VIRY.CZ

Dobrý den!
Chystám se udělat pravidelnou zálohu systému a tomu samo předchází důkladná kontrola. A jelikož jsem dost čaroval s updatamu programů, nastavením OS a definitivně přecházel z KIS 7 na KIS 2009, chtěl bych vás požádat o kontrolu logu, jestli jsem něco nepřehlédl, nebo se mi tam něco nevetřelo bez vědomí mého i Kaspera.
Děkuji.

Logfile of random's system information tool 1.06 (written by random/random)
Run by Fana at 2009-11-23 01:41:01
Microsoft® Windows Vista™ Ultimate
System drive C: has 4 GB (4%) free of 92 GB
Total RAM: 3582 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:41:07, on 23.11.2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Logitech\SetPoint\LBTWiz.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\conime.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Windows\explorer.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files\RSIT\RSIT.exe
C:\Program Files\Trend Micro\HijackThis\Fana.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\Windows\WebIE.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Windows\WebIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [Pošťák] C:\Program Files\Seznam\Postak\Postak.exe
O4 - HKCU\..\Run: [ScreenShot] C:\Program Files\ScreenShots\ScreenShots.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Yahoo! Widgets.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Přidat do blokovaných reklamních lišt - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O9 - Extra button: Statisktika ochrany webového provozu - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\Windows\WebIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Windows\WebIE.dll
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - C:\Windows\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Windows\WebIE.dll
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\Windows\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Windows\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\Windows\WebIE.dll
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Windows\WebIE.dll
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\Windows\WebIE.dll
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O22 - SharedTaskScheduler: Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\GEST\GSvr.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: HDD Information Service (HDDSvc) - AltrixSoft (http://www.altrixsoft.com/) - C:\Windows\system32\HDDSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\Windows\system32\oodag.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 8997 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\NeroLiveEpgUpdate-PIDIŽVÍK_Fana.job
C:\Windows\tasks\User_Feed_Synchronization-{10E6870A-466B-45E2-8541-5DDF33053035}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\Windows\WebIE.dll [2008-06-28 491520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll [2009-11-21 62728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17 408440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\Windows\WebIE.dll [2008-06-28 491520]


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-08-17 13904416]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-06-23 6139904]
"Kernel and Hardware Abstraction Layer"=C:\Windows\KHALMNPR.EXE [2009-06-17 55824]
"AVP"=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-11-21 201992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pošťák"=C:\Program Files\Seznam\Postak\Postak.exe [2006-05-18 450560]
"ScreenShot"=C:\Program Files\ScreenShots\ScreenShots.exe [2006-08-14 196608]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-03-01 172792]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2009-10-09 25623336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Fana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Yahoo! Widgets.lnk]
C:\PROGRA~1\Yahoo!\Widgets\YAHOOW~1.EXE [2007-12-11 3746856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Luci^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2008-10-25 98696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Martínek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^GIGABYTE Gamer HUD Lite.lnk]
C:\PROGRA~1\GIGABYTE\GAMERH~1\HUD.exe [2009-03-04 1690112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Martínek^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]
C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2008-10-25 98696]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe

C:\Users\Fana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Yahoo! Widgets.lnk - C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLS"="C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2008-12-22 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\system32\klogon.dll [2008-04-25 206088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Windows DreamScene - {E31004D1-A431-41B8-826F-E902F9D95C81} - C:\Windows\System32\DreamScene.dll [2008-06-23 233888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=91000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2030-08-13 22:29:45 ----A---- C:\Windows\system32\winipsec.dll
2030-08-13 22:29:45 ----A---- C:\Windows\system32\polstore.dll
2030-08-13 22:29:45 ----A---- C:\Windows\system32\IPSECSVC.DLL
2030-08-13 22:29:45 ----A---- C:\Windows\system32\FwRemoteSvr.dll
2030-08-13 22:29:41 ----A---- C:\Windows\system32\es.dll
2030-08-13 22:29:24 ----A---- C:\Windows\system32\INETRES.dll
2030-08-13 22:29:24 ----A---- C:\Windows\system32\inetcomm.dll
2009-11-23 01:41:01 ----D---- C:\rsit
2009-11-22 18:05:55 ----A---- C:\Windows\system32\XAudio2_5.dll
2009-11-22 18:05:55 ----A---- C:\Windows\system32\xactengine3_5.dll
2009-11-22 18:05:55 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2009-11-22 18:05:54 ----A---- C:\Windows\system32\d3dx11_42.dll
2009-11-22 18:05:54 ----A---- C:\Windows\system32\d3dcsx_42.dll
2009-11-22 18:05:53 ----A---- C:\Windows\system32\D3DX9_41.dll
2009-11-22 18:05:53 ----A---- C:\Windows\system32\d3dx10_41.dll
2009-11-22 18:05:53 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2009-11-22 18:05:52 ----A---- C:\Windows\system32\XAudio2_4.dll
2009-11-22 18:05:52 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2009-11-22 18:05:51 ----A---- C:\Windows\system32\xactengine3_4.dll
2009-11-22 18:05:51 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2009-11-22 18:05:51 ----A---- C:\Windows\system32\d3dx10_40.dll
2009-11-22 18:05:51 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2009-11-22 18:05:49 ----A---- C:\Windows\system32\XAudio2_3.dll
2009-11-22 18:05:49 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2009-11-22 18:05:49 ----A---- C:\Windows\system32\xactengine3_3.dll
2009-11-22 18:05:49 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2009-11-22 18:05:49 ----A---- C:\Windows\system32\D3DX9_40.dll
2009-11-22 18:05:48 ----A---- C:\Windows\system32\XAudio2_2.dll
2009-11-22 18:05:48 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2009-11-22 18:05:48 ----A---- C:\Windows\system32\xactengine3_2.dll
2009-11-22 18:05:47 ----A---- C:\Windows\system32\d3dx10_39.dll
2009-11-22 18:05:47 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2009-11-22 16:17:16 ----D---- C:\Program Files\Yamicsoft
2009-11-22 15:59:34 ----D---- C:\Users\Fana\AppData\Roaming\BPK
2009-11-22 15:58:12 ----D---- C:\Program Files\BPK
2009-11-21 18:13:25 ----D---- C:\Program Files\Kaspersky Lab
2009-11-20 14:13:11 ----A---- C:\Windows\system32\wvc1dmod.dll
2009-11-20 14:13:11 ----A---- C:\Windows\system32\vp7vfw.dll
2009-11-20 14:13:11 ----A---- C:\Windows\system32\sipr3260.dll
2009-11-20 14:13:11 ----A---- C:\Windows\system32\drv43260.dll
2009-11-20 14:13:11 ----A---- C:\Windows\system32\drv33260.dll
2009-11-20 14:13:11 ----A---- C:\Windows\system32\drv23260.dll
2009-11-20 14:13:11 ----A---- C:\Windows\system32\cook3260.dll
2009-11-20 10:40:47 ----A---- C:\Windows\system32\d3dx10_42.dll
2009-11-20 10:40:46 ----A---- C:\Windows\system32\D3DX9_42.dll
2009-11-19 11:47:19 ----D---- C:\Program Files\LinX
2009-11-19 11:29:47 ----D---- C:\Program Files\Fraps
2009-11-18 16:14:34 ----D---- C:\Users\Fana\AppData\Roaming\Opera
2009-11-18 16:11:02 ----D---- C:\Program Files\Opera I
2009-11-16 10:17:17 ----D---- C:\Program Files\QuickTime
2009-11-16 10:16:49 ----D---- C:\Program Files\Common Files\Apple
2009-11-16 10:16:41 ----D---- C:\ProgramData\Apple
2009-11-15 20:27:08 ----D---- C:\Program Files\uTorrent
2009-11-12 20:44:56 ----D---- C:\Program Files\GIMP-2.0
2009-11-11 15:32:19 ----D---- C:\Windows\CheckSur
2009-11-10 22:44:41 ----D---- C:\ProgramData\Google
2009-11-10 22:31:26 ----A---- C:\Windows\system32\WSDApi.dll
2009-11-06 10:59:54 ----A---- C:\Windows\system32\xlivefnt.dll
2009-11-06 10:59:54 ----A---- C:\Windows\system32\xlive.dll
2009-11-06 10:58:04 ----A---- C:\Windows\system32\xlive.dll.cat
2009-11-04 08:17:06 ----A---- C:\Windows\system32\mshtml.dll
2009-11-02 18:05:36 ----A---- C:\Windows\system32\xliveinstall.dll
2009-11-02 18:05:34 ----A---- C:\Windows\system32\xliveinstallhost.exe
2009-10-28 23:24:51 ----D---- C:\Users\Fana\AppData\Roaming\Logitech
2009-10-28 23:24:48 ----D---- C:\Users\Fana\AppData\Roaming\Leadertech
2009-10-28 23:22:35 ----A---- C:\Windows\system32\BtCoreIf.dll
2009-10-28 23:22:30 ----A---- C:\Windows\system32\KemXML.dll
2009-10-28 23:22:30 ----A---- C:\Windows\system32\KemWnd.dll
2009-10-28 23:22:30 ----A---- C:\Windows\system32\KemUtil.dll
2009-10-28 23:22:30 ----A---- C:\Windows\system32\kemutb.dll
2009-10-28 23:17:31 ----D---- C:\ProgramData\Logitech
2009-10-28 14:36:16 ----A---- C:\Windows\IsUninst.exe
2009-10-28 10:50:28 ----A---- C:\Windows\system32\wmp.dll
2009-10-28 10:50:26 ----A---- C:\Windows\system32\unregmp2.exe
2009-10-28 10:50:26 ----A---- C:\Windows\system32\spwmp.dll
2009-10-28 10:50:26 ----A---- C:\Windows\system32\dxmasf.dll
2009-10-28 10:50:25 ----A---- C:\Windows\system32\wmploc.DLL

======List of files/folders modified in the last 1 months======

2030-08-14 19:19:00 ----D---- C:\ProgramData\EnterNHelp
2030-08-14 17:37:11 ----D---- C:\Program Files\Registry Shower 2007
2009-11-23 01:41:07 ----D---- C:\Windows\Prefetch
2009-11-23 01:40:33 ----AD---- C:\Windows
2009-11-23 01:40:33 ----A---- C:\Windows\MAILTRAN.INI
2009-11-23 01:40:13 ----D---- C:\Windows\Temp
2009-11-22 22:34:50 ----D---- C:\Program Files\Activision
2009-11-22 22:33:27 ----AD---- C:\ProgramData\TEMP
2009-11-22 22:12:15 ----A---- C:\Windows\WDICT32.INI
2009-11-22 21:11:38 ----D---- C:\Users\Fana\AppData\Roaming\Skype
2009-11-22 20:04:04 ----D---- C:\Program Files\Mozilla Firefox
2009-11-22 19:51:47 ----D---- C:\Users\Fana\AppData\Roaming\Vso
2009-11-22 18:06:11 ----SHD---- C:\Windows\Installer
2009-11-22 18:05:55 ----D---- C:\Windows\System32
2009-11-22 18:05:37 ----RSD---- C:\Windows\assembly
2009-11-22 18:05:11 ----SHD---- C:\System Volume Information
2009-11-22 17:16:57 ----D---- C:\Windows\system32\drivers
2009-11-22 17:02:32 ----D---- C:\Program Files\Ubisoft
2009-11-22 16:55:43 ----HD---- C:\Program Files\InstallShield Installation Information
2009-11-22 16:33:08 ----D---- C:\ProgramData\Kaspersky Lab
2009-11-22 16:32:41 ----D---- C:\ProgramData\NVIDIA
2009-11-22 16:17:16 ----RD---- C:\Program Files
2009-11-22 04:15:11 ----D---- C:\Users\Fana\AppData\Roaming\uTorrent
2009-11-21 22:18:44 ----D---- C:\Windows\pss
2009-11-21 18:14:04 ----D---- C:\Windows\system32\catroot
2009-11-21 18:14:04 ----D---- C:\Windows\inf
2009-11-21 18:12:03 ----D---- C:\ProgramData\Kaspersky Lab Setup Files
2009-11-21 18:06:04 ----D---- C:\Windows\system32\config
2009-11-21 18:05:34 ----SHD---- C:\Boot
2009-11-21 16:00:15 ----D---- C:\Users\Fana\AppData\Roaming\skypePM
2009-11-20 14:13:14 ----A---- C:\Users\Fana\AppData\Roaming\inst.exe
2009-11-20 14:13:11 ----D---- C:\Program Files\VSO
2009-11-20 09:26:43 ----D---- C:\Program Files\Bonjour
2009-11-19 12:20:24 ----D---- C:\Windows\system32\Tasks
2009-11-19 12:19:45 ----D---- C:\Program Files\Lavalys
2009-11-18 17:33:02 ----A---- C:\Windows\system32\PerfStringBackup.INI
2009-11-18 13:49:47 ----D---- C:\Users\Fana\AppData\Roaming\Nikon
2009-11-18 13:27:48 ----D---- C:\Program Files\Common Files\Nikon
2009-11-18 01:06:35 ----A---- C:\Windows\WTRAN32.INI
2009-11-16 10:17:17 ----D---- C:\ProgramData\Apple Computer
2009-11-16 10:16:49 ----D---- C:\Program Files\Common Files
2009-11-16 10:16:41 ----HD---- C:\ProgramData
2009-11-16 10:14:25 ----D---- C:\ProgramData\Adobe
2009-11-16 10:12:50 ----D---- C:\Program Files\Common Files\Adobe
2009-11-16 10:12:20 ----D---- C:\Program Files\Adobe
2009-11-15 23:27:56 ----D---- C:\Windows\system32\catroot2
2009-11-15 18:42:05 ----D---- C:\Program Files\Google
2009-11-15 18:40:23 ----D---- C:\Program Files\Canon
2009-11-15 18:39:56 ----D---- C:\Program Files\Pinnacle
2009-11-15 18:31:19 ----D---- C:\Program Files\Ashampoo
2009-11-15 18:30:57 ----D---- C:\Program Files\Common Files\Logishrd
2009-11-14 23:02:00 ----D---- C:\ProgramData\CanonIJPLM
2009-11-11 18:21:06 ----D---- C:\Windows\Debug
2009-11-11 16:06:01 ----D---- C:\Windows\winsxs
2009-11-10 22:53:39 ----D---- C:\Program Files\Windows Mail
2009-11-10 22:45:04 ----D---- C:\Windows\Tasks
2009-11-10 21:29:11 ----D---- C:\ProgramData\Microsoft Help
2009-11-10 19:52:14 ----D---- C:\Windows\system32\wbem
2009-11-10 19:50:54 ----D---- C:\Windows\system32\spool
2009-11-10 19:50:52 ----D---- C:\Program Files\ScreenShots II
2009-11-10 19:50:52 ----D---- C:\Program Files\ScreenShots
2009-11-10 19:50:50 ----D---- C:\Windows\registration
2009-11-09 15:01:52 ----D---- C:\ProgramData\TrackMania
2009-11-05 18:36:21 ----A---- C:\Windows\system32\mrt.exe
2009-11-03 19:14:39 ----A---- C:\Windows\NeroDigital.ini
2009-10-28 23:24:30 ----D---- C:\ProgramData\LogiShrd
2009-10-28 23:21:45 ----D---- C:\Program Files\Logitech
2009-10-28 10:58:46 ----D---- C:\Windows\rescache
2009-10-28 10:51:56 ----D---- C:\Program Files\Internet Explorer
2009-10-28 10:51:44 ----D---- C:\Windows\system32\cs-CZ
2009-10-28 10:51:44 ----D---- C:\Program Files\Windows Media Player

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 ASPI32;ASPI32; C:\Windows\system32\drivers\ASPI32.sys [2002-07-17 16877]
R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2008-06-23 320000]
R1 ISODrive;ISO CD-ROM Device Driver; \??\C:\Program Files\UltraISO\drivers\ISODrive.sys [2007-11-03 68096]
R1 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2008-04-16 112144]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2009-11-21 224272]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2008-03-26 20496]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2009-03-23 9968]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys [2009-03-23 72944]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2009-02-07 279712]
R2 Hardlock;Hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2005-07-28 685056]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2009-02-07 25888]
R2 tifsfilter;Acronis True Image FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2008-06-23 39264]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-06-23 2134424]
R3 KLFLTDEV;Kaspersky Lab KLFltDev; C:\Windows\system32\DRIVERS\klfltdev.sys [2008-03-13 26640]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2009-06-17 35472]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2009-06-17 37392]
R3 LVcKap;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap.sys [2007-10-19 2109976]
R3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\Windows\system32\DRIVERS\LVMVDrv.sys [2007-10-11 2142488]
R3 lvpopflt;Logitech POP Suppression Filter; C:\Windows\system32\DRIVERS\lvpopflt.sys [2007-10-12 1920920]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2007-10-12 41752]
R3 LVUVC;Logitech QuickCam Pro 9000(UVC); C:\Windows\system32\DRIVERS\lvuvc.sys [2007-10-12 3647384]
R3 MarvinBus;Pinnacle Marvin Bus; C:\Windows\system32\DRIVERS\MarvinBus.sys [2005-09-23 171520]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2009-08-16 9545152]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2008-06-25 47360]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-06-23 118784]
R3 SaiMini;SaiMini; C:\Windows\system32\DRIVERS\SaiMini.sys [2008-09-12 14080]
R3 SaiNtBus;SaiNtBus; C:\Windows\system32\drivers\SaiBus.sys [2008-09-12 35584]
R3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2006-11-02 71552]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]
S3 61883;61883 Unit Device; C:\Windows\system32\DRIVERS\61883.sys [2006-11-02 45696]
S3 Avc;Zařízení AVC; C:\Windows\system32\DRIVERS\avc.sys [2006-11-02 40448]
S3 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2008-04-22 27672]
S3 ET5Drv;ET5Drv; \??\C:\Windows\system32\Drivers\ET5Drv.sys [2007-10-11 30008]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2009-10-21 16608]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2007-10-11 25624]
S3 mirrorv3;mirrorv3; C:\Windows\system32\DRIVERS\rminiv3.sys [2006-11-01 3328]
S3 motmodem;Motorola USB CDC ACM Driver; C:\Windows\system32\DRIVERS\motmodem.sys [2007-06-18 23680]
S3 MSDV;Microsoft DV Camera and VCR; C:\Windows\system32\DRIVERS\msdv.sys [2006-11-02 52608]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys [2009-08-22 9088]
S3 SaiK0836;SaiK0836; C:\Windows\system32\DRIVERS\SaiK0836.sys [2008-09-12 107008]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS [2009-03-23 7408]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 WISTechVIDCAP;Dazzle DVC130; C:\Windows\system32\drivers\wisgostrm.sys [2006-11-03 226816]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVP;Kaspersky Internet Security; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe [2009-11-21 201992]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2006-11-02 22016]
R2 IJPLMSVC;Inkjet Printer/Scanner Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2008-01-22 103808]
R2 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2009-07-20 121360]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-08-17 215584]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2009-08-17 239648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe /svc []
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-10-19 141848]
S3 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2006-10-17 230944]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-03-18 72704]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2006-11-02 22016]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2006-11-02 521216]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-03-20 654848]
S3 GEST Service;GEST Service for program management.; C:\Program Files\GIGABYTE\GEST\GSvr.exe [2008-03-27 55816]
S3 HDDSvc;HDD Information Service; C:\Windows\system32\HDDSvc.exe [2008-01-06 189704]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 IviRegMgr;IviRegMgr; C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe [2007-01-04 112152]
S3 LVCOMSer;LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [2007-10-19 186904]
S3 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2007-10-19 141848]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2008-09-24 935208]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe []
S3 O&O Defrag;O&O Defrag; C:\Windows\system32\oodag.exe [2009-04-08 1377536]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2006-11-02 22016]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2006-11-02 562176]

-----------------EOF-----------------

EDIT// Oki. Opraveno.

Na logu se pracuje
Jinak přátelská rada: nedávejte log do code - blbě se to luští

A ještě se zeptám - chcete rovnou vyházet logu vyházet z logu ICQ Toolbar a Skype Toolbar do IE? A spouští se vám po startu úmyslně Yahoo! Widgets?

Zdravím!
Díky za Váš čas.

Ad code: díky za upozornění......opraveno
Ad toolbary: Ty toolbaty do IE mě nijak moc netrápí, ale pro klid duše je můžeme zpacifikovat. Ničemu neposlouží a IE používám jen v hóóóóódně krajním případě.
Měly by tam být nainstalovány ty ze screenu níže.
Ad Yahoo Widget Engine: Ano, spouští se mi po startu schválně a je to krásné a užitečné. (Kam se hrabe Win Sidebar, že?:))

Ok, vyhodím ti jen Skype

~~~

Stáhněte OTM na Plochu. Spusťte ho dvojklikem na OTMoveIt3.exe, pokud máte Vistu, pravým tlačítkem na soubor -> Run as Administrator [spustit jako administrátor].
Do levého okna 'Paste Instructions for Items to be Moved' zkopírujte následující skript: Poté klikněte na červené tlačítko 'MoveIt!'.
V zeleném okně vpravo by se měl zobrazit log, ten zkopírujete sem do fóra. Pokud se zobrazí hláška k restartování, klikněte na Yes. Po restartu log najdete v C:\_OTMoveIt\MovedFiles

Sakra, rok v prčicích a já ještě nepoděkoval....
Takže dodatečně Ď.

No není zač, já si dávám už hodně dlouhou pauzu od luštění. :]