Prosím o kontrolu logu

[JackXxX]

Dobrý den

Poslední dobou mám takový pocit, že v PC mám nějakou havěť, ovšem jistý si tím nejsem, tak bych vás chtěl poprosit o kontrolu

Kód: Vybrat vše

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-02-18 15:48:39
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 8 GB (4%) free of 203 GB
Total RAM: 2047 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:49:10, on 18.2.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\Drivers\WTSRV.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp325.exe
C:\WINDOWS\vsnp325.exe
C:\WINDOWS\713xRMT.exe
C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe
C:\Program Files\Canon\scan\OpwareSE4.exe
C:\WINDOWS\system32\WService.EXE
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Softex\OmniPass\scureapp.exe
C:\Program Files\Softex\Weblink\WebLink.exe
C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe
C:\Program Files\Softex\OmniPass\Help.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\TV Expert\ADTVScheduleAgent.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\totalcmd\TOTALCMD.EXE
C:\Documents and Settings\Administrator\Dokumenty\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atlas.cz/?from=icqhp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) -  - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: ZoneAlarm Spy Blocker - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WService] WService.EXE
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp325] C:\WINDOWS\tsnp325.exe
O4 - HKLM\..\Run: [snp325] C:\WINDOWS\vsnp325.exe
O4 - HKLM\..\Run: [TV Card Remote Control Device Monitor] C:\WINDOWS\713xRMT.exe
O4 - HKLM\..\Run: [ChrisTV Agent] "C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe" /silent
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\Canon\scan\OpwareSE4.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [OmniPass] C:\Program Files\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [WebLink] C:\Program Files\Softex\Weblink\WebLink.exe /boot
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Fraps] C:\PROGRAM FILES\FRAPS\FRAPS.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 3.0.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: TV Expert Schedule Agent.lnk = C:\Program Files\TV Expert\ADTVScheduleAgent.exe
O8 - Extra context menu item: Stáhnout Star Downloaderem - C:\Program Files\Star Downloader\sdie.htm
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwareupdate/su2/ocx/15111/CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2736646F-519B-428C-9E2D-F34F67174ABB}: NameServer = 10.0.0.138,81.27.192.97
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Media Toolbox 6 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Armed Assault Drivers Auto Removal (pr2agmlb) (pr2agmlb) - Bohemia Interactive - C:\WINDOWS\system32\pr2agmlb.exe
O23 - Service: FrontLine Drivers Auto Removal (v2) (sfrem02) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem02.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE

--
End of file - 10511 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}]
ZoneAlarm Spy Blocker BHO - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL [2008-10-14 262144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFEF0-5B30-21D4-945D-000000000000}]
C:\PROGRA~1\STARDO~1\SDIEInt.dll [2004-12-11 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-06-01 962808]
{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - ZoneAlarm Spy Blocker - C:\Program Files\ZoneAlarmSB\bar\1.bin\SPYBLOCK.DLL [2008-10-14 262144]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-08-01 16049664]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"WService"=C:\WINDOWS\system32\WService.EXE [2002-09-07 28672]
"DAEMON Tools"=C:\Program Files\DAEMON Tools\daemon.exe [2006-09-14 157592]
"FixCamera"=C:\WINDOWS\FixCamera.exe [2007-02-12 20480]
"tsnp325"=C:\WINDOWS\tsnp325.exe [2006-10-10 270336]
"snp325"=C:\WINDOWS\vsnp325.exe [2006-10-10 827392]
"TV Card Remote Control Device Monitor"=C:\WINDOWS\713xRMT.exe [2007-06-11 466944]
"ChrisTV Agent"=C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe [2008-02-11 275456]
"SSBkgdUpdate"=C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25 210472]
"OpwareSE4"=C:\Program Files\Canon\scan\OpwareSE4.exe [2007-02-04 79400]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2008-07-09 919016]
"OmniPass"=C:\Program Files\Softex\OmniPass\scureapp.exe [2004-08-20 1769472]
"WebLink"=C:\Program Files\Softex\Weblink\WebLink.exe [2004-08-20 528384]
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2009-06-17 55824]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2009-06-17 55824]
"VolPanel"=C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe [2008-08-27 233588]
"nwiz"=nwiz.exe /install []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-02-09 13680640]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-02-09 86016]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Fraps"=C:\PROGRAM FILES\FRAPS\FRAPS.EXE [2007-11-21 3182248]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
TV Expert Schedule Agent.lnk - C:\Program Files\TV Expert\ADTVScheduleAgent.exe

C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
OpenOffice.org 3.0.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-06-27 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2009-07-20 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OPXPGina]
C:\Program Files\Softex\OmniPass\opxpgina.dll [2004-08-20 40960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\FlashGet\flashget.exe"="C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-02-18 15:48:40 ----D---- C:\Program Files\trend micro
2010-02-18 15:48:39 ----D---- C:\rsit
2010-02-14 11:49:24 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Mumble
2010-02-14 11:48:56 ----D---- C:\Program Files\Mumble
2010-02-12 15:05:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2010-02-12 14:54:31 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-02-11 16:13:30 ----D---- C:\Program Files\rcv4
2010-02-11 14:03:35 ----D---- C:\Program Files\BitComet
2010-02-07 13:29:36 ----A---- C:\WINDOWS\iun6002.exe
2010-02-04 20:47:49 ----D---- C:\WINDOWS\system32\AGEIA
2010-02-04 20:47:49 ----D---- C:\Program Files\AGEIA Technologies
2010-02-04 20:47:19 ----D---- C:\WINDOWS\nview
2010-02-04 20:47:19 ----A---- C:\WINDOWS\system32\nvudisp.exe
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nwiz.exe
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwssr.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwss.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrszht.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrszhc.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrstr.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrsth.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrssv.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrssl.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrssk.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrsru.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrsptb.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrspt.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrspl.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsno.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsnl.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsko.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsja.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsit.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrshu.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrshe.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsfr.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsfi.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsesm.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrses.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrseng.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsel.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsde.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsda.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrscs.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsar.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwimg.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvvitvsr.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvvitvs.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvshell.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvrszht.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvrstr.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvrsth.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrssv.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrssl.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrssk.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsru.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrspt.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrspl.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsno.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsko.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsja.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsit.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrshu.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrshe.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrses.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrseng.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsel.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsde.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsda.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrscs.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsar.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvmoblsr.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvmobls.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmccssr.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmccss.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmccsrs.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nview.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvgamesr.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvgames.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvdspsch.exe
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvdispsr.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvdisps.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-02-04 20:45:29 ----A---- C:\WINDOWS\system32\nvcpluir.dll
2010-02-04 20:45:29 ----A---- C:\WINDOWS\system32\nvcplui.exe
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvappbar.exe
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\keystone.exe
2010-02-03 10:28:38 ----A---- C:\WINDOWS\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.0.1600.22.dll
2010-02-03 10:28:19 ----A---- C:\WINDOWS\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.0.1600.22.dll
2010-02-03 10:27:39 ----D---- C:\WINDOWS\system32\RsFx
2010-02-02 23:37:32 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2010-02-02 23:37:17 ----D---- C:\Program Files\Microsoft SQL Server
2010-02-02 23:37:15 ----D---- C:\Program Files\Microsoft Silverlight
2010-02-02 23:34:26 ----D---- C:\Program Files\Microsoft.NET
2010-02-02 23:34:11 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2010-02-02 23:34:11 ----D---- C:\Program Files\Common Files\Merge Modules
2010-02-02 23:34:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-02-02 23:33:21 ----D---- C:\Program Files\Microsoft SDKs
2010-02-02 23:32:07 ----D---- C:\WINDOWS\system32\XPSViewer
2010-02-02 23:32:03 ----D---- C:\Program Files\MSBuild
2010-02-02 23:32:01 ----D---- C:\WINDOWS\system32\en-US
2010-02-02 23:31:56 ----D---- C:\Program Files\Reference Assemblies
2010-02-02 23:31:32 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-02-02 23:31:31 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-02-02 23:31:31 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-02-02 23:31:31 ----D---- C:\b4276e9b9172fa58663794e242
2010-02-02 23:27:53 ----A---- C:\WINDOWS\imsins.BAK
2010-02-02 23:27:45 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-02-02 23:27:38 ----D---- C:\Program Files\MSXML 6.0
2010-02-02 22:44:02 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Dev-Cpp
2010-02-02 22:43:42 ----D---- C:\Dev-Cpp
2010-02-02 14:48:17 ----D---- C:\WINDOWS\SxsCaPendDel
2010-02-02 14:47:19 ----D---- C:\Program Files\IVAO
2010-01-29 19:02:18 ----D---- C:\Program Files\poker
2010-01-29 19:02:18 ----D---- C:\Program Files\bfgclient
2010-01-29 19:01:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\BigFishGamesCache
2010-01-29 17:33:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Free Labs
2010-01-29 17:32:55 ----D---- C:\Program Files\Free Labs
2010-01-29 17:30:02 ----D---- C:\Program Files\NemoKProd
2010-01-23 11:35:49 ----D---- C:\WINDOWS\Profiles
2010-01-23 11:35:46 ----D---- C:\WINDOWS\system32\Adobe
2010-01-23 11:35:46 ----D---- C:\Program Files\Adobe
2010-01-23 11:35:46 ----D---- C:\Documents and Settings\Administrator\Data aplikací\InterTrust
2010-01-23 11:34:28 ----D---- C:\Jeppesen
2010-01-23 11:34:28 ----A---- C:\WINDOWS\system32\mrvtcl.dll
2010-01-23 11:34:28 ----A---- C:\WINDOWS\system32\mrvdrv.dll
2010-01-23 11:34:24 ----A---- C:\WINDOWS\SimView.ini
2010-01-23 11:34:24 ----A---- C:\WINDOWS\Jeppesen.ini
2010-01-23 10:38:32 ----D---- C:\WINDOWS\Cache
2010-01-20 14:12:36 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Google
2010-01-20 14:10:54 ----D---- C:\Program Files\Google

======List of files/folders modified in the last 1 months======

2010-02-18 15:48:53 ----D---- C:\WINDOWS\Prefetch
2010-02-18 15:48:40 ----RD---- C:\Program Files
2010-02-18 15:36:52 ----D---- C:\WINDOWS\Temp
2010-02-18 14:50:34 ----A---- C:\WINDOWS\wincmd.ini
2010-02-18 14:21:45 ----D---- C:\WINDOWS\Internet Logs
2010-02-18 14:07:04 ----D---- C:\Program Files\Mozilla Firefox
2010-02-18 14:05:46 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-02-18 00:06:06 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-17 22:46:40 ----D---- C:\Program Files\Mozilla Thunderbird
2010-02-15 22:12:11 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-15 15:45:35 ----D---- C:\WINDOWS\system32
2010-02-15 15:45:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-02-15 07:17:17 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-02-14 22:22:13 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2010-02-14 16:03:08 ----D---- C:\Documents and Settings\Administrator\Data aplikací\skypePM
2010-02-14 13:24:51 ----D---- C:\Documents and Settings\Administrator\Data aplikací\ICQ
2010-02-14 11:49:03 ----D---- C:\WINDOWS\WinSxS
2010-02-13 13:43:19 ----SHD---- C:\WINDOWS\CSC
2010-02-12 15:03:49 ----D---- C:\WINDOWS
2010-02-12 15:00:43 ----SHD---- C:\WINDOWS\Installer
2010-02-12 15:00:42 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-02-12 15:00:41 ----D---- C:\Program Files\ATI Technologies
2010-02-12 15:00:11 ----RSD---- C:\WINDOWS\assembly
2010-02-12 14:54:48 ----RD---- C:\WINDOWS\Web
2010-02-12 14:54:47 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-12 14:54:26 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-02-12 14:54:16 ----D---- C:\WINDOWS\system32\drivers
2010-02-12 14:54:15 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-12 14:54:14 ----HD---- C:\WINDOWS\inf
2010-02-11 14:05:04 ----D---- C:\Downloads
2010-02-11 12:37:25 ----D---- C:\Program Files\FlashGet
2010-02-08 22:27:14 ----D---- C:\Documents and Settings
2010-02-08 21:06:13 ----RSD---- C:\WINDOWS\Fonts
2010-02-07 21:03:04 ----D---- C:\Program Files\World of Warcraft
2010-02-05 16:46:56 ----D---- C:\Program Files\Fraps
2010-02-04 20:54:51 ----A---- C:\WINDOWS\WININIT.INI
2010-02-04 20:47:42 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-04 20:47:25 ----D---- C:\WINDOWS\Help
2010-02-04 14:29:25 ----D---- C:\WINDOWS\Microsoft.NET
2010-02-03 19:55:29 ----D---- C:\Program Files\ICQ6.5
2010-02-03 10:26:54 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-02-03 10:26:46 ----D---- C:\WINDOWS\system32\1033
2010-02-02 23:37:38 ----D---- C:\WINDOWS\system32\mui
2010-02-02 23:36:45 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-02-02 23:36:45 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2010-02-02 23:34:11 ----D---- C:\Program Files\Common Files
2010-02-02 23:31:45 ----D---- C:\WINDOWS\system32\spool
2010-02-02 23:29:36 ----D---- C:\Program Files\Internet Explorer
2010-02-02 17:57:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Creative
2010-02-02 16:46:15 ----D---- C:\Documents and Settings\Administrator\Data aplikací\teamspeak2
2010-02-02 15:16:27 ----D---- C:\Program Files\Teamspeak2_RC2
2010-02-01 12:18:23 ----A---- C:\moduleName.txt
2010-01-25 20:44:21 ----D---- C:\Program Files\zIRC
2010-01-23 18:56:40 ----D---- C:\Program Files\Microsoft Games
2010-01-23 11:35:46 ----D---- C:\Program Files\Common Files\Adobe
2010-01-23 11:30:05 ----D---- C:\GTALauncher
2010-01-20 14:11:02 ----SD---- C:\WINDOWS\Tasks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 KLIF;KLIF; C:\WINDOWS\system32\DRIVERS\klif.sys [2007-07-19 127768]
R1 prodrv03;Star Force copy protection driver v3; C:\WINDOWS\System32\drivers\prodrv03.sys [2008-10-18 115968]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2008-07-09 394952]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-03 87424]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-06-27 2303488]
R3 FLMCKUSB;AuthenTec TruePrint USB Driver (AES3400, AES3500, AES4000); C:\WINDOWS\System32\Drivers\FLMckUSB.sys [2004-08-20 80724]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-01 4356608]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2009-06-17 20240]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2009-06-17 35472]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2009-06-17 37392]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2009-06-17 28560]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\System32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S2 713xTVCard;SAA7133 TV Card; C:\WINDOWS\system32\DRIVERS\SAA713x.sys [2005-03-15 277504]
S3 3xHybrid;SAA7135 TV Card Service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2007-01-23 716160]
S3 adxapie;adxapie; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\adxapie.sys []
S3 aqh2llht;aqh2llht; C:\WINDOWS\system32\drivers\aqh2llht.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 DSDrv4;DSDrv4; \??\C:\PROGRA~1\DScaler\DSDrv4.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\HWDED.tmp []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-04-09 25280]
S3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\L8042mou.Sys [2007-09-21 63120]
S3 LMouKE;SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2007-09-21 78992]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-02-09 6307328]
S3 skfilt;skfilt; C:\WINDOWS\system32\drivers\skfilt.sys [2008-02-12 1670016]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SNP325;USB PC Camera (SNPSTD325); C:\WINDOWS\system32\DRIVERS\snp325.sys [2007-04-03 10251904]
S3 STIrUsb;SigmaTel USB-IrDA Dongle; C:\WINDOWS\system32\DRIVERS\irstusb.sys [2001-08-17 26624]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 Tablet2k;Serial Tablet Port Driver; C:\WINDOWS\System32\Drivers\Tablet2k.sys [2000-06-13 15370]
S3 TClass2k;Tablet Class Driver; C:\WINDOWS\system32\DRIVERS\TClass2k.sys [2003-03-05 23202]
S3 UCTblHid;HID Tablet Port Driver; C:\WINDOWS\system32\DRIVERS\UCTblHid.sys [2003-03-05 11090]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 RsFx0102;RsFx0102 Driver; C:\WINDOWS\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712]
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\System32\DRIVERS\sr.sys [2004-08-17 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-06-27 483328]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-04-30 417792]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-04-03 20543]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-06-01 222968]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2006-11-10 99936]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2008-07-10 40999448]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-07-13 131131]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-07-13 65599]
R2 omniserv;Softex OmniPass Service; C:\Program Files\Softex\OmniPass\Omniserv.exe [2004-08-20 68704]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 98840]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2008-07-09 75304]
R2 WinTabService;WinTab Service; C:\WINDOWS\System32\Drivers\WTSRV.EXE [2003-09-30 40960]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-29 520192]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-20 135664]
S2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-02-09 163908]
S2 pr2agmlb;Armed Assault Drivers Auto Removal (pr2agmlb); C:\WINDOWS\system32\pr2agmlb.exe [2007-02-28 407168]
S2 sfrem02;FrontLine Drivers Auto Removal (v2); C:\WINDOWS\system32\sfrem02.exe [2006-05-11 358008]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-12-24 79360]
S3 Creative Media Toolbox 6 Licensing Service;Creative Media Toolbox 6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe [2009-12-24 79360]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2009-07-20 121360]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-10 47128]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-10 369688]
S4 SQLBrowser;SQL Server Browser; c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-07-10 258072]

-----------------EOF-----------------

[Unlimited_Killer]

Dobrý večer, na logu se pracuje.

[Unlimited_Killer]

Jdeme na to.

1) OTMoveit3

• Stáhněte OTM3 na Plochu.
• Spusťte ho dvojklikem na OTM.exe, pokud to nepůjde, zkuste to s adminskými právy.
• Do levého okna 'Paste Instructions for Items to be Moved' vkopírujte následující skript:

  Kód: Vybrat vše

  :reg
  [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
  "{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}]
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{855F3B16-6D32-4fe6-8A56-BBB695989046}"=-
  "{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}"=-
  [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
  "Alcmtr"=-
  "SSBkgdUpdate"=-
  "WebLink"=-
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D0C0F75C-683A-4390-A791-1ACFD5599AB8}]
  
  :files
  C:\Program Files\ICQ6Toolbar
  C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
  C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
  C:\Program Files\ZoneAlarmSB
  C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk
  C:\b4276e9b9172fa58663794e242
  
  :services
  ICQ Service
  
  :commands
  [emptytemp]
  [reboot]

• Poté klikněte na červené tlačítko 'MoveIt!'.
• V zeleném okně vpravo by se měl zobrazit log, ten vkopírujete sem do fóra.
• Pokud se zobrazí hláška k restartování, klikněte na Yes.
• Po restartu se log otevře sám, nebo ho najdete v C:\_OTM\MovedFiles

2) Fixnutí v HJT

• Spusťte přejmenované HijackThis - C:\Program Files\Trend Micro\HijackThis\jmeno_uzivatele.exe
• Klikněte na 'Do a system scan only'.
• U níže uvedených položek udělejte fajfku do čtverečku a poté klikněte na 'Fix Checked'.

  Kód: Vybrat vše

  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.atlas.cz/?from=icqhp
  R3 - URLSearchHook: (no name) -  - (no file)
  O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
  O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

• Pokud by tam nějaká položka nebyla, vynechte ji.

[JackXxX]

Dobrý den

Kód: Vybrat vše

All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA}\ deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Alcmtr deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SSBkgdUpdate deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\WebLink deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{D0C0F75C-683A-4390-A791-1ACFD5599AB8}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D0C0F75C-683A-4390-A791-1ACFD5599AB8}\ deleted successfully.
========== FILES ==========
C:\Program Files\ICQ6Toolbar folder moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Program Files\ZoneAlarmSB\bar\Settings folder moved successfully.
C:\Program Files\ZoneAlarmSB\bar\History folder moved successfully.
C:\Program Files\ZoneAlarmSB\bar\Cache folder moved successfully.
C:\Program Files\ZoneAlarmSB\bar\1.bin folder moved successfully.
C:\Program Files\ZoneAlarmSB\bar folder moved successfully.
C:\Program Files\ZoneAlarmSB folder moved successfully.
C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\OpenOffice.org 3.0.lnk moved successfully.
C:\b4276e9b9172fa58663794e242\i386 folder moved successfully.
C:\b4276e9b9172fa58663794e242\amd64 folder moved successfully.
C:\b4276e9b9172fa58663794e242 folder moved successfully.
========== SERVICES/DRIVERS ==========
Service ICQ Service stopped successfully!
Service ICQ Service deleted successfully!
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
->Temp folder emptied: 70868532 bytes
->Temporary Internet Files folder emptied: 1932244 bytes
->FireFox cache emptied: 106919250 bytes
 
User: All Users
 
User: dana
->Temp folder emptied: 1014816 bytes
->Temporary Internet Files folder emptied: 329887 bytes
->FireFox cache emptied: 79530759 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: Jack
->Temp folder emptied: 591726 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->FireFox cache emptied: 18076322 bytes
 
User: LocalService
->Temp folder emptied: 1048184 bytes
->Temporary Internet Files folder emptied: 33170 bytes
 
User: mapky
 
User: NetworkService
->Temp folder emptied: 982200 bytes
->Temporary Internet Files folder emptied: 402 bytes
 
User: nv
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1340817 bytes
%systemroot%\System32 .tmp files removed: 8575432 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1314760 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 55721920 bytes
 
Total Files Cleaned = 332.00 mb
 
 
OTM by OldTimer - Version 3.1.9.0 log created on 02192010_144634

Files moved on Reboot...
C:\Documents and Settings\Administrator\Local Settings\Temp\~DFC61B.tmp moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Mozilla\Firefox\Profiles\cuzm8akn.default\Cache\_CACHE_001_ moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Mozilla\Firefox\Profiles\cuzm8akn.default\Cache\_CACHE_002_ moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Mozilla\Firefox\Profiles\cuzm8akn.default\Cache\_CACHE_003_ moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Mozilla\Firefox\Profiles\cuzm8akn.default\Cache\_CACHE_MAP_ moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Mozilla\Firefox\Profiles\cuzm8akn.default\urlclassifier3.sqlite moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Mozilla\Firefox\Profiles\cuzm8akn.default\XUL.mfl moved successfully.
File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.
C:\WINDOWS\temp\Perflib_Perfdata_b8.dat moved successfully.
File C:\WINDOWS\temp\ZLT02b6c.TMP not found!

Registry entries deleted on Reboot...

v HJT fixnuté dotyčné pložky.

[Unlimited_Killer]

Nový RSIT log prosím, ale nedávejte ho do code.

[JackXxX]

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-02-19 15:25:16
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 9 GB (4%) free of 203 GB
Total RAM: 2047 MB (71% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:25:17, on 19.2.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\Softex\OmniPass\Omniserv.exe
c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\Drivers\WTSRV.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\Softex\OmniPass\OPXPApp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\CheckPoint\ZAForceField\ForceField.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\WService.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\FixCamera.exe
C:\WINDOWS\tsnp325.exe
C:\WINDOWS\vsnp325.exe
C:\WINDOWS\713xRMT.exe
C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe
C:\Program Files\Canon\scan\OpwareSE4.exe
C:\Program Files\Softex\OmniPass\scureapp.exe
C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe
C:\Program Files\Softex\OmniPass\Help.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\TV Expert\ADTVScheduleAgent.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\totalcmd\TOTALCMD.EXE
c:\Documents and Settings\Administrator\Dokumenty\rsit.exe
c:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ZoneAlarm Toolbar Registrar - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O3 - Toolbar: ZoneAlarm Toolbar - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WService] WService.EXE
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [FixCamera] C:\WINDOWS\FixCamera.exe
O4 - HKLM\..\Run: [tsnp325] C:\WINDOWS\tsnp325.exe
O4 - HKLM\..\Run: [snp325] C:\WINDOWS\vsnp325.exe
O4 - HKLM\..\Run: [TV Card Remote Control Device Monitor] C:\WINDOWS\713xRMT.exe
O4 - HKLM\..\Run: [ChrisTV Agent] "C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe" /silent
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\Canon\scan\OpwareSE4.exe"
O4 - HKLM\..\Run: [OmniPass] C:\Program Files\Softex\OmniPass\scureapp.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [VolPanel] "C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe" /r
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [ISW] "C:\Program Files\CheckPoint\ZAForceField\ForceField.exe" /icon="hidden"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Fraps] C:\PROGRAM FILES\FRAPS\FRAPS.EXE
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: TV Expert Schedule Agent.lnk = C:\Program Files\TV Expert\ADTVScheduleAgent.exe
O8 - Extra context menu item: Stáhnout Star Downloaderem - C:\Program Files\Star Downloader\sdie.htm
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{2736646F-519B-428C-9E2D-F34F67174ABB}: NameServer = 10.0.0.138,81.27.192.97
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Media Toolbox 6 Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: ZoneAlarm Toolbar IswSvc (IswSvc) - Check Point Software Technologies - C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Softex OmniPass Service (omniserv) - Unknown owner - C:\Program Files\Softex\OmniPass\Omniserv.exe
O23 - Service: Armed Assault Drivers Auto Removal (pr2agmlb) (pr2agmlb) - Bohemia Interactive - C:\WINDOWS\system32\pr2agmlb.exe
O23 - Service: FrontLine Drivers Auto Removal (v2) (sfrem02) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem02.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
O23 - Service: WinTab Service (WinTabService) - Tablet Driver - C:\WINDOWS\System32\Drivers\WTSRV.EXE

--
End of file - 9351 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3}]
ZoneAlarm Toolbar Registrar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFEF0-5B30-21D4-945D-000000000000}]
C:\PROGRA~1\STARDO~1\SDIEInt.dll [2004-12-11 135168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - ZoneAlarm Toolbar - C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\TrustCheckerIEPlugin.dll [2009-10-14 578928]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SkyTel"=C:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2006-08-01 16049664]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2009-11-25 81000]
"WService"=C:\WINDOWS\system32\WService.EXE [2002-09-07 28672]
"DAEMON Tools"=C:\Program Files\DAEMON Tools\daemon.exe [2006-09-14 157592]
"FixCamera"=C:\WINDOWS\FixCamera.exe [2007-02-12 20480]
"tsnp325"=C:\WINDOWS\tsnp325.exe [2006-10-10 270336]
"snp325"=C:\WINDOWS\vsnp325.exe [2006-10-10 827392]
"TV Card Remote Control Device Monitor"=C:\WINDOWS\713xRMT.exe [2007-06-11 466944]
"ChrisTV Agent"=C:\Program Files\ChrisTV PVR\ChrisTV_Agent.exe [2008-02-11 275456]
"OpwareSE4"=C:\Program Files\Canon\scan\OpwareSE4.exe [2007-02-04 79400]
"OmniPass"=C:\Program Files\Softex\OmniPass\scureapp.exe [2004-08-20 1769472]
"Logitech Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2009-06-17 55824]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2009-06-17 55824]
"VolPanel"=C:\Program Files\Creative\USB Headsets\Volume Panel\VolPanlu.exe [2008-08-27 233588]
"nwiz"=nwiz.exe /install []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2009-02-09 13680640]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2009-02-09 86016]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2006-11-10 90112]
"ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2009-11-22 1037192]
"ISW"=C:\Program Files\CheckPoint\ZAForceField\ForceField.exe [2009-10-14 730480]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"Fraps"=C:\PROGRAM FILES\FRAPS\FRAPS.EXE [2007-11-21 3182248]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
TV Expert Schedule Agent.lnk - C:\Program Files\TV Expert\ADTVScheduleAgent.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2007-06-27 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2009-07-20 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\OPXPGina]
C:\Program Files\Softex\OmniPass\opxpgina.dll [2004-08-20 40960]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsmon]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\FlashGet\flashget.exe"="C:\Program Files\FlashGet\flashget.exe:*:Enabled:Flashget"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"C:\Program Files\BitComet\BitComet.exe"="C:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet.exe"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2010-02-19 14:46:34 ----D---- C:\_OTM
2010-02-18 16:55:34 ----D---- C:\Documents and Settings\Administrator\Data aplikací\CheckPoint
2010-02-18 16:55:24 ----D---- C:\Program Files\CheckPoint
2010-02-18 16:55:21 ----A---- C:\WINDOWS\system32\vsregexp.dll
2010-02-18 16:55:19 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2010-02-18 16:55:19 ----A---- C:\WINDOWS\system32\zlcomm.dll
2010-02-18 16:55:15 ----A---- C:\WINDOWS\system32\vswmi.dll
2010-02-18 16:55:14 ----D---- C:\WINDOWS\system32\ZoneLabs
2010-02-18 16:55:14 ----A---- C:\WINDOWS\system32\zpeng25.dll
2010-02-18 16:55:14 ----A---- C:\WINDOWS\system32\vsxml.dll
2010-02-18 16:55:13 ----A---- C:\WINDOWS\system32\vspubapi.dll
2010-02-18 16:55:13 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2010-02-18 16:54:42 ----A---- C:\WINDOWS\system32\vsutil.dll
2010-02-18 16:54:42 ----A---- C:\WINDOWS\system32\vsinit.dll
2010-02-18 16:54:42 ----A---- C:\WINDOWS\system32\vsdata.dll
2010-02-18 16:41:20 ----HDC---- C:\WINDOWS\$NtUninstallKB943232$
2010-02-18 15:48:40 ----D---- C:\Program Files\trend micro
2010-02-18 15:48:39 ----D---- C:\rsit
2010-02-14 11:49:24 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Mumble
2010-02-14 11:48:56 ----D---- C:\Program Files\Mumble
2010-02-12 15:05:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\ATI
2010-02-12 14:54:31 ----N---- C:\WINDOWS\system32\ati2sgag.exe
2010-02-11 16:13:30 ----D---- C:\Program Files\rcv4
2010-02-11 14:03:35 ----D---- C:\Program Files\BitComet
2010-02-07 13:29:36 ----A---- C:\WINDOWS\iun6002.exe
2010-02-04 20:47:49 ----D---- C:\WINDOWS\system32\AGEIA
2010-02-04 20:47:49 ----D---- C:\Program Files\AGEIA Technologies
2010-02-04 20:47:19 ----D---- C:\WINDOWS\nview
2010-02-04 20:47:19 ----A---- C:\WINDOWS\system32\nvudisp.exe
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nwiz.exe
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwssr.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwss.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrszht.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrszhc.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrstr.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrsth.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrssv.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrssl.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrssk.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrsru.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrsptb.dll
2010-02-04 20:45:33 ----A---- C:\WINDOWS\system32\nvwrspt.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrspl.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsno.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsnl.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsko.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsja.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsit.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrshu.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrshe.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsfr.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsfi.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsesm.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrses.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrseng.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsel.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsde.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsda.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrscs.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwrsar.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwimg.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwdmcpl.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvwddi.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvvitvsr.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvvitvs.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvshell.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvrszht.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvrstr.dll
2010-02-04 20:45:32 ----A---- C:\WINDOWS\system32\nvrsth.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrssv.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrssl.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrssk.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsru.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrspt.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrspl.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsno.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsko.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsja.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsit.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrshu.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrshe.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrses.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrseng.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsel.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsde.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsda.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrscs.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvrsar.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvmoblsr.dll
2010-02-04 20:45:31 ----A---- C:\WINDOWS\system32\nvmobls.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmctray.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmccssr.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmccss.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmccsrs.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvmccs.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nview.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvgamesr.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvgames.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvdspsch.exe
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvdispsr.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvdisps.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2010-02-04 20:45:30 ----A---- C:\WINDOWS\system32\nvcuda.dll
2010-02-04 20:45:29 ----A---- C:\WINDOWS\system32\nvcpluir.dll
2010-02-04 20:45:29 ----A---- C:\WINDOWS\system32\nvcplui.exe
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvcpl.dll
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvcolor.exe
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvcodins.dll
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvcod.dll
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvappbar.exe
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\nvapi.dll
2010-02-04 20:45:28 ----A---- C:\WINDOWS\system32\keystone.exe
2010-02-03 10:28:38 ----A---- C:\WINDOWS\system32\perf-SQLAgent$SQLEXPRESS-sqlagtctr10.0.1600.22.dll
2010-02-03 10:28:19 ----A---- C:\WINDOWS\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.0.1600.22.dll
2010-02-03 10:27:39 ----D---- C:\WINDOWS\system32\RsFx
2010-02-02 23:37:32 ----HDC---- C:\WINDOWS\$NtUninstallKB942288-v3$
2010-02-02 23:37:17 ----D---- C:\Program Files\Microsoft SQL Server
2010-02-02 23:37:15 ----D---- C:\Program Files\Microsoft Silverlight
2010-02-02 23:34:26 ----D---- C:\Program Files\Microsoft.NET
2010-02-02 23:34:11 ----D---- C:\Program Files\Microsoft Visual Studio 9.0
2010-02-02 23:34:11 ----D---- C:\Program Files\Common Files\Merge Modules
2010-02-02 23:34:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-02-02 23:33:21 ----D---- C:\Program Files\Microsoft SDKs
2010-02-02 23:32:07 ----D---- C:\WINDOWS\system32\XPSViewer
2010-02-02 23:32:03 ----D---- C:\Program Files\MSBuild
2010-02-02 23:32:01 ----D---- C:\WINDOWS\system32\en-US
2010-02-02 23:31:56 ----D---- C:\Program Files\Reference Assemblies
2010-02-02 23:31:32 ----N---- C:\WINDOWS\system32\prntvpt.dll
2010-02-02 23:31:31 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2010-02-02 23:31:31 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2010-02-02 23:27:53 ----A---- C:\WINDOWS\imsins.BAK
2010-02-02 23:27:45 ----HDC---- C:\WINDOWS\$NtUninstallWIC$
2010-02-02 23:27:38 ----D---- C:\Program Files\MSXML 6.0
2010-02-02 22:44:02 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Dev-Cpp
2010-02-02 22:43:42 ----D---- C:\Dev-Cpp
2010-02-02 14:48:17 ----D---- C:\WINDOWS\SxsCaPendDel
2010-02-02 14:47:19 ----D---- C:\Program Files\IVAO
2010-01-29 19:02:18 ----D---- C:\Program Files\poker
2010-01-29 19:02:18 ----D---- C:\Program Files\bfgclient
2010-01-29 19:01:03 ----D---- C:\Documents and Settings\All Users\Data aplikací\BigFishGamesCache
2010-01-29 17:33:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Free Labs
2010-01-29 17:32:55 ----D---- C:\Program Files\Free Labs
2010-01-29 17:30:02 ----D---- C:\Program Files\NemoKProd
2010-01-23 11:35:49 ----D---- C:\WINDOWS\Profiles
2010-01-23 11:35:46 ----D---- C:\WINDOWS\system32\Adobe
2010-01-23 11:35:46 ----D---- C:\Program Files\Adobe
2010-01-23 11:35:46 ----D---- C:\Documents and Settings\Administrator\Data aplikací\InterTrust
2010-01-23 11:34:28 ----D---- C:\Jeppesen
2010-01-23 11:34:28 ----A---- C:\WINDOWS\system32\mrvtcl.dll
2010-01-23 11:34:28 ----A---- C:\WINDOWS\system32\mrvdrv.dll
2010-01-23 11:34:24 ----A---- C:\WINDOWS\SimView.ini
2010-01-23 11:34:24 ----A---- C:\WINDOWS\Jeppesen.ini
2010-01-23 10:38:32 ----D---- C:\WINDOWS\Cache
2010-01-20 14:12:36 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Google
2010-01-20 14:10:54 ----D---- C:\Program Files\Google

======List of files/folders modified in the last 1 months======

2010-02-19 15:13:41 ----D---- C:\WINDOWS\Internet Logs
2010-02-19 14:53:08 ----A---- C:\WINDOWS\wincmd.ini
2010-02-19 14:52:15 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2010-02-19 14:51:44 ----D---- C:\Program Files\Mozilla Firefox
2010-02-19 14:51:02 ----D---- C:\WINDOWS\Temp
2010-02-19 14:48:54 ----D---- C:\WINDOWS\system32\CatRoot2
2010-02-19 14:47:20 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-02-19 14:47:07 ----D---- C:\WINDOWS\system32
2010-02-19 14:47:07 ----D---- C:\WINDOWS
2010-02-19 14:46:44 ----RD---- C:\Program Files
2010-02-19 14:46:43 ----SD---- C:\WINDOWS\Tasks
2010-02-19 13:36:48 ----RSD---- C:\WINDOWS\Fonts
2010-02-18 20:40:18 ----D---- C:\Documents and Settings\Administrator\Data aplikací\ICQ
2010-02-18 16:59:20 ----D---- C:\WINDOWS\Prefetch
2010-02-18 16:51:01 ----D---- C:\WINDOWS\system32\drivers
2010-02-18 16:41:29 ----HD---- C:\WINDOWS\inf
2010-02-18 16:41:22 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-02-18 16:33:47 ----D---- C:\Program Files\TrackMania Nations ESWC
2010-02-17 22:46:40 ----D---- C:\Program Files\Mozilla Thunderbird
2010-02-15 15:45:35 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-02-15 07:17:17 ----A---- C:\WINDOWS\wcx_ftp.ini
2010-02-14 22:22:13 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2010-02-14 16:03:08 ----D---- C:\Documents and Settings\Administrator\Data aplikací\skypePM
2010-02-14 11:49:03 ----D---- C:\WINDOWS\WinSxS
2010-02-13 13:43:19 ----SHD---- C:\WINDOWS\CSC
2010-02-12 15:00:43 ----SHD---- C:\WINDOWS\Installer
2010-02-12 15:00:42 ----D---- C:\Program Files\Common Files\ATI Technologies
2010-02-12 15:00:41 ----D---- C:\Program Files\ATI Technologies
2010-02-12 15:00:11 ----RSD---- C:\WINDOWS\assembly
2010-02-12 14:54:48 ----RD---- C:\WINDOWS\Web
2010-02-12 14:54:47 ----HD---- C:\Program Files\InstallShield Installation Information
2010-02-12 14:54:15 ----D---- C:\WINDOWS\system32\CatRoot
2010-02-11 14:05:04 ----D---- C:\Downloads
2010-02-11 12:37:25 ----D---- C:\Program Files\FlashGet
2010-02-08 22:27:14 ----D---- C:\Documents and Settings
2010-02-07 21:03:04 ----D---- C:\Program Files\World of Warcraft
2010-02-05 16:46:56 ----D---- C:\Program Files\Fraps
2010-02-04 20:54:51 ----A---- C:\WINDOWS\WININIT.INI
2010-02-04 20:47:42 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-02-04 20:47:25 ----D---- C:\WINDOWS\Help
2010-02-04 14:29:25 ----D---- C:\WINDOWS\Microsoft.NET
2010-02-03 19:55:29 ----D---- C:\Program Files\ICQ6.5
2010-02-03 10:26:54 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-02-03 10:26:46 ----D---- C:\WINDOWS\system32\1033
2010-02-02 23:37:38 ----D---- C:\WINDOWS\system32\mui
2010-02-02 23:36:45 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2010-02-02 23:36:45 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2010-02-02 23:34:11 ----D---- C:\Program Files\Common Files
2010-02-02 23:31:45 ----D---- C:\WINDOWS\system32\spool
2010-02-02 23:29:36 ----D---- C:\Program Files\Internet Explorer
2010-02-02 17:57:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\Creative
2010-02-02 16:46:15 ----D---- C:\Documents and Settings\Administrator\Data aplikací\teamspeak2
2010-02-02 15:16:27 ----D---- C:\Program Files\Teamspeak2_RC2
2010-02-01 12:18:23 ----A---- C:\moduleName.txt
2010-01-25 20:44:21 ----D---- C:\Program Files\zIRC
2010-01-23 18:56:40 ----D---- C:\Program Files\Microsoft Games
2010-01-23 11:35:46 ----D---- C:\Program Files\Common Files\Adobe
2010-01-23 11:30:05 ----D---- C:\GTALauncher

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2009-11-25 27408]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2009-11-25 114768]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2009-11-25 48560]
R1 prodrv03;Star Force copy protection driver v3; C:\WINDOWS\System32\drivers\prodrv03.sys [2008-10-18 115968]
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2009-11-22 486280]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2009-11-25 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2009-11-25 94160]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2004-08-03 87424]
R2 ISWKL;ZoneAlarm Toolbar ISWKL; \??\C:\Program Files\CheckPoint\ZAForceField\ISWKL.sys []
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2009-11-25 23120]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2007-06-27 2303488]
R3 FLMCKUSB;AuthenTec TruePrint USB Driver (AES3400, AES3500, AES4000); C:\WINDOWS\System32\Drivers\FLMckUSB.sys [2004-08-20 80724]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\System32\DRIVERS\HDAudBus.sys [2005-01-07 138752]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-08-01 4356608]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2009-06-17 20240]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2009-06-17 35472]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2009-06-17 37392]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2009-06-17 28560]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-07-11 57856]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-07-11 20480]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\System32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbohci.sys [2004-08-03 17024]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2004-08-17 14848]
S2 713xTVCard;SAA7133 TV Card; C:\WINDOWS\system32\DRIVERS\SAA713x.sys [2005-03-15 277504]
S3 3xHybrid;SAA7135 TV Card Service; C:\WINDOWS\system32\DRIVERS\3xHybrid.sys [2007-01-23 716160]
S3 adxapie;adxapie; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\adxapie.sys []
S3 ayvzatvb;ayvzatvb; C:\WINDOWS\system32\drivers\ayvzatvb.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 DSDrv4;DSDrv4; \??\C:\PROGRA~1\DScaler\DSDrv4.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\HWDED.tmp []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-04-09 25280]
S3 L8042mou;SetPoint PS/2 Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\L8042mou.Sys [2007-09-21 63120]
S3 LMouKE;SetPoint Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouKE.Sys [2007-09-21 78992]
S3 MPE;Filtr MPE BDA; C:\WINDOWS\system32\DRIVERS\MPE.sys [2004-08-03 15360]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-02-09 6307328]
S3 skfilt;skfilt; C:\WINDOWS\system32\drivers\skfilt.sys [2008-02-12 1670016]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 SNP325;USB PC Camera (SNPSTD325); C:\WINDOWS\system32\DRIVERS\snp325.sys [2007-04-03 10251904]
S3 STIrUsb;SigmaTel USB-IrDA Dongle; C:\WINDOWS\system32\DRIVERS\irstusb.sys [2001-08-17 26624]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 Tablet2k;Serial Tablet Port Driver; C:\WINDOWS\System32\Drivers\Tablet2k.sys [2000-06-13 15370]
S3 TClass2k;Tablet Class Driver; C:\WINDOWS\system32\DRIVERS\TClass2k.sys [2003-03-05 23202]
S3 UCTblHid;HID Tablet Port Driver; C:\WINDOWS\system32\DRIVERS\UCTblHid.sys [2003-03-05 11090]
S3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2004-08-03 59264]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 RsFx0102;RsFx0102 Driver; C:\WINDOWS\system32\DRIVERS\RsFx0102.sys [2008-07-10 242712]
S4 sr;Ovladač filtru Obnovy systému; C:\WINDOWS\System32\DRIVERS\sr.sys [2004-08-17 73344]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 aswUpdSv;avast! iAVS4 Control Service; C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe [2009-11-25 18752]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2007-06-27 483328]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast4\ashServ.exe [2009-11-25 138680]
R2 Creative Service for CDROM Access;Creative Service for CDROM Access; C:\WINDOWS\system32\CTsvcCDA.exe [1999-12-13 44032]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-04-30 417792]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-04-03 20543]
R2 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2006-11-10 99936]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R2 IswSvc;ZoneAlarm Toolbar IswSvc; C:\Program Files\CheckPoint\ZAForceField\IswSvc.exe [2009-10-14 476528]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2008-07-10 40999448]
R2 NMSAccessU;NMSAccessU; C:\Program Files\CDBurnerXP\NMSAccessU.exe [2008-10-20 71096]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2006-07-13 131131]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2006-07-13 65599]
R2 omniserv;Softex OmniPass Service; C:\Program Files\Softex\OmniPass\Omniserv.exe [2004-08-20 68704]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 98840]
R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe [2009-11-22 2384240]
R2 WinTabService;WinTab Service; C:\WINDOWS\System32\Drivers\WTSRV.EXE [2003-09-30 40960]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe [2009-11-25 254040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast4\ashWebSv.exe [2009-11-25 352920]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2007-06-29 520192]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-20 135664]
S2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2009-02-09 163908]
S2 pr2agmlb;Armed Assault Drivers Auto Removal (pr2agmlb); C:\WINDOWS\system32\pr2agmlb.exe [2007-02-28 407168]
S2 sfrem02;FrontLine Drivers Auto Removal (v2); C:\WINDOWS\system32\sfrem02.exe [2006-05-11 358008]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2009-12-24 79360]
S3 Creative Media Toolbox 6 Licensing Service;Creative Media Toolbox 6 Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe [2009-12-24 79360]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2009-07-20 121360]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2008-07-10 47128]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2008-07-10 369688]
S4 SQLBrowser;SQL Server Browser; c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-07-10 258072]

-----------------EOF-----------------

[Unlimited_Killer]

Mně se zdá čisto.

1) OTCleaner

• Stáhněte OTC a dvojklikem ho spusťte.
• Vyskočí okénko, kde kliknete na 'CleanUp!'.
• Potvrdíte kliknutím na 'Yes'.
• Poté se ještě zeptá, zda chcete restartovat PC - to proveďte opět kliknutím na 'Yes'.

2) CCleaner

• Stáhněte si program jménem CCleaner.
• Normálně nainstalujte, jen dávejte pozor a odškrtněte položku 'Instalovat Yahoo! Toolbar'.
• Spusťte ho.
  
  • Záložka Čistič → nechte zatrženo vše, jak je, a klikněte na 'Spustit CCleaner'.
  • Záložka Registry → klikněte na 'Hledej problémy'. Vyhledá problémy v registru, až dokončí analyzování, klikněte na 'Opravit vybrané problémy'. Nabídne Vám vytvoření zálohy - pro jistotu ji vytvořte a uložte například na Plochu.
• CCleaner doporučuji používat pravidelně, celkem rapidně dokáže zrychlit PC.

3) Defragmentace

• Defragmentujte disk.
• Lze to udělat několika způsoby ↓
  • Přes defragmentaci integrovanou ve Windows [Start → Spustit → dfrg.msc → Enter]. Toto není příliš účinný způsob.
  • Přes jednoduchý a přehledný program jménem Defraggler.
  • Přes geniální program, který se nemusí instalovat a je hodně jednoduchý - JKDefrag.

4) Malwarebytes' Anti-Malware

• Stáhněte MbAM a postupujte podle popisu.
• Zatím nic nemažte, MbAM má občas falešné detekce.
• Poté mi sem vložte log ve formě textu.

5) Nový RSIT log