mohli byste prosím se mnou někdo udělat důkladnou preventivní kontrolu mého notebooku?
Nainstaloval jsem do něj nějaké upravené XP

Druhá věc je, že poslední dobou po zapnutí a úplném naběhnutí začne po chvilce něco dlouze a intenzivně "chroustat" .... jsem trochu paranoidní a myslím že mně sledujou


Díky moc Vava
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-09-2013 04
Ran by vnd (administrator) on VAVASA58-5CAD15 on 14-09-2013 12:03:51
Running from C:\Documents and Settings\vnd\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Microsoft Corporation) C:\WINDOWS\ehome\ehtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Microsoft Corporation) C:\WINDOWS\eHome\ehmsas.exe
(Realtek Semiconductor Corp.) C:\DOCUME~1\vnd\LOCALS~1\Temp\RtkBtMnt.exe
(Microsoft) C:\WINDOWS\arservice.exe
(Microsoft Corporation) C:\WINDOWS\eHome\ehRecvr.exe
(Microsoft Corporation) C:\WINDOWS\eHome\ehSched.exe
(Microsoft Corporation) C:\WINDOWS\ehome\mcrdsvc.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDCPL] - C:\Windows\RTHDCPL.EXE [16861184 2008-04-10] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] - C:\Windows\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AlwaysReady Power Message APP] - C:\Windows\ARPWRMSG.EXE [77312 2008-12-26] (Microsoft)
HKLM\...\Run: [ehTray] - C:\WINDOWS\ehome\ehtray.exe [64512 2005-08-05] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [33648 2007-08-24] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
MountPoints2: F - "F:\WD SmartWare.exe" autoplay=true
HKU\Default User\...\RunOnce: [_nltide_2] - regsvr32 /s /n /i:U shell32
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
BHO: IE7Pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll (IE7Pro.com)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll (Google Inc.)
Toolbar: HKLM - &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Documents and Settings\vnd\Data aplikací\Mozilla\Firefox\Profiles\busi3win.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (2007 Microsoft Office system) - C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Extension: (Google Docs) - C:\DOCUME~1\vnd\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\DOCUME~1\vnd\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (Google Search) - C:\DOCUME~1\vnd\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\vnd\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\DOCUME~1\vnd\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
========================== Services (Whitelisted) =================
R2 ARSVC; C:\WINDOWS\arservice.exe [58880 2008-12-26] (Microsoft)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 McrdSvc; C:\WINDOWS\ehome\mcrdsvc.exe [99328 2005-08-05] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R3 aracpi; C:\Windows\System32\DRIVERS\aracpi.sys [22784 2008-12-26] (Microsoft Corporation)
S3 arhidfltr; C:\Windows\System32\DRIVERS\arhidfltr.sys [19200 2008-12-26] (Microsoft Corporation)
R3 arkbcfltr; C:\Windows\System32\DRIVERS\arkbcfltr.sys [5376 2008-12-26] (Microsoft Corporation)
R3 armoucfltr; C:\Windows\System32\DRIVERS\armoucfltr.sys [4992 2008-12-26] (Microsoft Corporation)
R3 ARPolicy; C:\Windows\System32\DRIVERS\arpolicy.sys [10112 2008-12-26] (Microsoft Corporation)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21576 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-06-27] ()
R3 b57w2k; C:\Windows\System32\DRIVERS\b57xp32.sys [161792 2007-10-22] (Broadcom Corporation)
R3 NETw4x32; C:\Windows\System32\DRIVERS\NETw4x32.sys [2530176 2008-03-13] (Intel Corporation)
R3 Rasirda; C:\Windows\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [35088 2013-04-30] (The OpenVPN Project)
S2 bwcdrv; system32\DRIVERS\bwcdrv.sys [x]
S4 IntelIde; No ImagePath
U1 WS2IFSL;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-09-14 12:03 - 2013-09-14 12:03 - 00000000 ____D C:\FRST
2013-09-14 12:03 - 2013-09-14 12:03 - 00000000 ____D C:\Documents and Settings\vnd\Local Settings\Data aplikací\qb2216AF.1F
2013-09-14 12:03 - 2013-09-13 21:11 - 01083285 _____ (Farbar) C:\Documents and Settings\vnd\Plocha\FRST.exe
2013-09-13 17:15 - 2013-09-13 17:15 - 00013754 _____ C:\WINDOWS\KB2870699-IE8.log
2013-09-13 17:15 - 2013-09-13 17:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-13 17:15 - 2013-09-13 17:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-13 17:14 - 2013-09-13 17:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-12 06:37 - 2013-09-13 17:17 - 00019653 _____ C:\WINDOWS\KB2876315.log
2013-09-12 06:37 - 2013-09-13 17:17 - 00018552 _____ C:\WINDOWS\KB2876217.log
2013-09-12 06:37 - 2013-09-13 17:17 - 00018374 _____ C:\WINDOWS\KB2864063.log
2013-09-03 14:59 - 2013-09-13 17:28 - 00000000 ____D C:\Documents and Settings\vnd\Data aplikací\Skype
2013-09-03 14:59 - 2013-09-03 14:59 - 00001896 _____ C:\Documents and Settings\All Users\Plocha\Skype.lnk
2013-09-03 14:59 - 2013-09-03 14:59 - 00000000 ___RD C:\Program Files\Skype
2013-09-03 14:59 - 2013-09-03 14:59 - 00000000 ____D C:\Program Files\Common Files\Skype
2013-09-03 14:59 - 2013-09-03 14:59 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Skype
2013-08-30 10:32 - 2013-08-30 10:32 - 00004150 _____ C:\WINDOWS\KB2834904-v2.log
2013-08-30 10:32 - 2013-08-30 10:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-08-18 23:11 - 2013-08-19 10:39 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-15 10:31 - 2013-08-15 10:31 - 00013777 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-15 10:28 - 2013-08-15 10:28 - 00006341 _____ C:\WINDOWS\KB2863058.log
2013-08-15 10:28 - 2013-08-15 10:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-15 10:28 - 2013-08-15 10:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-15 10:28 - 2013-08-15 10:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-15 10:28 - 2013-08-15 10:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
==================== One Month Modified Files and Folders =======
2013-09-14 12:03 - 2013-09-14 12:03 - 00000000 ____D C:\FRST
2013-09-14 12:03 - 2013-09-14 12:03 - 00000000 ____D C:\Documents and Settings\vnd\Local Settings\Data aplikací\qb2216AF.1F
2013-09-14 12:03 - 2013-05-27 12:40 - 00000000 ____D C:\Documents and Settings\vnd\Dokumenty\Stažené soubory
2013-09-14 12:03 - 2013-05-26 21:35 - 00000000 ___HD C:\Documents and Settings\vnd\Local Settings\Data aplikací
2013-09-14 12:03 - 2013-05-26 21:35 - 00000000 ____D C:\Documents and Settings\vnd\Plocha
2013-09-14 11:53 - 2013-05-27 16:33 - 00000934 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-14 11:44 - 2013-05-27 12:49 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2013-09-14 11:30 - 2013-05-26 22:53 - 00884654 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-09-14 11:28 - 2013-05-27 18:27 - 00065851 _____ C:\WINDOWS\KB973768.log
2013-09-14 11:28 - 2013-05-26 21:13 - 01609995 _____ C:\WINDOWS\WindowsUpdate.log
2013-09-14 11:27 - 2013-05-27 16:32 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-09-14 11:26 - 2013-05-27 16:33 - 00000930 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-14 11:26 - 2013-05-26 22:58 - 00000159 _____ C:\WINDOWS\wiadebug.log
2013-09-14 11:26 - 2013-05-26 22:58 - 00000049 _____ C:\WINDOWS\wiaservc.log
2013-09-14 11:26 - 2013-05-26 21:31 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-09-14 11:26 - 2013-05-26 21:09 - 00000000 ____D C:\WINDOWS\Registration
2013-09-13 22:08 - 2013-05-26 21:35 - 00000178 ___SH C:\Documents and Settings\vnd\ntuser.ini
2013-09-13 22:08 - 2013-05-26 21:31 - 00032546 _____ C:\WINDOWS\SchedLgU.Txt
2013-09-13 21:11 - 2013-09-14 12:03 - 01083285 _____ (Farbar) C:\Documents and Settings\vnd\Plocha\FRST.exe
2013-09-13 17:51 - 2013-05-26 22:40 - 00278152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-09-13 17:28 - 2013-09-03 14:59 - 00000000 ____D C:\Documents and Settings\vnd\Data aplikací\Skype
2013-09-13 17:17 - 2013-09-12 06:37 - 00019653 _____ C:\WINDOWS\KB2876315.log
2013-09-13 17:17 - 2013-09-12 06:37 - 00018552 _____ C:\WINDOWS\KB2876217.log
2013-09-13 17:17 - 2013-09-12 06:37 - 00018374 _____ C:\WINDOWS\KB2864063.log
2013-09-13 17:15 - 2013-09-13 17:15 - 00013754 _____ C:\WINDOWS\KB2870699-IE8.log
2013-09-13 17:15 - 2013-09-13 17:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876315$
2013-09-13 17:15 - 2013-09-13 17:15 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876217$
2013-09-13 17:15 - 2013-05-27 18:47 - 00000000 ____D C:\WINDOWS\ie8updates
2013-09-13 17:15 - 2013-05-26 22:53 - 00987480 _____ C:\WINDOWS\iis6.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00877236 _____ C:\WINDOWS\FaxSetup.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00584456 _____ C:\WINDOWS\ocgen.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00405880 _____ C:\WINDOWS\tsoc.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00301755 _____ C:\WINDOWS\comsetup.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00282528 _____ C:\WINDOWS\msmqinst.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00180921 _____ C:\WINDOWS\ntdtcsetup.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00154410 _____ C:\WINDOWS\netfxocm.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00079941 _____ C:\WINDOWS\MedCtrOC.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00054539 _____ C:\WINDOWS\ocmsn.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00045054 _____ C:\WINDOWS\tabletoc.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00044131 _____ C:\WINDOWS\msgsocm.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00001374 _____ C:\WINDOWS\imsins.log
2013-09-13 17:15 - 2013-05-26 22:53 - 00001374 _____ C:\WINDOWS\imsins.BAK
2013-09-13 17:15 - 2013-05-26 21:16 - 00097615 _____ C:\WINDOWS\updspapi.log
2013-09-13 17:14 - 2013-09-13 17:14 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2864063$
2013-09-13 17:14 - 2013-07-16 06:43 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-09-13 17:11 - 2013-05-27 18:25 - 76725432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-09-13 17:09 - 2001-10-25 15:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-09-12 11:07 - 2013-05-27 13:14 - 00000000 ____D C:\Documents and Settings\vnd\Data aplikací\vlc
2013-09-09 00:36 - 2013-05-26 21:35 - 00000000 ____D C:\Documents and Settings\vnd
2013-09-08 22:57 - 2013-05-27 16:37 - 00001813 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2013-09-04 11:47 - 2013-05-26 21:17 - 00929345 _____ C:\WINDOWS\setupapi.log
2013-09-03 14:59 - 2013-09-03 14:59 - 00001896 _____ C:\Documents and Settings\All Users\Plocha\Skype.lnk
2013-09-03 14:59 - 2013-09-03 14:59 - 00000000 ___RD C:\Program Files\Skype
2013-09-03 14:59 - 2013-09-03 14:59 - 00000000 ____D C:\Program Files\Common Files\Skype
2013-09-03 14:59 - 2013-09-03 14:59 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Skype
2013-09-03 14:59 - 2013-05-26 22:53 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-09-03 14:59 - 2013-05-26 22:53 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-09-03 14:59 - 2013-05-26 21:38 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Skype
2013-09-03 14:59 - 2013-05-26 21:35 - 00000000 __RHD C:\Documents and Settings\vnd\Data aplikací
2013-08-30 10:32 - 2013-08-30 10:32 - 00004150 _____ C:\WINDOWS\KB2834904-v2.log
2013-08-30 10:32 - 2013-08-30 10:32 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2834904-v2_WM11$
2013-08-27 21:15 - 2013-05-27 12:45 - 00692104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-08-27 21:15 - 2013-05-27 12:45 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2013-08-19 17:14 - 2013-05-27 12:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-08-19 10:39 - 2013-08-18 23:11 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-08-15 10:31 - 2013-08-15 10:31 - 00013777 _____ C:\WINDOWS\KB2862772-IE8.log
2013-08-15 10:30 - 2013-05-26 22:52 - 00681818 _____ C:\WINDOWS\setupact.log
2013-08-15 10:28 - 2013-08-15 10:28 - 00006341 _____ C:\WINDOWS\KB2863058.log
2013-08-15 10:28 - 2013-08-15 10:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2863058$
2013-08-15 10:28 - 2013-08-15 10:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2859537$
2013-08-15 10:28 - 2013-08-15 10:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2850869$
2013-08-15 10:28 - 2013-08-15 10:28 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2849470$
2013-08-15 10:28 - 2013-08-14 14:39 - 00013246 _____ C:\WINDOWS\KB2859537.log
2013-08-15 10:28 - 2013-08-14 14:39 - 00012256 _____ C:\WINDOWS\KB2850869.log
2013-08-15 10:28 - 2013-05-27 18:37 - 00012520 _____ C:\WINDOWS\system32\TZLog.log
Some content of TEMP:
====================
C:\Documents and Settings\vnd\Local Settings\Temp\GoogleToolbarInstaller_en.exe
C:\Documents and Settings\vnd\Local Settings\Temp\ose00000.exe
C:\Documents and Settings\vnd\Local Settings\Temp\RtkBtMnt.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2008-12-19 14:43] - [2008-12-19 14:43] - 1486336 ____A (Microsoft Corporation) d39127310cbad1485ec5001a4ed1d853
C:\Windows\System32\winlogon.exe
[2008-12-19 14:29] - [2008-12-19 14:29] - 0557056 ____A (Microsoft Corporation) 12a799ad9415ae9c8abcc5f75e9cf034
C:\Windows\System32\svchost.exe
[2008-04-14 08:52] - [2008-04-14 08:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93
C:\Windows\System32\services.exe
[2008-04-14 08:52] - [2009-02-09 13:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7
C:\Windows\System32\User32.dll
[2008-12-19 14:28] - [2008-12-19 14:28] - 0578560 ____A (Microsoft Corporation) ccb32d10c69a89822e9134c0c4894be1
C:\Windows\System32\userinit.exe
[2008-04-14 08:52] - [2008-04-14 08:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239
C:\Windows\System32\Drivers\volsnap.sys
[2008-04-14 07:42] - [2008-04-14 07:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1
==================== Alternate Data Streams (whitelisted) ====
==================== Loaded Modules (whitelisted) ============
2013-09-14 11:29 - 2013-09-14 09:49 - 02101248 _____ () C:\Program Files\AVAST Software\Avast\defs\13091400\algo.dll
2013-05-26 21:45 - 2006-10-26 17:26 - 00033104 _____ (Microsoft Corporation) C:\WINDOWS\System32\spool\PRTPROCS\W32X86\msonpppr.dll
2008-12-19 14:23 - 2008-12-19 14:23 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\mui\0005\HHCTRLui.dll
2013-05-26 21:20 - 2005-08-05 14:01 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\eHome\ehProxy.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00046032 _____ () C:\Program Files\Alky for Applications\Libraries\vADVAPI32.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00058320 _____ () C:\Program Files\Alky for Applications\Libraries\vKERNEL32.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00040400 _____ () C:\Program Files\Alky for Applications\Libraries\vUSER32.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00019920 _____ () C:\Program Files\Alky for Applications\Libraries\vmsvcrt.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00082384 _____ () C:\Program Files\Alky for Applications\Libraries\vntdll.dll
2008-03-23 00:00 - 2008-03-23 00:00 - 00096208 _____ () C:\Program Files\Alky for Applications\Libraries\vCOMCTL32.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00047056 _____ () C:\Program Files\Alky for Applications\Libraries\vgdiplus.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00026576 _____ () C:\Program Files\Alky for Applications\Libraries\vSHELL32.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00008144 _____ () C:\Program Files\Alky for Applications\Libraries\vdwmapi.dll
2008-03-23 00:01 - 2008-03-23 00:01 - 00011216 _____ () C:\Program Files\Alky for Applications\Libraries\vUxTheme.dll
2008-12-26 22:17 - 2008-12-26 22:17 - 00050176 _____ () C:\WINDOWS\armcex.dll
2013-05-26 21:20 - 2005-08-05 14:02 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\eHome\ehTrace.dll
2008-12-26 22:17 - 2008-12-26 22:17 - 00291840 _____ () C:\WINDOWS\system32\sbe.dll
2008-04-14 08:51 - 2008-04-14 08:51 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2013-08-18 23:11 - 2013-08-18 23:12 - 03551640 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
==================== Scheduled Tasks (whitelisted) ===========
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Supplementary Scan (All) ================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\nm
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\nm.sys
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"InstallVisualStyle"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,\
00,53,00,5c,00,52,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,5c,00,\
54,00,68,00,65,00,6d,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,\
00,73,00,20,00,58,00,50,00,20,00,55,00,6c,00,74,00,69,00,6d,00,61,00,74,00,\
65,00,20,00,32,00,30,00,30,00,39,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,\
00,73,00,20,00,58,00,50,00,20,00,55,00,6c,00,74,00,69,00,6d,00,61,00,74,00,\
65,00,20,00,32,00,30,00,30,00,39,00,2e,00,6d,00,73,00,73,00,74,00,79,00,6c,\
00,65,00,73,00,00,00
"InstallTheme"=hex(2):43,00,3a,00,5c,00,57,00,49,00,4e,00,44,00,4f,00,57,00,53,\
00,5c,00,52,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,73,00,5c,00,54,00,\
68,00,65,00,6d,00,65,00,73,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,\
00,20,00,58,00,50,00,20,00,55,00,6c,00,74,00,69,00,6d,00,61,00,74,00,65,00,\
20,00,32,00,30,00,30,00,39,00,2e,00,74,00,68,00,65,00,6d,00,65,00,00,00
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled"=dword:00000001
"AntiVirusDisableNotify"=dword:00000000
"FirewallDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000000
"FirewallOverride"=dword:00000000
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: avast! Antivirus *Disabled* {7591DB91-41F0-48A3-B128-1A293FD8233D}
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Disabled:Microsoft Office Outlook"
"C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"="C:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe:*:Disabled:@xpsp3res.dll,-20000"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"
"C:\\Documents and Settings\\vnd\\Data aplikac\\uTorrent\\utorrent.exe"="C:\\Documents and Settings\\vnd\\Data aplikac\\uTorrent\\utorrent.exe:*:Disabled:uTorrent"
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\\Program Files\\IEPro\\MiniDM.exe"="C:\\Program Files\\IEPro\\MiniDM.exe:*:Enabled:MiniDM"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"="midimap.dll"
"msacm.imaadpcm"="imaadp32.acm"
"msacm.msadpcm"="msadp32.acm"
"msacm.msg711"="msg711.acm"
"msacm.msgsm610"="msgsm32.acm"
"msacm.trspch"="tssoft32.acm"
"vidc.cvid"="iccvid.dll"
"vidc.I420"="msh263.drv"
"vidc.iv31"="ir32_32.dll"
"vidc.iv32"="ir32_32.dll"
"vidc.iv41"="ir41_32.ax"
"vidc.iyuv"="iyuv_32.dll"
"vidc.mrle"="msrle32.dll"
"vidc.msvc"="msvidc32.dll"
"vidc.uyvy"="msyuv.dll"
"vidc.yuy2"="msyuv.dll"
"vidc.yvu9"="tsbyuv.dll"
"vidc.yvyu"="msyuv.dll"
"wavemapper"="msacm32.drv"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"
"aux"="wdmaud.drv"
"msacm.msg723"="msg723.acm"
"vidc.M263"="msh263.drv"
"vidc.M261"="msh261.drv"
"msacm.msaudio1"="msaud32.acm"
"msacm.sl_anet"="sl_anet.acm"
"msacm.iac2"="C:\\WINDOWS\\system32\\iac25_32.ax"
"vidc.iv50"="ir50_32.dll"
"msacm.l3acm"="C:\\WINDOWS\\system32\\l3codeca.acm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32\Terminal Server\RDP]
"wave"="rdpsnd.dll"
"mixer"="rdpsnd.dll"
"MaxBandwidth"=dword:000056b9
"wavemapper"="msacm32.drv"
"EnableMP3Codec"=dword:00000001
"midimapper"="midimap.dll"
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:149.04 GB) (Free:120.54 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (Nový svazek) (Fixed) (Total:149.04 GB) (Free:16.49 GB) NTFS
Available physical RAM: 1455.75 MB
Total physical RAM: 2046.36 MB
Percentage of memory in use: 28%
==================== MBR and Partition Table =================
Disk: 0 (Size: 298 GB) (Disk ID: 0F550F54)
Partition 1: (Not Active) - (Size=149 GB) - (Type=OF Extended)
Partition 2: (Active) - (Size=149 GB) - (Type=07 NTFS)
==================== End Of Log ==============================