VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2013-12-10 18:59:35
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 33 GB (41%) free of 80 GB
Total RAM: 1918 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:59:54, on 10.12.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\IObit\Advanced SystemCare 7\Monitor.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Petr\Plocha\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE
O4 - HKCU\..\RunOnce: [NeroHomeFirstStart] "C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 2215941953
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 6270 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-DOMA-861FAB0A53-Petr.job
C:\WINDOWS\tasks\ASC7_PerformanceMonitor.job
C:\WINDOWS\tasks\avast! Emergency Update.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
ExplorerWnd Helper - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll [2013-11-06 752448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-21 606544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}]
Advanced SystemCare Browser Protection - C:\PROGRA~1\IObit\SURFIN~1\BROWER~1\ASCPLU~1.DLL [2013-10-17 669504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-10-21 606544]
{10921475-03CE-4E04-90CE-E2E7EF20C814} - ExplorerWnd Helper - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll [2013-11-06 752448]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2005-08-12 45056]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-10-21 3567800]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2000-01-01 20145368]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\CTFMON.EXE [2008-04-14 15360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"NeroHomeFirstStart"=C:\Program Files\Common Files\Ahead\Lib\NMFirstStart.exe [2007-06-27 16680]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2013-11-08 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MSIServer]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codeca.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.LAGS"=lagarith.dll
"VIDC.X264"=x264vfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-12-10 18:56:04 ----D---- C:\rsit
2013-12-09 22:09:10 ----SHD---- C:\RECYCLER
2013-12-09 22:02:22 ----D---- C:\WINDOWS\temp
2013-12-09 22:02:19 ----A---- C:\ComboFix.txt
2013-12-09 21:48:18 ----D---- C:\WINDOWS\erdnt
2013-12-09 20:27:41 ----A---- C:\autoexec.bat
2013-12-09 20:19:03 ----D---- C:\Program Files\Enigma Software Group
2013-12-09 20:13:30 ----D---- C:\WINDOWS\A358F2F62500420C989C25C4F22DF51E.TMP
2013-12-09 20:12:51 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2013-12-09 20:06:08 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2013-11-30 13:12:28 ----D---- C:\Program FilesAdvent
2013-11-23 18:09:48 ----D---- C:\Program Files\CrystalDiskInfo
2013-11-18 18:50:13 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-11-15 19:25:36 ----D---- C:\Program Files\Mozilla Firefox
2013-11-13 11:23:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2868626$
2013-11-13 11:22:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2900986$
2013-11-13 11:22:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2862152$
2013-11-13 11:22:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2876331$

======List of files/folders modified in the last 1 month======

2013-12-10 18:59:53 ----D---- C:\Program Files\trend micro
2013-12-10 18:56:18 ----D---- C:\WINDOWS\Prefetch
2013-12-09 22:44:33 ----D---- C:\WINDOWS
2013-12-09 22:43:33 ----D---- C:\WINDOWS\system32\drivers
2013-12-09 22:43:01 ----D---- C:\WINDOWS\system32\CatRoot2
2013-12-09 22:08:48 ----SHD---- C:\WINDOWS\Installer
2013-12-09 22:08:44 ----D---- C:\WINDOWS\system32
2013-12-09 22:07:58 ----D---- C:\WINDOWS\system32\Restore
2013-12-09 21:59:59 ----N---- C:\WINDOWS\system.ini
2013-12-09 21:59:43 ----D---- C:\WINDOWS\system32\drivers\etc
2013-12-09 21:56:25 ----D---- C:\WINDOWS\AppPatch
2013-12-09 21:56:16 ----D---- C:\Program Files\Common Files
2013-12-09 20:23:11 ----HD---- C:\WINDOWS\inf
2013-12-09 20:19:03 ----RD---- C:\Program Files
2013-12-09 18:54:34 ----D---- C:\WINDOWS\system32\config
2013-12-09 18:54:06 ----D---- C:\WINDOWS\system32\wbem
2013-12-09 18:54:05 ----D---- C:\WINDOWS\Registration
2013-12-08 18:20:19 ----D---- C:\download
2013-11-30 13:30:04 ----SD---- C:\WINDOWS\Tasks
2013-11-28 19:57:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\DVD Shrink
2013-11-28 07:25:30 ----D---- C:\Program Files\CCleaner
2013-11-28 07:22:26 ----D---- C:\Program Files\IObit
2013-11-27 06:24:07 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-11-25 12:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2013-11-18 18:50:59 ----D---- C:\WINDOWS\SoftwareDistribution
2013-11-18 18:49:59 ----D---- C:\WINDOWS\Debug
2013-11-18 08:58:20 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-11-16 12:34:48 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-11-13 11:23:32 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-11-13 11:23:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-11-13 11:21:57 ----D---- C:\Program Files\Internet Explorer
2013-11-13 11:21:45 ----D---- C:\WINDOWS\ie8updates
2013-11-13 11:20:05 ----D---- C:\WINDOWS\system32\MRT
2013-11-13 11:17:40 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-10-21 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-10-21 178304]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-17 44944]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswKbd;aswKbd; \??\C:\WINDOWS\system32\drivers\aswKbd.sys []
R1 AswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-09-24 12032]
R2 aswFsBlk;aswFsBlk; \??\C:\WINDOWS\system32\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2013-11-08 3565056]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2010-08-21 26600]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2000-01-01 5578456]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2013-11-08 130432]
S0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2000-01-01 1691480]
S3 catchme;catchme; \??\C:\DOCUME~1\Petr\LOCALS~1\Temp\catchme.sys []
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2000-01-01 1395800]
S3 Revoflt;Revoflt; C:\WINDOWS\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2009-01-30 38528]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService7;Advanced SystemCare Service 7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [2013-10-25 878368]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2013-11-08 602112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-10-21 50344]
R2 LiveUpdateSvc;LiveUpdate; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2013-10-25 2151200]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-01-26 520192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-27 257416]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-15 119408]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-06-29 800040]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]

-----------------EOF-----------------

Zdravim

Proc jste spoustel ComboFix?

Kdybyste si precetl pravidla fora http://forum.viry.cz/viewtopic.php?f=12&t=5601 , docetl byste se mimo jine toto

2. Před položením dotazu použijte tlačítko Hledat. Možná již někdo problém podobným Vašemu řešil. Pokud ale ve vyřešeném tématu budou aplikovány různé utility\aplikace, nespouštějte je. Utility se používají až na pokyn rádce, jelikož mohou mazat stopy po havěti a v rukou ne-oborníka může mít jejich použití nedozírné následky.

3. Zvláště utilitu ComboFix nespouštějte i když Vám ji poradil kamarád\nějaký rádoby odborný web. Naše fórum je jediné z CZ-SK antivirových fór, která mají právo luštit logy z ComboFixu a mámě též plnou podporu autora této utility a přístup k nejaktuálnějším informacím a návodům.

CF smaze veskere stopy pripadne nakazy. A ja ted muzu tak akorat varit z vody, jak se rika
Zkusime se na to podivat, ale pokud se to bude opakovat, bude pomoc odmitnuta.
A taky upozornuji, ze se to mozna protahne a vysledek vubec neni jisty.


Zkopirujte mi tu jeho log, je zde C:\ComboFix.txt

Omlouvám,ale musel jsem to zkusit, abych se dostal dp PC. Dá se říct, že mi to vůbec nepomohlo,protože po chvilce spuštění PC mi nejdou ani zapnout prohlížeče,abych mohl na internet,Procesor jede na 100% a prostě nevím co s tím.Měl jsem data která jsem nechtěl ztratit a proto jsem spustil CF.
Zde je log a děkuji předem za radu.
ComboFix 13-12-08.01 - Petr 09.12.2013 21:51:25.3.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1918.1408 [GMT 1:00]
Spuštěný z: c:\documents and settings\Petr\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program filesadvent\Advent.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-11-09 do 2013-12-09 )))))))))))))))))))))))))))))))
.
.
2013-12-09 19:22 . 2013-12-09 19:23 -------- d-----w- c:\windows\LastGood
2013-12-09 19:20 . 2013-12-09 19:20 110080 ----a-r- c:\documents and settings\Petr\Data aplikací\Microsoft\Installer\{A358F2F6-2500-420C-989C-25C4F22DF51E}\IconCF33A0CE.exe
2013-12-09 19:20 . 2013-12-09 19:20 110080 ----a-r- c:\documents and settings\Petr\Data aplikací\Microsoft\Installer\{A358F2F6-2500-420C-989C-25C4F22DF51E}\IconD7F16134.exe
2013-12-09 19:20 . 2013-12-09 19:20 110080 ----a-r- c:\documents and settings\Petr\Data aplikací\Microsoft\Installer\{A358F2F6-2500-420C-989C-25C4F22DF51E}\IconF7A21AF7.exe
2013-12-09 19:19 . 2013-12-09 19:20 -------- d-----w- C:\sh4ldr
2013-12-09 19:19 . 2013-12-09 19:19 -------- d-----w- c:\program files\Enigma Software Group
2013-12-09 19:13 . 2013-12-09 19:21 -------- d-----w- c:\windows\A358F2F62500420C989C25C4F22DF51E.TMP
2013-12-09 19:12 . 2013-12-09 19:12 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2013-12-09 19:06 . 2013-12-09 19:06 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2013-12-09 17:54 . 2013-12-09 17:54 -------- d-----w- c:\windows\system32\wbem\Repository
2013-11-30 12:12 . 2013-12-09 20:59 -------- d-----w- C:\Program FilesAdvent
2013-11-23 17:09 . 2013-11-23 17:10 -------- d-----w- c:\program files\CrystalDiskInfo
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-09 20:29 . 2013-08-19 13:59 403440 ----a-w- c:\windows\system32\drivers\aswsp.sys
2013-11-27 05:24 . 2013-03-02 19:36 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-11-27 05:24 . 2013-03-02 19:36 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-11-08 17:24 . 2013-08-19 13:59 403440 ----a-w- c:\windows\system32\drivers\aswsp.sys.1386620977
2013-11-08 17:20 . 2013-11-08 17:20 290816 ----a-w- c:\windows\system32\atiok3x2.dll
2013-11-08 17:20 . 2006-06-16 21:04 155648 ----a-w- c:\windows\system32\Oemdspif.dll
2013-11-08 17:20 . 2006-06-16 20:52 2670592 ----a-w- c:\windows\system32\ativvaxx.dll
2013-11-08 17:20 . 2006-01-15 21:43 204800 ----a-w- c:\windows\system32\atipdlxx.dll
2013-11-08 17:20 . 2006-01-15 21:22 11845632 ----a-w- c:\windows\system32\atioglxx.dll
2013-11-08 17:20 . 2006-01-15 21:16 17408 ----a-w- c:\windows\system32\atitvo32.dll
2013-11-08 17:20 . 2001-11-09 11:01 24064 ----a-w- c:\windows\system32\ativcoxx.dll
2013-11-08 17:20 . 2013-11-08 17:20 45056 ----a-w- c:\windows\system32\aticalrt.dll
2013-11-08 17:20 . 2013-11-08 17:20 442368 ----a-w- c:\windows\system32\ATIDEMGX.dll
2013-11-08 17:20 . 2013-11-08 17:20 3227648 ----a-w- c:\windows\system32\aticaldd.dll
2013-11-08 17:20 . 2013-03-02 08:44 307200 ----a-w- c:\windows\system32\atiiiexx.dll
2013-11-08 17:20 . 2006-01-15 21:41 53248 ----a-w- c:\windows\system32\ATIDDC.DLL
2013-11-08 17:20 . 2006-01-15 21:17 475136 ----a-w- c:\windows\system32\atikvmag.dll
2013-11-08 17:20 . 2013-11-08 17:20 49664 ----a-w- c:\windows\system32\amdpcom32.dll
2013-11-08 17:20 . 2013-11-08 17:20 45056 ----a-w- c:\windows\system32\aticalcl.dll
2013-11-08 17:20 . 2013-11-08 17:20 126976 ----a-w- c:\windows\system32\atiadlxx.dll
2013-11-08 17:20 . 2013-11-08 17:20 118784 ----a-w- c:\windows\system32\atibrtmon.exe
2013-11-08 17:20 . 2006-06-16 21:10 325120 ----a-w- c:\windows\system32\ati2dvag.dll
2013-11-08 17:20 . 2006-06-16 21:09 3565056 ----a-w- c:\windows\system32\drivers\ati2mtag.sys
2013-11-08 17:20 . 2006-06-16 21:04 155648 ----a-w- c:\windows\system32\ati2evxx.dll
2013-11-08 17:20 . 2006-06-16 20:57 3818144 ----a-w- c:\windows\system32\ati3duag.dll
2013-11-08 17:20 . 2006-06-16 20:40 53248 ----a-w- c:\windows\system32\drivers\ati2erec.dll
2013-11-08 17:20 . 2006-06-16 20:36 626688 ----a-w- c:\windows\system32\ati2cqag.dll
2013-11-08 17:20 . 2006-01-15 21:43 26112 ----a-w- c:\windows\system32\Ati2mdxx.exe
2013-11-08 17:20 . 2006-01-15 21:43 43520 ----a-w- c:\windows\system32\ati2edxx.dll
2013-11-08 17:20 . 2006-01-15 21:41 602112 ----a-w- c:\windows\system32\ati2evxx.exe
2013-11-08 15:30 . 2013-11-08 15:30 73728 ----a-w- c:\windows\system32\RtNicProp32.dll
2013-11-08 15:30 . 2013-11-08 15:30 130432 ----a-w- c:\windows\system32\drivers\Rtnicxp.sys
2013-10-21 18:23 . 2013-08-19 13:59 774392 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-10-21 18:23 . 2013-08-19 13:59 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-10-21 18:23 . 2013-08-19 13:59 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-10-21 18:23 . 2013-08-19 13:59 178304 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-10-21 18:23 . 2013-08-19 13:59 35656 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-10-21 18:23 . 2013-08-19 13:59 54832 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2013-10-21 18:23 . 2013-08-19 13:59 70384 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-10-21 18:23 . 2013-08-19 13:59 269216 ----a-w- c:\windows\system32\aswBoot.exe
2013-10-21 18:23 . 2013-08-19 13:59 43152 ----a-w- c:\windows\avastSS.scr
2013-10-21 18:22 . 2013-08-23 17:02 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2013-10-13 11:42 . 2004-08-17 15:49 920064 ----a-w- c:\windows\system32\wininet.dll
2013-10-13 07:12 . 2004-08-17 15:49 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-10-13 07:12 . 2004-08-17 15:49 43520 ------w- c:\windows\system32\licmgr10.dll
2013-10-13 07:12 . 2004-08-17 15:49 18944 ----a-w- c:\windows\system32\corpol.dll
2013-10-13 06:57 . 2004-08-17 15:44 385024 ------w- c:\windows\system32\html.iec
2013-10-12 15:57 . 2004-08-17 15:49 279552 ----a-w- c:\windows\system32\oakley.dll
2013-10-09 13:13 . 2004-08-17 15:49 287744 ----a-w- c:\windows\system32\gdi32.dll
2013-10-07 11:00 . 2004-08-17 15:49 606208 ----a-w- c:\windows\system32\crypt32.dll
2013-10-05 01:42 . 2010-08-13 17:44 7168 ----a-w- c:\windows\system32\xpsp4res.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2013-11-06 07:23 752448 ----a-w- c:\program files\IObit\IObit Uninstaller\UninstallExplorer32.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{10921475-03CE-4E04-90CE-E2E7EF20C814}"= "c:\program files\IObit\IObit Uninstaller\UninstallExplorer32.dll" [2013-11-06 752448]
.
[HKEY_CLASSES_ROOT\clsid\{10921475-03ce-4e04-90ce-e2e7ef20c814}]
[HKEY_CLASSES_ROOT\UninstallExplorer32.ExplorerBtn]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-10-21 18:22 321752 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2005-08-12 45056]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"SwitchBoard"="c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2013-10-21 3567800]
"RTHDCPL"="RTHDCPL.EXE" [2000-01-01 20145368]
"SpyHunter Security Suite"="c:\program files\Enigma Software Group\SpyHunter\SpyHunter4.exe" [2013-10-18 6430080]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
2010-02-22 02:57 406992 ----a-w- c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5985:TCP"= 5985:TCP:*:Disabled:Vzdálená správa systému Windows
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [19.8.2013 14:59 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [19.8.2013 14:59 178304]
R0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [23.8.2013 18:02 26136]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [19.8.2013 14:59 774392]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswsp.sys [19.8.2013 14:59 403440]
R2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files\IObit\Advanced SystemCare 7\ASCService.exe [6.11.2013 8:23 878368]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [19.8.2013 14:59 35656]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [19.8.2013 14:59 70384]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [6.5.2011 15:57 13904]
S2 LiveUpdateSvc;LiveUpdate;c:\program files\IObit\LiveUpdate\LiveUpdate.exe [6.11.2013 8:23 2151200]
S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [18.10.2013 17:45 770432]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [1.3.2013 23:08 1691480]
S3 EsgScanner;EsgScanner;c:\windows\system32\drivers\EsgScanner.sys [22.6.2012 11:01 19984]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [9.12.2013 20:06 40776]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [2.3.2013 9:36 27064]
S3 SwitchBoard;SwitchBoard;c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [19.2.2010 12:37 517096]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - ESGIGUARD
*NewlyCreated* - ESGSCANNER
*NewlyCreated* - SPYHUNTER_4_SERVICE
.
Obsah adresáře 'Naplánované úlohy'
.
2013-12-09 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-02 05:24]
.
2013-09-27 c:\windows\Tasks\AdobeAAMUpdater-1.0-DOMA-861FAB0A53-Petr.job
- c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-04-09 14:12]
.
2013-12-09 c:\windows\Tasks\ASC7_PerformanceMonitor.job
- c:\program files\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-06 17:19]
.
2013-12-09 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2013-08-19 18:22]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.255.255.10 192.168.0.1
FF - ProfilePath - c:\documents and settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\2mmsx9oo.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - ExtSQL: 2013-11-16 19:40; ascsurfingprotection@iobit.com; c:\documents and settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\2mmsx9oo.default\extensions\ascsurfingprotection@iobit.com
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-AdobeBridge - (no file)
c:\documents and settings\Petr\Nabídka Start\Programy\Po spuštění\Advent.lnk - c:\program filesadvent\Advent.exe
c:\documents and settings\Petr\Nabídka Start\Programy\Po spuštění\Advent.lnk - c:\program filesadvent\Advent.exe
c:\documents and settings\Petr\Nabídka Start\Programy\Po spuštění\Advent.lnk - c:\program filesadvent\Advent.exe
c:\documents and settings\Petr\Nabídka Start\Programy\Po spuštění\Advent.lnk - c:\program filesadvent\Advent.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-12-09 21:59
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\avast! sandbox
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_202_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(824)
c:\windows\system32\Ati2evxx.dll
.
Celkový čas: 2013-12-09 22:02:18
ComboFix-quarantined-files.txt 2013-12-09 21:02
.
Před spuštěním: Volných bajtů: 24 940 441 600
Po spuštění: Volných bajtů: 24 999 907 328
.
- - End Of File - - D284242E3A55F8196223CAB220C745DC
413FC2A0C716421B3158746D63736515

Tim jste tomu teda nepomohl. Jak jsem psal, ted to bude slozitejsi


Odinstalujte Advanced SystemCare a pripadne vse od IObit. Dokaze to nadelat vice skody nez uzitku.


V nouzovem rezimu udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekce

Kontrola trvala necelé 3 hodiny.Zde je log:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.12.10.06

Windows XP Service Pack 3 x86 NTFS (Nouzový režim)
Internet Explorer 8.0.6001.18702
Petr :: DOMA-861FAB0A53 [administrátor]

11.12.2013 19:56:12
mbam-log-2013-12-11 (19-56-12).txt

Typ: Kompletní kontrola (C:\|D:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 279484
Uplynulý čas: 2 hodin, 47 minut, 37 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)

MBAM odinstalujte.

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Spustte ho.
Kliknete na Scan a program zacne pracovat.
Az skonci, vyplivne na vas log (pokud ne, najdete ho zde C:\AdwCleaner\AdwCleaner[R?].txt ), ten mi sem zkopirujte.

Dobrý den,
zde je log:
# AdwCleaner v3.015 - Report created 12/12/2013 at 07:49:07
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Petr - DOMA-861FAB0A53
# Running from : C:\Documents and Settings\Petr\Plocha\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\2mmsx9oo.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Classes\speedupmypc
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Found : HKLM\Software\Uniblue

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v25.0.1 (cs)

[ File : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\2mmsx9oo.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1340 octets] - [12/12/2013 07:49:07]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [1400 octets] ##########

Znovu ukoncete vsechny programy a spustte AdwCleaner.
Tentokrat kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne dalsi log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zase zkopirujte.


Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne
Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu a spustte.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte

AdwCleaner log:
# AdwCleaner v3.015 - Report created 12/12/2013 at 09:31:04
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Petr - DOMA-861FAB0A53
# Running from : C:\Documents and Settings\Petr\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

File Deleted : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\2mmsx9oo.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v25.0.1 (cs)

[ File : C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\2mmsx9oo.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [1480 octets] - [12/12/2013 07:49:07]
AdwCleaner[R2].txt - [1540 octets] - [12/12/2013 09:30:00]
AdwCleaner[S0].txt - [1475 octets] - [12/12/2013 09:31:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1535 octets] ##########

RogueKiller log:
RogueKiller V8.7.11 [Dec 3 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Petr [Práva správce]
Mód : Kontrola -- Datum : 12/12/2013 09:41:37
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 2 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : DisableRegistryTools (0) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Inline] EAT @explorer.exe (?MILLIS_PER_SECOND@GCDate@@2JB) : GrooveUtil.DLL -> HOOKED (Unknown @ 0xC8F7333C)
[Inline] EAT @firefox.exe (?MILLIS_PER_SECOND@GCDate@@2JB) : GrooveUtil.DLL -> HOOKED (Unknown @ 0xC8F7333C)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Maxtor 6L300R0 +++++
--- User ---
[MBR] 409f20b6ebcb5afd82b08f29a797597e
[BSP] 54ceae26fcfbefaa4c8e73626d41c227 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 80003 Mo
1 - [XXXXXX] EXTEN-LBA (0x0f) [VISIBLE] Offset (sectors): 163846935 | Size: 206170 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_S_12122013_094137.txt >>

Dobrý den, měl bych prosbu. Nic nepomáhá. Po spuštění PC mi nejde spustit ani jeden prohlížeč.Nelze s počítačem vůbec nic dělat. Nešel ani vypnout. Vypnout jsem ho musel natvrdo a pak po spuštění vypnout svchost.exe ,který má ve správci úloh 99% CPU. Mám přeinstalovat winXP? Nechci vás zdržovat a pro mne by to bylo rychlejší,ale jestli by reinstal XP vůbec pomohl.
Děkuji za odpověď.

V nouzovem rezimu s praci v siti jede pc jak?

Zkuste vypnout automaticke aktualizace systemu.

Znovu spustte RogueKiller (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.

Stahnete crystal disk info http://sourceforge.jp/projects/crystald ... 5_0_0.zip/
Spustte ho. Za chvili se zobrazi vysledek.
Kliknete nahore na napis Úpravy a pak na napis Kopírovat. To co se zkopiruje (ulozi se to do pameti) mi sem vlozte (ctrl + V)



Preinstalace by pravdepodobne pomohla, ale 100% to rict nemuzu, protoze zatim nevim, co to zpusobuje. Pokud se pro ni rozhodnete, vyse uvedene kroky samozrejme nedelejte a jen napiste, ze uz netreba resit

Rozhodnul jsem se tedy to přeinstalovat. Snad to bude dobré rozhodnutí. Jen bych pak jsem dal log pro kontrolu po přeinstalování. Nemusíte to řešit a děkuji za váš čas a ochotu.
Přeju hezký den.

Dobra

Necham to tedy otevrene a budu cekat na zpravu a ten log

Tak nemám vše ještě nainstalované, ale dělá to pořád i po formátu disku. svchost.exe jede na 99% CPU a nejde spustit nic. Zde prosím dávám log pro kontrolu :
Logfile of random's system information tool 1.09 (written by random/random)
Run by Petr at 2013-12-12 22:26:47
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 73 GB (92%) free of 80 GB
Total RAM: 1918 MB (80% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:26:54, on 12.12.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\Petr\Plocha\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\Petr.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 3315 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\inhzbz4r.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll


C:\Documents and Settings\Petr\Data aplikací\Mozilla\Firefox\Profiles\inhzbz4r.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"=C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [2005-08-12 45056]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-01-11 15961088]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-12 3568312]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-01-15 61440]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======List of files/folders created in the last 1 month======

2013-12-12 22:26:47 ----D---- C:\rsit
2013-12-12 22:26:47 ----D---- C:\Program Files\trend micro
2013-12-12 22:19:02 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-12 22:17:07 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2013-12-12 22:15:30 ----D---- C:\Documents and Settings\Petr\Data aplikací\Mozilla
2013-12-12 22:14:39 ----D---- C:\Documents and Settings\All Users\Data aplikací\Mozilla
2013-12-12 22:14:31 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-12-12 22:14:14 ----D---- C:\Program Files\Mozilla Firefox
2013-12-12 21:55:34 ----D---- C:\Documents and Settings\Petr\Data aplikací\AVAST Software
2013-12-12 21:49:48 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-12-12 21:48:06 ----D---- C:\WINDOWS\Prefetch
2013-12-12 21:43:19 ----N---- C:\WINDOWS\system32\msxml6r.dll
2013-12-12 21:43:18 ----N---- C:\WINDOWS\system32\msxml6.dll
2013-12-12 21:43:00 ----N---- C:\WINDOWS\system32\smtpapi.dll
2013-12-12 21:43:00 ----N---- C:\WINDOWS\system32\rwnh.dll
2013-12-12 21:43:00 ----N---- C:\WINDOWS\system32\drivers\irbus.sys
2013-12-12 21:43:00 ----N---- C:\WINDOWS\system32\comsdupd.exe
2013-12-12 21:42:57 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2013-12-12 21:42:57 ----N---- C:\WINDOWS\system32\azroles.dll
2013-12-12 21:42:57 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2013-12-12 21:42:57 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2013-12-12 21:42:57 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2013-12-12 21:42:57 ----N---- C:\WINDOWS\system32\aaclient.dll
2013-12-12 21:42:56 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2013-12-12 21:42:56 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2013-12-12 21:42:56 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2013-12-12 21:42:56 ----N---- C:\WINDOWS\system32\dot3api.dll
2013-12-12 21:42:56 ----N---- C:\WINDOWS\system32\dimsroam.dll
2013-12-12 21:42:56 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2013-12-12 21:42:56 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2013-12-12 21:42:56 ----N---- C:\WINDOWS\system32\credssp.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\eapsvc.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\eapqec.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\eappprxy.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\eapphost.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\eappgnui.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\eappcfg.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\eapolqec.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\dot3ui.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\dot3svc.dll
2013-12-12 21:42:55 ----N---- C:\WINDOWS\system32\dot3msm.dll
2013-12-12 21:42:54 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2013-12-12 21:42:53 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2013-12-12 21:42:52 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2013-12-12 21:42:52 ----N---- C:\WINDOWS\system32\kmsvc.dll
2013-12-12 21:42:52 ----N---- C:\WINDOWS\system32\kbdpash.dll
2013-12-12 21:42:52 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2013-12-12 21:42:52 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2013-12-12 21:42:51 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2013-12-12 21:42:51 ----N---- C:\WINDOWS\system32\mssha.dll
2013-12-12 21:42:51 ----N---- C:\WINDOWS\system32\mmcperf.exe
2013-12-12 21:42:51 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2013-12-12 21:42:51 ----N---- C:\WINDOWS\system32\mmcex.dll
2013-12-12 21:42:51 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2013-12-12 21:42:51 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2013-12-12 21:42:50 ----N---- C:\WINDOWS\system32\onex.dll
2013-12-12 21:42:50 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2013-12-12 21:42:50 ----N---- C:\WINDOWS\system32\napstat.exe
2013-12-12 21:42:50 ----N---- C:\WINDOWS\system32\napmontr.dll
2013-12-12 21:42:50 ----N---- C:\WINDOWS\system32\napipsec.dll
2013-12-12 21:42:50 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2013-12-12 21:42:49 ----N---- C:\WINDOWS\system32\s3gnb.dll
2013-12-12 21:42:49 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2013-12-12 21:42:49 ----N---- C:\WINDOWS\system32\rasqec.dll
2013-12-12 21:42:49 ----N---- C:\WINDOWS\system32\qutil.dll
2013-12-12 21:42:49 ----N---- C:\WINDOWS\system32\qcliprov.dll
2013-12-12 21:42:49 ----N---- C:\WINDOWS\system32\qagentrt.dll
2013-12-12 21:42:49 ----N---- C:\WINDOWS\system32\qagent.dll
2013-12-12 21:42:49 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2013-12-12 21:42:48 ----N---- C:\WINDOWS\system32\slserv.exe
2013-12-12 21:42:48 ----N---- C:\WINDOWS\system32\slrundll.exe
2013-12-12 21:42:48 ----N---- C:\WINDOWS\system32\slgen.dll
2013-12-12 21:42:48 ----N---- C:\WINDOWS\system32\slextspk.dll
2013-12-12 21:42:48 ----N---- C:\WINDOWS\system32\slcoinst.dll
2013-12-12 21:42:48 ----N---- C:\WINDOWS\system32\setupn.exe
2013-12-12 21:42:47 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2013-12-12 21:42:47 ----N---- C:\WINDOWS\system32\verclsid.exe
2013-12-12 21:42:47 ----N---- C:\WINDOWS\system32\tzchange.exe
2013-12-12 21:42:47 ----N---- C:\WINDOWS\system32\tspkg.dll
2013-12-12 21:42:47 ----N---- C:\WINDOWS\system32\tsgqec.dll
2013-12-12 21:42:46 ----N---- C:\WINDOWS\system32\wmphoto.dll
2013-12-12 21:42:46 ----N---- C:\WINDOWS\system32\wlanapi.dll
2013-12-12 21:42:46 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2013-12-12 21:42:46 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2013-12-12 21:42:44 ----N---- C:\WINDOWS\system32\xmllite.dll
2013-12-12 21:42:44 ----N---- C:\WINDOWS\slrundll.exe
2013-12-12 21:42:43 ----D---- C:\WINDOWS\system32\cs-cz
2013-12-12 21:42:42 ----D---- C:\WINDOWS\system32\cs
2013-12-12 21:42:42 ----D---- C:\WINDOWS\l2schemas
2013-12-12 21:42:41 ----D---- C:\WINDOWS\system32\bits
2013-12-12 21:39:46 ----D---- C:\WINDOWS\ServicePackFiles
2013-12-12 21:36:42 ----N---- C:\WINDOWS\system32\drivers\adv02nt5.dll
2013-12-12 21:36:42 ----N---- C:\WINDOWS\system32\drivers\adv01nt5.dll
2013-12-12 21:36:42 ----D---- C:\WINDOWS\network diagnostic
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\ati1pdxx.sys
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\ati1mdxx.sys
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\ati1btxx.sys
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\amdagp.sys
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\alim1541.sys
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\agpcpq.sys
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\agp440.sys
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\adv11nt5.dll
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\adv09nt5.dll
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\adv08nt5.dll
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\adv07nt5.dll
2013-12-12 21:36:41 ----N---- C:\WINDOWS\system32\drivers\adv05nt5.dll
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\atinrvxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\atinraxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\atinpdxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\atinmdxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\atinbtxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\ati2mtaa.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\ati1xsxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\ati1xbxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\ati1tuxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\ati1ttxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\ati1snxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\ati1rvxx.sys
2013-12-12 21:36:40 ----N---- C:\WINDOWS\system32\drivers\ati1raxx.sys
2013-12-12 21:36:39 ----N---- C:\WINDOWS\system32\drivers\atv01nt5.dll
2013-12-12 21:36:39 ----N---- C:\WINDOWS\system32\drivers\atinxsxx.sys
2013-12-12 21:36:39 ----N---- C:\WINDOWS\system32\drivers\atinxbxx.sys
2013-12-12 21:36:39 ----N---- C:\WINDOWS\system32\drivers\atintuxx.sys
2013-12-12 21:36:39 ----N---- C:\WINDOWS\system32\drivers\atinttxx.sys
2013-12-12 21:36:39 ----N---- C:\WINDOWS\system32\drivers\atinsnxx.sys
2013-12-12 21:36:38 ----N---- C:\WINDOWS\system32\drivers\bthmodem.sys
2013-12-12 21:36:38 ----N---- C:\WINDOWS\system32\drivers\bthenum.sys
2013-12-12 21:36:38 ----N---- C:\WINDOWS\system32\drivers\atv10nt5.dll
2013-12-12 21:36:38 ----N---- C:\WINDOWS\system32\drivers\atv06nt5.dll
2013-12-12 21:36:38 ----N---- C:\WINDOWS\system32\drivers\atv04nt5.dll
2013-12-12 21:36:38 ----N---- C:\WINDOWS\system32\drivers\atv02nt5.dll
2013-12-12 21:36:37 ----N---- C:\WINDOWS\system32\drivers\ch7xxnt5.dll
2013-12-12 21:36:37 ----N---- C:\WINDOWS\system32\drivers\gagp30kx.sys
2013-12-12 21:36:37 ----N---- C:\WINDOWS\system32\drivers\bthusb.sys
2013-12-12 21:36:37 ----N---- C:\WINDOWS\system32\drivers\bthprint.sys
2013-12-12 21:36:37 ----N---- C:\WINDOWS\system32\drivers\bthport.sys
2013-12-12 21:36:37 ----N---- C:\WINDOWS\system32\drivers\bthpan.sys
2013-12-12 21:36:36 ----N---- C:\WINDOWS\system32\drivers\hsfdpsp2.sys
2013-12-12 21:36:36 ----N---- C:\WINDOWS\system32\drivers\hsfcxts2.sys
2013-12-12 21:36:36 ----N---- C:\WINDOWS\system32\drivers\hsfbs2s2.sys
2013-12-12 21:36:36 ----N---- C:\WINDOWS\system32\drivers\hidir.sys
2013-12-12 21:36:36 ----N---- C:\WINDOWS\system32\drivers\hidbth.sys
2013-12-12 21:36:35 ----N---- C:\WINDOWS\system32\drivers\mutohpen.sys
2013-12-12 21:36:35 ----N---- C:\WINDOWS\system32\drivers\mtxparhm.sys
2013-12-12 21:36:35 ----N---- C:\WINDOWS\system32\drivers\mtlstrm.sys
2013-12-12 21:36:35 ----N---- C:\WINDOWS\system32\drivers\mtlmnt5.sys
2013-12-12 21:36:35 ----N---- C:\WINDOWS\system32\drivers\mdmxsdk.sys
2013-12-12 21:36:34 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2013-12-12 21:36:34 ----N---- C:\WINDOWS\system32\drivers\s3gnbm.sys
2013-12-12 21:36:34 ----N---- C:\WINDOWS\system32\drivers\rndismpx.sys
2013-12-12 21:36:34 ----N---- C:\WINDOWS\system32\drivers\rfcomm.sys
2013-12-12 21:36:34 ----N---- C:\WINDOWS\system32\drivers\recagent.sys
2013-12-12 21:36:34 ----N---- C:\WINDOWS\system32\drivers\nv4_mini.sys
2013-12-12 21:36:34 ----N---- C:\WINDOWS\system32\drivers\ntmtlfax.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\usb8023x.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\uagp35.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\smbali.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\slwdmsup.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\slnthal.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\slntamr.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\slnt7554.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\sisagp.sys
2013-12-12 21:36:33 ----N---- C:\WINDOWS\system32\drivers\siint5.dll
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\watv10nt.sys
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\watv06nt.sys
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\wadv11nt.sys
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\wadv09nt.sys
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\wadv08nt.sys
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\wadv07nt.sys
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\wacompen.sys
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\viaagp.sys
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\vchnt5.dll
2013-12-12 21:36:32 ----N---- C:\WINDOWS\system32\drivers\usbvideo.sys
2013-12-12 21:34:51 ----N---- C:\WINDOWS\system32\spmsg.dll
2013-12-12 21:34:48 ----A---- C:\WINDOWS\002695_.tmp
2013-12-12 21:31:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2013-12-12 21:05:48 ----A---- C:\WINDOWS\system32\h323log.txt
2013-12-12 21:03:55 ----A---- C:\WINDOWS\system32\drivers\audstub.sys
2013-12-12 21:03:51 ----D---- C:\71c78696498c94284ee7
2013-12-12 21:03:08 ----A---- C:\WINDOWS\system32\drivers\redbook.sys
2013-12-12 21:02:21 ----A---- C:\WINDOWS\system32\drivers\RTL8139.sys
2013-12-12 21:01:32 ----A---- C:\WINDOWS\system32\usbui.dll
2013-12-12 21:00:27 ----A---- C:\WINDOWS\imsins.BAK
2013-12-12 21:00:24 ----SHD---- C:\WINDOWS\Installer
2013-12-12 21:00:24 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-12 21:00:23 ----D---- C:\Program Files\Common Files\ODBC
2013-12-12 21:00:23 ----A---- C:\WINDOWS\ODBCINST.INI
2013-12-12 21:00:19 ----D---- C:\Program Files\Common Files\SpeechEngines
2013-12-12 21:00:18 ----RD---- C:\Program Files
2013-12-12 21:00:18 ----D---- C:\Program Files\Common Files\Microsoft Shared
2013-12-12 21:00:18 ----D---- C:\Program Files\Common Files
2013-12-12 21:00:14 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2013-12-12 21:00:14 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2013-12-12 21:00:14 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdur.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdru.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2013-12-12 21:00:11 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2013-12-12 21:00:08 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2013-12-12 21:00:08 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2013-12-12 21:00:08 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2013-12-12 21:00:08 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2013-12-12 21:00:08 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2013-12-12 21:00:08 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2013-12-12 21:00:08 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2013-12-12 21:00:06 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2013-12-12 21:00:06 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2013-12-12 21:00:06 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2013-12-12 21:00:06 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2013-12-12 21:00:06 ----RA---- C:\WINDOWS\system32\kbdest.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdycl.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdsl1.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdsl.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdro.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdpl1.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdpl.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdhu1.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdhu.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\kbdcr.dll
2013-12-12 21:00:01 ----A---- C:\WINDOWS\system32\KBDAL.DLL
2013-12-12 21:00:00 ----A---- C:\WINDOWS\system32\irclass.dll
2013-12-12 21:00:00 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2013-12-12 20:59:59 ----A---- C:\WINDOWS\system32\spxcoins.dll
2013-12-12 20:59:59 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2013-12-12 20:59:59 ----A---- C:\WINDOWS\system32\dgsetup.dll
2013-12-12 20:59:56 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2013-12-12 20:59:56 ----A---- C:\WINDOWS\TASKMAN.EXE
2013-12-12 20:59:56 ----A---- C:\WINDOWS\system32\drivers\irenum.sys
2013-12-12 20:59:56 ----A---- C:\WINDOWS\system32\batt.dll
2013-12-12 20:59:55 ----A---- C:\WINDOWS\notepad.exe
2013-12-12 20:59:54 ----A---- C:\WINDOWS\system32\storprop.dll
2013-12-12 20:59:45 ----ASH---- C:\Documents and Settings\All Users\Data aplikací\desktop.ini
2013-12-12 20:59:39 ----RA---- C:\WINDOWS\SET8.tmp
2013-12-12 20:59:36 ----RA---- C:\WINDOWS\SET4.tmp
2013-12-12 20:59:34 ----RA---- C:\WINDOWS\SET3.tmp
2013-12-12 20:59:29 ----D---- C:\WINDOWS\system32\CatRoot2
2013-12-12 20:59:29 ----D---- C:\WINDOWS\system32\CatRoot
2013-12-12 20:59:23 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-12-12 20:58:58 ----A---- C:\WINDOWS\setuplog.txt
2013-12-12 20:58:56 ----D---- C:\Documents and Settings
2013-12-12 20:58:55 ----SHD---- C:\System Volume Information
2013-12-12 20:58:55 ----A---- C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-12 20:58:09 ----SH---- C:\boot.ini
2013-12-12 20:55:02 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2013-12-12 20:55:02 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2013-12-12 20:55:02 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2013-12-12 20:55:02 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2013-12-12 20:55:01 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2013-12-12 20:55:01 ----A---- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2013-12-12 20:55:01 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2013-12-12 20:55:00 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2013-12-12 20:54:59 ----A---- C:\WINDOWS\system32\drivers\aswKbd.sys
2013-12-12 20:54:58 ----A---- C:\WINDOWS\system32\aswBoot.exe
2013-12-12 20:54:56 ----A---- C:\WINDOWS\avastSS.scr
2013-12-12 20:51:13 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-12-12 20:51:13 ----RSD---- C:\WINDOWS\Fonts
2013-12-12 20:51:13 ----RD---- C:\WINDOWS\Web
2013-12-12 20:51:13 ----HD---- C:\WINDOWS\inf
2013-12-12 20:51:13 ----D---- C:\WINDOWS\WinSxS
2013-12-12 20:51:13 ----D---- C:\WINDOWS\twain_32
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Temp
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\wins
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\wbem
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\usmt
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\spool
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\ShellExt
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\Setup
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\ras
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\oobe
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\npp
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\mui
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\inetsrv
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\IME
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\icsxml
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\ias
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\export
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\drivers\etc
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\drivers\disdn
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\drivers
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\dhcp
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\config
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\3com_dmi
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\3076
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\2052
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1054
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1042
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1041
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1037
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1033
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1031
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1029
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1028
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32\1025
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system32
2013-12-12 20:51:13 ----D---- C:\WINDOWS\system
2013-12-12 20:51:13 ----D---- C:\WINDOWS\security
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Resources
2013-12-12 20:51:13 ----D---- C:\WINDOWS\repair
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Provisioning
2013-12-12 20:51:13 ----D---- C:\WINDOWS\pchealth
2013-12-12 20:51:13 ----D---- C:\WINDOWS\PeerNet
2013-12-12 20:51:13 ----D---- C:\WINDOWS\mui
2013-12-12 20:51:13 ----D---- C:\WINDOWS\msapps
2013-12-12 20:51:13 ----D---- C:\WINDOWS\msagent
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Media
2013-12-12 20:51:13 ----D---- C:\WINDOWS\java
2013-12-12 20:51:13 ----D---- C:\WINDOWS\ime
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Help
2013-12-12 20:51:13 ----D---- C:\WINDOWS\ehome
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Driver Cache
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Debug
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Cursors
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Connection Wizard
2013-12-12 20:51:13 ----D---- C:\WINDOWS\Config
2013-12-12 20:51:13 ----D---- C:\WINDOWS\AppPatch
2013-12-12 20:51:13 ----D---- C:\WINDOWS\addins
2013-12-12 20:51:13 ----D---- C:\WINDOWS
2013-12-12 20:51:13 ----ASH---- C:\pagefile.sys
2013-12-12 20:43:46 ----D---- C:\Program Files\AVAST Software
2013-12-12 20:43:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2013-12-12 20:41:30 ----D---- C:\Documents and Settings\Petr\Data aplikací\WinRAR
2013-12-12 20:40:45 ----D---- C:\Program Files\WinRAR
2013-12-12 20:37:53 ----A---- C:\WINDOWS\system32\drivers\usbstor.sys
2013-12-12 20:35:41 ----D---- C:\WINDOWS\OPTIONS
2013-12-12 20:35:26 ----D---- C:\WINDOWS\system32\Lang
2013-12-12 20:34:00 ----SHD---- C:\RECYCLER
2013-12-12 20:32:25 ----R---- C:\WINDOWS\system32\RtlCPAPI.dll
2013-12-12 20:32:25 ----R---- C:\WINDOWS\system32\ChCfg.exe
2013-12-12 20:32:24 ----A---- C:\WINDOWS\system32\drivers\splitter.sys
2013-12-12 20:32:22 ----A---- C:\WINDOWS\system32\drivers\wdmaud.sys
2013-12-12 20:32:21 ----A---- C:\WINDOWS\system32\drivers\dmusic.sys
2013-12-12 20:32:20 ----A---- C:\WINDOWS\system32\drivers\swmidi.sys
2013-12-12 20:32:19 ----A---- C:\WINDOWS\system32\drivers\aec.sys
2013-12-12 20:32:18 ----A---- C:\WINDOWS\system32\drivers\kmixer.sys
2013-12-12 20:32:17 ----A---- C:\WINDOWS\system32\drivers\drmkaud.sys
2013-12-12 20:32:16 ----A---- C:\WINDOWS\system32\drivers\sysaudio.sys
2013-12-12 20:32:15 ----A---- C:\WINDOWS\system32\drivers\mskssrv.sys
2013-12-12 20:32:14 ----A---- C:\WINDOWS\system32\drivers\mspqm.sys
2013-12-12 20:32:13 ----A---- C:\WINDOWS\system32\drivers\mspclock.sys
2013-12-12 20:32:08 ----D---- C:\WINDOWS\system32\RTCOM
2013-12-12 20:32:06 ----A---- C:\WINDOWS\system32\ksuser.dll
2013-12-12 20:32:06 ----A---- C:\WINDOWS\system32\drivers\drmk.sys
2013-12-12 20:31:35 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2013-12-12 20:31:34 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2013-12-12 20:31:30 ----R---- C:\WINDOWS\SoundMan.exe
2013-12-12 20:31:30 ----R---- C:\WINDOWS\RtlUpd.exe
2013-12-12 20:31:28 ----R---- C:\WINDOWS\system32\drivers\RtkHDAud.Sys
2013-12-12 20:31:28 ----R---- C:\WINDOWS\RTLCPL.exe
2013-12-12 20:31:23 ----R---- C:\WINDOWS\RTHDCPL.exe
2013-12-12 20:31:22 ----R---- C:\WINDOWS\MicCal.exe
2013-12-12 20:31:21 ----R---- C:\WINDOWS\alcwzrd.exe
2013-12-12 20:31:21 ----R---- C:\WINDOWS\Alcmtr.exe
2013-12-12 20:31:20 ----D---- C:\Program Files\Realtek
2013-12-12 20:31:17 ----R---- C:\WINDOWS\RtlExUpd.dll
2013-12-12 20:30:48 ----D---- C:\Documents and Settings\Petr\Data aplikací\ATI
2013-12-12 20:29:16 ----D---- C:\Program Files\ATI Technologies
2013-12-12 20:26:43 ----RSD---- C:\WINDOWS\assembly
2013-12-12 20:26:21 ----D---- C:\WINDOWS\Microsoft.NET
2013-12-12 20:25:51 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2013-12-12 20:25:48 ----RA---- C:\WINDOWS\system32\atiiiexx.dll
2013-12-12 20:25:46 ----RA---- C:\WINDOWS\system32\atiicdxx.dat
2013-12-12 20:22:13 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-12-12 20:22:01 ----HD---- C:\Program Files\InstallShield Installation Information
2013-12-12 20:21:57 ----D---- C:\Program Files\Common Files\InstallShield
2013-12-12 20:21:23 ----D---- C:\Program Files\MSXML 4.0
2013-12-12 20:21:03 ----D---- C:\TempEI4
2013-12-12 20:19:37 ----D---- C:\Documents and Settings\Petr\Data aplikací\Identities
2013-12-12 20:19:35 ----HD---- C:\Program Files\Uninstall Information
2013-12-12 20:19:28 ----SD---- C:\Documents and Settings\Petr\Data aplikací\Microsoft
2013-12-12 20:19:28 ----ASH---- C:\Documents and Settings\Petr\Data aplikací\desktop.ini
2013-12-12 20:17:59 ----D---- C:\WINDOWS\SoftwareDistribution
2013-12-12 20:17:46 ----SD---- C:\WINDOWS\system32\Microsoft
2013-12-12 20:17:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-12-12 20:16:18 ----AS---- C:\WINDOWS\bootstat.dat
2013-12-12 20:13:50 ----D---- C:\Program Files\xerox
2013-12-12 20:13:49 ----D---- C:\WINDOWS\system32\xircom
2013-12-12 20:13:49 ----D---- C:\Program Files\microsoft frontpage
2013-12-12 20:13:29 ----RASH---- C:\MSDOS.SYS
2013-12-12 20:13:29 ----RASH---- C:\IO.SYS
2013-12-12 20:13:29 ----A---- C:\WINDOWS\control.ini
2013-12-12 20:13:29 ----A---- C:\CONFIG.SYS
2013-12-12 20:13:29 ----A---- C:\AUTOEXEC.BAT
2013-12-12 20:13:12 ----A---- C:\WINDOWS\OEWABLog.txt
2013-12-12 20:13:08 ----A---- C:\WINDOWS\system32\mapi32.dll
2013-12-12 20:11:57 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-12-12 20:11:57 ----RD---- C:\WINDOWS\Offline Web Pages
2013-12-12 20:11:44 ----HD---- C:\Program Files\WindowsUpdate
2013-12-12 20:11:40 ----D---- C:\Program Files\Online Services
2013-12-12 20:11:17 ----D---- C:\WINDOWS\system32\DirectX
2013-12-12 20:10:48 ----A---- C:\WINDOWS\system32\atrace.dll
2013-12-12 20:10:44 ----A---- C:\WINDOWS\system32\desktop.ini
2013-12-12 20:10:44 ----A---- C:\WINDOWS\desktop.ini
2013-12-12 20:10:35 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2013-12-12 20:10:34 ----A---- C:\WINDOWS\system32\acctres.dll
2013-12-12 20:10:33 ----D---- C:\Program Files\Common Files\Services
2013-12-12 20:10:29 ----SD---- C:\WINDOWS\Tasks
2013-12-12 20:10:29 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2013-12-12 20:10:28 ----D---- C:\Program Files\Common Files\MSSoap
2013-12-12 20:10:23 ----D---- C:\WINDOWS\srchasst
2013-12-12 20:10:21 ----D---- C:\WINDOWS\system32\Macromed
2013-12-12 20:10:17 ----A---- C:\WINDOWS\system32\wuweb.dll
2013-12-12 20:10:17 ----A---- C:\WINDOWS\system32\wucltui.dll
2013-12-12 20:10:17 ----A---- C:\WINDOWS\system32\wuauserv.dll
2013-12-12 20:10:17 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2013-12-12 20:10:16 ----A---- C:\WINDOWS\system32\wups.dll
2013-12-12 20:10:16 ----A---- C:\WINDOWS\system32\wuaueng.dll
2013-12-12 20:10:16 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2013-12-12 20:10:16 ----A---- C:\WINDOWS\system32\wuauclt.exe
2013-12-12 20:10:16 ----A---- C:\WINDOWS\system32\wuapi.dll
2013-12-12 20:10:16 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2013-12-12 20:10:16 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2013-12-12 20:10:15 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2013-12-12 20:10:15 ----A---- C:\WINDOWS\system32\qmgr.dll
2013-12-12 20:10:09 ----D---- C:\Program Files\Movie Maker
2013-12-12 20:10:04 ----A---- C:\WINDOWS\system32\safrslv.dll
2013-12-12 20:10:04 ----A---- C:\WINDOWS\system32\safrdm.dll
2013-12-12 20:10:04 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2013-12-12 20:10:04 ----A---- C:\WINDOWS\system32\racpldlg.dll
2013-12-12 20:09:58 ----A---- C:\WINDOWS\system32\fltmc.exe
2013-12-12 20:09:58 ----A---- C:\WINDOWS\system32\fltlib.dll
2013-12-12 20:09:58 ----A---- C:\WINDOWS\system32\drivers\fltmgr.sys
2013-12-12 20:09:57 ----D---- C:\WINDOWS\system32\Restore
2013-12-12 20:09:57 ----A---- C:\WINDOWS\system32\srsvc.dll
2013-12-12 20:09:57 ----A---- C:\WINDOWS\system32\srrstr.dll
2013-12-12 20:09:57 ----A---- C:\WINDOWS\system32\srclient.dll
2013-12-12 20:09:57 ----A---- C:\WINDOWS\system32\drivers\sr.sys
2013-12-12 20:09:56 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2013-12-12 20:09:56 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2013-12-12 20:09:56 ----A---- C:\WINDOWS\system32\mnmdd.dll
2013-12-12 20:09:56 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2013-12-12 20:09:56 ----A---- C:\WINDOWS\system32\ils.dll
2013-12-12 20:09:55 ----A---- C:\WINDOWS\system32\msconf.dll
2013-12-12 20:09:52 ----D---- C:\Program Files\NetMeeting
2013-12-12 20:09:52 ----A---- C:\WINDOWS\system32\msoert2.dll
2013-12-12 20:09:52 ----A---- C:\WINDOWS\system32\msoeacct.dll
2013-12-12 20:09:50 ----A---- C:\WINDOWS\system32\inetres.dll
2013-12-12 20:09:50 ----A---- C:\WINDOWS\system32\inetcomm.dll
2013-12-12 20:09:47 ----D---- C:\Program Files\Outlook Express
2013-12-12 20:09:47 ----A---- C:\WINDOWS\system32\schedsvc.dll
2013-12-12 20:09:47 ----A---- C:\WINDOWS\system32\mstinit.exe
2013-12-12 20:09:46 ----A---- C:\WINDOWS\system32\mstask.dll
2013-12-12 20:09:46 ----A---- C:\WINDOWS\system32\isign32.dll
2013-12-12 20:09:46 ----A---- C:\WINDOWS\system32\icwphbk.dll
2013-12-12 20:09:46 ----A---- C:\WINDOWS\system32\icwdial.dll
2013-12-12 20:09:45 ----A---- C:\WINDOWS\system32\inetcfg.dll
2013-12-12 20:09:38 ----D---- C:\Program Files\Common Files\System
2013-12-12 20:09:35 ----D---- C:\Program Files\Internet Explorer
2013-12-12 20:09:03 ----A---- C:\WINDOWS\system32\emptyregdb.dat
2013-12-12 20:08:51 ----D---- C:\Program Files\ComPlus Applications
2013-12-12 20:08:48 ----A---- C:\WINDOWS\vbaddin.ini
2013-12-12 20:08:48 ----A---- C:\WINDOWS\vb.ini
2013-12-12 20:08:43 ----D---- C:\WINDOWS\Registration
2013-12-12 20:08:35 ----D---- C:\Program Files\Windows Media Player
2013-12-12 20:08:28 ----D---- C:\Program Files\Messenger
2013-12-12 20:08:23 ----D---- C:\Program Files\MSN Gaming Zone
2013-12-12 20:08:23 ----A---- C:\WINDOWS\system32\write.exe
2013-12-12 20:08:11 ----A---- C:\WINDOWS\system32\sndvol32.exe
2013-12-12 20:08:11 ----A---- C:\WINDOWS\system32\hticons.dll
2013-12-12 20:08:10 ----A---- C:\WINDOWS\system32\avwav.dll
2013-12-12 20:08:10 ----A---- C:\WINDOWS\system32\avtapi.dll
2013-12-12 20:08:10 ----A---- C:\WINDOWS\system32\avmeter.dll
2013-12-12 20:08:09 ----A---- C:\WINDOWS\system32\winchat.exe
2013-12-12 20:08:00 ----A---- C:\WINDOWS\system32\charmap.exe
2013-12-12 20:08:00 ----A---- C:\WINDOWS\system32\getuname.dll
2013-12-12 20:08:00 ----A---- C:\WINDOWS\system32\calc.exe
2013-12-12 20:07:59 ----A---- C:\WINDOWS\system32\winmine.exe
2013-12-12 20:07:59 ----A---- C:\WINDOWS\system32\sol.exe
2013-12-12 20:07:59 ----A---- C:\WINDOWS\system32\mshearts.exe
2013-12-12 20:07:58 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2013-12-12 20:07:58 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2013-12-12 20:07:58 ----A---- C:\WINDOWS\system32\tslabels.ini
2013-12-12 20:07:58 ----A---- C:\WINDOWS\system32\tskill.exe
2013-12-12 20:07:58 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2013-12-12 20:07:58 ----A---- C:\WINDOWS\system32\tscon.exe
2013-12-12 20:07:58 ----A---- C:\WINDOWS\system32\reset.exe
2013-12-12 20:07:58 ----A---- C:\WINDOWS\system32\freecell.exe
2013-12-12 20:07:57 ----A---- C:\WINDOWS\system32\shadow.exe
2013-12-12 20:07:57 ----A---- C:\WINDOWS\system32\rwinsta.exe
2013-12-12 20:07:57 ----A---- C:\WINDOWS\system32\regini.exe
2013-12-12 20:07:57 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2013-12-12 20:07:57 ----A---- C:\WINDOWS\system32\qwinsta.exe
2013-12-12 20:07:57 ----A---- C:\WINDOWS\system32\qappsrv.exe
2013-12-12 20:07:57 ----A---- C:\WINDOWS\system32\msg.exe
2013-12-12 20:07:57 ----A---- C:\WINDOWS\system32\logoff.exe
2013-12-12 20:07:56 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2013-12-12 20:07:56 ----A---- C:\WINDOWS\system32\cdmodem.dll
2013-12-12 20:07:55 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2013-12-12 20:07:55 ----A---- C:\WINDOWS\system32\mtxex.dll
2013-12-12 20:07:55 ----A---- C:\WINDOWS\system32\mtxdm.dll
2013-12-12 20:07:55 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2013-12-12 20:07:55 ----A---- C:\WINDOWS\system32\comrepl.dll
2013-12-12 20:07:55 ----A---- C:\WINDOWS\system32\comaddin.dll
2013-12-12 20:07:54 ----A---- C:\WINDOWS\system32\stclient.dll
2013-12-12 20:07:54 ----A---- C:\WINDOWS\system32\comsnap.dll
2013-12-12 20:07:48 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2013-12-12 20:07:46 ----A---- C:\WINDOWS\system32\sndrec32.exe
2013-12-12 20:07:46 ----A---- C:\WINDOWS\system32\mplay32.exe
2013-12-12 20:07:46 ----A---- C:\WINDOWS\system32\accwiz.exe
2013-12-12 20:07:45 ----D---- C:\Program Files\Windows NT
2013-12-12 20:07:45 ----A---- C:\WINDOWS\system32\mspaint.exe
2013-12-12 20:07:45 ----A---- C:\WINDOWS\system32\hypertrm.dll
2013-12-12 20:07:45 ----A---- C:\WINDOWS\system32\clipbrd.exe
2013-12-12 20:07:44 ----A---- C:\WINDOWS\system32\spider.exe
2013-12-12 20:07:44 ----A---- C:\WINDOWS\system32\drivers\tdtcp.sys
2013-12-12 20:07:44 ----A---- C:\WINDOWS\system32\drivers\tdpipe.sys
2013-12-12 20:07:44 ----A---- C:\WINDOWS\system32\drivers\rdpwd.sys
2013-12-12 20:07:43 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2013-12-12 20:07:43 ----A---- C:\WINDOWS\system32\mstscax.dll
2013-12-12 20:07:43 ----A---- C:\WINDOWS\system32\mstsc.exe
2013-12-12 20:07:42 ----A---- C:\WINDOWS\system32\tscupgrd.exe
2013-12-12 20:07:42 ----A---- C:\WINDOWS\system32\termsrv.dll
2013-12-12 20:07:42 ----A---- C:\WINDOWS\system32\sessmgr.exe
2013-12-12 20:07:42 ----A---- C:\WINDOWS\system32\remotepg.dll
2013-12-12 20:07:42 ----A---- C:\WINDOWS\system32\rdshost.exe
2013-12-12 20:07:42 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2013-12-12 20:07:42 ----A---- C:\WINDOWS\system32\rdchost.dll
2013-12-12 20:07:41 ----D---- C:\WINDOWS\system32\MsDtc
2013-12-12 20:07:41 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2013-12-12 20:07:41 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2013-12-12 20:07:41 ----A---- C:\WINDOWS\system32\rdpclip.exe
2013-12-12 20:07:41 ----A---- C:\WINDOWS\system32\qprocess.exe
2013-12-12 20:07:41 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2013-12-12 20:07:41 ----A---- C:\WINDOWS\system32\icaapi.dll
2013-12-12 20:07:41 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2013-12-12 20:07:40 ----A---- C:\WINDOWS\system32\mtxoci.dll
2013-12-12 20:07:40 ----A---- C:\WINDOWS\system32\msdtctm.dll
2013-12-12 20:07:40 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2013-12-12 20:07:39 ----A---- C:\WINDOWS\system32\xolehlp.dll
2013-12-12 20:07:39 ----A---- C:\WINDOWS\system32\msdtclog.dll
2013-12-12 20:07:39 ----A---- C:\WINDOWS\system32\msdtc.exe
2013-12-12 20:07:38 ----D---- C:\WINDOWS\system32\Com
2013-12-12 20:07:38 ----A---- C:\WINDOWS\system32\colbact.dll
2013-12-12 20:07:38 ----A---- C:\WINDOWS\system32\clbcatex.dll
2013-12-12 20:07:38 ----A---- C:\WINDOWS\system32\catsrvps.dll
2013-12-12 20:07:37 ----A---- C:\WINDOWS\system32\catsrvut.dll
2013-12-12 20:07:37 ----A---- C:\WINDOWS\system32\catsrv.dll
2013-12-12 20:07:36 ----A---- C:\WINDOWS\system32\comuid.dll
2013-12-12 20:07:36 ----A---- C:\WINDOWS\system32\comsvcs.dll
2013-12-12 20:07:36 ----A---- C:\WINDOWS\system32\clbcatq.dll
2013-12-12 20:07:27 ----A---- C:\WINDOWS\system32\servdeps.dll
2013-12-12 20:07:27 ----A---- C:\WINDOWS\system32\mmfutil.dll
2013-12-12 20:07:27 ----A---- C:\WINDOWS\system32\licwmi.dll
2013-12-12 20:07:27 ----A---- C:\WINDOWS\system32\cmprops.dll
2013-12-12 20:07:23 ----A---- C:\WINDOWS\system32\drivers\rdpdr.sys
2013-12-12 20:07:22 ----A---- C:\WINDOWS\system32\drivers\termdd.sys

======List of files/folders modified in the last 1 month======

2013-12-12 21:00:17 ----A---- C:\WINDOWS\system.ini
2013-12-12 20:13:29 ----A---- C:\WINDOWS\win.ini
2013-12-12 20:12:57 ----ASH---- C:\WINDOWS\fonts\desktop.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2013-12-12 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2013-12-12 178304]
R1 aswKbd;aswKbd; \??\C:\WINDOWS\system32\drivers\aswKbd.sys []
R1 aswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 aswFsBlk;aswFsBlk; \??\C:\WINDOWS\system32\drivers\aswFsBlk.sys []
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-01-15 1477632]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-01-13 4137984]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
S3 ewkbohho;ewkbohho; C:\WINDOWS\system32\drivers\ewkbohho.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-01-15 405504]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-12-12 50344]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2006-01-26 520192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-12 257416]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-05 119408]

-----------------EOF-----------------