Prosím o kontrolu logu RSIT
Napsal: 11 črc 2013 17:43
Zdravím, mohl by se mi tu někdo prosím podívat na log RSIT? Mám starší PC, ale i na svůj věk je myslím až moc spomalený. Díky!
Logfile of random's system information tool 1.09 (written by random/random)
Run by Kubajzník at 2013-07-11 18:30:02
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 6 GB (42%) free of 15 GB
Total RAM: 255 MB (47% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:30:35, on 11.7.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21337)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\TO2SSM\McciTrayApp.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\IProsetMonitor.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Kubajzník\Plocha\RSIT.exe
C:\Program Files\trend micro\Kubajzník.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: QipLI - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qstatsrv.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [TO2SSM_McciTrayApp] C:\Program Files\TO2SSM\McciTrayApp.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP Infium\infium.exe (HKCU)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Intel Corporation - C:\WINDOWS\system32\IProsetMonitor.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 6761 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Kubajzník\Data aplikací\Mozilla\Firefox\Profiles\6j7rzys9.default-1372414370109
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
nppdf32.dll
npwachk.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B5863A0-C43F-4C0A-982B-CC0E9125783F}]
QipLI Class - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qstatsrv.dll [2010-10-25 48080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-07-08 463272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2010-10-25 140752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-07-08 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TO2SSM_McciTrayApp"=C:\Program Files\TO2SSM\McciTrayApp.exe [2008-08-15 1473536]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2011-03-17 74752]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2011-06-10 47104]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2003-07-28 4841472]
"nwiz"=nwiz.exe /install []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-07-18 348664]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\QIP Infium\infium.exe"="C:\Program Files\QIP Infium\infium.exe:*:Enabled:QIP Infium"
"D:\Hry\Call of Duty\CoDUOMP.exe"="D:\Hry\Call of Duty\CoDUOMP.exe:*:Enabled:CoDUOMP"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
======List of files/folders created in the last 1 month======
2013-07-11 18:30:04 ----D---- C:\Program Files\trend micro
2013-07-11 18:30:02 ----D---- C:\rsit
2013-07-11 18:06:58 ----A---- C:\WINDOWS\wininit.ini
2013-07-09 15:50:58 ----D---- C:\Heroes
2013-07-09 15:21:54 ----D---- C:\Program Files\directx
2013-07-09 03:34:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-07-09 03:34:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-07-09 03:34:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-07-09 03:34:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-07-09 03:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-07-09 03:33:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-07-09 03:32:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-07-09 03:32:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-07-09 03:31:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-07-09 03:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2779562$
2013-07-09 03:29:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-07-09 03:29:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-07-09 03:28:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-07-09 03:27:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-07-09 03:27:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-07-09 03:27:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-07-09 03:26:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2013-07-09 03:26:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-07-09 03:26:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-07-09 03:25:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$
2013-07-09 03:25:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-07-09 03:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2839229$
2013-07-09 03:24:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-07-09 03:24:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-07-09 03:16:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2013-07-09 03:15:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-07-09 03:15:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-07-09 03:15:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-07-09 03:15:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2820197$
2013-07-09 03:14:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-07-09 03:10:06 ----SHD---- C:\Config.Msi
2013-07-09 03:07:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-07-09 03:07:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-07-09 03:06:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-07-09 03:06:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-07-09 03:06:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-07-09 03:06:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-07-09 03:05:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-07-09 03:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2013-07-09 03:04:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-07-09 03:04:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2829361$
2013-07-09 03:02:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-07-09 03:02:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-07-09 03:02:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2013-07-09 03:01:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-07-08 19:28:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2013-07-08 19:26:46 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2013-07-08 18:44:28 ----N---- C:\WINDOWS\system32\iacenc.dll
2013-07-08 18:21:21 ----D---- C:\Program Files\Common Files\Java
2013-07-08 18:19:57 ----A---- C:\WINDOWS\system32\javaws.exe
2013-07-08 18:19:27 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-07-08 18:19:27 ----A---- C:\WINDOWS\system32\javaw.exe
2013-07-08 18:19:26 ----A---- C:\WINDOWS\system32\java.exe
2013-07-08 18:17:13 ----D---- C:\Program Files\Java
2013-07-08 17:03:41 ----D---- C:\Program Files\Mozilla Firefox
2013-07-08 15:30:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2013-07-08 15:29:14 ----A---- C:\WINDOWS\system32\deployJava1.dll
2013-07-08 15:29:13 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2013-07-08 15:25:17 ----D---- C:\Documents and Settings\Kubajzník\Data aplikací\Sun
======List of files/folders modified in the last 1 month======
2013-07-11 18:30:11 ----D---- C:\WINDOWS\Temp
2013-07-11 18:30:08 ----D---- C:\WINDOWS\Prefetch
2013-07-11 18:30:04 ----RD---- C:\Program Files
2013-07-11 18:11:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-07-11 18:11:35 ----D---- C:\WINDOWS\system32\CatRoot2
2013-07-11 18:08:23 ----D---- C:\WINDOWS\system32
2013-07-11 18:08:15 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-07-11 18:07:38 ----SD---- C:\WINDOWS\Tasks
2013-07-11 18:06:58 ----D---- C:\WINDOWS
2013-07-09 18:23:57 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-07-09 12:13:16 ----SHD---- C:\System Volume Information
2013-07-09 12:11:32 ----D---- C:\WINDOWS\system32\NtmsData
2013-07-09 05:27:49 ----HD---- C:\WINDOWS\inf
2013-07-09 05:27:13 ----D---- C:\WINDOWS\Registration
2013-07-09 03:52:17 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-07-09 03:35:03 ----SHD---- C:\WINDOWS\Installer
2013-07-09 03:34:28 ----A---- C:\WINDOWS\imsins.BAK
2013-07-09 03:34:26 ----D---- C:\WINDOWS\WinSxS
2013-07-09 03:33:07 ----D---- C:\WINDOWS\system32\drivers
2013-07-09 03:32:59 ----HD---- C:\WINDOWS\$hf_mig$
2013-07-09 03:31:17 ----D---- C:\WINDOWS\system32\cs-cz
2013-07-09 03:31:16 ----D---- C:\Program Files\Internet Explorer
2013-07-09 03:30:58 ----D---- C:\WINDOWS\ie7updates
2013-07-09 03:12:45 ----A---- C:\WINDOWS\win.ini
2013-07-09 03:11:32 ----D---- C:\Program Files\Microsoft Works
2013-07-09 03:11:23 ----RSD---- C:\WINDOWS\Fonts
2013-07-09 03:10:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-07-08 22:37:48 ----D---- C:\Documents and Settings\Kubajzník\Data aplikací\Skype
2013-07-08 19:27:33 ----D---- C:\WINDOWS\system32\config
2013-07-08 18:21:21 ----D---- C:\Program Files\Common Files
2013-07-08 15:01:07 ----D---- C:\WINDOWS\Help
2013-06-28 13:18:53 ----HD---- C:\Program Files\InstallShield Installation Information
2013-06-13 10:42:18 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2012-07-18 137928]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2012-07-18 36000]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2012-07-18 83392]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2011-06-10 947884]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2007-11-16 165496]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2003-07-28 1341339]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2006-06-09 1373120]
S3 MapMem;MapMem; \??\E:\mapmem.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-07-18 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-07-18 86224]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\WINDOWS\system32\IProsetMonitor.exe [2011-04-11 112800]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-07-08 182184]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2003-07-28 77824]
R2 SNMP;SNMP; C:\WINDOWS\System32\snmp.exe [2008-04-14 32768]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-04-19 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-13 256904]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-07-08 117144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 SNMPTRAP;Zachytávání pro službu SNMP; C:\WINDOWS\System32\snmptrap.exe [2008-04-14 8704]
-----------------EOF-----------------

Logfile of random's system information tool 1.09 (written by random/random)
Run by Kubajzník at 2013-07-11 18:30:02
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 6 GB (42%) free of 15 GB
Total RAM: 255 MB (47% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:30:35, on 11.7.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21337)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\TO2SSM\McciTrayApp.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\IProsetMonitor.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Motive\McciCMService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\snmp.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Kubajzník\Plocha\RSIT.exe
C:\Program Files\trend micro\Kubajzník.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://qip.ru
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: QipLI - {6B5863A0-C43F-4C0A-982B-CC0E9125783F} - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qstatsrv.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: QIPBHO - {95289393-33EA-4F8D-B952-483415B9C955} - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [TO2SSM_McciTrayApp] C:\Program Files\TO2SSM\McciTrayApp.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP Infium - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP Infium\infium.exe (HKCU)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Intel Corporation - C:\WINDOWS\system32\IProsetMonitor.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:\Program Files\Common Files\Motive\McciCMService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 6761 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Kubajzník\Data aplikací\Mozilla\Firefox\Profiles\6j7rzys9.default-1372414370109
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.7.700.224 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
nppdf32.dll
npwachk.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6B5863A0-C43F-4C0A-982B-CC0E9125783F}]
QipLI Class - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qstatsrv.dll [2010-10-25 48080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-07-08 463272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95289393-33EA-4F8D-B952-483415B9C955}]
QIPBHO Class - C:\Documents and Settings\Kubajzník\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2010-10-25 140752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-07-08 171944]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"TO2SSM_McciTrayApp"=C:\Program Files\TO2SSM\McciTrayApp.exe [2008-08-15 1473536]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2011-03-17 74752]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2011-06-10 47104]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2003-07-28 4841472]
"nwiz"=nwiz.exe /install []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-07-18 348664]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\QIP Infium\infium.exe"="C:\Program Files\QIP Infium\infium.exe:*:Enabled:QIP Infium"
"D:\Hry\Call of Duty\CoDUOMP.exe"="D:\Hry\Call of Duty\CoDUOMP.exe:*:Enabled:CoDUOMP"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
======List of files/folders created in the last 1 month======
2013-07-11 18:30:04 ----D---- C:\Program Files\trend micro
2013-07-11 18:30:02 ----D---- C:\rsit
2013-07-11 18:06:58 ----A---- C:\WINDOWS\wininit.ini
2013-07-09 15:50:58 ----D---- C:\Heroes
2013-07-09 15:21:54 ----D---- C:\Program Files\directx
2013-07-09 03:34:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-07-09 03:34:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-07-09 03:34:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-07-09 03:34:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-07-09 03:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-07-09 03:33:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-07-09 03:32:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-07-09 03:32:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-07-09 03:31:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-07-09 03:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2779562$
2013-07-09 03:29:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-07-09 03:29:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2802968$
2013-07-09 03:28:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-07-09 03:27:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-07-09 03:27:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-07-09 03:27:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2780091$
2013-07-09 03:26:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2013-07-09 03:26:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-07-09 03:26:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-07-09 03:25:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$
2013-07-09 03:25:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-07-09 03:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2839229$
2013-07-09 03:24:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2807986$
2013-07-09 03:24:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-07-09 03:16:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2820917$
2013-07-09 03:15:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-07-09 03:15:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-07-09 03:15:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-07-09 03:15:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2820197$
2013-07-09 03:14:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-07-09 03:10:06 ----SHD---- C:\Config.Msi
2013-07-09 03:07:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-07-09 03:07:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-07-09 03:06:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-07-09 03:06:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-07-09 03:06:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-07-09 03:06:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-07-09 03:05:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-07-09 03:05:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2813345$
2013-07-09 03:04:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-07-09 03:04:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2829361$
2013-07-09 03:02:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-07-09 03:02:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-07-09 03:02:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2013-07-09 03:01:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-07-08 19:28:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2013-07-08 19:26:46 ----D---- C:\Program Files\Spybot - Search & Destroy 2
2013-07-08 18:44:28 ----N---- C:\WINDOWS\system32\iacenc.dll
2013-07-08 18:21:21 ----D---- C:\Program Files\Common Files\Java
2013-07-08 18:19:57 ----A---- C:\WINDOWS\system32\javaws.exe
2013-07-08 18:19:27 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll
2013-07-08 18:19:27 ----A---- C:\WINDOWS\system32\javaw.exe
2013-07-08 18:19:26 ----A---- C:\WINDOWS\system32\java.exe
2013-07-08 18:17:13 ----D---- C:\Program Files\Java
2013-07-08 17:03:41 ----D---- C:\Program Files\Mozilla Firefox
2013-07-08 15:30:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2013-07-08 15:29:14 ----A---- C:\WINDOWS\system32\deployJava1.dll
2013-07-08 15:29:13 ----A---- C:\WINDOWS\system32\npDeployJava1.dll
2013-07-08 15:25:17 ----D---- C:\Documents and Settings\Kubajzník\Data aplikací\Sun
======List of files/folders modified in the last 1 month======
2013-07-11 18:30:11 ----D---- C:\WINDOWS\Temp
2013-07-11 18:30:08 ----D---- C:\WINDOWS\Prefetch
2013-07-11 18:30:04 ----RD---- C:\Program Files
2013-07-11 18:11:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-07-11 18:11:35 ----D---- C:\WINDOWS\system32\CatRoot2
2013-07-11 18:08:23 ----D---- C:\WINDOWS\system32
2013-07-11 18:08:15 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-07-11 18:07:38 ----SD---- C:\WINDOWS\Tasks
2013-07-11 18:06:58 ----D---- C:\WINDOWS
2013-07-09 18:23:57 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-07-09 12:13:16 ----SHD---- C:\System Volume Information
2013-07-09 12:11:32 ----D---- C:\WINDOWS\system32\NtmsData
2013-07-09 05:27:49 ----HD---- C:\WINDOWS\inf
2013-07-09 05:27:13 ----D---- C:\WINDOWS\Registration
2013-07-09 03:52:17 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-07-09 03:35:03 ----SHD---- C:\WINDOWS\Installer
2013-07-09 03:34:28 ----A---- C:\WINDOWS\imsins.BAK
2013-07-09 03:34:26 ----D---- C:\WINDOWS\WinSxS
2013-07-09 03:33:07 ----D---- C:\WINDOWS\system32\drivers
2013-07-09 03:32:59 ----HD---- C:\WINDOWS\$hf_mig$
2013-07-09 03:31:17 ----D---- C:\WINDOWS\system32\cs-cz
2013-07-09 03:31:16 ----D---- C:\Program Files\Internet Explorer
2013-07-09 03:30:58 ----D---- C:\WINDOWS\ie7updates
2013-07-09 03:12:45 ----A---- C:\WINDOWS\win.ini
2013-07-09 03:11:32 ----D---- C:\Program Files\Microsoft Works
2013-07-09 03:11:23 ----RSD---- C:\WINDOWS\Fonts
2013-07-09 03:10:41 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-07-08 22:37:48 ----D---- C:\Documents and Settings\Kubajzník\Data aplikací\Skype
2013-07-08 19:27:33 ----D---- C:\WINDOWS\system32\config
2013-07-08 18:21:21 ----D---- C:\Program Files\Common Files
2013-07-08 15:01:07 ----D---- C:\WINDOWS\Help
2013-06-28 13:18:53 ----HD---- C:\Program Files\InstallShield Installation Information
2013-06-13 10:42:18 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2012-07-18 137928]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2012-07-18 36000]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2012-07-18 83392]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2011-06-10 947884]
R3 E100B;Intel(R) PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2007-11-16 165496]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2003-07-28 1341339]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2006-06-09 1373120]
S3 MapMem;MapMem; \??\E:\mapmem.sys []
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-07-18 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-07-18 86224]
R2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service; C:\WINDOWS\system32\IProsetMonitor.exe [2011-04-11 112800]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-07-08 182184]
R2 McciCMService;McciCMService; C:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2003-07-28 77824]
R2 SNMP;SNMP; C:\WINDOWS\System32\snmp.exe [2008-04-14 32768]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-04-19 161384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-13 256904]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-07-08 117144]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 SNMPTRAP;Zachytávání pro službu SNMP; C:\WINDOWS\System32\snmptrap.exe [2008-04-14 8704]
-----------------EOF-----------------