VIRY.CZ

prosím o kontrolu logu poslední dobou se občas sekne kompik:
Logfile of random's system information tool 1.06 (written by random/random)
Run by User at 2010-01-16 15:27:16
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 7 GB (18%) free of 38 GB
Total RAM: 1279 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:27:53, on 16.1.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\a-squared Anti-Malware\a2service.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\User\Plocha\spore\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\trend micro\User.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\User\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
R3 - URLSearchHook: (no name) - {7c5c0f58-e061-457d-9033-77307f5ed00c} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Documents and Settings\User\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: QIP 2005 - {1EF681F7-A04B-4D6D-9012-A307CCA55610} - C:\Program Files\QIP\qip.exe (HKCU)
O16 - DPF: {672EE252-D813-4F5E-81BB-5DD163DD4FA5} (Active602XMLFiller Control) - https://www.mojedatovaschranka.cz/stati ... ctivex.cab
O16 - DPF: {98B23776-D845-49B4-876F-32486810E89C} (Video Web Phone Installer) - http://160.218.160.89/Install/VWPSetup.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{873AE097-A0EC-405F-A543-C8A92A75B01A}: NameServer = 217.117.222.15,217.117.222.5
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)
O23 - Service: ASKUpgrade - Unknown owner - C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

--
End of file - 10467 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Ad-Aware Update (Weekly).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201f27d4-3704-41d6-89c1-aa35e39143ed}]
AskBar BHO - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2009-04-02 333192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-09-15 1562960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Documents and Settings\User\Data aplikací\Microsoft\Internet Explorer\qipsearchbar.dll [2009-07-14 150768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-07-31 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-07-31 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{3041d03e-fd4b-44e0-b742-2d9b88305f98} - Ask Toolbar - C:\Program Files\AskBarDis\bar\bin\askBar.dll [2009-04-02 333192]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2004-10-29 86016]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"SpywareTerminator"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2009-01-22 2267136]
"PAC207_Monitor"=C:\WINDOWS\PixArt\PAC207\Monitor.exe [2006-11-03 319488]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2004-10-29 4620288]
"nwiz"=nwiz.exe /install []
"NPSStartup"= []
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]
"a-squared"=C:\Program Files\a-squared Anti-Malware\a2guard.exe [2010-01-11 3280712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2009-07-26 288048]
"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2009-04-02 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Ad-Watch]
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeRAM XP]
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe [2009-03-24 1591808]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-26 161328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe -atboottime []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Smapp]
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe [2003-05-05 143360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-07-31 149280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2009-07-26 288048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Software Kodak EasyShare.lnk]
C:\PROGRA~1\Kodak\KODAKE~1\bin\EASYSH~1.EXE -hx []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2009-09-03 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-05 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Enabled:Konzola Microsoft Management Console"
"C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe"="C:\Program Files\Common Files\Ahead\Nero Web\SetupX.exe:*:Enabled:Nero ProductSetup"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Documents and Settings\User\Plocha\písničky Pavel\StrongDC.exe"="C:\Documents and Settings\User\Plocha\písničky Pavel\StrongDC.exe:*:Enabled:StrongDC++"
"C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe"="C:\Program Files\Sony Ericsson\Sony Ericsson Media Manager\MediaManager.exe:*:Enabled:Sony Ericsson Media Manager 1.2"
"C:\Documents and Settings\User\Plocha\BlueSoleil\BlueSoleil.exe"="C:\Documents and Settings\User\Plocha\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"F:\program files\opera.exe"="F:\program files\opera.exe:*:Enabled:Opera Internet Browser"
"Z:\program files\opera.exe"="Z:\program files\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\FlightGear\bin\Win32\fgfs.exe"="C:\Program Files\FlightGear\bin\Win32\fgfs.exe:*:Enabled:fgfs"
"G:\BlueSoleil\BlueSoleil.exe"="G:\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"Z:\BlueSoleil\BlueSoleil.exe"="Z:\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\LANChatbox 2\lanchatbox.exe"="C:\Program Files\LANChatbox 2\lanchatbox.exe:*:Enabled:Lanchatbox 2"
"C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Program Files\BitLord\BitLord.exe"="C:\Program Files\BitLord\BitLord.exe:*:Disabled:BitLord"
"C:\Program Files\Atari\Deer Hunter 2005\DH2005.exe"="C:\Program Files\Atari\Deer Hunter 2005\DH2005.exe:*:Disabled:DH2005"
"F:\Skype\Phone\Skype.exe"="F:\Skype\Phone\Skype.exe:*:Disabled:Skype"
"F:\BlueSoleil\BlueSoleil.exe"="F:\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil"
"C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe"="C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe:*:Enabled:EasyShare"
"C:\Documents and Settings\User\Plocha\camaster\ncpsrv.exe"="C:\Documents and Settings\User\Plocha\camaster\ncpsrv.exe:*:Enabled:Netcam Pro Server"
"C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE"="C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE:*:Enabled:Microsoft Office Word"
"C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Documents and Settings\User\Plocha\spore\netcampro\ncpsrv.exe"="C:\Documents and Settings\User\Plocha\spore\netcampro\ncpsrv.exe:*:Enabled:ncpsrv"
"C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"C:\Program Files\Wolfenstein - Enemy Territory\ET.exe"="C:\Program Files\Wolfenstein - Enemy Territory\ET.exe:*:Enabled:ET"
"F:\npsasvr.exe"="F:\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"F:\npsvsvr.exe"="F:\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"G:\prdele\npsasvr.exe"="G:\prdele\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"G:\prdele\npsvsvr.exe"="G:\prdele\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server"
"C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe"="C:\Program Files\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{523cb974-bd91-11de-a41d-00112f433a4b}]
shell\AutoRun\command - F:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d73a0283-bd3e-11de-a41c-00112f433a4b}]
shell\AutoRun\command - F:\AutoRun.exe


======List of files/folders created in the last 1 months======

2010-01-15 21:29:40 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-01-11 20:07:24 ----D---- C:\Program Files\ICQ6.5
2010-01-11 20:04:15 ----D---- C:\Program Files\ICQ6Toolbar
2010-01-11 16:25:11 ----D---- C:\WINDOWS\system32\Adobe
2010-01-11 10:08:36 ----D---- C:\Program Files\a-squared Anti-Malware
2010-01-07 16:45:28 ----D---- C:\Program Files\Samsung
2009-12-24 20:01:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Suite
2009-12-24 20:01:09 ----D---- C:\Documents and Settings\User\Data aplikací\PC Suite
2009-12-24 19:59:48 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2009-12-24 19:58:51 ----D---- C:\WINDOWS\system32\Samsung_USB_Drivers
2009-12-24 19:58:48 ----D---- C:\Program Files\DIFX
2009-12-24 19:58:26 ----A---- C:\WINDOWS\system32\FsUsbExService.Exe
2009-12-24 19:58:26 ----A---- C:\WINDOWS\system32\FsUsbExDevice.Dll
2009-12-24 19:55:12 ----D---- C:\Documents and Settings\User\Data aplikací\Samsung
2009-12-24 19:54:29 ----D---- C:\Program Files\MarkAny
2009-12-24 19:53:17 ----D---- C:\Program Files\PC Connectivity Solution
2009-12-24 09:02:40 ----D---- C:\Documents and Settings\All Users\Data aplikací\Playrix Entertainment
2009-12-24 08:59:00 ----A---- C:\WINDOWS\ModemLog_Sériový kabel mezi dvěma počítači.txt
2009-12-23 08:33:54 ----A---- C:\WINDOWS\Jahoda.ini
2009-12-23 08:31:34 ----A---- C:\WINDOWS\Jablko.ini
2009-12-23 08:30:13 ----A---- C:\WINDOWS\Visen.ini
2009-12-23 08:26:37 ----A---- C:\WINDOWS\Pomeranc.ini
2009-12-23 08:24:23 ----A---- C:\WINDOWS\Citron.ini
2009-12-23 08:23:27 ----A---- C:\WINDOWS\Vanilka.ini
2009-12-23 08:11:37 ----A---- C:\WINDOWS\Disney.ini
2009-12-23 08:11:07 ----R---- C:\WINDOWS\system32\Winstr.dll
2009-12-23 08:11:07 ----R---- C:\WINDOWS\system32\Winsdec.dll
2009-12-23 08:11:07 ----R---- C:\WINDOWS\system32\Winplay.dll
2009-12-23 08:11:07 ----R---- C:\WINDOWS\system32\EDEC.DLL
2009-12-23 08:11:06 ----R---- C:\WINDOWS\system32\DEC130.DLL
2009-12-22 19:49:37 ----D---- C:\Documents and Settings\All Users\Data aplikací\Bluetooth
2009-12-17 20:15:48 ----D---- C:\Program Files\Wolfenstein - Enemy Territory

======List of files/folders modified in the last 1 months======

2010-01-16 15:27:35 ----D---- C:\WINDOWS\Prefetch
2010-01-16 15:27:26 ----D---- C:\Program Files\trend micro
2010-01-16 15:24:42 ----D---- C:\WINDOWS\Temp
2010-01-16 15:24:10 ----D---- C:\WINDOWS\system32
2010-01-16 15:24:09 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-01-16 15:22:00 ----D---- C:\Program Files\Mozilla Firefox
2010-01-16 15:21:21 ----D---- C:\WINDOWS\system32\drivers
2010-01-16 15:21:18 ----D---- C:\Documents and Settings\User\Data aplikací\uTorrent
2010-01-16 07:33:34 ----D---- C:\Documents and Settings\User\Data aplikací\Spyware Terminator
2010-01-16 07:16:51 ----D---- C:\WINDOWS\system32\CatRoot2
2010-01-15 21:29:40 ----D---- C:\Program Files
2010-01-15 20:53:32 ----D---- C:\Program Files\Spybot - Search & Destroy
2010-01-15 18:54:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spyware Terminator
2010-01-15 18:19:42 ----A---- C:\WINDOWS\NeroDigital.ini
2010-01-15 16:48:47 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-01-15 13:48:50 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-01-14 06:52:18 ----D---- C:\Program Files\Webteh
2010-01-13 16:19:39 ----D---- C:\WINDOWS\security
2010-01-12 20:25:45 ----A---- C:\WINDOWS\CROCCLIP.INI
2010-01-12 13:40:44 ----D---- C:\Documents and Settings\User\Data aplikací\Adobe
2010-01-11 20:17:32 ----D---- C:\Documents and Settings\User\Data aplikací\Vso
2010-01-07 19:42:05 ----D---- C:\Nostale(CZ)
2010-01-07 19:37:52 ----D---- C:\WINDOWS
2010-01-07 16:49:23 ----D---- C:\WINDOWS\system32\CatRoot
2010-01-07 16:47:59 ----SHD---- C:\WINDOWS\Installer
2010-01-07 16:47:59 ----SHD---- C:\Config.Msi
2010-01-07 16:47:58 ----HD---- C:\WINDOWS\inf
2010-01-07 16:47:57 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-01-06 14:59:57 ----HD---- C:\Program Files\InstallShield Installation Information
2010-01-05 20:18:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2010-01-05 20:16:48 ----D---- C:\Program Files\Common Files\Adobe
2009-12-24 19:54:51 ----D---- C:\WINDOWS\WinSxS
2009-12-24 18:08:25 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2009-12-24 08:58:29 ----D---- C:\WINDOWS\system32\ias
2009-12-23 08:18:39 ----D---- C:\Program Files\Common Files\ArcSoft
2009-12-21 16:58:07 ----SD---- C:\Documents and Settings\User\Data aplikací\Microsoft
2009-12-21 15:06:11 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-12-18 00:30:58 ----D---- C:\WINDOWS\system32\Restore
2009-12-17 21:52:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Kodak
2009-12-17 21:52:35 ----D---- C:\WINDOWS\Help
2009-12-17 21:52:35 ----D---- C:\Program Files\Kodak
2009-12-17 21:51:55 ----D---- C:\Program Files\Common Files
2009-12-17 21:50:25 ----RSD---- C:\WINDOWS\assembly
2009-12-17 21:47:51 ----SD---- C:\WINDOWS\Tasks
2009-12-17 21:47:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2009-12-17 21:39:12 ----D---- C:\Program Files\AVI to 3GP
2009-12-17 21:38:13 ----D---- C:\Program Files\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-08-04 281760]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-08-04 25888]
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
R3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
R3 FETNDISB;VIA Rhine Family Fast Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5b.sys [2003-07-29 41984]
R3 FsUsbExDisk;FsUsbExDisk; \??\C:\WINDOWS\system32\FsUsbExDisk.SYS []
R3 HidBth;Miniport Bluetooth HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidbth.sys [2008-04-14 25600]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-10-29 2826944]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2009-12-12 47360]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-07-15 578368]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2004-11-05 82148]
S3 a3w10fd0;a3w10fd0; C:\WINDOWS\system32\drivers\a3w10fd0.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2004-10-19 20096]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2004-09-21 10804]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2005-01-17 23000]
S3 BTHidEnum;Bluetooth HID Enumerator; C:\WINDOWS\system32\DRIVERS\vbtenum.sys [2005-01-13 12500]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\WINDOWS\system32\drivers\BTNetFilter.sys []
S3 catchme;catchme; \??\C:\DOCUME~1\User\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 CrystalSysInfo;CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfo.sys []
S3 ENTECH;ENTECH; \??\C:\WINDOWS\system32\DRIVERS\ENTECH.SYS []
S3 FET5X86V;VIA Rhine-Family Fast-Ethernet Adapter Driver Service; C:\WINDOWS\system32\DRIVERS\fetnd5bv.sys [2008-09-22 43520]
S3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS\system32\DRIVERS\ewusbmdm.sys []
S3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 NTSIM;NTSIM; \??\C:\WINDOWS\system32\ntsim.sys []
S3 PAC207;Eye 110; C:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-10-25 616064]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
S3 s0016bus;Sony Ericsson Device 0016 driver (WDM); C:\WINDOWS\system32\DRIVERS\s0016bus.sys [2008-05-16 89256]
S3 s0016mdfl;Sony Ericsson Device 0016 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s0016mdfl.sys [2008-05-16 15016]
S3 s0016mdm;Sony Ericsson Device 0016 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s0016mdm.sys [2008-05-16 120744]
S3 s0016mgmt;Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s0016mgmt.sys [2008-05-16 114216]
S3 s0016nd5;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS); C:\WINDOWS\system32\DRIVERS\s0016nd5.sys [2008-05-16 25512]
S3 s0016obex;Sony Ericsson Device 0016 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s0016obex.sys [2008-05-16 110632]
S3 s0016unic;Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM); C:\WINDOWS\system32\DRIVERS\s0016unic.sys [2008-05-16 115752]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 SCREAMINGBDRIVER;Screaming Bee Audio; C:\WINDOWS\system32\drivers\screamingbdriver.sys [2005-11-20 13824]
S3 se44bus;Sony Ericsson Device 068 driver (WDM); C:\WINDOWS\system32\DRIVERS\se44bus.sys [2006-11-30 61536]
S3 se44mdfl;Sony Ericsson Device 068 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\se44mdfl.sys [2006-11-30 9360]
S3 se44mdm;Sony Ericsson Device 068 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\se44mdm.sys [2006-11-30 97088]
S3 se44mgmt;Sony Ericsson Device 068 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\se44mgmt.sys [2006-11-30 88624]
S3 se44nd5;Sony Ericsson Device 068 USB Ethernet Emulation SEMC44 (NDIS); C:\WINDOWS\system32\DRIVERS\se44nd5.sys [2006-11-30 18704]
S3 se44obex;Sony Ericsson Device 068 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\se44obex.sys [2006-11-30 86432]
S3 se44unic;Sony Ericsson Device 068 USB Ethernet Emulation SEMC44 (WDM); C:\WINDOWS\system32\DRIVERS\se44unic.sys [2006-11-30 90800]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\WINDOWS\system32\DRIVERS\ss_bbus.sys [2009-03-20 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\WINDOWS\system32\DRIVERS\ss_bmdfl.sys [2009-03-20 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\WINDOWS\system32\DRIVERS\ss_bmdm.sys [2009-03-20 121856]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2009-07-16 25984]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2004-10-19 61312]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 a2AntiMalware;a-squared Anti-Malware Service; C:\Program Files\a-squared Anti-Malware\a2service.exe [2009-10-01 1858144]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 FsUsbExService;FsUsbExService; C:\WINDOWS\system32\FsUsbExService.Exe [2009-03-31 233472]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-08-16 222968]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-07-31 153376]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-01-17 61440]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-03-26 779824]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2004-10-29 127043]
R2 SoundMAX Agent Service (default);SoundMAX Agent Service; C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [2002-09-20 45056]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-01-22 540672]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 ASKUpgrade;ASKUpgrade; C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe [2009-04-02 234888]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe []
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-02-08 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-03-26 267824]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2008-04-07 430592]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

stáhnul jsem combofix,spustil jsem ho,počítač se restartoval,ukázalo se modrý okno a začal procházet kompik v oknu naběhlo asi 50řádků pak se restartoval počítač a normálně se spustil, ale log nemůžu nikde najít,našel jsem jenom neuplný catchme-poznámkový blok:
-------- 2010-01-16 - 19:33:15 -------------
nevim jestli jsem udělal chybu já nebo je to v počítači a jestli to mam projet znova znova

Log by měl být v C:\combofix.txt .

C:\combofix.txt .tak to v počítači nemam,a dal jsem to i vyhledat

OK. Udělejte nový sken, ale v nouz. režimu.

Prosim o kontrolu logu lebo v poslednom čase ked zapnem PC a spusti windows naraz ho sekne a coraz castejsie a sem tam sa uz stane aj to ked ho resetnem a uz sa zapne normalne nod je cervena

ComboFix 10-01-16.02 - Jožo . 01. 2010 0:42:45.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.421.1051.18.2047.1364 [GMT 1:00]
Running from: C:\Users\Jožo\Desktop\ComboFix.exe
AV: Eset NOD32 Antivirus 2.70 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Resident AV is active

.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Program Files\ICQ6.5\ICQLRun.exe
C:\Windows\system32\vidx16.dll

.
((((((((((((((((((((((((( Files Created from 2009-12-16 to 2010-01-16 )))))))))))))))))))))))))))))))
.

2010-01-16 23:51:16 . 2010-01-16 23:51:16 -------- d-----w- C:\Users\Default\AppData\Local\temp
2010-01-14 17:49:29 . 2007-11-07 00:19:34 655872 ----a-w- C:\Windows\system32\msvcr90.dll
2010-01-14 17:49:29 . 2004-01-11 23:00:00 348160 ----a-w- C:\Windows\system32\msvcr71.dll
2010-01-14 17:48:51 . 2010-01-14 17:49:44 -------- d-----w- C:\Program Files\Miranda IM KP v5.0.8.5
2010-01-13 19:01:56 . 2009-10-19 14:10:20 108544 ----a-w- C:\Windows\system32\t2embed.dll
2010-01-13 19:01:56 . 2009-10-19 14:10:06 70656 ----a-w- C:\Windows\system32\fontsub.dll
2010-01-09 21:22:43 . 2010-01-09 21:22:43 -------- d-----w- C:\Windows\UbiSoft
2010-01-09 20:56:52 . 2010-01-09 20:56:52 -------- d-----w- C:\Program Files\Common Files\SWF Studio
2010-01-09 20:55:58 . 1998-09-02 08:28:18 38160 ----a-w- C:\Windows\system32\LMRTREND.dll
2010-01-09 20:55:57 . 1998-09-02 08:28:18 155408 ----a-w- C:\Windows\system32\LMRT.dll
2010-01-09 20:55:57 . 1998-08-27 04:51:44 182032 ----a-w- C:\Windows\system32\dxtmsft3.dll
2010-01-09 20:55:56 . 1998-08-20 10:38:26 217984 ----a-w- C:\Windows\system32\strmdll.dll
2010-01-09 20:55:55 . 1998-09-02 08:28:48 63488 ----a-w- C:\Windows\system32\unam4ie.exe
2010-01-09 20:55:49 . 1998-09-02 08:02:02 194320 ----a-w- C:\Windows\system32\qcut.dll
2010-01-09 20:55:49 . 1998-08-17 09:21:54 11776 ----a-w- C:\Windows\system32\mciqtz.drv
2010-01-09 20:55:48 . 2010-01-09 20:55:47 4608 ----a-w- C:\Windows\system32\w95inf32.dll
2010-01-09 20:55:48 . 2010-01-09 20:55:47 2272 ----a-w- C:\Windows\system32\w95inf16.dll
2010-01-09 20:55:46 . 2010-01-09 20:55:46 -------- d-----w- C:\Program Files\Disney Interactive
2010-01-08 00:13:55 . 2010-01-08 00:14:17 -------- d-----w- C:\Program Files\Any Video Converter
2010-01-08 00:12:42 . 2010-01-08 00:12:42 -------- d-----w- C:\ProgramData\DVD Shrink
2010-01-08 00:12:36 . 2010-01-08 00:12:41 -------- d-----w- C:\Program Files\DVD Shrink
2010-01-05 10:53:44 . 2010-01-05 10:53:44 0 ----a-r- C:\logwmemory.bin
2009-12-31 11:01:19 . 2010-01-11 17:16:07 -------- d-----w- C:\Program Files\TeamViewer
2009-12-31 01:10:12 . 2009-12-31 01:10:12 -------- d-----w- C:\Program Files\MSXML 4.0
2009-12-31 01:07:55 . 2009-12-31 01:07:55 -------- d-----w- C:\ProgramData\LightScribe
2009-12-31 00:35:51 . 2009-12-31 00:51:01 -------- d-----w- C:\Program Files\Nero
2009-12-31 00:35:26 . 2009-12-31 00:44:24 -------- d-----w- C:\ProgramData\Nero
2009-12-31 00:35:24 . 2009-12-31 01:03:32 -------- d-----w- C:\Program Files\Common Files\Nero
2009-12-31 00:34:58 . 2009-12-31 00:35:04 -------- d-----w- C:\Program Files\Common Files\LightScribe
2009-12-30 23:54:31 . 2009-12-30 23:54:31 -------- d-----w- C:\Program Files\Intel
2009-12-30 23:54:31 . 2009-06-16 11:05:54 53248 ----a-w- C:\Windows\system32\CSVer.dll
2009-12-30 23:54:19 . 2009-12-30 23:54:19 -------- d-----w- C:\Intel
2009-12-30 23:26:39 . 2007-02-20 06:34:06 102400 ----a-w- C:\Windows\system32\Spool\prtprocs\w32x86\lxczpp5c.dll
2009-12-30 23:25:37 . 2009-12-30 23:25:37 -------- d-----w- C:\drivers
2009-12-30 23:16:01 . 2009-12-30 23:16:01 -------- d-----w- C:\lexmark
2009-12-30 22:54:00 . 2009-12-30 22:53:40 512096 ----a-w- C:\Windows\system32\drivers\amon.sys
2009-12-30 22:54:00 . 2009-12-30 22:53:40 298104 ----a-w- C:\Windows\system32\imon.dll
2009-12-30 22:54:00 . 2009-12-30 22:53:39 15424 ----a-w- C:\Windows\system32\drivers\nod32drv.sys
2009-12-30 22:53:35 . 2010-01-16 23:42:45 -------- d-----w- C:\Program Files\ESET
2009-12-30 22:46:34 . 2009-09-10 05:52:05 257024 ----a-w- C:\Windows\system32\msv1_0.dll
2009-12-30 22:45:37 . 2009-10-29 07:22:37 2048 ----a-w- C:\Windows\system32\tzres.dll
2009-12-30 22:43:58 . 2009-10-02 04:06:59 728648 ----a-w- C:\Windows\system32\drivers\dxgkrnl.sys
2009-12-30 22:43:58 . 2009-09-03 07:04:15 1320960 ----a-w- C:\Windows\system32\CertEnroll.dll
2009-12-30 22:43:56 . 2009-08-19 07:20:32 442920 ----a-w- C:\Windows\system32\winresume.exe
2009-12-30 22:43:56 . 2009-08-19 07:20:31 507568 ----a-w- C:\Windows\system32\winload.exe
2009-12-30 22:43:56 . 2009-08-03 05:35:50 2613248 ----a-w- C:\Windows\explorer.exe
2009-12-30 22:43:56 . 2009-07-30 04:44:11 293888 ----a-w- C:\Windows\system32\atmfd.dll
2009-12-30 22:43:55 . 2009-08-29 06:54:52 12625408 ----a-w- C:\Windows\system32\wmploc.DLL
2009-12-30 22:43:53 . 2009-08-29 06:57:31 34816 ----a-w- C:\Windows\system32\msasn1.dll
2009-12-30 22:26:34 . 2009-12-30 22:26:34 25280 ----a-w- C:\Windows\system32\drivers\hamachi.sys
2009-12-30 22:26:31 . 2009-12-30 22:26:54 -------- d-----w- C:\Program Files\Hamachi
2009-12-30 22:24:35 . 2009-12-30 22:24:35 -------- d-sh--w- C:\Windows\ftpcache
2009-12-30 22:24:28 . 2009-12-30 22:24:37 -------- d-----w- C:\Cumik
2009-12-30 22:23:13 . 2010-01-09 22:07:30 -------- d---a-w- C:\Program Files\USDownloader-Lite
2009-12-30 22:18:02 . 2009-12-30 22:18:02 56 ---ha-w- C:\Windows\system32\ezsidmv.dat
2009-12-30 22:16:55 . 2010-01-16 23:50:44 -------- d-----w- C:\Program Files\ICQ6.5
2009-12-30 22:16:43 . 2009-12-30 22:16:44 -------- d-----r- C:\Program Files\Skype
2009-12-30 22:16:43 . 2009-12-30 22:16:43 -------- d-----w- C:\Program Files\Common Files\Skype
2009-12-30 22:15:42 . 2009-12-30 22:16:43 -------- d-----w- C:\ProgramData\Skype
2009-12-30 22:13:35 . 2009-11-02 19:42:06 195456 ------w- C:\Windows\system32\MpSigStub.exe
2009-12-30 22:12:47 . 2009-12-30 22:12:47 -------- d-----w- C:\ProgramData\CyberLink
2009-12-30 22:12:15 . 2010-01-09 20:56:51 -------- d--h--w- C:\Program Files\InstallShield Installation Information
2009-12-30 22:12:14 . 2009-12-30 22:12:14 -------- d-----w- C:\Program Files\CyberLink
2009-12-30 22:11:50 . 2010-01-05 23:19:29 -------- d-----w- C:\Program Files\Common Files\InstallShield
2009-12-30 22:10:12 . 2009-12-30 22:10:24 -------- d-----w- C:\Program Files\Common Files\Adobe
2009-12-30 22:05:55 . 2009-12-30 22:05:56 -------- d-----w- C:\Program Files\Microsoft Works
2009-12-30 22:05:07 . 2009-12-30 22:05:07 -------- d-----w- C:\Windows\PCHEALTH
2009-12-30 22:05:07 . 2009-12-30 22:05:07 -------- d-----w- C:\Program Files\Microsoft.NET
2009-12-30 22:04:10 . 2009-12-30 22:04:10 -------- d-----w- C:\Windows\system32\Macromed
2009-12-30 22:03:17 . 2009-12-30 22:03:17 -------- d-----w- C:\Program Files\Microsoft Visual Studio 8
2009-12-30 22:02:30 . 2009-12-30 22:07:46 -------- d-----w- C:\ProgramData\Microsoft Help
2009-12-30 22:01:59 . 2009-12-30 22:01:59 -------- d-----r- C:\MSOCache
2009-12-30 22:00:47 . 2009-12-30 22:00:49 -------- d-----w- C:\Program Files\Opera
2009-12-30 21:59:22 . 2009-12-30 21:59:22 -------- d-----w- C:\ProgramData\DAEMON Tools Lite
2009-12-30 21:59:20 . 2009-12-30 21:59:20 -------- d-----w- C:\Program Files\DAEMON Tools Toolbar
2009-12-30 21:59:17 . 2009-12-30 21:59:20 -------- d-----w- C:\Program Files\DAEMON Tools Lite
2009-12-30 21:50:56 . 2009-12-30 21:50:56 721904 ----a-w- C:\Windows\system32\drivers\sptd.sys
2009-12-30 21:50:08 . 2010-01-15 15:35:07 -------- d-sh--w- C:\Windows\Installer
2009-12-30 21:50:08 . 2009-12-30 21:50:08 -------- d-----w- C:\Program Files\ATI
2009-12-30 21:49:55 . 2009-12-30 21:49:55 -------- d-----w- C:\Program Files\ATI Technologies
2009-12-30 21:49:15 . 2009-12-30 21:49:15 -------- d-----w- C:\ATI
2009-12-30 21:46:24 . 2009-12-30 21:46:24 -------- d-----w- C:\Program Files\VS Revo Group
2009-12-30 21:39:36 . 2010-01-16 23:47:48 -------- d-----w- C:\Windows\system32\wbem\Performance
2009-12-30 21:35:49 . 2009-12-31 11:00:48 -------- d-----w- C:\Users\Jožo
2009-12-30 21:35:40 . 2009-12-30 21:35:40 -------- d-----w- C:\Recovery
2009-12-30 21:31:17 . 2009-12-30 21:31:17 0 ----a-w- C:\Windows\system32\atiicdxx.dat
2009-12-30 21:31:17 . 2009-12-30 21:31:17 0 ----a-w- C:\Windows\ativpsrm.bin
2009-12-30 21:28:04 . 2009-12-30 21:35:46 -------- d-----w- C:\Windows\Panther
2009-12-30 21:27:50 . 2009-12-30 21:27:51 -------- d-----w- C:\Boot

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

Ďakujem

Log není kompletní.

ako nieje? ved som ho zkopiroval cely uplne ta nechapem
prosim co mam urobyt?

Rudy píše:OK. Udělejte nový sken, ale v nouz. režimu.

tak jsem to udělal a je to jako včera,sken normálně jel a najednou restart po naběhnutí systému se objevila hláška:
Činnost systému byla obnovena po závažné chybě
označení chyby:
BCCode : 19 BCP1 : 00000020 BCP2 : 89F955B0 BCP3 : 89F959C8
BCP4 : 1A83001F OSVer : 5_1_2600 SP : 3_0 Product : 256_1
tak nevim co s tím

jozino91 píše:ako nieje? ved som ho zkopiroval cely uplne ta nechapem

hele kámo udělej si svoje forum

2jozino91: Založte si, prosím, vlastní topic. Děkujeme. Přehlédl jsem, že jste v cizím topic.

pavel68 píše:

Rudy píše:OK. Udělejte nový sken, ale v nouz. režimu.

tak jsem to udělal a je to jako včera,sken normálně jel a najednou restart po naběhnutí systému se objevila hláška:
Činnost systému byla obnovena po závažné chybě
označení chyby:
BCCode : 19 BCP1 : 00000020 BCP2 : 89F955B0 BCP3 : 89F959C8
BCP4 : 1A83001F OSVer : 5_1_2600 SP : 3_0 Product : 256_1
tak nevim co s tím

tak co s tím ,necháme to nebo s tim něco budeme dělat?

Zkuste použít MBAM: http://www.malwarebytes.org/mbam.php . Dejte log a předem nic nemažte. BSOD svědčí o tom, že se systémem není něco v pořádku. Zkuste reinstalovat ovladače k zákl. desce a gr. kartě.

Malwarebytes' Anti-Malware 1.40
Verze databáze: 2551
Windows 5.1.2600 Service Pack 3

17.1.2010 19:32:41
mbam-log-2010-01-17 (19-32-41).txt

Typ skenu: Úplný sken (C:\|)
Objektu skenováno: 170371
Uplynulý cas: 41 minute(s), 35 second(s)

Infikované procesy pameti: 0
Infikované pametové moduly: 0
Infikované klíce registru: 0
Infikované hodnoty registru: 0
Infikované položky dat registru: 0
Infikované složky: 0
Infikované soubory: 0

Infikované procesy pameti:
(Žádné zákerné položky nebyly zjišteny)

Infikované pametové moduly:
(Žádné zákerné položky nebyly zjišteny)

Infikované klíce registru:
(Žádné zákerné položky nebyly zjišteny)

Infikované hodnoty registru:
(Žádné zákerné položky nebyly zjišteny)

Infikované položky dat registru:
(Žádné zákerné položky nebyly zjišteny)

Infikované složky:
(Žádné zákerné položky nebyly zjišteny)

Infikované soubory:
(Žádné zákerné položky nebyly zjišteny)
a reinstalovat jak?