VIRY.CZ

ahojte,prosim Vas vie mi nekto pomoct pomale zapinanie pc a celkovo niekedy zamrzne a sam sa restartuje.neviem ako dalej.ccleaner som skusal.dik za kazdu radu .posilam log.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Merva at 2013-06-27 09:27:33
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 14 GB (27%) free of 52 GB
Total RAM: 2038 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:27:43, on 27. 6. 2013
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Merva\Plocha\RSIT.exe
C:\Program Files\trend micro\Merva.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?babsrc=HP_ss ... cb4ec617b0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: BHO_PROJECT - {BA0454C5-FD30-428E-8DB9-3FF87A612F64} - C:\Program Files\OpenApp\bho_project.dll (file missing)
O2 - BHO: Help the General-Search Project - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\DOCUME~1\Merva\DATAAP~1\MEDIAF~1\EXTENS~1\GENCRA~1.DLL
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [WindowsUpdate] C:\Documents and Settings\Merva\Data aplikací\WindowsUpdate\WindowsUpdate.exe
O4 - HKCU\..\Run: [AdobeBridge] "C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe" -stealth
O4 - HKCU\..\Run: [Media Finder] "C:\Program Files\Media Finder\MF.exe" /opentotray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download with &Media Finder - C:\Program Files\Media Finder\hook.html
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Active File Monitor V10 (AdobeActiveFileMonitor10.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 8707 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-MERVA-D0FA37E16-Merva.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\Express Files Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0454C5-FD30-428E-8DB9-3FF87A612F64}]
VideoFileDownload - C:\Program Files\OpenApp\bho_project.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA4520F3-AE13-4FB1-A513-58E23991C86D}]
Help the General-Search Project - C:\DOCUME~1\Merva\DATAAP~1\MEDIAF~1\EXTENS~1\GENCRA~1.DLL [2011-12-07 428544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-10-30 1019336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-11-12 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-11-12 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-11-12 141336]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-08-28 33673216]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2008-02-13 564496]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2008-02-13 2196240]
"P17Helper"=Rundll32 P17.dll,P17Helper []
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16 499608]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2004-12-15 5513216]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2004-12-15 86016]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-06-28 4273976]
"H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-10-23 385024]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]
"WindowsUpdate"=C:\Documents and Settings\Merva\Data aplikací\WindowsUpdate\WindowsUpdate.exe [2012-01-27 45056]
"AdobeBridge"=C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe [2010-03-09 11989960]
"Media Finder"=C:\Program Files\Media Finder\MF.exe /opentotray []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-11-03 205312]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\ExpressFiles\ExpressFiles.exe"="C:\Program Files\ExpressFiles\ExpressFiles.exe:*:Enabled:ExpressFiles"
"C:\Program Files\ExpressFiles\ExpressDL.exe"="C:\Program Files\ExpressFiles\ExpressDL.exe:*:Enabled:ExpressFilesDL"
"C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalátor AVG"
"C:\Documents and Settings\Merva\Data aplikací\uTorrent\utorrent.exe"="C:\Documents and Settings\Merva\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"

======List of files/folders created in the last 1 months======

2013-06-27 08:48:01 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2013-06-27 08:48:01 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2013-06-27 08:48:01 ----N---- C:\WINDOWS\system32\prntvpt.dll
2013-06-27 08:48:01 ----D---- C:\67b6b029fa0d1e2359542acc8f0ca9c1
2013-06-27 08:17:42 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2013-06-27 08:17:35 ----D---- C:\Program Files\MSXML 6.0
2013-06-27 08:16:46 ----D---- C:\3b6c541cbf065522c0744a77
2013-06-27 08:16:41 ----D---- C:\ee0479212966d7477c76a83bab11e0
2013-06-26 13:53:16 ----RSD---- C:\WINDOWS\assembly
2013-06-26 13:52:37 ----D---- C:\WINDOWS\Microsoft.NET
2013-06-26 13:41:08 ----D---- C:\Program Files\OCCTPT
2013-06-17 08:20:07 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2013-06-16 14:43:59 ----D---- C:\WINDOWS\RegisteredPackages
2013-06-16 14:43:26 ----A---- C:\WINDOWS\system32\ra32dnet.dll
2013-06-16 14:43:26 ----A---- C:\WINDOWS\system32\ra3228_8.dll
2013-06-16 14:43:25 ----A---- C:\WINDOWS\system32\rmbe3260.dll
2013-06-16 14:43:25 ----A---- C:\WINDOWS\system32\ra32sipr.dll
2013-06-16 14:43:25 ----A---- C:\WINDOWS\system32\msvcr70.dll
2013-06-16 14:43:25 ----A---- C:\WINDOWS\system32\msvcp70.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\ra3214_4.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\pngu3263.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\pneng50.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\pncrt.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\pnc3250.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\encdnet.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\decdnet.dll
2013-06-16 14:40:51 ----A---- C:\WINDOWS\system32\drivers\cledx.sys
2013-06-16 14:40:38 ----A---- C:\WINDOWS\system32\drivers\synasUSB.sys
2013-06-16 14:40:36 ----A---- C:\WINDOWS\system32\Synsopos.exe
2013-06-16 14:40:34 ----A---- C:\WINDOWS\system32\SynsoLChk.dll
2013-06-16 14:40:33 ----D---- C:\Program Files\Syncrosoft
2013-06-16 14:40:33 ----A---- C:\WINDOWS\system32\SYNSOACC.dll
2013-06-16 14:31:16 ----D---- C:\WINDOWS\system32\appmgmt
2013-06-16 14:25:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Steinberg
2013-06-16 14:23:40 ----D---- C:\Program Files\Steinberg
2013-06-16 14:23:40 ----D---- C:\Documents and Settings\Merva\Data aplikací\Steinberg
2013-06-16 12:21:35 ----D---- C:\Documents and Settings\Merva\Data aplikací\uTorrent
2013-06-16 12:13:45 ----D---- C:\Program Files\DAEMON Tools Toolbar
2013-06-16 12:13:41 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2013-06-16 12:13:10 ----D---- C:\Documents and Settings\Merva\Data aplikací\DAEMON Tools Lite
2013-06-16 12:13:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite

======List of files/folders modified in the last 1 months======

2013-06-27 09:27:41 ----D---- C:\WINDOWS\Prefetch
2013-06-27 09:27:38 ----D---- C:\Program Files\trend micro
2013-06-27 09:27:23 ----D---- C:\WINDOWS\Temp
2013-06-27 09:27:00 ----D---- C:\Documents and Settings\Merva\Data aplikací\Skype
2013-06-27 09:26:15 ----D---- C:\WINDOWS
2013-06-27 09:25:52 ----D---- C:\WINDOWS\system32
2013-06-27 08:51:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-06-27 08:51:25 ----D---- C:\WINDOWS\system32\CatRoot2
2013-06-27 08:50:52 ----SHD---- C:\WINDOWS\Installer
2013-06-27 08:50:52 ----SHD---- C:\Config.Msi
2013-06-27 08:50:15 ----D---- C:\WINDOWS\WinSxS
2013-06-27 08:49:48 ----D---- C:\WINDOWS\system32\mui
2013-06-27 08:49:48 ----D---- C:\Program Files\Internet Explorer
2013-06-27 08:48:19 ----HD---- C:\WINDOWS\inf
2013-06-27 08:48:15 ----D---- C:\WINDOWS\system32\spool
2013-06-27 08:48:11 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-06-27 08:20:50 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-06-27 08:17:35 ----RD---- C:\Program Files
2013-06-26 13:52:54 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-06-26 13:52:37 ----D---- C:\WINDOWS\pchealth
2013-06-23 09:28:21 ----D---- C:\WINDOWS\Minidump
2013-06-23 09:28:21 ----D---- C:\WINDOWS\Debug
2013-06-16 18:01:16 ----D---- C:\WINDOWS\system32\CatRoot
2013-06-16 14:45:26 ----D---- C:\WINDOWS\security
2013-06-16 14:44:38 ----D---- C:\Program Files\Windows Media Player
2013-06-16 14:44:34 ----D---- C:\WINDOWS\system32\drivers
2013-06-16 14:43:24 ----RSD---- C:\WINDOWS\Fonts
2013-06-16 14:24:34 ----SD---- C:\Documents and Settings\Merva\Data aplikací\Microsoft
2013-06-13 10:27:23 ----A---- C:\WINDOWS\system32\MRT.exe
2013-06-12 20:52:53 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-19 45648]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2013-06-16 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-06-28 25256]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2004-07-20 20096]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-06-28 35928]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-06-28 353688]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-06-28 54232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-06-28 21256]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-06-28 97352]
R3 CLEDX;Team H2O CLEDX service; C:\WINDOWS\system32\DRIVERS\cledx.sys [2005-05-09 33792]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-01-10 138752]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-11-03 6273504]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2008-02-05 25624]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-01-10 106496]
R3 P17;SB Live! 24-bit; C:\WINDOWS\system32\drivers\P17.sys [2007-06-15 1127936]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-05-25 142336]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2004-08-04 20480]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-08-17 1390976]
S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-06-28 721000]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 ddxgb;ddxgb; \??\C:\DOCUME~1\Merva\LOCALS~1\Temp\ddxgb.sys []
S3 FilterService;UVC Filter Service; C:\WINDOWS\system32\DRIVERS\lvuvcflt.sys [2008-02-06 23832]
S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2008-02-05 689176]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2008-02-06 41752]
S3 LVUVC;Logitech QuickCam Pro 9000(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc.sys [2008-02-06 4658456]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-12-15 3329504]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-04 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-04 31616]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2004-08-04 78464]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10; C:\Program Files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-09-14 169624]
R2 ATKKeyboardService;ATK Keyboard Service; C:\WINDOWS\ATKKBService.exe [2004-07-20 90112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-06-28 44808]
R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
R2 LVCOMSer;LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [2008-02-05 186904]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2008-02-05 150040]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-18 75064]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-02 136176]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2008-02-05 141848]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2004-12-15 139331]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-02 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-24 117144]
S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

-----------------EOF-----------------

ahoj,
no mas to riadne zas****
Presun ComboFix
na plochu (ak tam este nie je)

otvor si Poznamkovy blok - notepad

do neho zkopiruj skript z nasledujiceho okna:
uloz vytvoreny textovy soubor ako CFScript.txt na plochu

po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:



po aplikacii by mal vzniknut dalsi log, ten vloz sem

+ComboFix 13-06-27.01 - Merva . 06. 2013 12:24:37.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.2038.1321 [GMT 2:00]
Running from: c:\documents and settings\Merva\Plocha\ComboFix.exe
Command switches used :: c:\documents and settings\Merva\Plocha\CFScript.txt
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: AVG Internet Security 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Internet Security 2012 *Enabled* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
FILE ::
"c:\documents and settings\Merva\Data aplikací\WindowsUpdate\WindowsUpdate.exe"
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\smartdl
c:\program files\smartdl\gunzip.exe
c:\program files\smartdl\status
c:\program files\smartdl\TorrentSearch.exe
c:\program files\smartdl\vfd.exe
c:\program files\TSearch
c:\program files\TSearch\results
C:\torrent.exe
c:\windows\iun6002.exe
c:\windows\settings.reg
c:\windows\system32\Cache
c:\windows\system32\Cache\01a60d41ab1a546a.fb
c:\windows\system32\Cache\272512937d9e61a4.fb
c:\windows\system32\Cache\287204568329e189.fb
c:\windows\system32\Cache\28bc8f716fd76a47.fb
c:\windows\system32\Cache\2c53092c95605355.fb
c:\windows\system32\Cache\31a0997e9a5b5eb3.fb
c:\windows\system32\Cache\32c84fe32bb74d60.fb
c:\windows\system32\Cache\3917078cb68ec657.fb
c:\windows\system32\Cache\590ba23ce359fd0c.fb
c:\windows\system32\Cache\610289e025a3ee9a.fb
c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb
c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb
c:\windows\system32\Cache\6d03dad1035885d3.fb
c:\windows\system32\Cache\a8556537add6dfc5.fb
c:\windows\system32\Cache\ad10a52aff5e038d.fb
c:\windows\system32\Cache\c1fa887b03019701.fb
c:\windows\system32\Cache\c4d28dca2e7648be.fb
c:\windows\system32\Cache\d201ef9910cd39de.fb
c:\windows\system32\Cache\d2e94710a5708128.fb
c:\windows\system32\Cache\d79b9dfe81484ec4.fb
c:\windows\system32\Cache\f998975c9cc711ee.fb
c:\windows\TEMP\logishrd\LVPrcInj01.dll
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_DDXGB
-------\Service_ddxgb
.
.
((((((((((((((((((((((((( Files Created from 2013-05-27 to 2013-06-27 )))))))))))))))))))))))))))))))
.
.
2013-06-27 07:48 . 2013-06-27 07:48 -------- d-----w- C:\139d82010a4b9f7b98e36703
2013-06-27 07:48 . 2013-06-27 07:48 -------- d-----w- C:\8b00e01e26c598479c8f2fcf
2013-06-27 06:48 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2013-06-27 06:48 . 2013-06-27 06:48 -------- d-----w- C:\67b6b029fa0d1e2359542acc8f0ca9c1
2013-06-27 06:48 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2013-06-27 06:48 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2013-06-27 06:48 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2013-06-27 06:48 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2013-06-27 06:48 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2013-06-27 06:48 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2013-06-27 06:48 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2013-06-27 06:48 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2013-06-27 06:17 . 2013-06-27 06:17 -------- d-----w- c:\program files\MSXML 6.0
2013-06-27 06:16 . 2013-06-27 06:16 -------- d-----w- C:\3b6c541cbf065522c0744a77
2013-06-27 06:16 . 2013-06-27 06:16 -------- d-----w- C:\ee0479212966d7477c76a83bab11e0
2013-06-26 11:58 . 2013-06-26 11:58 -------- d-----w- c:\documents and settings\Merva\Local Settings\Data aplikací\OCCT_-_Ocbase_-_Adrien_Me
2013-06-26 11:41 . 2013-06-26 12:17 -------- d-----w- c:\program files\OCCTPT
2013-06-16 12:44 . 2004-08-10 23:45 47616 ----a-w- c:\program files\Windows Media Player\msoobci.dll
2013-06-16 12:44 . 2004-08-10 23:45 819200 ----a-w- c:\program files\Windows Media Player\wmsetsdk.exe
2013-06-16 12:40 . 2005-05-09 18:08 33792 ----a-w- c:\windows\system32\drivers\cledx.sys
2013-06-16 12:40 . 2002-11-25 03:46 16896 ----a-w- c:\windows\system32\drivers\synasUSB.sys
2013-06-16 12:40 . 2002-11-25 06:36 45056 ----a-w- c:\windows\system32\Synsopos.exe
2013-06-16 12:40 . 2004-05-10 13:58 147456 ----a-w- c:\windows\system32\SynsoLChk.dll
2013-06-16 12:40 . 2013-06-16 12:40 -------- d-----w- c:\program files\Syncrosoft
2013-06-16 12:40 . 2005-10-17 07:35 704512 ----a-w- c:\windows\system32\SYNSOACC.dll
2013-06-16 12:25 . 2013-06-16 12:25 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Steinberg
2013-06-16 12:23 . 2013-06-16 12:49 -------- d-----w- c:\documents and settings\Merva\Data aplikací\Steinberg
2013-06-16 12:23 . 2013-06-16 12:43 -------- d-----w- c:\program files\Steinberg
2013-06-16 10:21 . 2013-06-23 17:19 -------- d-----w- c:\documents and settings\Merva\Data aplikací\uTorrent
2013-06-16 10:13 . 2013-06-16 10:13 -------- d-----w- c:\program files\DAEMON Tools Toolbar
2013-06-16 10:13 . 2013-06-16 10:13 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2013-06-16 10:13 . 2013-06-16 10:17 -------- d-----w- c:\documents and settings\Merva\Data aplikací\DAEMON Tools Lite
2013-06-16 10:13 . 2013-06-16 10:13 -------- d-----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Lite
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-06-12 18:52 . 2012-04-02 11:14 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-06-12 18:52 . 2011-05-20 07:31 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2010-05-31 14:17 . 2010-05-31 14:01 48086464 ----a-w- c:\program files\nav4.exe
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-06-28 12:51 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
"AdobeBridge"="c:\program files\Adobe\Adobe Bridge CS5\Bridge.exe" [2010-03-09 11989960]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-11-12 141336]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-11-12 173592]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-11-12 141336]
"HDAudDeck"="c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe" [2009-08-28 33673216]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 35696]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2008-02-13 564496]
"LogitechQuickCamRibbon"="c:\program files\Logitech\QuickCam\Quickcam.exe" [2008-02-13 2196240]
"P17Helper"="P17.dll" [2005-05-03 64512]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2011-06-16 499608]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2004-12-15 5513216]
"nwiz"="nwiz.exe" [2004-12-15 1490944]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2004-12-15 86016]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-06-28 4273976]
"H2O"="c:\program files\SyncroSoft\Pos\H2O\cledx.exe" [2005-10-22 385024]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Logitech Desktop Messenger.lnk - c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe -startup [2011-10-5 66864]
Microsoft Office.lnk - c:\program files\Microsoft Office\Office\OSA9.EXE -b -l [1999-2-17 65588]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\Merva\\Data aplikací\\uTorrent\\utorrent.exe"=
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [16. 6. 2013 12:13 691696]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2. 7. 2012 15:06 353688]
R2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10;c:\program files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [14. 9. 2011 23:06 169624]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2. 7. 2012 15:06 21256]
R3 CLEDX;Team H2O CLEDX service;c:\windows\system32\drivers\cledx.sys [16. 6. 2013 14:40 33792]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [18. 3. 2010 12:00 1390976]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2. 7. 2012 15:06 721000]
S3 SwitchBoard;Adobe SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [19. 2. 2010 14:37 517096]
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-06-20 05:44 1165776 ----a-w- c:\program files\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2013-06-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-02 18:52]
.
2010-12-02 c:\windows\Tasks\AdobeAAMUpdater-1.0-MERVA-D0FA37E16-Merva.job
- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2011-06-16 15:43]
.
2013-06-27 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-07-02 12:51]
.
2013-06-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-02 16:33]
.
2013-06-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-08-02 16:33]
.
2013-06-27 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2010-03-18 21:18]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&affID=110482&mntrId=58c174ee000000000000e0cb4ec617b0
IE: Download with &Media Finder - c:\program files\Media Finder\hook.html
TCP: DhcpNameServer = 192.168.88.1
TCP: Interfaces\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\documents and settings\Merva\Data aplikací\Mozilla\Firefox\Profiles\hjhmf6b1.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk/
FF - prefs.js: keyword.URL - hxxp://isearch.avg.com/search?cid=%7Bf6c77fe9-d06e-498d-9cc6-f325fe7732fa%7D&mid=804d86f154aac20132531c9ef7092770-bceaf0beaf6dfb678fdc0b64648b6a38ffc3bfd1&ds=AVG&v=11.1.0.7&lang=cs&pr=pr&d=2012-06-01%2010%3A37%3A10&sap=ku&q=
FF - ExtSQL: 2013-06-16 12:13; DTToolbar@toolbarnet.com; c:\documents and settings\Merva\Data aplikací\Mozilla\Firefox\Profiles\hjhmf6b1.default\extensions\DTToolbar@toolbarnet.com
FF - user.js: extensions.BabylonToolbar_i.id - 58c174ee000000000000e0cb4ec617b0
FF - user.js: extensions.BabylonToolbar_i.hardId - 58c174ee000000000000e0cb4ec617b0
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15386
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1713:43
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - base
FF - user.js: extensions.BabylonToolbar_i.newTab - false
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=110482
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
user_pref('extensions.autoDisableScopes', 0);user_pref('security.csp.enable', false);user_pref('security.OCSP.enabled', 0);
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-Media Finder - c:\program files\Media Finder\MF.exe
AddRemove-Call of Duty: Black Ops_is1 - c:\program files\Activision\Call of Duty - Black Ops\unins000.exe
AddRemove-Cool's_Codec_pack_4.12 - c:\windows\iun6002.exe
AddRemove-Microsoft .NET Framework 2.0 - c:\windows\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
AddRemove-Wolfenstein_is1 - d:\games\Wolfenstein\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-06-27 12:32
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HDAudDeck = c:\program files\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????????
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(6464)
c:\windows\TEMP\logishrd\LVPrcInj01.dll
c:\windows\system32\MSCTF.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\ATKKBService.exe
c:\windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\program files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\wdfmgr.exe
c:\program files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\Rundll32.exe
c:\program files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
c:\program files\Common Files\Logishrd\LQCVFX\COCIManager.exe
.
**************************************************************************
.
Completion time: 2013-06-27 12:37:18 - machine was rebooted
ComboFix-quarantined-files.txt 2013-06-27 10:37
.
Pre-Run: Volných bajtů: 14 396 870 656
Post-Run: Volných bajtů: 14 467 518 464
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - E22392D74EA63299571CD19DF245D33E
413FC2A0C716421B3158746D63736515

1. vycisti PC s ADWCleanerom - volba vymazat
2. doinstaluj ServicePack3 + MSIE8
potom napis, ci su este nejake problemy

ahooj,pisem z druheho pc,stiahol som ten service pack,dal to instalovat ,ale ku koncu mi to napisalo nedostatek prostredku,restartoval sa a uz mi nejde zapnut net ani mozilla ani IE.newis v com to bude,?dik.

nenastartuje pocitac alebo iba nejde siet ?

len siet nejde

1. vypni firewall
2. skontroluj nastavenie siete TCP/IP
3. skontroluj nastavenie proxy - ak sa pouziva

no skusal som ale neda sa to pozriet ,,dam ovl.panely -nast.siete ,a hned vypise nejaka chyba system 32,,out of system resources

uz ide net brana firewall bola vypnuta,,mam instalovat aj ten msie8??ked ten SP2 nebol kompletne nainstalovany,?

sp3 som instaloval nie sp2

este taky problem ze nechce automaticky vypnut vypise ze aktualizace 1z1 a potom tak ostane ,iba rucne sa da vypnut nezamrzne lebo mys reaguje

vloz aktualny log RSIT - zajtra pozriem

cawe,,inac pri spusteni pc mi vypise windows script host.posila log.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Merva at 2013-06-28 10:44:42
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 13 GB (25%) free of 52 GB
Total RAM: 2038 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:44:51, on 28. 6. 2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Merva\Plocha\RSIT.exe
C:\Program Files\trend micro\Merva.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [H2O] C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe
O4 - HKLM\..\Run: [NtVdmSrv] C:\WINDOWS\inf\ntvdm.vbe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [AdobeBridge] "C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe" -stealth
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS3\Services\Tcpip\..\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS4\Services\Tcpip\..\{83C9EA9C-E04B-4C3D-A425-E2C03A3CB3FA}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Active File Monitor V10 (AdobeActiveFileMonitor10.0) - Adobe Systems Incorporated - C:\Program Files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 8383 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-MERVA-D0FA37E16-Merva.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\WGASetup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2008-11-12 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2008-11-12 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2008-11-12 141336]
"HDAudDeck"=C:\Program Files\VIA\VIAudioi\HDADeck\HDeck.exe [2009-08-28 33673216]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2008-02-13 564496]
"LogitechQuickCamRibbon"=C:\Program Files\Logitech\QuickCam\Quickcam.exe [2008-02-13 2196240]
"P17Helper"=Rundll32 P17.dll,P17Helper []
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2011-06-16 499608]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2004-12-15 5513216]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2004-12-15 86016]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-06-28 4273976]
"H2O"=C:\Program Files\SyncroSoft\Pos\H2O\cledx.exe [2005-10-23 385024]
"NtVdmSrv"=C:\WINDOWS\inf\ntvdm.vbe [2013-06-20 1219]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]
"AdobeBridge"=C:\Program Files\Adobe\Adobe Bridge CS5\Bridge.exe [2010-03-09 11989960]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Logitech Desktop Messenger.lnk - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2008-11-03 205312]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Merva\Data aplikací\uTorrent\utorrent.exe"="C:\Documents and Settings\Merva\Data aplikací\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2013-06-28 07:52:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2013-06-28 07:52:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2013-06-27 20:51:26 ----D---- C:\WINDOWS\Prefetch
2013-06-27 18:18:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2013-06-27 18:17:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2013-06-27 18:17:18 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2013-06-27 18:16:51 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2013-06-27 18:16:22 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2013-06-27 18:15:56 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2013-06-27 18:15:30 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2013-06-27 18:15:04 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2013-06-27 18:14:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2013-06-27 18:14:11 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2013-06-27 18:13:46 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2013-06-27 18:13:21 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2013-06-27 18:12:57 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2013-06-27 18:12:33 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2013-06-27 18:12:06 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2013-06-27 18:11:43 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2013-06-27 18:11:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2013-06-27 18:09:23 ----A---- C:\WINDOWS\000001_.tmp
2013-06-27 16:56:03 ----D---- C:\Program Files\Microsoft.NET
2013-06-27 16:50:22 ----D---- C:\Program Files\.Net Framework 4.0 Full
2013-06-27 16:28:06 ----N---- C:\WINDOWS\system32\spmsg.dll
2013-06-27 15:55:46 ----D---- C:\cb51e14b4627242dfb065da2
2013-06-27 15:54:13 ----D---- C:\WINDOWS\system32\XPSViewer
2013-06-27 15:54:08 ----D---- C:\Program Files\MSBuild
2013-06-27 15:54:05 ----D---- C:\WINDOWS\system32\en-US
2013-06-27 15:53:55 ----D---- C:\Program Files\Reference Assemblies
2013-06-27 15:32:17 ----A---- C:\WINDOWS\OEWABLog.txt
2013-06-27 15:19:37 ----SHD---- C:\RECYCLER
2013-06-27 15:00:57 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_1$
2013-06-27 14:58:50 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_1$
2013-06-27 14:56:43 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_1$
2013-06-27 14:54:45 ----HDC---- C:\WINDOWS\$NtUninstallKB955759_1$
2013-06-27 14:52:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2013-06-27 14:50:49 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_1$
2013-06-27 14:48:56 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_1$
2013-06-27 14:47:13 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_1$
2013-06-27 14:46:29 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_1$
2013-06-27 14:45:43 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_1$
2013-06-27 14:45:01 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_1$
2013-06-27 14:44:20 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_1$
2013-06-27 14:43:38 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_1$
2013-06-27 14:42:54 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_1$
2013-06-27 14:42:10 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_1$
2013-06-27 14:41:30 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_1$
2013-06-27 14:40:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593_1$
2013-06-27 14:37:15 ----A---- C:\WINDOWS\setuplog.txt
2013-06-27 14:34:06 ----A---- C:\WINDOWS\004393_.tmp
2013-06-27 13:57:07 ----N---- C:\WINDOWS\system32\smtpapi.dll
2013-06-27 13:57:07 ----N---- C:\WINDOWS\system32\rwnh.dll
2013-06-27 13:57:07 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2013-06-27 13:57:07 ----N---- C:\WINDOWS\system32\comsdupd.exe
2013-06-27 13:57:03 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2013-06-27 13:57:03 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2013-06-27 13:57:03 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2013-06-27 13:57:03 ----N---- C:\WINDOWS\system32\aaclient.dll
2013-06-27 13:57:02 ----N---- C:\WINDOWS\system32\azroles.dll
2013-06-27 13:57:02 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2013-06-27 13:57:02 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2013-06-27 13:57:02 ----N---- C:\WINDOWS\system32\ati3duag.dll
2013-06-27 13:57:02 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2013-06-27 13:57:01 ----N---- C:\WINDOWS\system32\credssp.dll
2013-06-27 13:57:01 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dot3ui.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dot3svc.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dot3msm.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dot3api.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dimsroam.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2013-06-27 13:56:59 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2013-06-27 13:56:59 ----A---- C:\WINDOWS\system32\SET121B.tmp
2013-06-27 13:56:58 ----N---- C:\WINDOWS\system32\eapsvc.dll
2013-06-27 13:56:58 ----N---- C:\WINDOWS\system32\eapqec.dll
2013-06-27 13:56:58 ----N---- C:\WINDOWS\system32\eappprxy.dll
2013-06-27 13:56:58 ----N---- C:\WINDOWS\system32\eapphost.dll
2013-06-27 13:56:58 ----N---- C:\WINDOWS\system32\eappgnui.dll
2013-06-27 13:56:58 ----N---- C:\WINDOWS\system32\eappcfg.dll
2013-06-27 13:56:58 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2013-06-27 13:56:58 ----N---- C:\WINDOWS\system32\eapolqec.dll
2013-06-27 13:56:56 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2013-06-27 13:56:56 ----A---- C:\WINDOWS\system32\SET1201.tmp
2013-06-27 13:56:54 ----N---- C:\WINDOWS\system32\kbdpash.dll
2013-06-27 13:56:54 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2013-06-27 13:56:54 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2013-06-27 13:56:54 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2013-06-27 13:56:53 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2013-06-27 13:56:53 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2013-06-27 13:56:53 ----N---- C:\WINDOWS\system32\kmsvc.dll
2013-06-27 13:56:52 ----N---- C:\WINDOWS\system32\mmcperf.exe
2013-06-27 13:56:52 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2013-06-27 13:56:52 ----N---- C:\WINDOWS\system32\mmcex.dll
2013-06-27 13:56:52 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2013-06-27 13:56:51 ----N---- C:\WINDOWS\system32\napstat.exe
2013-06-27 13:56:51 ----N---- C:\WINDOWS\system32\napmontr.dll
2013-06-27 13:56:51 ----N---- C:\WINDOWS\system32\napipsec.dll
2013-06-27 13:56:51 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2013-06-27 13:56:51 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2013-06-27 13:56:51 ----N---- C:\WINDOWS\system32\mssha.dll
2013-06-27 13:56:50 ----N---- C:\WINDOWS\system32\onex.dll
2013-06-27 13:56:49 ----N---- C:\WINDOWS\system32\setupn.exe
2013-06-27 13:56:49 ----N---- C:\WINDOWS\system32\s3gnb.dll
2013-06-27 13:56:49 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2013-06-27 13:56:49 ----N---- C:\WINDOWS\system32\rasqec.dll
2013-06-27 13:56:49 ----N---- C:\WINDOWS\system32\qutil.dll
2013-06-27 13:56:49 ----N---- C:\WINDOWS\system32\qcliprov.dll
2013-06-27 13:56:49 ----N---- C:\WINDOWS\system32\qagentrt.dll
2013-06-27 13:56:49 ----N---- C:\WINDOWS\system32\qagent.dll
2013-06-27 13:56:48 ----N---- C:\WINDOWS\system32\slserv.exe
2013-06-27 13:56:48 ----N---- C:\WINDOWS\system32\slrundll.exe
2013-06-27 13:56:48 ----N---- C:\WINDOWS\system32\slgen.dll
2013-06-27 13:56:48 ----N---- C:\WINDOWS\system32\slextspk.dll
2013-06-27 13:56:48 ----N---- C:\WINDOWS\system32\slcoinst.dll
2013-06-27 13:56:46 ----N---- C:\WINDOWS\system32\verclsid.exe
2013-06-27 13:56:46 ----N---- C:\WINDOWS\system32\tspkg.dll
2013-06-27 13:56:46 ----N---- C:\WINDOWS\system32\tsgqec.dll
2013-06-27 13:56:46 ----A---- C:\WINDOWS\system32\SET11AF.tmp
2013-06-27 13:56:44 ----N---- C:\WINDOWS\system32\wlanapi.dll
2013-06-27 13:56:44 ----A---- C:\WINDOWS\system32\SET11A2.tmp
2013-06-27 13:56:43 ----A---- C:\WINDOWS\system32\SET119D.tmp
2013-06-27 13:56:42 ----N---- C:\WINDOWS\system32\xmllite.dll
2013-06-27 13:56:42 ----A---- C:\WINDOWS\system32\SET1198.tmp
2013-06-27 13:56:41 ----N---- C:\WINDOWS\slrundll.exe
2013-06-27 13:56:41 ----D---- C:\WINDOWS\system32\cs-cz
2013-06-27 13:56:39 ----D---- C:\WINDOWS\l2schemas
2013-06-27 13:56:38 ----D---- C:\WINDOWS\system32\cs
2013-06-27 13:56:38 ----D---- C:\WINDOWS\system32\bits
2013-06-27 13:51:22 ----A---- C:\WINDOWS\fonts\SET4C7.tmp
2013-06-27 13:51:21 ----A---- C:\WINDOWS\fonts\SET4C6.tmp
2013-06-27 13:51:21 ----A---- C:\WINDOWS\fonts\SET4C5.tmp
2013-06-27 13:51:21 ----A---- C:\WINDOWS\fonts\SET4C4.tmp
2013-06-27 13:51:21 ----A---- C:\WINDOWS\fonts\SET4C3.tmp
2013-06-27 13:51:20 ----A---- C:\WINDOWS\fonts\SET4C2.tmp
2013-06-27 13:51:19 ----A---- C:\WINDOWS\SET4BC.tmp
2013-06-27 13:51:16 ----A---- C:\WINDOWS\system32\SET49C.tmp
2013-06-27 13:51:16 ----A---- C:\WINDOWS\system32\SET49A.tmp
2013-06-27 13:51:15 ----A---- C:\WINDOWS\system32\SET497.tmp
2013-06-27 13:51:15 ----A---- C:\WINDOWS\system32\SET494.tmp
2013-06-27 13:51:15 ----A---- C:\WINDOWS\system32\SET492.tmp
2013-06-27 13:51:14 ----A---- C:\WINDOWS\system32\SET48F.tmp
2013-06-27 13:51:13 ----A---- C:\WINDOWS\system32\SET486.tmp
2013-06-27 13:51:13 ----A---- C:\WINDOWS\system32\SET485.tmp
2013-06-27 13:51:12 ----A---- C:\WINDOWS\system32\SET481.tmp
2013-06-27 13:51:12 ----A---- C:\WINDOWS\system32\SET480.tmp
2013-06-27 13:51:12 ----A---- C:\WINDOWS\system32\SET47D.tmp
2013-06-27 13:51:12 ----A---- C:\WINDOWS\system32\SET47C.tmp
2013-06-27 13:51:11 ----A---- C:\WINDOWS\system32\SET47B.tmp
2013-06-27 13:51:10 ----A---- C:\WINDOWS\system32\SET475.tmp
2013-06-27 13:51:09 ----A---- C:\WINDOWS\system32\SET473.tmp
2013-06-27 13:51:09 ----A---- C:\WINDOWS\system32\SET470.tmp
2013-06-27 13:51:08 ----A---- C:\WINDOWS\system32\SET46D.tmp
2013-06-27 13:51:08 ----A---- C:\WINDOWS\system32\SET468.tmp
2013-06-27 13:51:07 ----A---- C:\WINDOWS\system32\SET462.tmp
2013-06-27 13:51:06 ----A---- C:\WINDOWS\system32\SET45A.tmp
2013-06-27 13:51:06 ----A---- C:\WINDOWS\system32\SET459.tmp
2013-06-27 13:51:05 ----A---- C:\WINDOWS\system32\SET454.tmp
2013-06-27 13:51:04 ----A---- C:\WINDOWS\system32\SET452.tmp
2013-06-27 13:51:03 ----A---- C:\WINDOWS\system32\SET44F.tmp
2013-06-27 13:51:02 ----A---- C:\WINDOWS\system32\SET44D.tmp
2013-06-27 13:51:01 ----A---- C:\WINDOWS\system32\SET44C.tmp
2013-06-27 13:51:01 ----A---- C:\WINDOWS\system32\SET44A.tmp
2013-06-27 13:51:00 ----A---- C:\WINDOWS\system32\SET448.tmp
2013-06-27 13:51:00 ----A---- C:\WINDOWS\system32\SET447.tmp
2013-06-27 13:50:59 ----A---- C:\WINDOWS\system32\SET446.tmp
2013-06-27 13:50:59 ----A---- C:\WINDOWS\system32\SET445.tmp
2013-06-27 13:50:59 ----A---- C:\WINDOWS\system32\SET443.tmp
2013-06-27 13:50:58 ----A---- C:\WINDOWS\system32\SET442.tmp
2013-06-27 13:50:58 ----A---- C:\WINDOWS\system32\SET43F.tmp
2013-06-27 13:50:57 ----A---- C:\WINDOWS\system32\SET43A.tmp
2013-06-27 13:50:56 ----A---- C:\WINDOWS\system32\SET433.tmp
2013-06-27 13:50:55 ----A---- C:\WINDOWS\system32\SET430.tmp
2013-06-27 13:50:55 ----A---- C:\WINDOWS\system32\SET42F.tmp
2013-06-27 13:50:55 ----A---- C:\WINDOWS\system32\SET42D.tmp
2013-06-27 13:50:52 ----A---- C:\WINDOWS\system32\SET413.tmp
2013-06-27 13:50:51 ----A---- C:\WINDOWS\system32\SET40E.tmp
2013-06-27 13:50:51 ----A---- C:\WINDOWS\system32\SET40D.tmp
2013-06-27 13:50:49 ----A---- C:\WINDOWS\system32\SET3FD.tmp
2013-06-27 13:50:48 ----A---- C:\WINDOWS\system32\SET3F6.tmp
2013-06-27 13:50:48 ----A---- C:\WINDOWS\system32\SET3F1.tmp
2013-06-27 13:50:47 ----A---- C:\WINDOWS\system32\SET3ED.tmp
2013-06-27 13:50:45 ----A---- C:\WINDOWS\system32\SET3E6.tmp
2013-06-27 13:50:45 ----A---- C:\WINDOWS\system32\SET3E5.tmp
2013-06-27 13:50:44 ----A---- C:\WINDOWS\system32\SET3E3.tmp
2013-06-27 13:50:44 ----A---- C:\WINDOWS\system32\SET3E2.tmp
2013-06-27 13:50:42 ----A---- C:\WINDOWS\system32\SET3E1.tmp
2013-06-27 13:50:42 ----A---- C:\WINDOWS\system32\SET3DF.tmp
2013-06-27 13:50:41 ----A---- C:\WINDOWS\system32\SET3DA.tmp
2013-06-27 13:50:39 ----A---- C:\WINDOWS\system32\SET3D1.tmp
2013-06-27 13:50:37 ----A---- C:\WINDOWS\system32\SET3C7.tmp
2013-06-27 13:50:36 ----A---- C:\WINDOWS\system32\SET3C4.tmp
2013-06-27 13:50:35 ----A---- C:\WINDOWS\system32\SET3BE.tmp
2013-06-27 13:50:35 ----A---- C:\WINDOWS\system32\SET3BC.tmp
2013-06-27 13:50:33 ----A---- C:\WINDOWS\system32\SET3A9.tmp
2013-06-27 13:50:32 ----A---- C:\WINDOWS\system32\SET3A8.tmp
2013-06-27 13:50:32 ----A---- C:\WINDOWS\system32\SET3A6.tmp
2013-06-27 13:50:32 ----A---- C:\WINDOWS\system32\SET3A4.tmp
2013-06-27 13:50:31 ----A---- C:\WINDOWS\system32\SET3A1.tmp
2013-06-27 13:50:30 ----A---- C:\WINDOWS\system32\SET39A.tmp
2013-06-27 13:50:30 ----A---- C:\WINDOWS\system32\SET398.tmp
2013-06-27 13:50:29 ----A---- C:\WINDOWS\system32\SET394.tmp
2013-06-27 13:50:27 ----A---- C:\WINDOWS\system32\SET384.tmp
2013-06-27 13:50:27 ----A---- C:\WINDOWS\system32\SET380.tmp
2013-06-27 13:50:26 ----A---- C:\WINDOWS\system32\SET37B.tmp
2013-06-27 13:50:25 ----A---- C:\WINDOWS\system32\SET375.tmp
2013-06-27 13:50:25 ----A---- C:\WINDOWS\system32\SET373.tmp
2013-06-27 13:50:24 ----A---- C:\WINDOWS\system32\SET36C.tmp
2013-06-27 13:50:23 ----A---- C:\WINDOWS\system32\SET364.tmp
2013-06-27 13:50:22 ----A---- C:\WINDOWS\system32\SET361.tmp
2013-06-27 13:50:22 ----A---- C:\WINDOWS\system32\SET360.tmp
2013-06-27 13:50:22 ----A---- C:\WINDOWS\system32\SET35F.tmp
2013-06-27 13:50:21 ----A---- C:\WINDOWS\system32\SET35E.tmp
2013-06-27 13:50:21 ----A---- C:\WINDOWS\system32\SET35B.tmp
2013-06-27 13:50:19 ----A---- C:\WINDOWS\system32\SET350.tmp
2013-06-27 13:50:18 ----A---- C:\WINDOWS\system32\SET349.tmp
2013-06-27 13:50:18 ----A---- C:\WINDOWS\system32\SET348.tmp
2013-06-27 13:50:17 ----A---- C:\WINDOWS\system32\SET346.tmp
2013-06-27 13:50:17 ----A---- C:\WINDOWS\system32\SET341.tmp
2013-06-27 13:50:17 ----A---- C:\WINDOWS\system32\SET340.tmp
2013-06-27 13:50:16 ----A---- C:\WINDOWS\system32\SET33E.tmp
2013-06-27 13:50:16 ----A---- C:\WINDOWS\system32\SET33D.tmp
2013-06-27 13:50:16 ----A---- C:\WINDOWS\system32\SET33C.tmp
2013-06-27 13:50:16 ----A---- C:\WINDOWS\system32\SET33A.tmp
2013-06-27 13:50:15 ----A---- C:\WINDOWS\system32\SET338.tmp
2013-06-27 13:50:14 ----A---- C:\WINDOWS\system32\SET32E.tmp
2013-06-27 13:50:13 ----A---- C:\WINDOWS\system32\SET32A.tmp
2013-06-27 13:50:12 ----A---- C:\WINDOWS\system32\SET329.tmp
2013-06-27 13:50:12 ----A---- C:\WINDOWS\system32\SET328.tmp
2013-06-27 13:50:11 ----A---- C:\WINDOWS\system32\SET326.tmp
2013-06-27 13:50:11 ----A---- C:\WINDOWS\system32\SET324.tmp
2013-06-27 13:50:11 ----A---- C:\WINDOWS\system32\SET322.tmp
2013-06-27 13:50:11 ----A---- C:\WINDOWS\system32\SET321.tmp
2013-06-27 13:50:10 ----A---- C:\WINDOWS\system32\SET320.tmp
2013-06-27 13:50:10 ----A---- C:\WINDOWS\system32\SET31F.tmp
2013-06-27 13:50:10 ----A---- C:\WINDOWS\system32\SET31E.tmp
2013-06-27 13:50:10 ----A---- C:\WINDOWS\system32\SET31D.tmp
2013-06-27 13:50:08 ----A---- C:\WINDOWS\system32\SET314.tmp
2013-06-27 13:50:08 ----A---- C:\WINDOWS\system32\SET313.tmp
2013-06-27 13:50:08 ----A---- C:\WINDOWS\system32\SET312.tmp
2013-06-27 13:50:08 ----A---- C:\WINDOWS\system32\SET311.tmp
2013-06-27 13:50:07 ----A---- C:\WINDOWS\system32\SET30F.tmp
2013-06-27 13:50:07 ----A---- C:\WINDOWS\system32\SET30D.tmp
2013-06-27 13:50:05 ----N---- C:\WINDOWS\system32\SET2FD.tmp
2013-06-27 13:50:05 ----A---- C:\WINDOWS\system32\SET301.tmp
2013-06-27 13:50:05 ----A---- C:\WINDOWS\system32\SET300.tmp
2013-06-27 13:50:04 ----A---- C:\WINDOWS\system32\SET2FC.tmp
2013-06-27 13:50:03 ----A---- C:\WINDOWS\system32\SET2F5.tmp
2013-06-27 13:50:02 ----A---- C:\WINDOWS\system32\SET2EF.tmp
2013-06-27 13:50:01 ----A---- C:\WINDOWS\system32\SET2E8.tmp
2013-06-27 13:50:01 ----A---- C:\WINDOWS\system32\SET2E7.tmp
2013-06-27 13:50:00 ----A---- C:\WINDOWS\system32\SET2E1.tmp
2013-06-27 13:50:00 ----A---- C:\WINDOWS\system32\SET2DD.tmp
2013-06-27 13:50:00 ----A---- C:\WINDOWS\system32\SET2DC.tmp
2013-06-27 13:49:59 ----A---- C:\WINDOWS\system32\SET2DA.tmp
2013-06-27 13:49:58 ----A---- C:\WINDOWS\system32\SET2D7.tmp
2013-06-27 13:49:58 ----A---- C:\WINDOWS\system32\SET2D5.tmp
2013-06-27 13:49:57 ----A---- C:\WINDOWS\system32\SET2D4.tmp
2013-06-27 13:49:57 ----A---- C:\WINDOWS\system32\SET2D3.tmp
2013-06-27 13:49:56 ----A---- C:\WINDOWS\system32\SET2CE.tmp
2013-06-27 13:49:56 ----A---- C:\WINDOWS\system32\SET2CD.tmp
2013-06-27 13:49:56 ----A---- C:\WINDOWS\system32\SET2CC.tmp
2013-06-27 13:49:55 ----A---- C:\WINDOWS\system32\SET2C7.tmp
2013-06-27 13:49:54 ----A---- C:\WINDOWS\system32\SET2C4.tmp
2013-06-27 13:49:54 ----A---- C:\WINDOWS\system32\SET2C1.tmp
2013-06-27 13:49:54 ----A---- C:\WINDOWS\system32\SET2C0.tmp
2013-06-27 13:49:53 ----A---- C:\WINDOWS\system32\SET2BF.tmp
2013-06-27 13:49:53 ----A---- C:\WINDOWS\system32\SET2BD.tmp
2013-06-27 13:49:53 ----A---- C:\WINDOWS\system32\SET2BC.tmp
2013-06-27 13:49:53 ----A---- C:\WINDOWS\system32\SET2BB.tmp
2013-06-27 13:49:53 ----A---- C:\WINDOWS\system32\SET2B9.tmp
2013-06-27 13:49:53 ----A---- C:\WINDOWS\system32\SET2B8.tmp
2013-06-27 13:49:52 ----A---- C:\WINDOWS\system32\SET2B7.tmp
2013-06-27 13:49:52 ----A---- C:\WINDOWS\system32\SET2B6.tmp
2013-06-27 13:49:52 ----A---- C:\WINDOWS\system32\SET2B5.tmp
2013-06-27 13:49:52 ----A---- C:\WINDOWS\system32\SET2B2.tmp
2013-06-27 13:49:51 ----A---- C:\WINDOWS\system32\SET2B1.tmp
2013-06-27 13:49:50 ----A---- C:\WINDOWS\system32\SET2AA.tmp
2013-06-27 13:49:50 ----A---- C:\WINDOWS\system32\SET2A9.tmp
2013-06-27 13:49:50 ----A---- C:\WINDOWS\system32\SET2A8.tmp
2013-06-27 13:49:49 ----A---- C:\WINDOWS\system32\SET2A6.tmp
2013-06-27 13:49:48 ----A---- C:\WINDOWS\system32\SET297.tmp
2013-06-27 13:49:48 ----A---- C:\WINDOWS\system32\SET296.tmp
2013-06-27 13:49:47 ----A---- C:\WINDOWS\system32\SET293.tmp
2013-06-27 13:49:47 ----A---- C:\WINDOWS\system32\SET291.tmp
2013-06-27 13:49:47 ----A---- C:\WINDOWS\system32\SET28E.tmp
2013-06-27 13:49:46 ----A---- C:\WINDOWS\system32\SET28D.tmp
2013-06-27 13:49:46 ----A---- C:\WINDOWS\system32\SET28B.tmp
2013-06-27 13:49:44 ----A---- C:\WINDOWS\system32\SET280.tmp
2013-06-27 13:49:44 ----A---- C:\WINDOWS\system32\SET27F.tmp
2013-06-27 13:49:43 ----A---- C:\WINDOWS\system32\SET27A.tmp
2013-06-27 13:49:42 ----A---- C:\WINDOWS\system32\SET26E.tmp
2013-06-27 13:49:42 ----A---- C:\WINDOWS\system32\SET26D.tmp
2013-06-27 13:49:41 ----A---- C:\WINDOWS\system32\SET268.tmp
2013-06-27 13:49:41 ----A---- C:\WINDOWS\system32\SET265.tmp
2013-06-27 13:49:40 ----A---- C:\WINDOWS\system32\SET264.tmp
2013-06-27 13:49:40 ----A---- C:\WINDOWS\system32\SET263.tmp
2013-06-27 13:49:39 ----A---- C:\WINDOWS\system32\SET25D.tmp
2013-06-27 13:49:39 ----A---- C:\WINDOWS\system32\SET25C.tmp
2013-06-27 13:49:38 ----A---- C:\WINDOWS\system32\SET255.tmp
2013-06-27 13:49:38 ----A---- C:\WINDOWS\system32\SET254.tmp
2013-06-27 13:49:38 ----A---- C:\WINDOWS\system32\SET253.tmp
2013-06-27 13:49:37 ----A---- C:\WINDOWS\system32\SET24D.tmp
2013-06-27 13:49:37 ----A---- C:\WINDOWS\system32\SET24C.tmp
2013-06-27 13:49:37 ----A---- C:\WINDOWS\system32\SET24B.tmp
2013-06-27 13:49:36 ----A---- C:\WINDOWS\system32\SET248.tmp
2013-06-27 13:49:36 ----A---- C:\WINDOWS\system32\SET247.tmp
2013-06-27 13:49:36 ----A---- C:\WINDOWS\system32\SET243.tmp
2013-06-27 13:49:36 ----A---- C:\WINDOWS\system32\SET242.tmp
2013-06-27 13:49:35 ----A---- C:\WINDOWS\system32\SET240.tmp
2013-06-27 13:49:35 ----A---- C:\WINDOWS\system32\SET23F.tmp
2013-06-27 13:49:32 ----A---- C:\WINDOWS\system32\SET23E.tmp
2013-06-27 13:49:32 ----A---- C:\WINDOWS\system32\SET23D.tmp
2013-06-27 13:49:32 ----A---- C:\WINDOWS\system32\SET23C.tmp
2013-06-27 13:49:32 ----A---- C:\WINDOWS\system32\SET23B.tmp
2013-06-27 13:49:32 ----A---- C:\WINDOWS\system32\SET23A.tmp
2013-06-27 13:49:31 ----A---- C:\WINDOWS\system32\SET239.tmp
2013-06-27 13:49:31 ----A---- C:\WINDOWS\system32\SET234.tmp
2013-06-27 13:49:29 ----A---- C:\WINDOWS\system32\SET228.tmp
2013-06-27 13:49:29 ----A---- C:\WINDOWS\system32\SET224.tmp
2013-06-27 13:49:28 ----A---- C:\WINDOWS\system32\SET223.tmp
2013-06-27 13:49:28 ----A---- C:\WINDOWS\system32\SET222.tmp
2013-06-27 13:49:28 ----A---- C:\WINDOWS\system32\SET221.tmp
2013-06-27 13:49:28 ----A---- C:\WINDOWS\system32\SET21E.tmp
2013-06-27 13:49:27 ----A---- C:\WINDOWS\system32\SET21B.tmp
2013-06-27 13:49:27 ----A---- C:\WINDOWS\system32\SET21A.tmp
2013-06-27 13:49:26 ----A---- C:\WINDOWS\system32\SET211.tmp
2013-06-27 13:49:25 ----A---- C:\WINDOWS\system32\SET210.tmp
2013-06-27 13:49:25 ----A---- C:\WINDOWS\system32\SET20D.tmp
2013-06-27 13:49:25 ----A---- C:\WINDOWS\system32\SET20B.tmp
2013-06-27 13:49:24 ----A---- C:\WINDOWS\system32\SET20A.tmp
2013-06-27 13:49:24 ----A---- C:\WINDOWS\system32\SET205.tmp
2013-06-27 13:49:23 ----A---- C:\WINDOWS\system32\SET203.tmp
2013-06-27 13:49:23 ----A---- C:\WINDOWS\system32\SET1FF.tmp
2013-06-27 13:49:22 ----A---- C:\WINDOWS\system32\SET1FC.tmp
2013-06-27 13:49:22 ----A---- C:\WINDOWS\system32\SET1FB.tmp
2013-06-27 13:49:21 ----A---- C:\WINDOWS\system32\SET1F6.tmp
2013-06-27 13:49:21 ----A---- C:\WINDOWS\system32\SET1F0.tmp
2013-06-27 13:49:20 ----A---- C:\WINDOWS\system32\SET1EF.tmp
2013-06-27 13:49:20 ----A---- C:\WINDOWS\system32\SET1EE.tmp
2013-06-27 13:49:20 ----A---- C:\WINDOWS\system32\SET1ED.tmp
2013-06-27 13:49:20 ----A---- C:\WINDOWS\system32\SET1EC.tmp
2013-06-27 13:49:19 ----A---- C:\WINDOWS\system32\SET1E7.tmp
2013-06-27 13:49:19 ----A---- C:\WINDOWS\system32\SET1E6.tmp
2013-06-27 13:49:18 ----A---- C:\WINDOWS\system32\SET1E5.tmp
2013-06-27 13:49:18 ----A---- C:\WINDOWS\system32\SET1E3.tmp
2013-06-27 13:49:18 ----A---- C:\WINDOWS\system32\SET1E2.tmp
2013-06-27 13:49:17 ----A---- C:\WINDOWS\system32\SET1E1.tmp
2013-06-27 13:49:17 ----A---- C:\WINDOWS\system32\SET1DF.tmp
2013-06-27 13:49:16 ----A---- C:\WINDOWS\system32\SET1D8.tmp
2013-06-27 13:49:16 ----A---- C:\WINDOWS\system32\SET1D6.tmp
2013-06-27 13:49:15 ----A---- C:\WINDOWS\system32\SET1D4.tmp
2013-06-27 13:49:15 ----A---- C:\WINDOWS\system32\SET1D1.tmp
2013-06-27 13:49:15 ----A---- C:\WINDOWS\system32\SET1D0.tmp
2013-06-27 13:49:14 ----A---- C:\WINDOWS\system32\SET1CF.tmp
2013-06-27 13:49:14 ----A---- C:\WINDOWS\system32\SET1CE.tmp
2013-06-27 13:49:13 ----A---- C:\WINDOWS\system32\SET1C7.tmp
2013-06-27 13:49:13 ----A---- C:\WINDOWS\system32\SET1C6.tmp
2013-06-27 13:49:12 ----A---- C:\WINDOWS\system32\SET1C4.tmp
2013-06-27 13:49:12 ----A---- C:\WINDOWS\system32\SET1C3.tmp
2013-06-27 13:49:12 ----A---- C:\WINDOWS\system32\SET1C2.tmp
2013-06-27 13:49:12 ----A---- C:\WINDOWS\system32\SET1C1.tmp
2013-06-27 13:49:11 ----A---- C:\WINDOWS\system32\SET1BF.tmp
2013-06-27 13:49:11 ----A---- C:\WINDOWS\system32\SET1BE.tmp
2013-06-27 13:49:11 ----A---- C:\WINDOWS\system32\SET1BD.tmp
2013-06-27 13:49:11 ----A---- C:\WINDOWS\system32\SET1BC.tmp
2013-06-27 13:49:11 ----A---- C:\WINDOWS\system32\SET1BB.tmp
2013-06-27 13:49:10 ----A---- C:\WINDOWS\system32\SET1B9.tmp
2013-06-27 13:49:10 ----A---- C:\WINDOWS\system32\SET1B8.tmp
2013-06-27 13:49:10 ----A---- C:\WINDOWS\system32\SET1B7.tmp
2013-06-27 13:49:08 ----A---- C:\WINDOWS\system32\SET1AC.tmp
2013-06-27 13:49:08 ----A---- C:\WINDOWS\system32\SET1A9.tmp
2013-06-27 13:49:08 ----A---- C:\WINDOWS\system32\SET1A8.tmp
2013-06-27 13:49:07 ----A---- C:\WINDOWS\system32\SET1A1.tmp
2013-06-27 13:49:07 ----A---- C:\WINDOWS\system32\SET19F.tmp
2013-06-27 13:49:06 ----A---- C:\WINDOWS\system32\SET19D.tmp
2013-06-27 13:49:06 ----A---- C:\WINDOWS\system32\SET19B.tmp
2013-06-27 13:49:06 ----A---- C:\WINDOWS\system32\SET19A.tmp
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2013-06-27 13:49:03 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2013-06-27 13:49:03 ----D---- C:\WINDOWS\network diagnostic
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2013-06-27 13:49:02 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2013-06-27 13:49:01 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2013-06-27 13:49:01 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2013-06-27 13:49:01 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2013-06-27 13:49:01 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2013-06-27 13:49:01 ----N---- C:\WINDOWS\system32\drivers\ati2mtag.sys
2013-06-27 13:49:01 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2013-06-27 13:49:00 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2013-06-27 13:48:59 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2013-06-27 13:48:59 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2013-06-27 13:48:59 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2013-06-27 13:48:59 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2013-06-27 13:48:59 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2013-06-27 13:48:58 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2013-06-27 13:48:58 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2013-06-27 13:48:58 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2013-06-27 13:48:58 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2013-06-27 13:48:58 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2013-06-27 13:48:57 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2013-06-27 13:48:57 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2013-06-27 13:48:57 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2013-06-27 13:48:57 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2013-06-27 13:48:57 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2013-06-27 13:48:57 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2013-06-27 13:48:57 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2013-06-27 13:48:56 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2013-06-27 13:48:55 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2013-06-27 13:48:55 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2013-06-27 13:48:55 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2013-06-27 13:48:55 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2013-06-27 13:48:55 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2013-06-27 13:48:55 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2013-06-27 13:48:55 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2013-06-27 13:48:55 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2013-06-27 13:48:54 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2013-06-27 13:48:54 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2013-06-27 13:48:54 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2013-06-27 13:48:54 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2013-06-27 13:47:12 ----A---- C:\WINDOWS\002883_.tmp
2013-06-27 13:47:10 ----A---- C:\WINDOWS\imsins.BAK
2013-06-27 13:43:05 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2013-06-27 13:00:54 ----A---- C:\AdwCleaner[S1].txt
2013-06-27 12:37:20 ----A---- C:\ComboFix.txt
2013-06-27 12:23:19 ----A---- C:\Boot.bak
2013-06-27 12:23:10 ----RASHD---- C:\cmdcons
2013-06-27 12:21:49 ----A---- C:\WINDOWS\zip.exe
2013-06-27 12:21:49 ----A---- C:\WINDOWS\SWXCACLS.exe
2013-06-27 12:21:49 ----A---- C:\WINDOWS\SWSC.exe
2013-06-27 12:21:49 ----A---- C:\WINDOWS\SWREG.exe
2013-06-27 12:21:49 ----A---- C:\WINDOWS\sed.exe
2013-06-27 12:21:49 ----A---- C:\WINDOWS\PEV.exe
2013-06-27 12:21:49 ----A---- C:\WINDOWS\NIRCMD.exe
2013-06-27 12:21:49 ----A---- C:\WINDOWS\MBR.exe
2013-06-27 12:21:49 ----A---- C:\WINDOWS\grep.exe
2013-06-27 12:16:42 ----D---- C:\WINDOWS\ERDNT
2013-06-27 12:16:14 ----D---- C:\Qoobox
2013-06-27 09:48:08 ----D---- C:\139d82010a4b9f7b98e36703
2013-06-27 09:48:03 ----D---- C:\8b00e01e26c598479c8f2fcf
2013-06-27 08:48:01 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2013-06-27 08:48:01 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2013-06-27 08:48:01 ----N---- C:\WINDOWS\system32\prntvpt.dll
2013-06-27 08:48:01 ----D---- C:\67b6b029fa0d1e2359542acc8f0ca9c1
2013-06-27 08:17:42 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2013-06-27 08:17:35 ----D---- C:\Program Files\MSXML 6.0
2013-06-27 08:16:46 ----D---- C:\3b6c541cbf065522c0744a77
2013-06-27 08:16:41 ----D---- C:\ee0479212966d7477c76a83bab11e0
2013-06-26 13:53:16 ----RSD---- C:\WINDOWS\assembly
2013-06-26 13:52:37 ----D---- C:\WINDOWS\Microsoft.NET
2013-06-26 13:41:08 ----D---- C:\Program Files\OCCTPT
2013-06-17 08:20:07 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2013-06-16 14:43:59 ----D---- C:\WINDOWS\RegisteredPackages
2013-06-16 14:43:26 ----A---- C:\WINDOWS\system32\ra32dnet.dll
2013-06-16 14:43:26 ----A---- C:\WINDOWS\system32\ra3228_8.dll
2013-06-16 14:43:25 ----A---- C:\WINDOWS\system32\rmbe3260.dll
2013-06-16 14:43:25 ----A---- C:\WINDOWS\system32\ra32sipr.dll
2013-06-16 14:43:25 ----A---- C:\WINDOWS\system32\msvcr70.dll
2013-06-16 14:43:25 ----A---- C:\WINDOWS\system32\msvcp70.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\ra3214_4.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\pngu3263.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\pneng50.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\pncrt.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\pnc3250.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\encdnet.dll
2013-06-16 14:43:24 ----A---- C:\WINDOWS\system32\decdnet.dll
2013-06-16 14:40:51 ----A---- C:\WINDOWS\system32\drivers\cledx.sys
2013-06-16 14:40:38 ----A---- C:\WINDOWS\system32\drivers\synasUSB.sys
2013-06-16 14:40:36 ----A---- C:\WINDOWS\system32\Synsopos.exe
2013-06-16 14:40:34 ----A---- C:\WINDOWS\system32\SynsoLChk.dll
2013-06-16 14:40:33 ----D---- C:\Program Files\Syncrosoft
2013-06-16 14:40:33 ----A---- C:\WINDOWS\system32\SYNSOACC.dll
2013-06-16 14:31:16 ----D---- C:\WINDOWS\system32\appmgmt
2013-06-16 14:25:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\Steinberg
2013-06-16 14:23:40 ----D---- C:\Program Files\Steinberg
2013-06-16 14:23:40 ----D---- C:\Documents and Settings\Merva\Data aplikací\Steinberg
2013-06-16 12:21:35 ----D---- C:\Documents and Settings\Merva\Data aplikací\uTorrent
2013-06-16 12:13:41 ----A---- C:\WINDOWS\system32\drivers\sptd.sys
2013-06-16 12:13:10 ----D---- C:\Documents and Settings\Merva\Data aplikací\DAEMON Tools Lite
2013-06-16 12:13:05 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite

======List of files/folders modified in the last 1 months======

2013-06-28 10:44:48 ----D---- C:\WINDOWS\Temp
2013-06-28 10:44:46 ----D---- C:\Program Files\trend micro
2013-06-28 10:30:51 ----D---- C:\WINDOWS
2013-06-28 10:30:34 ----D---- C:\Documents and Settings\Merva\Data aplikací\Skype
2013-06-28 10:29:12 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-06-28 10:28:56 ----D---- C:\WINDOWS\system32\CatRoot2
2013-06-28 10:28:13 ----D---- C:\WINDOWS\system32
2013-06-28 07:58:13 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-06-28 07:58:00 ----SHD---- C:\WINDOWS\Installer
2013-06-28 07:58:00 ----D---- C:\Config.Msi
2013-06-28 07:57:05 ----HD---- C:\WINDOWS\inf
2013-06-28 07:53:00 ----D---- C:\Program Files\Outlook Express
2013-06-28 07:52:52 ----HD---- C:\WINDOWS\$hf_mig$
2013-06-28 07:11:52 ----D---- C:\WINDOWS\Help
2013-06-27 21:36:18 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-06-27 21:35:32 ----D---- C:\WINDOWS\WinSxS
2013-06-27 21:34:49 ----D---- C:\WINDOWS\system32\CatRoot
2013-06-27 21:33:06 ----D---- C:\WINDOWS\system32\drivers
2013-06-27 20:49:50 ----D---- C:\WINDOWS\security
2013-06-27 18:12:12 ----D---- C:\Program Files\Messenger
2013-06-27 18:10:00 ----D---- C:\WINDOWS\system32\oobe
2013-06-27 18:09:21 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-06-27 18:09:03 ----D---- C:\WINDOWS\ehome
2013-06-27 16:56:03 ----RD---- C:\Program Files
2013-06-27 15:54:02 ----RSD---- C:\WINDOWS\Fonts
2013-06-27 15:31:43 ----D---- C:\WINDOWS\Debug
2013-06-27 15:29:01 ----D---- C:\WINDOWS\system32\Setup
2013-06-27 15:29:01 ----D---- C:\WINDOWS\AppPatch
2013-06-27 15:29:00 ----D---- C:\WINDOWS\system32\wbem
2013-06-27 13:57:22 ----D---- C:\Program Files\Windows Media Player
2013-06-27 13:57:06 ----D---- C:\WINDOWS\system32\inetsrv
2013-06-27 13:57:05 ----D---- C:\WINDOWS\ime
2013-06-27 13:56:41 ----D---- C:\WINDOWS\system32\usmt
2013-06-27 13:56:40 ----D---- C:\Program Files\Internet Explorer
2013-06-27 13:56:38 ----D---- C:\WINDOWS\PeerNet
2013-06-27 13:56:38 ----D---- C:\Program Files\Movie Maker
2013-06-27 13:52:20 ----D---- C:\WINDOWS\ServicePackFiles
2013-06-27 13:52:06 ----D---- C:\WINDOWS\system32\Restore
2013-06-27 13:52:06 ----D---- C:\WINDOWS\system32\npp
2013-06-27 13:52:03 ----D---- C:\WINDOWS\msagent
2013-06-27 13:51:59 ----D---- C:\WINDOWS\srchasst
2013-06-27 13:51:56 ----D---- C:\Program Files\NetMeeting
2013-06-27 13:51:53 ----D---- C:\WINDOWS\system32\Com
2013-06-27 13:51:49 ----D---- C:\Program Files\Windows NT
2013-06-27 13:51:44 ----D---- C:\Program Files\Common Files\System
2013-06-27 13:51:17 ----D---- C:\WINDOWS\system
2013-06-27 13:34:25 ----D---- C:\Documents and Settings\Merva\Data aplikací\gtk-2.0
2013-06-27 12:36:34 ----SD---- C:\WINDOWS\Tasks
2013-06-27 12:32:56 ----A---- C:\WINDOWS\system.ini
2013-06-27 12:32:30 ----D---- C:\WINDOWS\system32\drivers\etc
2013-06-27 12:30:31 ----D---- C:\WINDOWS\system32\config
2013-06-27 12:27:32 ----D---- C:\Program Files\Common Files
2013-06-27 12:23:19 ----RASH---- C:\boot.ini
2013-06-27 09:50:09 ----D---- C:\WINDOWS\system32\mui
2013-06-27 09:49:57 ----D---- C:\WINDOWS\pchealth
2013-06-27 09:37:15 ----D---- C:\WINDOWS\Minidump
2013-06-27 08:48:15 ----D---- C:\WINDOWS\system32\spool
2013-06-26 13:52:54 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-06-16 14:24:34 ----SD---- C:\Documents and Settings\Merva\Data aplikací\Microsoft
2013-06-13 10:27:23 ----A---- C:\WINDOWS\system32\MRT.exe
2013-06-12 20:52:53 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-03-19 45648]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2013-06-16 691696]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-06-28 25256]
R1 asuskbnt;Enhanced Display Driver Helper Service; C:\WINDOWS\system32\drivers\atkkbnt.sys [2004-07-20 20096]
R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2012-06-28 35928]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-06-28 721000]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-06-28 353688]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-06-28 54232]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-06-28 21256]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-06-28 97352]
R3 CLEDX;Team H2O CLEDX service; C:\WINDOWS\system32\DRIVERS\cledx.sys [2005-05-09 33792]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-01-10 138752]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2008-11-03 6273504]
R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys [2008-02-05 25624]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-01-10 106496]
R3 P17;SB Live! 24-bit; C:\WINDOWS\system32\drivers\P17.sys [2007-06-15 1127936]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2009-05-25 142336]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\WINDOWS\system32\drivers\viahduaa.sys [2009-08-17 1390976]
S3 catchme;catchme; \??\C:\DOCUME~1\Merva\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 FilterService;UVC Filter Service; C:\WINDOWS\system32\DRIVERS\lvuvcflt.sys [2008-02-06 23832]
S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys [2008-02-05 689176]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2008-02-06 41752]
S3 LVUVC;Logitech QuickCam Pro 9000(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc.sys [2008-02-06 4658456]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-12-15 3329504]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10; C:\Program Files\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-09-14 169624]
R2 ATKKeyboardService;ATK Keyboard Service; C:\WINDOWS\ATKKBService.exe [2004-07-20 90112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-06-28 44808]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 LVCOMSer;LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [2008-02-05 186904]
R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2008-02-05 150040]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-03-18 75064]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-02 136176]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2008-02-05 141848]
S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2004-12-15 139331]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-02 136176]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-05-24 117144]
S3 SwitchBoard;Adobe SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

JaRon píše:1. vycisti PC s ADWCleanerom - volba vymazat
2. doinstaluj ServicePack3 + MSIE8
potom napis, ci su este nejake problemy

ak kde mame MSIE8
+
citat:
TFC http://oldtimer.geekstogo.com/TFC.exe
• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte