prosim o kontrolu logu, zarucene tam nieco mam

[Caroprd111]

Myslím, že se to tam vrací. Potřebuji ten log z ComboFixu.

[Lestatos]

ComboFix 10-03-08.01 - User . 03. 2010 7:33.9.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.421.1033.18.734.447 [GMT 1:00]
Running from: c:\documents and settings\User\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\User\Desktop\CFScript.txt

FILE ::
"c:\program files\Skype\Phone\skype.exe"
"c:\windows\system32\hkcmd.exe"
"c:\windows\system32\igfxtray.exe"
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Internet Explorer\wmpscfgs.exe
c:\program files\Skype\Phone\skype.exe
c:\windows\system32\hkcmd.exe
c:\windows\system32\igfxtray.exe

.
((((((((((((((((((((((((( Files Created from 2010-02-11 to 2010-03-11 )))))))))))))))))))))))))))))))
.

2010-03-11 06:33 . 2010-03-11 06:33 4 ----a-w- c:\program files\143578294.dat
2010-03-11 06:33 . 2010-03-11 06:33 4 ----a-w- c:\program files\143567148.dat
2010-03-09 05:43 . 2010-03-09 05:43 4 ----a-w- c:\program files\39018445.dat
2010-03-08 05:49 . 2010-03-08 05:49 4 ----a-w- c:\program files\30880974.dat
2010-03-07 20:31 . 2010-03-07 20:31 4 ----a-w- c:\program files\953881.dat
2010-03-07 20:28 . 2010-03-07 20:28 4 ----a-w- c:\program files\757709.dat
2010-03-07 18:17 . 2010-03-07 18:17 4 ----a-w- c:\program files\14715770.dat
2010-02-27 18:35 . 2010-02-27 18:35 -------- d-----w- C:\_OTM
2010-02-27 18:28 . 2010-02-27 18:28 4 ----a-w- c:\program files\130786430.dat
2010-02-27 14:47 . 2010-02-27 14:47 -------- d-----w- C:\rsit
2010-02-26 06:07 . 2010-02-26 06:07 4 ----a-w- c:\program files\462598391.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-03-11 06:28 . 2010-02-03 16:22 -------- d-----w- c:\program files\Full Tilt Poker
2010-03-10 15:12 . 2009-07-26 05:13 -------- d-----w- c:\program files\PokerStars
2010-03-09 14:39 . 2008-09-06 16:23 -------- d-----w- c:\program files\FlashGet
2010-03-08 19:53 . 2010-01-18 08:28 -------- d-----w- c:\documents and settings\User\Application Data\Skype
2010-03-08 15:04 . 2008-11-10 15:13 -------- d-----w- c:\documents and settings\User\Application Data\skypePM
2010-03-07 20:16 . 2009-06-28 08:16 -------- d-----w- c:\program files\Trend Micro
2010-03-07 12:43 . 2008-11-08 14:13 1 ----a-w- c:\documents and settings\User\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-02-24 18:32 . 2009-04-21 07:54 -------- d-----w- c:\documents and settings\User\Application Data\dvdcss
2010-02-09 04:38 . 2010-02-09 04:38 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\XHEO INC
2010-02-09 04:33 . 2010-02-08 03:15 -------- d-----w- c:\program files\PostgreSQL
2010-02-09 04:32 . 2010-02-09 04:32 -------- d-----w- c:\program files\RVG Software
2010-02-09 04:29 . 2008-08-25 14:27 -------- d-----w- c:\program files\Instal
2010-02-05 15:30 . 2010-02-05 15:30 4 ----a-w- c:\program files\55993814.dat
2010-02-01 15:50 . 2010-02-01 15:50 79488 ----a-w- c:\documents and settings\User\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2010-01-29 11:36 . 2010-01-29 11:36 4 ----a-w- c:\program files\245954854.dat
2010-01-18 08:28 . 2008-09-05 10:44 -------- d-----r- c:\program files\Skype
2010-01-18 08:28 . 2008-11-10 15:11 -------- d-----w- c:\documents and settings\All Users.WINDOWS\Application Data\Skype
2010-01-15 19:44 . 2008-09-05 10:44 -------- d-----w- c:\program files\Common Files\Skype
2010-01-14 08:13 . 2010-01-14 08:13 -------- d-----w- c:\documents and settings\User\Application Data\TeamViewer
2010-01-12 12:59 . 2009-07-16 05:59 -------- d-----w- c:\program files\Ashampoo
2010-01-05 10:00 . 2006-02-28 12:00 832512 ------w- c:\windows\system32\wininet.dll
2010-01-05 10:00 . 2008-11-12 02:22 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-01-05 10:00 . 2008-11-12 02:21 17408 ----a-w- c:\windows\system32\corpol.dll
2009-12-31 16:50 . 2008-11-12 02:20 353792 ----a-w- c:\windows\system32\drivers\srv.sys
2009-12-16 18:43 . 2008-11-12 02:21 343040 ----a-w- c:\windows\system32\mspaint.exe
2009-12-14 07:08 . 2008-11-12 02:20 33280 ----a-w- c:\windows\system32\csrsrv.dll
2009-06-30 08:29 . 2009-06-30 08:29 308160 ----a-w- c:\program files\avast_home_setup.exe
2009-06-28 08:16 . 2009-06-28 08:16 812344 ----a-w- c:\program files\HJTInstall.exe
2009-06-28 08:09 . 2009-05-26 06:01 31863808 ----a-w- c:\program files\eav_nt32_csy.msi
2009-06-11 06:53 . 2009-06-11 06:53 84 ----a-w- c:\program files\b3348.ram
2009-06-09 14:20 . 2009-06-09 14:14 21646127 ----a-w- c:\program files\scribus-1.3.3.13-win32-install.exe
2009-06-09 12:51 . 2009-06-09 12:49 3371384 ----a-w- c:\program files\mbam-setup.exe
2009-06-09 11:40 . 2009-06-09 11:34 21135160 ----a-w- c:\program files\scribus-1.3.3.13-os2-20090501.zip
2009-06-09 11:34 . 2009-06-09 11:29 11909804 ----a-w- c:\program files\scribus-1.3.3.13.7z
2009-06-07 11:30 . 2009-06-07 11:29 17900221 ----a-w- c:\program files\0108.pdf
2009-06-07 10:24 . 2009-06-07 10:24 1815369 ----a-w- c:\program files\gbgallerylitesetup.exe
2009-05-26 06:42 . 2009-05-26 06:41 1880289 ----a-w- c:\program files\radarsync.exe
2009-05-24 09:16 . 2009-05-24 09:10 12743232 ----a-w- c:\program files\WinMPG_VideoConvert_Setup-20016.exe
2009-05-24 05:35 . 2009-05-24 05:35 453824 ----a-w- c:\program files\driveragent_488.exe
2009-05-19 12:26 . 2009-05-19 12:24 10143072 ----a-w- c:\program files\AbsolutePoker8_7_6.exe
2009-05-18 15:11 . 2009-05-18 15:09 10770432 ----a-w- c:\program files\LogMeIn.msi
2006-07-28 06:32 . 2009-06-29 17:57 7005 ------w- c:\program files\Eula.txt
.

((((((((((((((((((((((((((((( SnapShot_2010-03-07_20.35.48 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-03-09 14:40 . 2010-03-09 14:40 16384 c:\windows\temp\Perflib_Perfdata_604.dat
+ 2008-11-12 02:21 . 2008-04-14 00:12 14336 c:\windows\system32\svchost.exe
+ 2008-11-12 02:21 . 2008-04-14 00:12 57856 c:\windows\system32\spoolsv.exe
+ 2008-11-12 02:21 . 2008-04-14 00:12 13312 c:\windows\system32\lsass.exe
+ 2008-11-12 02:20 . 2008-04-14 00:12 507904 c:\windows\system32\winlogon.exe
+ 2008-11-12 02:20 . 2009-02-06 11:06 110592 c:\windows\system32\services.exe
+ 2008-11-12 02:21 . 2006-02-28 12:00 1032192 c:\windows\system32\dllcache\explorer.exe
+ 2008-11-12 02:21 . 2006-02-28 12:00 1032192 c:\windows\explorer.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{399d96ca-6f9a-4fff-95fe-284e45ebb935}"= "c:\program files\RadarSync\tbRad0.dll" [2009-07-24 2215960]

[HKEY_CLASSES_ROOT\clsid\{399d96ca-6f9a-4fff-95fe-284e45ebb935}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{399d96ca-6f9a-4fff-95fe-284e45ebb935}]
2009-07-24 06:11 2215960 ----a-w- c:\program files\RadarSync\tbRad0.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{399d96ca-6f9a-4fff-95fe-284e45ebb935}"= "c:\program files\RadarSync\tbRad0.dll" [2009-07-24 2215960]

[HKEY_CLASSES_ROOT\clsid\{399d96ca-6f9a-4fff-95fe-284e45ebb935}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{399D96CA-6F9A-4FFF-95FE-284E45EBB935}"= "c:\program files\RadarSync\tbRad0.dll" [2009-07-24 2215960]

[HKEY_CLASSES_ROOT\clsid\{399d96ca-6f9a-4fff-95fe-284e45ebb935}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eabconfg.cpl"="c:\program files\HPQ\Quick Launch Buttons\EabServr.exe" [2010-03-09 40448]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [2010-03-09 40448]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2010-03-09 40448]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-03-09 40448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users.WINDOWS\Start Menu\Programs\Startup\
AirLive 802.11G Wireless Utility.lnk - c:\program files\OVISLINK\Common\AirliveUI.exe [2008-11-16 1290240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"JavaQuickStarterService"=2 (0x2)
"hpqwmi"=3 (0x3)
"avg8wd"=2 (0x2)
"avg8emc"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\FlashGet\\flashget.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Ventrilo\\Ventrilo.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Documents and Settings\\User\\temp\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=

S2 postgresql-8.4;PostgreSQL Server 8.4;C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N "postgresql-8.4" -D "C:/Program Files/PostgreSQL/8.4/data" -w --> C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N postgresql-8.4 [?]
S3 TVICHW32;TVICHW32;c:\windows\system32\drivers\TVICHW32.SYS [24. 5. 2009 6:35 23600]
.
.
------- Supplementary Scan -------
.
IE: &Download All with FlashGet - c:\program files\FlashGet\jc_all.htm
IE: &Download with FlashGet - c:\program files\FlashGet\jc_link.htm
FF - ProfilePath - c:\documents and settings\User\Application Data\Mozilla\Firefox\Profiles\13knlli7.default\
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
.
- - - - ORPHANS REMOVED - - - -

HKCU-Run-Skype - c:\program files\Skype\Phone\Skype.exe
HKLM-Run-IgfxTray - c:\windows\system32\igfxtray.exe
HKLM-Run-HotKeysCmds - c:\windows\system32\hkcmd.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-03-11 07:40
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\postgresql-8.4]
"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\postgresql-8.4]
"ImagePath"="C:/Program Files/PostgreSQL/8.4/bin/pg_ctl.exe runservice -N \"postgresql-8.4\" -D \"C:/Program Files/PostgreSQL/8.4/data\" -w"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Cryptography\RNG*]
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
"Seed"=hex:49,31,f4,88,04,28,01,14,c5,ca,fa,5f,f5,cf,66,6e,1f,6c,42,48,3b,1d,
bb,84,6e,c3,98,a3,07,68,b8,a1,8e,3f,71,ca,a8,53,6d,af,a8,e5,29,51,a3,e5,99,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(636)
c:\windows\system32\igfxsrvc.dll
c:\windows\system32\hccutils.DLL
.
Completion time: 2010-03-11 07:41:47
ComboFix-quarantined-files.txt 2010-03-11 06:41
ComboFix2.txt 2010-03-09 14:47
ComboFix3.txt 2010-03-09 05:52
ComboFix4.txt 2010-03-08 06:03
ComboFix5.txt 2010-03-11 06:32

Pre-Run: 14 139 731 968 bytes free
Post-Run: 14 082 670 592 bytes free

- - End Of File - - 8A0E3DC59E0E3EF18DA7DFA1CB5CF123

[Caroprd111]

Vypadá to dobře.

Tohle otestujte na http://www.virustotal.com/cs/
c:\windows\system32\svchost.exe
c:\windows\system32\spoolsv.exe
c:\windows\system32\lsass.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\services.exe
c:\windows\system32\dllcache\explorer.exe
c:\windows\explorer.exe

(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem v podobě odkazu vložte.)

[Lestatos]

dakujem , ten zoznam otestujem ale az po nedeli. Mohli by ste mi este pomoct s mojim PC, v celku s nim nemam problems ale blbne mi skype, vzdy sa mi po nejakej dobe vypne. Pridavam log.

PS, este stale sa neda poslat donacna sms zo slovenska?


Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrator at 2010-03-13 09:21:42
Microsoft Windows XP Professional Service Pack 3
System drive I: has 57 GB (57%) free of 100 GB
Total RAM: 2046 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:21:47, on 13. 3. 2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
I:\WINDOWS\System32\smss.exe
I:\WINDOWS\system32\winlogon.exe
I:\WINDOWS\system32\services.exe
I:\WINDOWS\system32\lsass.exe
I:\WINDOWS\system32\nvsvc32.exe
I:\WINDOWS\system32\svchost.exe
I:\WINDOWS\System32\svchost.exe
I:\WINDOWS\system32\spoolsv.exe
I:\WINDOWS\system32\PnkBstrA.exe
I:\WINDOWS\system32\wscntfy.exe
I:\WINDOWS\explorer.exe
I:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
I:\Program Files\Skype\Plugin Manager\skypePM.exe
I:\Program Files\RVG Software\Holdem Manager\HoldemManager.exe
I:\Program Files\RVG Software\Holdem Manager\HMImport.exe
I:\Program Files\RVG Software\Holdem Manager\HMHud.exe
I:\Program Files\PokerStars\PokerStars.exe
I:\Program Files\Opera\opera.exe
I:\WINDOWS\system32\PnkBstrB.exe
I:\Documents and Settings\Administrator\Desktop\RSIT.exe
I:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - I:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - I:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - I:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - I:\PROGRA~1\FlashGet\getflash.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - I:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - I:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - I:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [JMB36X IDE Setup] I:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] I:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE I:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE I:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "I:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "I:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [swg] "I:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Skype] "I:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [WiseStubReboot] MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I "I:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MSI" TRANSFORMS="I:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MST" WISE_SETUP_EXE_PATH="i:\nvidia\displaydriver\195.62\winxp\english\PhysX_9.09.0814_SystemSoftware.exe"
O4 - HKUS\S-1-5-21-1659004503-796845957-725345543-1004\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'postgrespass')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] I:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download All by FlashGet - I:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - I:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Google Sidewiki... - res://I:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - I:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - I:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - I:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - I:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - I:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - I:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - I:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - I:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - I:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LicCtrl Service (LicCtrlService) - Unknown owner - I:\WINDOWS\runservice.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - I:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - I:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: PnkBstrA - Unknown owner - I:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - I:\WINDOWS\system32\PnkBstrB.exe

--
End of file - 6311 bytes

======Scheduled tasks folder======

I:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
I:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - I:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}]
IeCatch5 Class - I:\PROGRA~1\FlashGet\jccatch.dll [2006-05-16 81920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - I:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-17 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - I:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-17 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F156768E-81EF-470C-9057-481BA8380DBA}]
gFlash Class - I:\PROGRA~1\FlashGet\getflash.dll [2006-07-07 118784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - I:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2009-11-24 953800]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} - FlashGet Bar - I:\PROGRA~1\FlashGet\fgiebar.dll [2005-06-07 86016]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - I:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-17 279664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=I:\WINDOWS\RTHDCPL.EXE [2007-08-10 16384000]
"JMB36X IDE Setup"=I:\WINDOWS\RaidTool\xInsIDE.exe [2007-03-20 36864]
"36X Raid Configurer"=I:\WINDOWS\system32\xRaidSetup.exe [2007-05-25 1957888]
"NvMediaCenter"=I:\WINDOWS\system32\NvMcTray.dll [2009-11-20 110184]
"NvCplDaemon"=I:\WINDOWS\system32\NvCpl.dll [2009-11-20 12669544]
"Adobe Reader Speed Launcher"=I:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=I:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-09-04 935288]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=I:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]
"swg"=I:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-01-15 39408]
"Skype"=I:\Program Files\Skype\Phone\Skype.exe [2010-02-22 26101032]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WiseStubReboot"=MSIEXEC /quiet SKIP_PPU_DRIVER_INSTALL=1 /I I:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MSI TRANSFORMS=I:\Program Files\Common Files\Wise Installation Wizard\WISC5C1C0F0D62F4DBF81D4D7EF397C228B_9_09_0814.MST WISE_SETUP_EXE_PATH=i:\nvidia\displaydriver\195.62\winxp\english\PhysX_9.09.0814_SystemSoftware.exe []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
I:\WINDOWS\system32\WgaLogon.dll [2009-03-10 239496]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"I:\Program Files\Skype\Plugin Manager\skypePM.exe"="I:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"I:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="I:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"I:\Program Files\Opera\opera.exe"="I:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"I:\Program Files\EA GAMES\Battlefield 2\BF2.exe"="I:\Program Files\EA GAMES\Battlefield 2\BF2.exe:*:Enabled:Battlefield 2"
"I:\Documents and Settings\Administrator\temp\TeamViewer\Version5\TeamViewer.exe"="I:\Documents and Settings\Administrator\temp\TeamViewer\Version5\TeamViewer.exe:*:Enabled:TeamViewer"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"I:\Program Files\Skype\Phone\Skype.exe"="I:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0238e934-f603-11de-b332-806d6172696f}]
shell\AutoRun\command - D:\Autorun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a813a381-244e-11df-b340-0015588aac05}]
shell\AutoRun\command - C:\s1.exe
shell\open\command - C:\s1.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{acb7c6ef-002e-11df-b339-0015588aac05}]
shell\AutoRun\command - C:\s1.exe
shell\open\command - C:\s1.exe


======List of files/folders created in the last 1 months======

2010-03-13 09:21:42 ----D---- I:\rsit
2010-03-13 09:21:42 ----D---- I:\Program Files\trend micro
2010-03-10 19:14:47 ----A---- I:\WINDOWS\system32\systeminfo3.dll
2010-03-10 19:14:38 ----D---- I:\WINDOWS\LastGood
2010-03-10 19:14:31 ----D---- I:\Documents and Settings\Administrator\Application Data\Vso
2010-03-10 19:14:31 ----A---- I:\Documents and Settings\Administrator\Application Data\inst.exe
2010-03-10 19:14:25 ----D---- I:\Program Files\CloneDVD5
2010-03-10 19:14:25 ----D---- I:\Documents and Settings\All Users\Application Data\DVDXStudio
2010-03-10 11:18:26 ----SHD---- I:\RECYCLER
2010-03-10 08:59:13 ----D---- I:\Documents and Settings\Administrator\Application Data\Skype
2010-03-10 08:59:09 ----D---- I:\Program Files\Common Files\Skype
2010-03-10 08:59:07 ----RD---- I:\Program Files\Skype
2010-03-09 07:40:09 ----D---- I:\WINDOWS\temp
2010-03-09 07:40:08 ----A---- I:\ComboFix.txt
2010-03-09 07:36:16 ----A---- I:\Boot.bak
2010-03-09 07:36:14 ----RASHD---- I:\cmdcons
2010-03-09 07:28:09 ----A---- I:\WINDOWS\zip.exe
2010-03-09 07:28:09 ----A---- I:\WINDOWS\SWXCACLS.exe
2010-03-09 07:28:09 ----A---- I:\WINDOWS\SWSC.exe
2010-03-09 07:28:09 ----A---- I:\WINDOWS\SWREG.exe
2010-03-09 07:28:09 ----A---- I:\WINDOWS\sed.exe
2010-03-09 07:28:09 ----A---- I:\WINDOWS\PEV.exe
2010-03-09 07:28:09 ----A---- I:\WINDOWS\NIRCMD.exe
2010-03-09 07:28:09 ----A---- I:\WINDOWS\MBR.exe
2010-03-09 07:28:09 ----A---- I:\WINDOWS\grep.exe
2010-03-09 07:27:57 ----D---- I:\WINDOWS\ERDNT
2010-03-09 07:25:39 ----D---- I:\ComboFix
2010-03-09 07:25:35 ----AD---- I:\Qoobox
2010-03-04 07:48:55 ----D---- I:\WINDOWS\system32\xlive
2010-03-04 07:27:50 ----D---- I:\Program Files\Score
2010-03-04 07:20:59 ----A---- I:\WINDOWS\runservice.exe
2010-03-04 07:20:59 ----A---- I:\WINDOWS\mmfs.dll
2010-03-04 07:20:58 ----A---- I:\WINDOWS\msvcr71.dll
2010-03-04 07:18:52 ----D---- I:\Program Files\Battlefront
2010-03-04 03:00:57 ----HDC---- I:\WINDOWS\$NtUninstallKB951978$
2010-03-04 03:00:51 ----HDC---- I:\WINDOWS\$NtUninstallKB975713$
2010-03-04 03:00:45 ----HDC---- I:\WINDOWS\$NtUninstallKB956744$
2010-03-04 03:00:40 ----HDC---- I:\WINDOWS\$NtUninstallKB973540_WM9$
2010-03-03 10:54:46 ----A---- I:\WINDOWS\system32\yk51x86.dll
2010-03-03 10:48:21 ----A---- I:\WINDOWS\system32\devcon_x64.exe
2010-03-03 10:48:21 ----A---- I:\WINDOWS\system32\devcon.exe
2010-03-03 10:48:20 ----D---- I:\Program Files\Driver Checker
2010-03-03 08:06:09 ----D---- I:\WINDOWS\Prefetch
2010-03-03 08:03:09 ----HDC---- I:\WINDOWS\$NtUninstallKB978706$
2010-03-03 08:03:04 ----HDC---- I:\WINDOWS\$NtUninstallKB978251$
2010-03-03 08:02:59 ----HDC---- I:\WINDOWS\$NtUninstallKB978207$
2010-03-03 08:02:54 ----HDC---- I:\WINDOWS\$NtUninstallKB978037$
2010-03-03 08:02:50 ----HDC---- I:\WINDOWS\$NtUninstallKB977914$
2010-03-03 08:02:45 ----HDC---- I:\WINDOWS\$NtUninstallKB977165$
2010-03-03 08:02:38 ----HDC---- I:\WINDOWS\$NtUninstallKB976325$
2010-03-03 08:02:33 ----HDC---- I:\WINDOWS\$NtUninstallKB975560$
2010-03-03 08:02:29 ----HDC---- I:\WINDOWS\$NtUninstallKB975467$
2010-03-03 08:02:25 ----HDC---- I:\WINDOWS\$NtUninstallKB975025$
2010-03-03 08:02:21 ----HDC---- I:\WINDOWS\$NtUninstallKB974571$
2010-03-03 08:02:17 ----HDC---- I:\WINDOWS\$NtUninstallKB974392$
2010-03-03 08:02:13 ----HDC---- I:\WINDOWS\$NtUninstallKB974318$
2010-03-03 08:02:09 ----HDC---- I:\WINDOWS\$NtUninstallKB974112$
2010-03-03 08:02:04 ----HDC---- I:\WINDOWS\$NtUninstallKB973869$
2010-03-03 08:02:00 ----HDC---- I:\WINDOWS\$NtUninstallKB973815$
2010-03-03 08:01:56 ----HDC---- I:\WINDOWS\$NtUninstallKB973687$
2010-03-03 08:01:51 ----HDC---- I:\WINDOWS\$NtUninstallKB973507$
2010-03-03 08:01:47 ----HDC---- I:\WINDOWS\$NtUninstallKB973354$
2010-03-03 08:01:43 ----HDC---- I:\WINDOWS\$NtUninstallKB972270$
2010-03-03 08:01:39 ----HDC---- I:\WINDOWS\$NtUninstallKB971737$
2010-03-03 08:01:35 ----HDC---- I:\WINDOWS\$NtUninstallKB971657$
2010-03-03 08:01:31 ----HDC---- I:\WINDOWS\$NtUninstallKB971633$
2010-03-03 08:01:27 ----HDC---- I:\WINDOWS\$NtUninstallKB971557$
2010-03-03 08:01:22 ----HDC---- I:\WINDOWS\$NtUninstallKB971486$
2010-03-03 08:01:17 ----HDC---- I:\WINDOWS\$NtUninstallKB971468$
2010-03-03 08:01:12 ----HDC---- I:\WINDOWS\$NtUninstallKB970430$
2010-03-03 08:01:08 ----HDC---- I:\WINDOWS\$NtUninstallKB970238$
2010-03-03 08:01:04 ----HDC---- I:\WINDOWS\$NtUninstallKB969947$
2010-03-03 08:01:00 ----HDC---- I:\WINDOWS\$NtUninstallKB969059$
2010-03-03 08:00:54 ----HDC---- I:\WINDOWS\$NtUninstallKB968389$
2010-03-03 08:00:48 ----HDC---- I:\WINDOWS\$NtUninstallKB967715$
2010-03-03 08:00:44 ----HDC---- I:\WINDOWS\$NtUninstallKB961501$
2010-03-03 08:00:40 ----HDC---- I:\WINDOWS\$NtUninstallKB961371-v2$
2010-03-03 08:00:31 ----HDC---- I:\WINDOWS\$NtUninstallKB961118$
2010-03-03 08:00:27 ----HDC---- I:\WINDOWS\$NtUninstallKB960859$
2010-03-03 08:00:23 ----HDC---- I:\WINDOWS\$NtUninstallKB960803$
2010-03-03 08:00:19 ----HDC---- I:\WINDOWS\$NtUninstallKB960225$
2010-03-03 08:00:14 ----HDC---- I:\WINDOWS\$NtUninstallKB959426$
2010-03-03 08:00:10 ----HDC---- I:\WINDOWS\$NtUninstallKB958687$
2010-03-03 08:00:06 ----HDC---- I:\WINDOWS\$NtUninstallKB958644$
2010-03-03 08:00:02 ----HDC---- I:\WINDOWS\$NtUninstallKB957097$
2010-03-03 07:59:58 ----HDC---- I:\WINDOWS\$NtUninstallKB956844$
2010-03-03 07:59:54 ----HDC---- I:\WINDOWS\$NtUninstallKB956803$
2010-03-03 07:59:50 ----HDC---- I:\WINDOWS\$NtUninstallKB956802$
2010-03-03 07:59:43 ----HDC---- I:\WINDOWS\$NtUninstallKB956572$
2010-03-03 07:59:38 ----HDC---- I:\WINDOWS\$NtUninstallKB955759$
2010-03-03 07:59:34 ----HDC---- I:\WINDOWS\$NtUninstallKB973687_1$
2010-03-03 07:59:30 ----HDC---- I:\WINDOWS\$NtUninstallKB955069$
2010-03-03 07:59:26 ----HDC---- I:\WINDOWS\$NtUninstallKB952954$
2010-03-03 07:59:22 ----HDC---- I:\WINDOWS\$NtUninstallKB952287$
2010-03-03 07:59:17 ----HDC---- I:\WINDOWS\$NtUninstallKB952004$
2010-03-03 07:59:12 ----HDC---- I:\WINDOWS\$NtUninstallKB951748$
2010-03-03 07:59:08 ----HDC---- I:\WINDOWS\$NtUninstallKB951376-v2$
2010-03-03 07:59:04 ----HDC---- I:\WINDOWS\$NtUninstallKB951066$
2010-03-03 07:59:00 ----HDC---- I:\WINDOWS\$NtUninstallKB950974$
2010-03-03 07:58:57 ----HDC---- I:\WINDOWS\$NtUninstallKB950762$
2010-03-03 07:58:53 ----HDC---- I:\WINDOWS\$NtUninstallKB946648$
2010-03-03 07:58:48 ----HDC---- I:\WINDOWS\$NtUninstallKB923561$
2010-03-03 07:56:24 ----D---- I:\WINDOWS\system32\scripting
2010-03-03 07:56:23 ----D---- I:\WINDOWS\system32\en
2010-03-03 07:56:23 ----D---- I:\WINDOWS\system32\bits
2010-03-03 07:56:23 ----D---- I:\WINDOWS\l2schemas
2010-03-03 07:53:41 ----D---- I:\WINDOWS\network diagnostic
2010-03-03 07:50:34 ----HDC---- I:\WINDOWS\$NtServicePackUninstall$
2010-02-25 15:20:44 ----D---- I:\Program Files\Common Files\DirectX
2010-02-25 15:17:32 ----D---- I:\Documents and Settings\All Users\Application Data\Divinity 2
2010-02-25 15:04:49 ----D---- I:\Program Files\Divinity II - Ego Draconis - Demo
2010-02-25 14:39:26 ----D---- I:\Program Files\Black Isle
2010-02-25 14:39:04 ----D---- I:\Documents and Settings\Administrator\Application Data\InstallShield
2010-02-25 03:00:15 ----HDC---- I:\WINDOWS\$NtUninstallKB979306$

======List of files/folders modified in the last 1 months======

2010-03-13 09:21:42 ----RD---- I:\Program Files
2010-03-13 07:54:30 ----A---- I:\WINDOWS\system32\PnkBstrB.exe
2010-03-13 07:38:40 ----D---- I:\Documents and Settings\Administrator\Application Data\vlc
2010-03-13 05:52:50 ----A---- I:\WINDOWS\NeroDigital.ini
2010-03-13 05:49:15 ----D---- I:\Program Files\PokerStars
2010-03-12 07:47:00 ----A---- I:\WINDOWS\SchedLgU.Txt
2010-03-11 12:42:22 ----D---- I:\Program Files\Full Tilt Poker
2010-03-10 19:14:47 ----D---- I:\WINDOWS\system32
2010-03-10 19:14:40 ----HD---- I:\WINDOWS\inf
2010-03-10 19:14:40 ----D---- I:\WINDOWS\system32\drivers
2010-03-10 19:14:38 ----D---- I:\WINDOWS
2010-03-10 09:00:05 ----D---- I:\Documents and Settings\Administrator\Application Data\skypePM
2010-03-10 08:59:11 ----SHD---- I:\WINDOWS\Installer
2010-03-10 08:59:09 ----D---- I:\Program Files\Common Files
2010-03-10 08:59:07 ----D---- I:\Documents and Settings\All Users\Application Data\Skype
2010-03-09 07:39:31 ----A---- I:\WINDOWS\system.ini
2010-03-09 07:38:11 ----D---- I:\WINDOWS\AppPatch
2010-03-09 07:36:54 ----D---- I:\WINDOWS\system32\CatRoot2
2010-03-09 07:36:16 ----RASH---- I:\boot.ini
2010-03-05 06:23:26 ----D---- I:\Program Files\Instal
2010-03-04 07:49:08 ----D---- I:\WINDOWS\system32\DirectX
2010-03-04 07:48:55 ----SD---- I:\Documents and Settings\All Users\Application Data\Microsoft
2010-03-04 03:16:07 ----D---- I:\Program Files\FlashGet
2010-03-04 03:00:59 ----RSHDC---- I:\WINDOWS\system32\dllcache
2010-03-04 03:00:55 ----D---- I:\WINDOWS\system32\CatRoot
2010-03-04 03:00:53 ----A---- I:\WINDOWS\imsins.BAK
2010-03-04 03:00:44 ----HD---- I:\WINDOWS\$hf_mig$
2010-03-04 03:00:31 ----HDC---- I:\WINDOWS\$NtUninstallKB971961$
2010-03-03 10:56:45 ----A---- I:\WINDOWS\system32\PerfStringBackup.INI
2010-03-03 10:54:36 ----A---- I:\WINDOWS\RtlExUpd.dll
2010-03-03 08:06:38 ----A---- I:\WINDOWS\OEWABLog.txt
2010-03-03 08:06:12 ----A---- I:\WINDOWS\setuplog.txt
2010-03-03 08:05:52 ----D---- I:\WINDOWS\system32\wbem
2010-03-03 08:05:52 ----D---- I:\WINDOWS\system32\Setup
2010-03-03 08:05:51 ----RSD---- I:\WINDOWS\Fonts
2010-03-03 08:04:55 ----D---- I:\WINDOWS\security
2010-03-03 08:01:49 ----D---- I:\Program Files\Outlook Express
2010-03-03 07:58:54 ----D---- I:\Program Files\Messenger
2010-03-03 07:56:44 ----D---- I:\WINDOWS\WinSxS
2010-03-03 07:56:41 ----D---- I:\Program Files\Windows Media Player
2010-03-03 07:56:30 ----D---- I:\WINDOWS\system32\inetsrv
2010-03-03 07:56:30 ----D---- I:\WINDOWS\ime
2010-03-03 07:56:30 ----D---- I:\WINDOWS\Help
2010-03-03 07:56:24 ----D---- I:\WINDOWS\system32\usmt
2010-03-03 07:56:24 ----D---- I:\WINDOWS\system32\en-US
2010-03-03 07:56:24 ----D---- I:\Program Files\Internet Explorer
2010-03-03 07:56:23 ----D---- I:\WINDOWS\PeerNet
2010-03-03 07:56:23 ----D---- I:\Program Files\Movie Maker
2010-03-03 07:55:14 ----D---- I:\WINDOWS\ServicePackFiles
2010-03-03 07:55:09 ----D---- I:\WINDOWS\system32\Restore
2010-03-03 07:55:08 ----D---- I:\WINDOWS\system32\npp
2010-03-03 07:55:08 ----D---- I:\WINDOWS\mui
2010-03-03 07:55:08 ----D---- I:\WINDOWS\msagent
2010-03-03 07:55:07 ----D---- I:\WINDOWS\srchasst
2010-03-03 07:55:07 ----D---- I:\Program Files\NetMeeting
2010-03-03 07:55:06 ----D---- I:\WINDOWS\system32\Com
2010-03-03 07:55:04 ----D---- I:\Program Files\Windows NT
2010-03-03 07:55:01 ----D---- I:\Program Files\Common Files\System
2010-03-03 07:54:47 ----D---- I:\WINDOWS\system32\oobe
2010-03-03 07:54:46 ----D---- I:\WINDOWS\system
2010-03-03 07:50:33 ----D---- I:\WINDOWS\ehome
2010-03-01 07:40:14 ----D---- I:\Documents and Settings\Administrator\Application Data\dvdcss
2010-02-25 14:45:09 ----RSD---- I:\WINDOWS\assembly
2010-02-25 14:39:25 ----HD---- I:\Program Files\InstallShield Installation Information
2010-02-17 09:37:53 ----SD---- I:\WINDOWS\Tasks
2010-02-17 09:37:50 ----D---- I:\Program Files\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 intelppm;Intel Processor Driver; I:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R2 irda;IrDA Protocol; I:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R3 Arp1394;1394 ARP Client Protocol; I:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; I:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Microsoft HID Class Driver; I:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); I:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-08-10 4603904]
R3 irsir;Microsoft Serial Infrared Driver; I:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Mouse HID Driver; I:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 NIC1394;1394 Net Driver; I:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 nv;nv; I:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2009-11-21 10235968]
R3 pcouffin;VSO Software pcouffin; I:\WINDOWS\System32\Drivers\pcouffin.sys [2010-03-10 47360]
R3 PnkBstrK;PnkBstrK; \??\I:\WINDOWS\system32\drivers\PnkBstrK.sys []
R3 Rasirda;WAN Miniport (IrDA); I:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; I:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;USB2 Enabled Hub; I:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbstor;USB Mass Storage Driver; I:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; I:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; I:\WINDOWS\system32\DRIVERS\yk51x86.sys [2010-03-03 297344]
S3 catchme;catchme; \??\I:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\catchme.sys []
S3 mbr;mbr; \??\I:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\mbr.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Irmon;Infrared Monitor; I:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 nvsvc;NVIDIA Display Driver Service; I:\WINDOWS\system32\nvsvc32.exe [2009-11-20 154216]
R2 pgsql-8.3;PostgreSQL Database Server 8.3; I:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe [2009-03-13 65536]
R2 PnkBstrA;PnkBstrA; I:\WINDOWS\system32\PnkBstrA.exe [2010-01-01 75064]
R2 PnkBstrB;PnkBstrB; I:\WINDOWS\system32\PnkBstrB.exe [2010-03-13 215128]
S2 gupdate;Služba Google Update (gupdate); I:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-17 135664]
S2 LicCtrlService;LicCtrl Service; I:\WINDOWS\runservice.exe [2010-03-04 16384]
S3 aspnet_state;ASP.NET State Service; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; I:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; I:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gusvc;Google Software Updater; I:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-01-17 182768]
S3 idsvc;Windows CardSpace; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; I:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; I:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; I:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Caroprd111]

Na druhý PC si založte nové téma.

Podpora pomocí SMS ze Slovenska nefunguje.