsit
2012-06-06 11:30:10 ----RA---- C:\WINDOWS\system32\SiSPower.dll
2012-06-06 11:30:10 ----RA---- C:\WINDOWS\Progress.exe
2012-06-06 11:30:10 ----RA---- C:\WINDOWS\InstFunc.exe
2012-06-06 11:30:09 ----RA---- C:\WINDOWS\InstFunc.dll
2012-06-06 11:30:01 ----A---- C:\WINDOWS\system32\SiSParse.dll
2012-06-06 11:30:01 ----A---- C:\WINDOWS\system32\SiSInst.dll
2012-06-06 11:30:00 ----A---- C:\WINDOWS\system32\SiSBase.dll
2012-06-06 11:30:00 ----A---- C:\WINDOWS\system32\drivers\srvkp.sys
2012-06-06 11:29:59 ----A---- C:\WINDOWS\system32\sisgl770.dll
2012-06-06 11:29:58 ----A---- C:\WINDOWS\system32\sisgrv.dll
2012-06-06 11:27:32 ----D---- C:\Program Files\SiS VGA Utilities V3.78.00
2012-06-06 11:27:17 ----A---- C:\WINDOWS\system32\VGAunistlog.ini
2012-06-04 17:36:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2718704$
2012-06-03 22:26:47 ----D---- C:\Program Files\Dropbox
2012-05-31 08:42:00 ----D---- C:\WINDOWS\pss
2012-05-15 20:13:34 ----A---- C:\WINDOWS\system32\pncrt.dll
2012-05-15 20:11:46 ----D---- C:\Program Files\FreeTime
2012-05-15 14:56:22 ----D---- C:\Documents and Settings\Václav Franc\Data aplikací\Broad Intelligence
2012-05-15 14:56:17 ----D---- C:\Program Files\MediaCoder
2012-05-13 02:20:36 ----A---- C:\WINDOWS\system32\WNASPI32.DLL
2012-05-13 02:20:36 ----A---- C:\WINDOWS\system32\drivers\ASPI32.SYS
2012-05-13 02:20:32 ----D---- C:\Program Files\4Musics WMA to WAV Converter
2012-05-09 11:29:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2012-05-09 11:18:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2012-05-09 11:16:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2012-05-09 11:11:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2012-05-07 08:37:53 ----D---- C:\Program Files\IrfanView

======List of files/folders modified in the last 1 month======

2012-06-06 12:19:08 ----D---- C:\WINDOWS\Prefetch
2012-06-06 12:02:33 ----D---- C:\Program Files
2012-06-06 11:48:37 ----D---- C:\WINDOWS\Temp
2012-06-06 11:48:31 ----SHD---- C:\WINDOWS\Installer
2012-06-06 11:48:31 ----SHD---- C:\Config.Msi
2012-06-06 11:48:17 ----A---- C:\WINDOWS\wincmd.ini
2012-06-06 11:36:42 ----D---- C:\Program Files\Mozilla Firefox
2012-06-06 11:35:55 ----D---- C:\WINDOWS
2012-06-06 11:34:58 ----D---- C:\Documents and Settings\Václav Franc\Data aplikací\Dropbox
2012-06-06 11:33:24 ----D---- C:\WINDOWS\system32
2012-06-06 11:32:06 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-06-06 11:31:44 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-06-06 11:31:40 ----D---- C:\WINDOWS\system32\drivers
2012-06-06 11:31:37 ----HD---- C:\WINDOWS\inf
2012-06-06 11:31:36 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-06-06 11:28:22 ----D---- C:\WINDOWS\system32\CatRoot2
2012-06-06 11:23:52 ----HD---- C:\Program Files\InstallShield Installation Information
2012-06-06 10:56:57 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-06-06 08:59:36 ----D---- C:\WINDOWS\Minidump
2012-06-06 02:08:37 ----D---- C:\Documents and Settings\Václav Franc\Data aplikací\SWF.max
2012-06-05 14:32:01 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2012-06-04 17:11:10 ----HD---- C:\WINDOWS\$hf_mig$
2012-05-31 15:22:06 ----A---- C:\WINDOWS\system32\crypt32.dll
2012-05-31 12:00:04 ----D---- C:\Program Files\Mozilla Thunderbird
2012-05-31 11:40:58 ----D---- C:\Documents and Settings\Václav Franc\Data aplikací\gtk-2.0
2012-05-23 16:25:46 ----D---- C:\WINDOWS\Microsoft.NET
2012-05-22 23:00:58 ----A---- C:\WINDOWS\NeroDigital.ini
2012-05-13 01:49:12 ----D---- C:\Program Files\Microsoft Office
2012-05-13 01:49:11 ----D---- C:\Program Files\Messenger
2012-05-12 12:30:14 ----D---- C:\Program Files\rajce
2012-05-12 00:22:07 ----D---- C:\Documents and Settings\Václav Franc\Data aplikací\HLSW
2012-05-11 23:34:32 ----D---- C:\Program Files\sisagp
2012-05-11 14:53:29 ----D---- C:\Documents and Settings\Václav Franc\Data aplikací\vlc
2012-05-10 08:18:29 ----D---- C:\WINDOWS\Debug
2012-05-09 11:40:18 ----RSD---- C:\WINDOWS\assembly
2012-05-09 11:31:53 ----D---- C:\Program Files\Microsoft Silverlight
2012-05-09 11:29:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2012-05-09 11:29:24 ----D---- C:\WINDOWS\WinSxS
2012-05-09 11:27:54 ----D---- C:\WINDOWS\system32\XPSViewer
2012-05-09 11:27:02 ----A---- C:\WINDOWS\system32\MRT.INI
2012-05-09 11:23:21 ----A---- C:\WINDOWS\system32\MRT.exe
2012-05-09 11:22:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2011-05-18 685816]
R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-03-07 24920]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2010-10-26 19200]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-03-07 95704]
R2 cvintdrv;cvintdrv; C:\WINDOWS\system32\drivers\cvintdrv.sys [2006-07-27 4096]
R2 zntport;NTPort Library Driver; \??\C:\WINDOWS\system32\drivers\zntport.sys []
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2006-11-10 18688]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-06-21 547072]
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-10 4603904]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2008-04-14 12160]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2010-10-26 325120]
R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:\WINDOWS\system32\DRIVERS\SiSGbeXP.sys [2007-05-16 42368]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-05-10 208576]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 ahx21g2t;ahx21g2t; C:\WINDOWS\system32\drivers\ahx21g2t.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 ASPI;Advanced SCSI Programming Interface Driver; \??\C:\WINDOWS\System32\DRIVERS\ASPI32.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 cpuz132;cpuz132; \??\C:\DOCUME~1\VCLAVF~1\LOCALS~1\Temp\cpuz132\cpuz132_x32.sys []
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2003-03-09 51024]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2003-03-09 16080]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2003-03-09 21456]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-14 15232]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\WINDOWS\System32\Drivers\RimUsb.sys [2008-04-16 22784]
S3 RTL2832U_IRHID;HID Infrared Remote Receiver; C:\WINDOWS\system32\DRIVERS\RTL2832U_IRHID.sys []
S3 RTL2832UBDA;REALTEK 2832U BDA Driver; C:\WINDOWS\system32\drivers\RTL2832UBDA.sys []
S3 RTL2832UUSB;REALTEK 2832U USB Driver; C:\WINDOWS\System32\Drivers\RTL2832UUSB.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 Tosrfcom;Tosrfcom; C:\WINDOWS\system32\drivers\Tosrfcom.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2004-08-11 18944]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-03-07 44768]
R2 BlackfishSQL;BlackfishSQL; C:\Program Files\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe [2008-08-29 65536]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 1373576]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2012-03-11 153376]
R2 lkClassAds;National Instruments PSP Server Locator; C:\WINDOWS\system32\lkads.exe [2006-07-25 45056]
R2 lkTimeSync;National Instruments Time Synchronization; C:\WINDOWS\system32\lktsrv.exe [2006-07-25 57344]
R2 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-04-29 877864]
R2 NIDomainService;National Instruments Domain Service; C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe [2006-07-25 200704]
R2 niSvcLoc;NI Service Locator; C:\WINDOWS\system32\nisvcloc.exe [2006-02-06 49152]
R2 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
R2 QipGuard;QipGuard; C:\Program Files\QipGuard\QipGuard.exe [2012-01-12 191440]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2012-02-20 482992]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-06-02 246520]
S2 LkCitadelServer;Lookout Citadel Server; C:\WINDOWS\system32\lkcitdl.exe [2006-06-19 688190]
S2 TestHandler;Fujitsu Siemens Computers Diagnostic Testhandler; C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe [2008-04-25 303104]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 257696]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 getPlusHelper;getPlus(R) Helper; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2011-11-23 69632]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-04-25 129976]
S3 NILM License Manager;NILM License Manager; C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe [2006-06-27 1007616]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2003-03-09 65795]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Hezké odpoledne

Já se ani nedivím, že Avast řve, máte to zavirované až na půdu

Stahněte Rkill z jednoho z odkazů, pokud by ho vir blokoval, zkuste stahnout jiný

Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill COM:
http://download.bleepingcomputer.com/grinler/rkill.com

Rkill PIF:
http://download.bleepingcomputer.com/grinler/rkill.pif

-spusťte ho a nechejte pracovat. Sám se ukončí.

-

Ted nerestartujte počítač!

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix
- přejmenujte combofix na potvůrka.com

motji píše: Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Při snaze pustit rkill.exe zařval avast a chtěl ho otevřít v sandboxu a než jsem stihl něco potvrdit proběhla modrá smrt.
Mám se tedy pokusit ty další s příponou com a pif ?

Tak nakonec s epovedlo a Rkill vypsal tento log:

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 06.06.2012 at 14:33:48.
Operating System: Microsoft Windows XP

Processes terminated by Rkill or while it was running:

C:\Documents and Settings\Václav Franc\Data aplikací\winlogon32.exe
C:\Documents and Settings\Václav Franc\Data aplikací\QipGuard\QipGuard.exe
C:\Documents and Settings\Václav Franc\Data aplikací\winlogon32.exe
C:\Documents and Settings\Václav Franc\Data aplikací\Dropbox\bin\Dropbox.exe
C:\Documents and Settings\Václav Franc\Nabídka Start\Programy\Po spuC:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\wuauclt.exe

Rkill completed on 06.06.2012 at 14:34:28.

Omlouvám se kolegyňce motji za vstup.

Musíš spustit RKill, nechat ho udělat jeho práci, NERESTARTOVAT PC a IHNED POTÉ spustit podle návodu ComboFix a jeho výsledný log sem vložit. Log z RKillu je motji k ničemu.

Po dlouhém boji přidávám výpis z combofixu.

ComboFix 12-06-06.02 - Václav Franc 06.06.2012 21:20:07.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1789.1128 [GMT 2:00]
Spuštěný z: c:\documents and settings\Václav Franc\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Václav Franc\Recent\Thumbs.db
c:\windows\host32.exe
c:\windows\MK.exe
c:\windows\msmqinst.log
c:\windows\n4.exe
c:\windows\system32\ntos.exe
c:\windows\system32\sdra64.exe
c:\windows\system32\SET1DE.tmp
c:\windows\system32\SET1E3.tmp
c:\windows\system32\SET1EA.tmp
c:\windows\system32\twext.exe
c:\windows\system32\xe1kP.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-05-06 do 2012-06-06 )))))))))))))))))))))))))))))))
.
.
2012-06-06 13:36 . 2012-06-06 13:36 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
2012-06-06 13:36 . 2012-06-06 13:36 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
2012-06-06 10:02 . 2012-06-06 10:57 -------- d-----w- c:\program files\trend micro
2012-06-06 10:02 . 2012-06-06 10:02 -------- d-----w- C:\rsit
2012-06-06 09:30 . 2006-11-24 03:59 53248 ----a-r- c:\windows\system32\SiSPower.dll
2012-06-06 09:30 . 2006-04-28 00:56 49152 ----a-r- c:\windows\InstFunc.exe
2012-06-06 09:30 . 2006-04-12 10:35 208896 ----a-r- c:\windows\Progress.exe
2012-06-06 09:30 . 2006-11-24 03:58 12288 ----a-r- c:\windows\InstFunc.dll
2012-06-06 09:30 . 2010-10-26 01:03 172032 ----a-w- c:\windows\system32\SiSInst.dll
2012-06-06 09:30 . 2010-10-26 01:03 258048 ----a-w- c:\windows\system32\SiSParse.dll
2012-06-06 09:30 . 2010-10-26 02:12 19200 ----a-w- c:\windows\system32\drivers\srvkp.sys
2012-06-06 09:30 . 2010-10-26 01:02 49152 ----a-w- c:\windows\system32\SiSBase.dll
2012-06-06 09:29 . 2010-10-26 02:18 3984896 ----a-w- c:\windows\system32\sisgl770.dll
2012-06-06 09:29 . 2005-10-07 05:13 65536 ----a-w- c:\windows\system32\sis760.bin
2012-06-06 09:29 . 2010-10-26 01:46 3468288 -c--a-w- c:\windows\system32\dllcache\sisgrv.dll
2012-06-06 09:29 . 2010-10-26 01:46 3468288 ----a-w- c:\windows\system32\sisgrv.dll
2012-06-06 09:29 . 2006-01-19 00:34 49152 ----a-w- c:\windows\system32\sis660.bin
2012-06-06 09:29 . 2005-10-07 05:13 65536 ----a-w- c:\windows\system32\sis741.bin
2012-06-06 09:27 . 2012-06-06 09:27 -------- d-----w- c:\program files\SiS VGA Utilities V3.78.00
2012-06-03 20:26 . 2012-06-03 20:26 -------- d-----w- c:\program files\Dropbox
2012-05-15 18:11 . 2012-05-15 18:11 -------- d-----w- c:\program files\FreeTime
2012-05-15 12:56 . 2012-05-15 12:56 -------- d-----w- c:\documents and settings\Václav Franc\Data aplikací\Broad Intelligence
2012-05-15 12:56 . 2012-05-15 12:56 -------- d-----w- c:\program files\MediaCoder
2012-05-13 00:20 . 2002-07-17 07:05 16512 ----a-w- c:\windows\system32\drivers\ASPI32.SYS
2012-05-13 00:20 . 2001-03-17 19:34 22528 ----a-w- c:\windows\system32\WNASPI32.DLL
2012-05-13 00:20 . 2012-05-13 00:20 -------- d-----w- c:\program files\4Musics WMA to WAV Converter
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-31 13:22 . 2008-04-14 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2012-05-04 23:23 . 2012-03-29 21:08 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-05-04 23:23 . 2011-06-21 21:16 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-11 13:55 . 2008-04-14 08:06 2028544 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-04-11 13:55 . 2008-04-14 12:00 1862272 ----a-w- c:\windows\system32\win32k.sys
2012-04-11 13:55 . 2008-04-14 12:00 2150400 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-03-11 17:06 . 2010-05-09 15:35 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-11 17:06 . 2009-05-31 13:38 73728 ----a-w- c:\windows\system32\javacpl.cpl
2006-01-23 08:32 . 2006-01-23 08:32 131072 -c--a-w- c:\program files\internet explorer\plugins\LV80ActiveXControl.dll
2006-06-07 12:40 . 2006-06-07 12:40 132848 -c--a-w- c:\program files\internet explorer\plugins\LV82ActiveXControl.dll
2012-06-06 13:36 . 2012-03-09 12:50 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-09-18 171464]
"QIP Internet Guardian"="c:\documents and settings\Václav Franc\Data aplikací\QipGuard\QipGuard.exe" [2012-01-12 191440]
"Windows-Anmeldeanwendung"="c:\documents and settings\Václav Franc\Data aplikací\winlogon32.exe" [2011-07-02 77824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-05-10 864256]
"TouchPadHotKey"="c:\program files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe" [2007-08-13 364544]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2008-03-25 570664]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-04-29 2221352]
"RTHDCPL"="RTHDCPL.EXE" [2007-08-10 16384000]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512]
"SpywareTerminatorShield"="c:\program files\Spyware Terminator\SpywareTerminatorShield.exe" [2012-02-20 2786480]
"SpywareTerminatorUpdater"="c:\program files\Spyware Terminator\SpywareTerminatorUpdate.exe" [2012-02-20 3669680]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"Adobe Reader"="c:\documents and settings\All Users\Data aplikací\Trend Micro Inc\Adobe Reader\1.0.1.8\AdobeReader.exe" [2011-07-02 77824]
"Windows-Anmeldeanwendung"="c:\documents and settings\Václav Franc\Data aplikací\winlogon32.exe" [2011-07-02 77824]
"SiSPower"="SiSPower.dll" [2006-11-24 53248]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Václav Franc\Nabídka Start\Programy\Po spuštění\
Dropbox.lnk - c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
startup.exe [2011-7-2 77824]
.
[HKLM\~\startupfolder\C:^Documents and Settings^Václav Franc^Nabídka Start^Programy^Po spuštění^startup.exe]
path=c:\documents and settings\Václav Franc\Nabídka Start\Programy\Po spuštění\startup.exe
backup=c:\windows\pss\startup.exeStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader]
2011-07-02 16:25 77824 ---ha-w- c:\documents and settings\All Users\Data aplikací\Trend Micro Inc\Adobe Reader\1.0.1.8\AdobeReader.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-14 23:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2012-02-28 16:38 1987976 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Y9IJJpmd0xBeX]
2010-06-10 20:10 110592 ----a-w- c:\windows\system32\RLae4.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Program Files\\QIP 2010\\qip.exe"=
"c:\\Program Files\\IHMC CmapTools\\jre\\bin\\javaw.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"d:\\Škola\\software\\tchp2-simulator\\Simulator.exe"=
"c:\\Program Files\\3DO\\Heroes 3 Complete\\HEROES3.ICD"=
"%windir%\explorer.exe"= %windir%\explorer.exe
"c:\\Program Files\\Spyware Terminator\\SpywareTerminator.exe"=
"c:\\Program Files\\Spyware Terminator\\SpywareTerminatorUpdate.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\EA GAMES\\MOHAA\\MOHAA.exe"=
"c:\\Documents and Settings\\Václav Franc\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [1.5.2010 23:18 685816]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [9.3.2012 15:50 612184]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [9.3.2012 15:50 337880]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver;c:\windows\system32\drivers\sp_rsdrv2.sys [10.3.2012 9:46 32768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [9.3.2012 15:50 20696]
R2 BlackfishSQL;BlackfishSQL;c:\program files\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe [29.8.2008 21:00 65536]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [28.2.2012 18:38 1373576]
R2 QipGuard;QipGuard;c:\program files\QipGuard\QipGuard.exe [17.8.2011 15:58 191440]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files\Spyware Terminator\st_rsser.exe [10.3.2012 9:46 482992]
S2 bvyhg;Installer System;c:\windows\system32\svchost.exe -k netsvcs [14.4.2008 14:00 14336]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2.5.2010 17:29 246520]
S2 uargvwxk;Config Center;c:\windows\system32\svchost.exe -k netsvcs [14.4.2008 14:00 14336]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [29.3.2012 23:08 257696]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [26.12.2010 19:29 1691480]
S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\ASPI32.SYS [13.5.2012 2:20 16512]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [25.4.2012 9:53 113120]
S3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys --> c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys [?]
S3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys --> c:\windows\system32\drivers\RTL2832UBDA.sys [?]
S3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys --> c:\windows\system32\Drivers\RTL2832UUSB.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Obsah adresáře 'Naplánované úlohy'
.
2012-06-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 23:23]
.
2010-08-24 c:\windows\Tasks\FRU Task 2003-04-10 00:56ewlett-Packard2003-04-10 00:56p psc 1200 series272A572217594EBCF1CEE215E352B92AD073FDE4273161150.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-09 15:56]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
uDefault_Search_URL = hxxp://search.qip.ru
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://search.qip.ru/ie
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: csob.cz\ib24
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\documents and settings\Václav Franc\Data aplikací\Mozilla\Firefox\Profiles\ydfkmf2x.default\
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
WebBrowser-{34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - (no file)
HKCU-Run-JC2zysCrPJrBOhA0Vl - c:\windows\system32\xe1kP.exe
HKLM-Run-01Lcex36JDslgdMH8TO49J2du2FQOE - c:\windows\system32\xe1kP.exe
MSConfigStartUp-Windows-Anmeldeanwendung - c:\documents and settings\Václav Franc\Local Settings\Temp\winlogon32.exe
MSConfigStartUp-Windows-Securitykey - c:\documents and settings\Václav Franc\Local Settings\Temp\winlogon32.exe
AddRemove-AP Guitar Tuner 1.02 - c:\program files\Audio Phonics
AddRemove-HijackThis - c:\documents and settings\Václav Franc\Dokumenty\Stažené soubory\HijackThis.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-06-06 21:28
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet005\Services\bvyhg]
"ServiceDll"="c:\windows\system32\tmdgujkq.dll"
--
.
[HKEY_LOCAL_MACHINE\System\ControlSet005\Services\uargvwxk]
"ServiceDll"="c:\windows\system32\tmdgujkq.dll"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(900)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll
.
- - - - - - - > 'lsass.exe'(964)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll
.
Celkový čas: 2012-06-06 21:30:29
ComboFix-quarantined-files.txt 2012-06-06 19:30
.
Před spuštěním: Volných bajtů: 25 616 805 888
Po spuštění: Volných bajtů: 25 980 284 928
.
- - End Of File - - 716DDEB6CD1872C6ED84C8585440B5D5

Kde jste chytil takovou spoušt..to je celá zoo i s babkou pokladní

Po odvirování si změňte všechna hesla, včetně k bankovnictví.

Máte možnost mi psát z jiného pc a ten zavirovaný odstřihnout uplně od sítě? Ať ho můžeme pořádně vyčistit.

Odinstalujte Spyware Terminátora, je zastaralý.

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

KillAll::

Driver::
uargvwxk
bvyhg

Netsvc::
uargvwxk
bvyhg

File::
c:\windows\system32\tmdgujkq.dll
c:\windows\system32\xe1kP.exe
c:\documents and settings\Václav Franc\Local Settings\Temp\winlogon32.exe
c:\windows\system32\RLae4.exe
c:\documents and settings\Václav Franc\Nabídka Start\Programy\Po spuštění\startup.exe
c:\windows\pss\startup.exe
c:\documents and settings\Václav Franc\Nabídka Start\Programy\Po spuštění\startup.exe

Folder::
c:\documents and settings\All Users\Data aplikací\Trend Micro Inc

DDS::
uStart Page = about:blank
uDefault_Search_URL = hxxp://search.qip.ru
uSearchAssistant = hxxp://search.qip.ru/ie

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Y9IJJpmd0xBeX]
[-HKLM\~\startupfolder\C:^Documents and Settings^Václav Franc^Nabídka Start^Programy^Po spuštění^startup.exe]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows-Anmeldeanwendung"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
"GrooveMonitor"=-
"Adobe Reader"=-
"Windows-Anmeldeanwendung"=-

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:

Obrázek

-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

Stahněte z mého podpisu AVPTOOl http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

-Podle návodu nainstalujte a proveďte sken
-co najde nechejte léčit, mazat
-sken může trvat několik hodin
-vložte zde log z výsledky

Doinstalujte nějaký firewall, třeba comodo nebo Zone alarm. Teprve potom můžete připojit pc k síti.

Je ve stejné síti ještě jíný pc?

motji píše:Kde jste chytil takovou spoušt..to je celá zoo i s babkou pokladní

Tak problém bude hlavně v tom, že ntb nebyl zatím po dobu mých studijí nijak zformátován nebo udržován. Chtěl jsem se na to co v nejbližší době vrhnout, ale prostě už to bylo neúnosné a proto bych byl rád kdybych na něm doáthnul bakalářku dokonce. Ale to už sem tak nějak nepatří.

motji píše:Máte možnost mi psát z jiného pc a ten zavirovaný odstřihnout uplně od sítě? Ať ho můžeme pořádně vyčistit.

Možnost psát z jiného pc, momentálně nemám, takže vždy po porvedení nějakého kroku budu muset ntb připojit k internetu.

motji píše:Je ve stejné síti ještě jíný pc?

Doma jsou v síti ještě další dva počítače, a v podnájmu, v místě kde studuji jsou další 4 počítače.

Každopádně Váš návod provedu hned zítra a pokud se vše povede výsledný log sem opět nahraji.

Takže víte co, postahnujte si AVptool,nějakou instalačku firewallu, pak odpojte pc od sítě a můžete se pustit do odvirování. Až všechno provedete a nainstalujete firewall, tak se připojíte a nahrajete mi logy.
Problém je v tom, že máte v pc confickera, což je červ, který se šíří po síti. Pokud si nedáte firewall, vrátí se zpět. Zeptejte se spolubydlících, zda nemají také problémy s pc, nejspíš budou mít také zavirované pc..pak by se vir neustále vracel.

Největší absurdita, že dělám bakalářku na Počítačovou infiltraci

ovšem na pajdě, takže to není natolik podrobný a do důsledku probraný jako třeb na FAVce. No jdu na tom makakt!

Přidávám log z Combofixu po zavedení scriptu.

ComboFix 12-06-07.03 - Václav Franc 07.06.2012 12:37:38.2.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1789.1059 [GMT 2:00]
Spuštěný z: c:\documents and settings\Václav Franc\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Václav Franc\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
FILE ::
"c:\documents and settings\Václav Franc\Local Settings\Temp\winlogon32.exe"
"c:\documents and settings\Václav Franc\Nabídka Start\Programy\Po spuštění\startup.exe"
"c:\windows\pss\startup.exe"
"c:\windows\system32\RLae4.exe"
"c:\windows\system32\tmdgujkq.dll"
"c:\windows\system32\xe1kP.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_BVYHG
-------\Legacy_UARGVWXK
-------\Service_bvyhg
-------\Service_uargvwxk
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-05-07 do 2012-06-07 )))))))))))))))))))))))))))))))
.
.
2012-06-06 13:36 . 2012-06-06 13:36 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll
2012-06-06 13:36 . 2012-06-06 13:36 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll
2012-06-06 10:02 . 2012-06-06 10:57 -------- d-----w- c:\program files\trend micro
2012-06-06 10:02 . 2012-06-06 10:02 -------- d-----w- C:\rsit
2012-06-06 09:30 . 2006-11-24 03:59 53248 ----a-r- c:\windows\system32\SiSPower.dll
2012-06-06 09:30 . 2006-04-28 00:56 49152 ----a-r- c:\windows\InstFunc.exe
2012-06-06 09:30 . 2006-04-12 10:35 208896 ----a-r- c:\windows\Progress.exe
2012-06-06 09:30 . 2006-11-24 03:58 12288 ----a-r- c:\windows\InstFunc.dll
2012-06-06 09:30 . 2010-10-26 01:03 172032 ----a-w- c:\windows\system32\SiSInst.dll
2012-06-06 09:30 . 2010-10-26 01:03 258048 ----a-w- c:\windows\system32\SiSParse.dll
2012-06-06 09:30 . 2010-10-26 02:12 19200 ----a-w- c:\windows\system32\drivers\srvkp.sys
2012-06-06 09:30 . 2010-10-26 01:02 49152 ----a-w- c:\windows\system32\SiSBase.dll
2012-06-06 09:29 . 2010-10-26 02:18 3984896 ----a-w- c:\windows\system32\sisgl770.dll
2012-06-06 09:29 . 2005-10-07 05:13 65536 ----a-w- c:\windows\system32\sis760.bin
2012-06-06 09:29 . 2010-10-26 01:46 3468288 -c--a-w- c:\windows\system32\dllcache\sisgrv.dll
2012-06-06 09:29 . 2010-10-26 01:46 3468288 ----a-w- c:\windows\system32\sisgrv.dll
2012-06-06 09:29 . 2006-01-19 00:34 49152 ----a-w- c:\windows\system32\sis660.bin
2012-06-06 09:29 . 2005-10-07 05:13 65536 ----a-w- c:\windows\system32\sis741.bin
2012-06-06 09:27 . 2012-06-06 09:27 -------- d-----w- c:\program files\SiS VGA Utilities V3.78.00
2012-06-03 20:26 . 2012-06-03 20:26 -------- d-----w- c:\program files\Dropbox
2012-05-15 18:11 . 2012-05-15 18:11 -------- d-----w- c:\program files\FreeTime
2012-05-15 12:56 . 2012-05-15 12:56 -------- d-----w- c:\documents and settings\Václav Franc\Data aplikací\Broad Intelligence
2012-05-15 12:56 . 2012-05-15 12:56 -------- d-----w- c:\program files\MediaCoder
2012-05-13 00:20 . 2002-07-17 07:05 16512 ----a-w- c:\windows\system32\drivers\ASPI32.SYS
2012-05-13 00:20 . 2001-03-17 19:34 22528 ----a-w- c:\windows\system32\WNASPI32.DLL
2012-05-13 00:20 . 2012-05-13 00:20 -------- d-----w- c:\program files\4Musics WMA to WAV Converter
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-31 13:22 . 2008-04-14 12:00 602112 ----a-w- c:\windows\system32\crypt32.dll
2012-05-04 23:23 . 2012-03-29 21:08 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-05-04 23:23 . 2011-06-21 21:16 70304 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-04-11 13:55 . 2008-04-14 08:06 2028544 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-04-11 13:55 . 2008-04-14 12:00 1862272 ----a-w- c:\windows\system32\win32k.sys
2012-04-11 13:55 . 2008-04-14 12:00 2150400 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-03-11 17:06 . 2010-05-09 15:35 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-03-11 17:06 . 2009-05-31 13:38 73728 ----a-w- c:\windows\system32\javacpl.cpl
2006-01-23 08:32 . 2006-01-23 08:32 131072 -c--a-w- c:\program files\internet explorer\plugins\LV80ActiveXControl.dll
2006-06-07 12:40 . 2006-06-07 12:40 132848 -c--a-w- c:\program files\internet explorer\plugins\LV82ActiveXControl.dll
2012-06-06 13:36 . 2012-03-09 12:50 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-06_19.28.44 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-07 10:47 . 2012-06-07 10:47 16384 c:\windows\temp\Perflib_Perfdata_ebc.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools"="c:\program files\DAEMON Tools\daemon.exe" [2007-09-18 171464]
"QIP Internet Guardian"="c:\documents and settings\Václav Franc\Data aplikací\QipGuard\QipGuard.exe" [2012-01-12 191440]
"Windows-Anmeldeanwendung"="c:\documents and settings\Václav Franc\Data aplikací\winlogon32.exe" [2011-07-02 77824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-05-10 864256]
"TouchPadHotKey"="c:\program files\FSC\TouchPad HotKey Utility\TouchPad_HotKey.exe" [2007-08-13 364544]
"NeroFilterCheck"="c:\program files\Common Files\Nero\Lib\NeroCheck.exe" [2008-03-25 570664]
"NBKeyScan"="c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-04-29 2221352]
"RTHDCPL"="RTHDCPL.EXE" [2007-08-10 16384000]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512]
"SiSPower"="SiSPower.dll" [2006-11-24 53248]
"Windows-Anmeldeanwendung"="c:\documents and settings\Václav Franc\Data aplikací\winlogon32.exe" [2011-07-02 77824]
"Windows-Securitykey"="c:\documents and settings\Václav Franc\Local Settings\temp\winlogon32.exe" [2011-07-02 77824]
"Adobe Reader"="c:\documents and settings\All Users\Data aplikací\Trend Micro Inc\Adobe Reader\1.0.1.8\AdobeReader.exe" [2011-07-02 77824]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Václav Franc\Nabídka Start\Programy\Po spuštění\
Dropbox.lnk - c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\Dropbox.exe [2012-5-24 27112840]
startup.exe [2011-7-2 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader]
2011-07-02 16:25 77824 ---ha-w- c:\documents and settings\All Users\Data aplikací\Trend Micro Inc\Adobe Reader\1.0.1.8\AdobeReader.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-10-14 23:04 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
2012-02-28 16:38 1987976 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Program Files\\QIP 2010\\qip.exe"=
"c:\\Program Files\\IHMC CmapTools\\jre\\bin\\javaw.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"d:\\Škola\\software\\tchp2-simulator\\Simulator.exe"=
"c:\\Program Files\\3DO\\Heroes 3 Complete\\HEROES3.ICD"=
"%windir%\explorer.exe"= %windir%\explorer.exe
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\EA GAMES\\MOHAA\\MOHAA.exe"=
"c:\\Documents and Settings\\Václav Franc\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [1.5.2010 23:18 685816]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [9.3.2012 15:50 612184]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [9.3.2012 15:50 337880]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [9.3.2012 15:50 20696]
R2 BlackfishSQL;BlackfishSQL;c:\program files\CodeGear\RAD Studio\6.0\bin\BSQLServer.exe [29.8.2008 21:00 65536]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [28.2.2012 18:38 1373576]
R2 QipGuard;QipGuard;c:\program files\QipGuard\QipGuard.exe [17.8.2011 15:58 191440]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2.5.2010 17:29 246520]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [29.3.2012 23:08 257696]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [26.12.2010 19:29 1691480]
S3 ASPI;Advanced SCSI Programming Interface Driver;c:\windows\system32\drivers\ASPI32.SYS [13.5.2012 2:20 16512]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [25.4.2012 9:53 113120]
S3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys --> c:\windows\system32\DRIVERS\RTL2832U_IRHID.sys [?]
S3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys --> c:\windows\system32\drivers\RTL2832UBDA.sys [?]
S3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys --> c:\windows\system32\Drivers\RTL2832UUSB.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Obsah adresáře 'Naplánované úlohy'
.
2012-06-07 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-29 23:23]
.
2010-08-24 c:\windows\Tasks\FRU Task 2003-04-10 00:56ewlett-Packard2003-04-10 00:56p psc 1200 series272A572217594EBCF1CEE215E352B92AD073FDE4273161150.job
- c:\program files\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-09 15:56]
.
.
------- Doplňkový sken -------
.
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://search.qip.ru/ie
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
Trusted Zone: csob.cz\ib24
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 192.168.2.1
FF - ProfilePath - c:\documents and settings\Václav Franc\Data aplikací\Mozilla\Firefox\Profiles\ydfkmf2x.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-06-07 12:49
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(900)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll
.
- - - - - - - > 'lsass.exe'(956)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll
.
- - - - - - - > 'explorer.exe'(3308)
c:\windows\system32\vorbis.dll
c:\windows\system32\ogg.dll
c:\documents and settings\Václav Franc\Data aplikací\Dropbox\bin\DropboxExt.14.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\WinSCP\DragExt.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\RTHDCPL.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\lkads.exe
c:\windows\system32\lktsrv.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\National Instruments\Shared\Security\nidmsrv.exe
c:\windows\system32\nisvcloc.exe
c:\windows\system32\IoctlSvc.exe
c:\program files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
c:\windows\system32\msiexec.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\MsiExec.exe
.
**************************************************************************
.
Celkový čas: 2012-06-07 12:51:20 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-06-07 10:51
ComboFix2.txt 2012-06-06 19:30
.
Před spuštěním: Volných bajtů: 37 581 217 792
Po spuštění: Volných bajtů: 37 299 400 704
.
- - End Of File - - 4715E140518D1FAD7F864E87F6D6972C

nyní tedy projedu pc AVptoll a doinstaluji firewall ZoneAlarm.

Ještě tam je mrcha. Uvidíme, po AVptoolu mi vložte log ze rsitu.

Po nainstalování Zone Alarmu jak jste doporučila, jsem po restartování nemohl načíst syststém. Ani po zkušení puštění z poseldní známe konfigurace, tak ani z bodu obnovení. Nešlo to ani po opravě systému windows, nemohl jsem udělat z mých zkušeností nic jiného než přeinstalování systému, ovšem bez zformátování hdd. Proto budu muset ted vše znovu nastavovat a podobně, na zone alarm si dám asi znovu pozor, každopádně to nejspíš nevyřešilo tu mojí zoo.. co vy na to? měl bych vše znovu nehcat projet RSITem a hodit sem log ?

Tak to mě mrzí, já se ZA nemám problémy.
ANo poprosím o nový log ze rsitu.

log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Lord at 2012-06-07 22:33:59
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 39 GB (32%) free of 120 GB
Total RAM: 1789 MB (77% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:34:06, on 7.6.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\QIP 2010\qip.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\WINDOWS\system32\sistray.exe
C:\WINDOWS\system32\wscntfy.exe
C:\totalcmd\TOTALCMD.EXE
D:\programy\RSIT.exe
C:\Program Files\trend micro\Lord.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Infium] "C:\Program Files\QIP 2010\qip.exe" /autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

--
End of file - 3077 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SiSPower"=SiSPower.dll,ModeAgent []
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-08-10 16384000]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Infium"=C:\Program Files\QIP 2010\qip.exe [2012-01-12 7320528]

C:\Documents and Settings\All Users.WINDOWS\Nabídka Start\Programy\Po spuštění
Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe
Utility Tray.lnk - C:\WINDOWS\system32\sistray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitLord\BitLord.exe"="C:\Program Files\BitLord\BitLord.exe:*:Enabled:BitLord"
"C:\Program Files\QIP 2010\qip.exe"="C:\Program Files\QIP 2010\qip.exe:*:Enabled:QIP 2012"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.DIVX"=divx.dll
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-06-07 19:27:12 ----A---- C:\WINDOWS\system32\h323log.txt
2012-06-07 19:25:44 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2012-06-07 19:25:42 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2012-06-07 19:25:41 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2012-06-07 19:25:39 ----A---- C:\WINDOWS\system32\drivers\DMusic.sys
2012-06-07 19:25:37 ----A---- C:\WINDOWS\system32\drivers\MSKSSRV.sys
2012-06-07 19:25:34 ----A---- C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2012-06-07 19:25:33 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2012-06-07 19:25:31 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2012-06-07 19:25:29 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2012-06-07 19:25:28 ----A---- C:\WINDOWS\system32\drivers\MSPQM.sys
2012-06-07 19:25:26 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2012-06-07 19:25:21 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2012-06-07 19:25:03 ----A---- C:\WINDOWS\system32\ksuser.dll
2012-06-07 19:25:03 ----A---- C:\WINDOWS\system32\drivers\USBAUDIO.sys
2012-06-07 19:25:03 ----A---- C:\WINDOWS\system32\drivers\portcls.sys
2012-06-07 19:25:03 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2012-06-07 19:24:49 ----A---- C:\WINDOWS\system32\hidserv.dll
2012-06-07 19:24:25 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2012-06-07 19:23:25 ----A---- C:\WINDOWS\system32\usbui.dll
2012-06-07 19:23:16 ----A---- C:\WINDOWS\system32\drivers\UAGP35.SYS
2012-06-07 19:23:06 ----A---- C:\WINDOWS\system32\drivers\compbatt.sys
2012-06-07 19:23:05 ----A---- C:\WINDOWS\system32\drivers\CmBatt.sys
2012-06-07 19:23:05 ----A---- C:\WINDOWS\system32\drivers\battc.sys
2012-06-07 19:20:12 ----A---- C:\WINDOWS\imsins.BAK
2012-06-07 19:20:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-06-07 19:20:07 ----A---- C:\WINDOWS\ODBCINST.INI
2012-06-07 19:20:01 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2012-06-07 19:20:01 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2012-06-07 19:20:01 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdur.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdru.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2012-06-07 19:19:59 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2012-06-07 19:19:57 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2012-06-07 19:19:57 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2012-06-07 19:19:57 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2012-06-07 19:19:57 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2012-06-07 19:19:57 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2012-06-07 19:19:57 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2012-06-07 19:19:57 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2012-06-07 19:19:56 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2012-06-07 19:19:56 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2012-06-07 19:19:56 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2012-06-07 19:19:56 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2012-06-07 19:19:56 ----RA---- C:\WINDOWS\system32\kbdest.dll
2012-06-07 19:19:53 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2012-06-07 19:19:53 ----A---- C:\WINDOWS\system32\kbdsl.dll
2012-06-07 19:19:52 ----A---- C:\WINDOWS\system32\kbdycl.dll
2012-06-07 19:19:52 ----A---- C:\WINDOWS\system32\kbdro.dll
2012-06-07 19:19:52 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2012-06-07 19:19:52 ----A---- C:\WINDOWS\system32\kbdpl.dll
2012-06-07 19:19:52 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2012-06-07 19:19:52 ----A---- C:\WINDOWS\system32\kbdhu.dll
2012-06-07 19:19:52 ----A---- C:\WINDOWS\system32\kbdcr.dll
2012-06-07 19:19:52 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2012-06-07 19:19:51 ----A---- C:\WINDOWS\system32\irclass.dll
2012-06-07 19:19:51 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2012-06-07 19:19:50 ----A---- C:\WINDOWS\system32\spxcoins.dll
2012-06-07 19:19:50 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2012-06-07 19:19:50 ----A---- C:\WINDOWS\system32\dgsetup.dll
2012-06-07 19:19:48 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2012-06-07 19:19:48 ----A---- C:\WINDOWS\TASKMAN.EXE
2012-06-07 19:19:48 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2012-06-07 19:19:48 ----A---- C:\WINDOWS\system32\batt.dll
2012-06-07 19:19:47 ----A---- C:\WINDOWS\NOTEPAD.EXE
2012-06-07 19:19:46 ----A---- C:\WINDOWS\system32\storprop.dll
2012-06-07 19:19:35 ----ASH---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\desktop.ini
2012-06-07 19:19:32 ----RA---- C:\WINDOWS\SET8.tmp
2012-06-07 19:19:29 ----RA---- C:\WINDOWS\SET4.tmp
2012-06-07 19:19:28 ----RA---- C:\WINDOWS\SET3.tmp
2012-06-07 19:19:17 ----SD---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Microsoft
2012-06-07 19:18:55 ----A---- C:\WINDOWS\setuplog.txt
2012-06-07 19:18:45 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2012-06-07 19:10:46 ----ASH---- C:\pagefile.sys
2012-06-07 19:06:45 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Windows Genuine Advantage
2012-06-07 18:59:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2012-06-07 18:59:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2012-06-07 18:59:23 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2012-06-07 18:57:36 ----D---- C:\Documents and Settings\Lord\Data aplikací\vlc
2012-06-07 18:57:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2012-06-07 18:52:33 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2012-06-07 18:52:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2012-06-07 18:52:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2012-06-07 18:52:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2012-06-07 18:52:13 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2012-06-07 18:52:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2012-06-07 18:52:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2012-06-07 18:51:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2012-06-07 18:51:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2012-06-07 18:51:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2012-06-07 18:51:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2012-06-07 18:51:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2012-06-07 18:51:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2012-06-07 18:50:18 ----A---- C:\WINDOWS\system32\MRT.exe
2012-06-07 18:50:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2012-06-07 18:50:05 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2012-06-07 18:50:00 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2012-06-07 18:49:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2012-06-07 18:49:46 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2012-06-07 18:49:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2012-06-07 18:49:37 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2012-06-07 18:49:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2012-06-07 18:49:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2012-06-07 18:49:23 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2012-06-07 18:49:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2012-06-07 18:49:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2012-06-07 18:49:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2012-06-07 18:49:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2012-06-07 18:48:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2012-06-07 18:48:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2012-06-07 18:48:47 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2012-06-07 18:48:43 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2012-06-07 18:48:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2012-06-07 18:48:34 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2012-06-07 18:48:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2012-06-07 18:48:26 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2012-06-07 18:48:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2012-06-07 18:48:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2012-06-07 18:48:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2012-06-07 18:48:05 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2012-06-07 18:47:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2675157$
2012-06-07 18:47:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2012-06-07 18:47:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2012-06-07 18:47:33 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2012-06-07 18:47:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2012-06-07 18:47:19 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2012-06-07 18:47:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2012-06-07 18:47:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2012-06-07 18:47:04 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2012-06-07 18:47:00 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2012-06-07 18:46:55 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2012-06-07 18:46:49 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2012-06-07 18:46:44 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2012-06-07 18:46:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2012-06-07 18:46:34 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2012-06-07 18:46:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2718704$
2012-06-07 18:46:23 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2012-06-07 18:46:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2695962$
2012-06-07 18:46:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2012-06-07 18:46:09 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2012-06-07 18:46:03 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2012-06-07 18:45:58 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2012-06-07 18:45:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2012-06-07 18:45:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2621440$
2012-06-07 18:45:44 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2012-06-07 18:45:40 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2012-06-07 18:45:35 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2012-06-07 18:45:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2012-06-07 18:45:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2012-06-07 18:45:22 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2012-06-07 18:45:14 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2012-06-07 18:45:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2012-06-07 18:44:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2012-06-07 18:44:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2012-06-07 18:44:49 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2012-06-07 18:44:44 ----D---- C:\Documents and Settings\Lord\Data aplikací\QIP
2012-06-07 18:44:36 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2012-06-07 18:44:31 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2012-06-07 18:44:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2012-06-07 18:44:18 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2012-06-07 18:44:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2012-06-07 18:44:11 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2012-06-07 18:44:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2012-06-07 18:44:00 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2012-06-07 18:43:55 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2012-06-07 18:43:51 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2012-06-07 18:43:46 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2012-06-07 18:43:42 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2012-06-07 18:43:37 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2012-06-07 18:43:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2012-06-07 18:43:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2012-06-07 18:43:23 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2012-06-07 18:43:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2012-06-07 18:43:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2012-06-07 18:43:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2012-06-07 18:42:53 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2012-06-07 18:42:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2544521$
2012-06-07 18:42:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2012-06-07 18:42:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2012-06-07 18:42:29 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2012-06-07 18:42:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2012-06-07 18:42:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2012-06-07 18:42:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2012-06-07 18:42:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2012-06-07 18:42:07 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2012-06-07 18:42:00 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2012-06-07 18:41:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2012-06-07 18:41:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2012-06-07 18:39:00 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2012-06-07 18:37:15 ----D---- C:\Documents and Settings\Lord\Data aplikací\Thunderbird
2012-06-07 18:34:08 ----A---- C:\WINDOWS\avisplitter.INI
2012-06-07 18:34:01 ----D---- C:\Documents and Settings\Lord\Data aplikací\Media Player Classic
2012-06-07 18:32:41 ----N---- C:\WINDOWS\system32\browserchoice.exe
2012-06-07 18:31:33 ----A---- C:\WINDOWS\Alcmtr.exe
2012-06-07 18:27:59 ----D---- C:\Documents and Settings\Lord\Data aplikací\Macromedia
2012-06-07 18:27:59 ----D---- C:\Documents and Settings\Lord\Data aplikací\Adobe
2012-06-07 18:25:42 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\McAfee
2012-06-07 18:25:37 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-06-07 18:23:35 ----N---- C:\WINDOWS\system32\iacenc.dll
2012-06-07 18:19:20 ----SHD---- C:\RECYCLER
2012-06-07 18:18:43 ----N---- C:\WINDOWS\system32\spmsg.dll
2012-06-07 18:18:43 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2012-06-07 18:18:42 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2012-06-07 18:10:05 ----A---- C:\WINDOWS\system32\wpa.bak
2012-06-07 18:07:23 ----A---- C:\WINDOWS\system32\drivers\ar5211.sys
2012-06-07 18:07:16 ----D---- C:\Documents and Settings\Lord\Data aplikací\InstallShield
2012-06-07 17:56:08 ----A---- C:\WINDOWS\system32\Install6x.dll
2012-06-07 17:56:08 ----A---- C:\WINDOWS\system32\drivers\rt61.sys
2012-06-07 17:56:08 ----A---- C:\WINDOWS\system32\drivers\RT2500.SYS
2012-06-07 17:56:08 ----A---- C:\WINDOWS\system32\AegisI5.exe
2012-06-07 17:55:51 ----A---- C:\WINDOWS\system32\drivers\AegisP.sys
2012-06-07 17:55:39 ----D---- C:\Program Files\RALINK
2012-06-07 17:55:09 ----A---- C:\WINDOWS\system32\unrar.dll
2012-06-07 17:55:05 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2012-06-07 17:55:05 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2012-06-07 17:55:05 ----A---- C:\WINDOWS\system32\xvidcore.dll
2012-06-07 17:55:04 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2012-06-07 17:55:04 ----A---- C:\WINDOWS\system32\dpl100.dll
2012-06-07 17:55:04 ----A---- C:\WINDOWS\system32\divx.dll
2012-06-07 17:55:03 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2012-06-07 17:55:02 ----A---- C:\WINDOWS\system32\msvcr71.dll
2012-06-07 17:54:14 ----A---- C:\WINDOWS\system32\ChCfg.exe
2012-06-07 17:54:00 ----A---- C:\WINDOWS\SoundMan.exe
2012-06-07 17:54:00 ----A---- C:\WINDOWS\SkyTel.exe
2012-06-07 17:53:59 ----A---- C:\WINDOWS\RtlUpd.exe
2012-06-07 17:53:59 ----A---- C:\WINDOWS\RTLCPL.exe
2012-06-07 17:53:58 ----A---- C:\WINDOWS\system32\drivers\RtkHDAud.sys
2012-06-07 17:53:56 ----A---- C:\WINDOWS\RTHDCPL.exe
2012-06-07 17:53:56 ----A---- C:\WINDOWS\MicCal.exe
2012-06-07 17:53:56 ----A---- C:\WINDOWS\alcwzrd.exe
2012-06-07 17:53:50 ----A---- C:\WINDOWS\RtlExUpd.dll
2012-06-07 17:53:50 ----A---- C:\WINDOWS\HideWin.exe
2012-06-07 17:52:35 ----D---- C:\fsc.tmp
2012-06-07 17:48:54 ----A---- C:\WINDOWS\VGAsetup.ini
2012-06-07 17:48:43 ----N---- C:\WINDOWS\system32\TVMode.dll
2012-06-07 17:48:43 ----N---- C:\WINDOWS\system32\SiSHook.dll
2012-06-07 17:48:43 ----N---- C:\WINDOWS\system32\SiSApCom.dll
2012-06-07 17:48:43 ----N---- C:\WINDOWS\system32\LCDMode.exe
2012-06-07 17:48:43 ----D---- C:\WINDOWS\SIS
2012-06-07 17:48:42 ----A---- C:\WINDOWS\system32\sistray.exe
2012-06-07 17:48:42 ----A---- C:\WINDOWS\system32\SiSPower.dll
2012-06-07 17:48:42 ----A---- C:\WINDOWS\Progress.exe
2012-06-07 17:48:42 ----A---- C:\WINDOWS\InstFunc.exe
2012-06-07 17:48:42 ----A---- C:\WINDOWS\InstFunc.dll
2012-06-07 17:48:42 ----A---- C:\WINDOWS\difxapi.dll
2012-06-07 17:48:33 ----D---- C:\Program Files\SiS VGA Utilities V3.82
2012-06-07 17:48:27 ----A---- C:\WINDOWS\system32\VGAunistlog.ini
2012-06-07 17:48:12 ----A---- C:\WINDOWS\system32\SiSPIns2.dll
2012-06-07 17:48:12 ----A---- C:\WINDOWS\system32\SiSParse.dll
2012-06-07 17:48:12 ----A---- C:\WINDOWS\system32\SiSInst.dll
2012-06-07 17:48:12 ----A---- C:\WINDOWS\system32\sisgrv.dll
2012-06-07 17:48:12 ----A---- C:\WINDOWS\system32\sisgl770.dll
2012-06-07 17:48:12 ----A---- C:\WINDOWS\system32\SiSBase.dll
2012-06-07 17:48:12 ----A---- C:\WINDOWS\system32\drivers\srvkp.sys
2012-06-07 17:48:12 ----A---- C:\WINDOWS\system32\drivers\sisgrp.sys
2012-06-07 17:46:55 ----A---- C:\WINDOWS\WINCMD.INI
2012-06-07 17:45:26 ----A---- C:\WINDOWS\system32\drivers\mouhid.sys
2012-06-07 17:43:32 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2012-06-07 17:43:24 ----D---- C:\Documents and Settings\Lord\Data aplikací\Mozilla
2012-06-07 17:41:58 ----D---- C:\Documents and Settings\Lord\Data aplikací\Identities
2012-06-07 17:41:51 ----ASH---- C:\Documents and Settings\Lord\Data aplikací\desktop.ini
2012-06-07 17:41:50 ----SD---- C:\Documents and Settings\Lord\Data aplikací\Microsoft
2012-06-07 17:39:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-06-07 17:36:26 ----AS---- C:\WINDOWS\bootstat.dat
2012-06-07 17:33:07 ----A---- C:\WINDOWS\control.ini
2012-06-07 17:32:53 ----A---- C:\WINDOWS\OEWABLog.txt
2012-06-07 17:32:47 ----A---- C:\WINDOWS\system32\mapi32.dll
2012-06-07 17:31:09 ----A---- C:\WINDOWS\system32\atrace.dll
2012-06-07 17:31:06 ----A---- C:\WINDOWS\system32\desktop.ini
2012-06-07 17:31:06 ----A---- C:\WINDOWS\desktop.ini
2012-06-07 17:31:00 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2012-06-07 17:30:59 ----A---- C:\WINDOWS\system32\acctres.dll
2012-06-07 17:30:58 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2012-06-07 17:30:54 ----A---- C:\WINDOWS\system32\wuweb.dll
2012-06-07 17:30:54 ----A---- C:\WINDOWS\system32\wups.dll
2012-06-07 17:30:54 ----A---- C:\WINDOWS\system32\wucltui.dll
2012-06-07 17:30:54 ----A---- C:\WINDOWS\system32\wuauserv.dll
2012-06-07 17:30:54 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2012-06-07 17:30:54 ----A---- C:\WINDOWS\system32\wuaueng.dll
2012-06-07 17:30:54 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2012-06-07 17:30:54 ----A---- C:\WINDOWS\system32\wuauclt.exe
2012-06-07 17:30:53 ----A---- C:\WINDOWS\system32\wuapi.dll
2012-06-07 17:30:53 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2012-06-07 17:30:53 ----A---- C:\WINDOWS\system32\qmgr.dll
2012-06-07 17:30:53 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2012-06-07 17:30:53 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2012-06-07 17:30:53 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2012-06-07 17:30:36 ----A---- C:\WINDOWS\system32\safrslv.dll
2012-06-07 17:30:36 ----A---- C:\WINDOWS\system32\safrdm.dll
2012-06-07 17:30:36 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2012-06-07 17:30:36 ----A---- C:\WINDOWS\system32\racpldlg.dll
2012-06-07 17:30:33 ----A---- C:\WINDOWS\system32\fltMc.exe
2012-06-07 17:30:33 ----A---- C:\WINDOWS\system32\fltlib.dll
2012-06-07 17:30:33 ----A---- C:\WINDOWS\system32\drivers\fltMgr.sys
2012-06-07 17:30:32 ----A---- C:\WINDOWS\system32\srsvc.dll
2012-06-07 17:30:32 ----A---- C:\WINDOWS\system32\srrstr.dll
2012-06-07 17:30:32 ----A---- C:\WINDOWS\system32\srclient.dll
2012-06-07 17:30:32 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2012-06-07 17:30:31 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2012-06-07 17:30:31 ----A---- C:\WINDOWS\system32\msconf.dll
2012-06-07 17:30:31 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2012-06-07 17:30:31 ----A---- C:\WINDOWS\system32\mnmdd.dll
2012-06-07 17:30:31 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2012-06-07 17:30:31 ----A---- C:\WINDOWS\system32\ils.dll
2012-06-07 17:30:30 ----A---- C:\WINDOWS\system32\msoert2.dll
2012-06-07 17:30:30 ----A---- C:\WINDOWS\system32\msoeacct.dll
2012-06-07 17:30:30 ----A---- C:\WINDOWS\system32\inetres.dll
2012-06-07 17:30:30 ----A---- C:\WINDOWS\system32\inetcomm.dll
2012-06-07 17:30:29 ----A---- C:\WINDOWS\system32\schedsvc.dll
2012-06-07 17:30:29 ----A---- C:\WINDOWS\system32\mstinit.exe
2012-06-07 17:30:29 ----A---- C:\WINDOWS\system32\mstask.dll
2012-06-07 17:30:29 ----A---- C:\WINDOWS\system32\icwphbk.dll
2012-06-07 17:30:29 ----A---- C:\WINDOWS\system32\icwdial.dll
2012-06-07 17:30:28 ----A---- C:\WINDOWS\system32\isign32.dll
2012-06-07 17:30:28 ----A---- C:\WINDOWS\system32\inetcfg.dll
2012-06-07 17:29:47 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2012-06-07 17:29:32 ----A---- C:\WINDOWS\vbaddin.ini
2012-06-07 17:29:32 ----A---- C:\WINDOWS\vb.ini
2012-06-07 17:29:06 ----A---- C:\WINDOWS\system32\write.exe
2012-06-07 17:29:00 ----A---- C:\WINDOWS\system32\winchat.exe
2012-06-07 17:29:00 ----A---- C:\WINDOWS\system32\sndvol32.exe
2012-06-07 17:29:00 ----A---- C:\WINDOWS\system32\hticons.dll
2012-06-07 17:29:00 ----A---- C:\WINDOWS\system32\avwav.dll
2012-06-07 17:29:00 ----A---- C:\WINDOWS\system32\avtapi.dll
2012-06-07 17:29:00 ----A---- C:\WINDOWS\system32\avmeter.dll
2012-06-07 17:28:54 ----A---- C:\WINDOWS\system32\charmap.exe
2012-06-07 17:28:54 ----A---- C:\WINDOWS\system32\getuname.dll
2012-06-07 17:28:53 ----A---- C:\WINDOWS\system32\winmine.exe
2012-06-07 17:28:53 ----A---- C:\WINDOWS\system32\sol.exe
2012-06-07 17:28:53 ----A---- C:\WINDOWS\system32\mshearts.exe
2012-06-07 17:28:53 ----A---- C:\WINDOWS\system32\calc.exe
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\tslabels.ini
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\tskill.exe
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\tscon.exe
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\shadow.exe
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\rwinsta.exe
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\reset.exe
2012-06-07 17:28:52 ----A---- C:\WINDOWS\system32\freecell.exe
2012-06-07 17:28:51 ----A---- C:\WINDOWS\system32\regini.exe
2012-06-07 17:28:51 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2012-06-07 17:28:51 ----A---- C:\WINDOWS\system32\qwinsta.exe
2012-06-07 17:28:51 ----A---- C:\WINDOWS\system32\qappsrv.exe
2012-06-07 17:28:51 ----A---- C:\WINDOWS\system32\msg.exe
2012-06-07 17:28:51 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2012-06-07 17:28:51 ----A---- C:\WINDOWS\system32\logoff.exe
2012-06-07 17:28:51 ----A---- C:\WINDOWS\system32\cdmodem.dll
2012-06-07 17:28:46 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2012-06-07 17:28:46 ----A---- C:\WINDOWS\system32\accwiz.exe
2012-06-07 17:28:45 ----A---- C:\WINDOWS\system32\sndrec32.exe
2012-06-07 17:28:45 ----A---- C:\WINDOWS\system32\mplay32.exe
2012-06-07 17:28:45 ----A---- C:\WINDOWS\system32\hypertrm.dll
2012-06-07 17:28:44 ----A---- C:\WINDOWS\system32\spider.exe
2012-06-07 17:28:44 ----A---- C:\WINDOWS\system32\mspaint.exe
2012-06-07 17:28:44 ----A---- C:\WINDOWS\system32\clipbrd.exe
2012-06-07 17:28:43 ----A---- C:\WINDOWS\system32\tsgqec.dll
2012-06-07 17:28:43 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2012-06-07 17:28:43 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2012-06-07 17:28:43 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2012-06-07 17:28:43 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2012-06-07 17:28:43 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2012-06-07 17:28:42 ----A---- C:\WINDOWS\system32\mstscax.dll
2012-06-07 17:28:42 ----A---- C:\WINDOWS\system32\mstsc.exe
2012-06-07 17:28:42 ----A---- C:\WINDOWS\system32\aaclient.dll
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\termsrv.dll
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\sessmgr.exe
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\remotepg.dll
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\rdshost.exe
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\rdpclip.exe
2012-06-07 17:28:41 ----A---- C:\WINDOWS\system32\rdchost.dll
2012-06-07 17:28:40 ----A---- C:\WINDOWS\system32\qprocess.exe
2012-06-07 17:28:40 ----A---- C:\WINDOWS\system32\mtxoci.dll
2012-06-07 17:28:40 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2012-06-07 17:28:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2012-06-07 17:28:40 ----A---- C:\WINDOWS\system32\icaapi.dll
2012-06-07 17:28:40 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2012-06-07 17:28:39 ----A---- C:\WINDOWS\system32\xolehlp.dll
2012-06-07 17:28:39 ----A---- C:\WINDOWS\system32\msdtctm.dll
2012-06-07 17:28:39 ----A---- C:\WINDOWS\system32\msdtclog.dll
2012-06-07 17:28:39 ----A---- C:\WINDOWS\system32\msdtc.exe
2012-06-07 17:28:38 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2012-06-07 17:28:38 ----A---- C:\WINDOWS\system32\mtxex.dll
2012-06-07 17:28:38 ----A---- C:\WINDOWS\system32\mtxdm.dll
2012-06-07 17:28:38 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2012-06-07 17:28:38 ----A---- C:\WINDOWS\system32\comrepl.dll
2012-06-07 17:28:38 ----A---- C:\WINDOWS\system32\comaddin.dll
2012-06-07 17:28:38 ----A---- C:\WINDOWS\system32\colbact.dll
2012-06-07 17:28:37 ----A---- C:\WINDOWS\system32\stclient.dll
2012-06-07 17:28:37 ----A---- C:\WINDOWS\system32\clbcatex.dll
2012-06-07 17:28:37 ----A---- C:\WINDOWS\system32\catsrvut.dll
2012-06-07 17:28:37 ----A---- C:\WINDOWS\system32\catsrvps.dll
2012-06-07 17:28:37 ----A---- C:\WINDOWS\system32\catsrv.dll
2012-06-07 17:28:36 ----A---- C:\WINDOWS\system32\comuid.dll
2012-06-07 17:28:36 ----A---- C:\WINDOWS\system32\comsvcs.dll
2012-06-07 17:28:36 ----A---- C:\WINDOWS\system32\comsnap.dll
2012-06-07 17:28:35 ----A---- C:\WINDOWS\system32\clbcatq.dll
2012-06-07 17:28:30 ----A---- C:\WINDOWS\system32\servdeps.dll
2012-06-07 17:28:30 ----A---- C:\WINDOWS\system32\mmfutil.dll
2012-06-07 17:28:30 ----A---- C:\WINDOWS\system32\licwmi.dll
2012-06-07 17:28:29 ----A---- C:\WINDOWS\system32\cmprops.dll
2012-06-07 17:28:24 ----A---- C:\WINDOWS\system32\drivers\termdd.sys
2012-06-07 17:28:24 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2012-06-07 16:56:28 ----D---- C:\WINDOWS\Prefetch
2012-06-07 16:34:24 ----D---- C:\Program Files\ComPlus Applications
2012-06-07 15:04:29 ----D---- C:\Program Files\CheckPoint
2012-06-07 12:51:20 ----A---- C:\ComboFix.txt
2012-06-07 12:44:50 ----D---- C:\WINDOWS\temp
2012-06-06 14:49:16 ----SH---- C:\Boot.bak
2012-06-06 14:49:09 ----RASHD---- C:\cmdcons
2012-06-06 14:47:14 ----D---- C:\WINDOWS\ERDNT
2012-06-06 14:47:08 ----D---- C:\Qoobox
2012-06-06 12:02:33 ----D---- C:\Program Files\trend micro
2012-06-06 12:02:32 ----D---- C:\rsit
2012-06-06 11:27:32 ----D---- C:\Program Files\SiS VGA Utilities V3.78.00
2012-06-03 22:26:47 ----D---- C:\Program Files\Dropbox
2012-05-31 08:42:00 ----D---- C:\WINDOWS\pss
2012-05-15 20:11:46 ----D---- C:\Program Files\FreeTime
2012-05-15 14:56:17 ----D---- C:\Program Files\MediaCoder
2012-05-13 02:20:32 ----D---- C:\Program Files\4Musics WMA to WAV Converter

======List of files/folders modified in the last 1 month======

2012-06-07 22:22:11 ----D---- C:\WINDOWS
2012-06-07 22:21:58 ----D---- C:\WINDOWS\system32
2012-06-07 19:20:03 ----A---- C:\WINDOWS\system.ini
2012-06-07 19:20:02 ----RSD---- C:\WINDOWS\Fonts
2012-06-07 19:19:50 ----D---- C:\WINDOWS\system
2012-06-07 19:18:55 ----D---- C:\WINDOWS\Debug
2012-06-07 19:17:25 ----D---- C:\WINDOWS\system32\Setup
2012-06-07 19:17:15 ----D---- C:\WINDOWS\L2Schemas
2012-06-07 19:17:13 ----D---- C:\WINDOWS\system32\usmt
2012-06-07 19:17:00 ----D---- C:\WINDOWS\ime
2012-06-07 19:17:00 ----D---- C:\WINDOWS\ehome
2012-06-07 19:16:57 ----D---- C:\WINDOWS\Network Diagnostic
2012-06-07 19:16:40 ----D---- C:\WINDOWS\PeerNet
2012-06-07 19:16:28 ----D---- C:\WINDOWS\system32\npp
2012-06-07 19:16:21 ----D---- C:\WINDOWS\msagent
2012-06-07 19:16:18 ----D---- C:\WINDOWS\system32\cs
2012-06-07 19:13:20 ----D---- C:\WINDOWS\system32\1029
2012-06-07 19:13:09 ----D---- C:\WINDOWS\twain_32
2012-06-07 19:12:49 ----D---- C:\WINDOWS\system32\ras
2012-06-07 19:12:31 ----D---- C:\WINDOWS\system32\drivers\etc
2012-06-07 19:12:22 ----D---- C:\WINDOWS\system32\icsxml
2012-06-07 19:11:55 ----D---- C:\WINDOWS\system32\ias
2012-06-07 19:11:50 ----D---- C:\WINDOWS\system32\1033
2012-06-07 19:10:45 ----D---- C:\WINDOWS\wb
2012-06-07 19:10:44 ----D---- C:\WINDOWS\system32\XPSViewer
2012-06-07 19:10:44 ----D---- C:\WINDOWS\system32\URTTEMP
2012-06-07 19:10:42 ----D---- C:\WINDOWS\system32\NtmsData
2012-06-07 19:10:42 ----D---- C:\WINDOWS\system32\Nexus Radio
2012-06-07 19:10:40 ----D---- C:\WINDOWS\system32\en-US
2012-06-07 19:10:40 ----D---- C:\WINDOWS\system32\drivers\UMDF
2012-06-07 19:10:33 ----HD---- C:\WINDOWS\ShellNew
2012-06-07 19:10:33 ----D---- C:\WINDOWS\repair
2012-06-07 19:10:32 ----RD---- C:\WINDOWS\Offline Web Pages
2012-06-07 19:10:12 ----SHD---- C:\WINDOWS\CSC
2012-06-07 19:10:12 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-06-07 19:10:12 ----RSD---- C:\WINDOWS\assembly
2012-06-07 19:10:09 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2012-06-07 19:10:09 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2012-06-07 19:08:47 ----SD---- C:\WINDOWS\Tasks
2012-06-07 19:06:42 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-06-07 19:06:13 ----HD---- C:\WINDOWS\inf
2012-06-07 19:05:11 ----D---- C:\WINDOWS\system32\CatRoot2
2012-06-07 19:04:55 ----D---- C:\WINDOWS\system32\cs-cz
2012-06-07 19:04:55 ----D---- C:\WINDOWS\Help
2012-06-07 19:04:55 ----D---- C:\Program Files\Internet Explorer
2012-06-07 19:04:53 ----D---- C:\WINDOWS\system32\wbem
2012-06-07 19:04:53 ----D---- C:\WINDOWS\AppPatch
2012-06-07 18:59:37 ----D---- C:\WINDOWS\system32\drivers
2012-06-07 18:57:41 ----HD---- C:\WINDOWS\$hf_mig$
2012-06-07 18:56:53 ----D---- C:\WINDOWS\WBEM
2012-06-07 18:56:45 ----D---- C:\WINDOWS\Media
2012-06-07 18:56:36 ----HDC---- C:\WINDOWS\ie8
2012-06-07 18:52:35 ----D---- C:\Program Files\Messenger
2012-06-07 18:44:02 ----D---- C:\Program Files\Outlook Express
2012-06-07 18:43:44 ----D---- C:\Program Files\Movie Maker
2012-06-07 18:32:16 ----D---- C:\WINDOWS\system32\RTCOM
2012-06-07 18:30:12 ----RD---- C:\Program Files
2012-06-07 18:09:33 ----D---- C:\WINDOWS\SoftwareDistribution
2012-06-07 18:07:23 ----DC---- C:\WINDOWS\system32\DRVSTORE
2012-06-07 18:05:01 ----D---- C:\WINDOWS\Driver Cache
2012-06-07 17:55:44 ----HD---- C:\Program Files\InstallShield Installation Information
2012-06-07 17:55:14 ----D---- C:\Program Files\K-Lite Codec Pack
2012-06-07 17:48:45 ----D---- C:\Program Files\sisagp
2012-06-07 17:48:01 ----D---- C:\Zdroje
2012-06-07 17:42:06 ----SHD---- C:\WINDOWS\Installer
2012-06-07 17:42:06 ----D---- C:\Config.Msi
2012-06-07 17:41:50 ----D---- C:\Documents and Settings
2012-06-07 17:39:45 ----SHD---- C:\System Volume Information
2012-06-07 17:39:45 ----D---- C:\WINDOWS\system32\Restore
2012-06-07 17:37:57 ----D---- C:\WINDOWS\system32\config
2012-06-07 17:33:26 ----D---- C:\WINDOWS\security
2012-06-07 17:33:07 ----A---- C:\WINDOWS\win.ini
2012-06-07 17:32:43 ----D---- C:\WINDOWS\Registration
2012-06-07 17:32:33 ----ASH---- C:\WINDOWS\fonts\desktop.ini
2012-06-07 17:31:52 ----RD---- C:\WINDOWS\Web
2012-06-07 17:31:21 ----D---- C:\WINDOWS\srchasst
2012-06-07 17:30:39 ----D---- C:\WINDOWS\system32\oobe
2012-06-07 17:29:49 ----D---- C:\WINDOWS\system32\Com
2012-06-07 17:29:24 ----D---- C:\WINDOWS\system32\MsDtc
2012-06-07 17:29:05 ----D---- C:\WINDOWS\Cursors
2012-06-07 17:27:18 ----SH---- C:\boot.ini
2012-06-07 16:22:26 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-06-07 16:17:35 ----D---- C:\WINDOWS\system32\CatRoot
2012-06-07 15:06:52 ----D---- C:\WINDOWS\WinSxS
2012-06-07 13:55:06 ----D---- C:\Program Files\Mozilla Firefox
2012-06-07 12:42:16 ----D---- C:\Program Files\Common Files
2012-06-07 12:30:48 ----D---- C:\WINDOWS\Minidump
2012-06-06 15:36:38 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-05-31 15:22:06 ----A---- C:\WINDOWS\system32\crypt32.dll
2012-05-31 12:00:04 ----D---- C:\Program Files\Mozilla Thunderbird
2012-05-23 16:25:46 ----D---- C:\WINDOWS\Microsoft.NET
2012-05-13 01:49:12 ----D---- C:\Program Files\Microsoft Office
2012-05-12 12:30:14 ----D---- C:\Program Files\rajce
2012-05-09 11:31:53 ----D---- C:\Program Files\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 uagp35;Filtr Microsoft AGPv3.5; C:\WINDOWS\system32\DRIVERS\uagp35.sys [2008-04-14 44672]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2007-08-03 18688]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.4.3.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2012-06-07 20747]
R3 AR5211;Atheros Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\ar5211.sys [2007-06-21 547072]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-10 4603904]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2007-08-03 321536]
R3 SiSGbeXP;SiS191/SiS190 Ethernet Device NDIS 5.1 Driver; C:\WINDOWS\system32\DRIVERS\SiSGbeXP.sys [2007-05-16 42368]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-07 257696]

-----------------EOF-----------------

Nemusíte se za co omlouvat, Vy za můj napadenej ntb nemůžete

Stejnak jsem to měl v plánu přeinstalovat, ale někdy až po státnicích

VIRY.CZ

Spousta blokací od Avastu při startu systému

Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému

Re: Spousta blokací od Avastu při startu systému