Logfile of random's system information tool 1.09 (written by random/random)
Run by admin at 2012-02-07 16:00:46
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 22 GB (29%) free of 76 GB
Total RAM: 2559 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:01:02, on 7.2.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\admin\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\admin.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.toggle.com/en/index.php?rvs= ... earchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1&barid={1E ... 1F1F892C2E}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.toggle.com/en/index.php?rvs= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=1&barid={1E ... 1F1F892C2E}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
O2 - BHO: script helper for ie - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files\BrowserCompanion\jsloader.dll
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
O2 - BHO: BFlix - {0C9F4179-6CE2-4c6a-A3E5-67FF3592A12E} - C:\Program Files\BFlix\BFlix.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll
O2 - BHO: Update Timer - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files\BrowserCompanion\updatebhoWin32.dll
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
O2 - BHO: Vizuální záložky - {C93F72A2-2162-4BBA-A07A-F13663C297A6} - C:\Program Files\Yandex\YandexBarIE\fastdial.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
O3 - Toolbar: Yandex.Bar - {91397D20-1446-11D4-8AF4-0040CA1127B6} - C:\Program Files\Yandex\YandexBarIE\yndbar.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [Browser companion helper] C:\Program Files\BrowserCompanion\BCHelper.exe /T=3 /CHI=clbfjfbnelcflpgpklppgplejolacbej
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe
O4 - HKLM\..\Run: [4StoryPrePatch] F:\Program Files\Gameforge4D\4Story_CZ\PrePatch.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [ROC_roc_dec12] "C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UpdateService\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [DAEMON Tools Lite] "F:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Steam] "F:\Program Files\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [BitTorrent] "C:\Documents and Settings\admin\Dokumenty\Downloads\BitTorrent-7.5.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Search the Web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll
O18 - Protocol: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
O18 - Protocol: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files\BrowserCompanion\tdataprotocol.dll
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: vToolbarUpdater - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe
--
End of file - 10708 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-2147014839-725345543-1004Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-2147014839-725345543-1004UA.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00cbb66b-1d3b-46d3-9577-323a336acb50}]
Chatvibes Browser Helper - C:\Program Files\BrowserCompanion\jsloader.dll [2011-10-27 225584]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
Yahoo! Companion BHO - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll [2005-04-22 328275]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C9F4179-6CE2-4c6a-A3E5-67FF3592A12E}]
BFlix Class - C:\Program Files\BFlix\BFlix.dll [2011-12-30 167936]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
Babylon toolbar helper
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG2012\avgssie.dll [2011-11-11 1378144]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2012-01-13 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
AVG Security Toolbar - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll [2012-01-15 1811296]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}]
Chatvibes Browser Helper Verifier - C:\Program Files\BrowserCompanion\updatebhoWin32.dll [2011-10-27 141104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files\uTorrentBar\prxtbuTor.dll [2011-05-09 176936]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
Vizuální záložky - C:\Program Files\Yandex\YandexBarIE\fastdial.dll [2011-10-13 2697528]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-01-13 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-01-13 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-08-24 1299248]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88} - &Yahoo! Companion - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll [2005-04-22 328275]
{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll [2012-01-15 1811296]
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files\uTorrentBar\prxtbuTor.dll [2011-05-09 176936]
{91397D20-1446-11D4-8AF4-0040CA1127B6} - Yandex.Bar - C:\Program Files\Yandex\YandexBarIE\yndbar.dll [2011-10-20 12336440]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2011-08-24 1299248]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2010-09-03 19573352]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-08-03 13892200]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-08-03 111208]
"AVG_TRAY"=C:\Program Files\AVG\AVG2012\avgtray.exe [2012-01-24 2416480]
"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2012-01-15 939872]
"Browser companion helper"=C:\Program Files\BrowserCompanion\BCHelper.exe [2011-12-16 187696]
"SweetIM"=C:\Program Files\SweetIM\Messenger\SweetIM.exe [2011-08-01 114992]
"4StoryPrePatch"=F:\Program Files\Gameforge4D\4Story_CZ\PrePatch.exe []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-22 3080264]
"ROC_roc_dec12"=C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe [2012-01-15 928096]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UpdateService\isuspm.exe [2004-06-16 221184]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Google Update"=C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-12-13 136176]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-10-13 19550344]
"DAEMON Tools Lite"=F:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-11-10 3514176]
"Steam"=F:\Program Files\Steam\Steam.exe [2011-12-26 1242448]
"BitTorrent"=C:\Documents and Settings\admin\Dokumenty\Downloads\BitTorrent-7.5.exe /MINIMIZED []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\AVG\AVG2012\avgmfapx.exe"="C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalátor AVG"
"F:\Program Files\uTorrent\uTorrent.exe"="F:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"F:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="F:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"F:\Profile files\Allods Online\bin\Launcher.exe"="F:\Profile files\Allods Online\bin\Launcher.exe:*:Enabled:Allods Launcher"
"F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe"="F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9"
"F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe"="F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10"
"F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe"="F:\Program Files\Ubisoft\Assassin's Creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"F:\Program Files\Ubisoft\Assassin's Creed II\server.exe"="F:\Program Files\Ubisoft\Assassin's Creed II\server.exe:*:Enabled:server"
"F:\Program Files\Ubisoft\Assassin's Creed II\AssassinsCreedIIGame.exe"="F:\Program Files\Ubisoft\Assassin's Creed II\AssassinsCreedIIGame.exe:*:Enabled:Assassin's Creed II"
"F:\Program Files\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe"="F:\Program Files\Ubisoft\Assassin's Creed II\AssassinsCreedII.exe:*:Enabled:Assassin's Creed II Update"
"F:\Program Files\Ubisoft\Assassin's Creed II\UPlayBrowser.exe"="F:\Program Files\Ubisoft\Assassin's Creed II\UPlayBrowser.exe:*:Enabled:Assassin's Creed II Uplay"
"F:\World_of_Tanks\WOTLauncher.exe"="F:\World_of_Tanks\WOTLauncher.exe:*:Enabled:World of Tanks Launcher"
"F:\World_of_Tanks\WorldOfTanks.exe"="F:\World_of_Tanks\WorldOfTanks.exe:*:Enabled:World of Tanks"
"C:\Program Files\AVG\AVG2012\avgnsx.exe"="C:\Program Files\AVG\AVG2012\avgnsx.exe:*:Enabled:Webový štít"
"C:\Program Files\AVG\AVG2012\avgdiagex.exe"="C:\Program Files\AVG\AVG2012\avgdiagex.exe:*:Enabled:AVG Diagnostika 2012"
"C:\Documents and Settings\admin\Dokumenty\Downloads\BitTorrent-7.5.exe"="C:\Documents and Settings\admin\Dokumenty\Downloads\BitTorrent-7.5.exe:*:Enabled:BitTorrent"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
======List of files/folders created in the last 1 month======
2012-02-07 16:00:46 ----D---- C:\rsit
2012-02-07 16:00:46 ----D---- C:\Program Files\trend micro
2012-02-06 18:05:28 ----D---- C:\Program Files\The Saboteur [MULTI3][PCDVD][WwW.GamesTorrents.CoM]
2012-02-06 17:12:55 ----D---- C:\Documents and Settings\admin\Data aplikací\BitTorrent
2012-02-04 10:27:03 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\InstallShield
2012-02-04 10:24:47 ----D---- C:\Documents and Settings\admin\Data aplikací\Xfire
2012-02-04 10:24:20 ----A---- C:\WINDOWS\system32\drivers\atksgt.sys
2012-02-04 10:24:19 ----A---- C:\WINDOWS\system32\drivers\lirsgt.sys
2012-01-30 15:51:48 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\RELOADED
2012-01-22 12:01:42 ----D---- C:\Program Files\BFlix
2012-01-22 12:01:39 ----D---- C:\Program Files\Windows Sidebar
2012-01-22 09:33:09 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2012-01-21 11:28:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2012-01-21 11:28:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2012-01-21 11:28:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2012-01-21 11:28:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2012-01-21 11:27:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2012-01-21 11:27:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2012-01-21 11:27:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2012-01-21 11:27:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2012-01-21 11:27:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2012-01-21 11:26:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2012-01-20 15:42:28 ----D---- C:\Program Files\Ubisoft
2012-01-20 13:48:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2012-01-20 13:48:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2012-01-20 13:47:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2012-01-20 13:47:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2012-01-20 13:46:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2012-01-20 13:46:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2012-01-20 13:46:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2639417$
2012-01-20 13:45:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2012-01-20 13:45:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2012-01-20 13:45:10 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2012-01-20 13:44:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2012-01-20 13:44:21 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2012-01-20 13:43:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2012-01-20 13:43:05 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2012-01-20 13:42:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2012-01-20 13:42:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2012-01-20 13:41:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2641690$
2012-01-20 13:41:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2012-01-20 13:40:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2012-01-20 13:40:30 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2012-01-20 13:39:04 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2012-01-20 13:38:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2012-01-20 13:38:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2012-01-20 13:38:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2012-01-20 13:38:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2012-01-20 13:37:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2012-01-20 13:37:31 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2012-01-20 13:36:39 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2012-01-20 13:36:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2507618$
2012-01-20 13:35:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2012-01-20 13:35:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2012-01-20 13:35:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2012-01-20 13:34:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2012-01-20 13:34:36 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2012-01-20 13:34:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2012-01-20 13:33:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2633952$
2012-01-20 13:33:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2012-01-20 13:32:36 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2012-01-20 13:32:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2012-01-20 13:31:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2012-01-20 13:31:19 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2012-01-20 13:31:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2541763$
2012-01-20 13:30:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2012-01-20 13:30:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2012-01-20 13:29:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2012-01-20 13:29:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2012-01-20 13:29:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2012-01-20 13:28:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2633171$
2012-01-20 13:28:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2012-01-20 13:27:57 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2012-01-18 16:43:39 ----A---- C:\WINDOWS\system32\wmpns.dll
2012-01-18 16:41:35 ----D---- C:\WINDOWS\Prefetch
2012-01-18 16:37:33 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2012-01-18 16:37:26 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2012-01-18 16:37:16 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2012-01-18 16:37:07 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2012-01-18 16:36:56 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2012-01-18 16:36:50 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2012-01-18 16:36:43 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2012-01-18 16:36:37 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2012-01-18 16:36:30 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2012-01-18 16:36:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2012-01-18 16:36:14 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2012-01-18 16:36:07 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2012-01-18 16:35:57 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2012-01-18 16:35:50 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2012-01-18 16:35:43 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2012-01-18 16:35:36 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2012-01-18 16:35:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2012-01-18 16:35:24 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2012-01-18 16:35:17 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2012-01-18 16:35:09 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2012-01-18 16:35:02 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2012-01-18 16:34:55 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2012-01-18 16:34:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2012-01-18 16:34:39 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2012-01-18 16:34:32 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2012-01-18 16:34:26 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2012-01-18 16:34:20 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2012-01-18 16:34:12 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2012-01-18 16:34:03 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2012-01-18 16:33:56 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2012-01-18 16:33:49 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2012-01-18 16:33:41 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2012-01-18 16:33:35 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2012-01-18 16:33:24 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2012-01-18 16:33:15 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2012-01-18 16:33:09 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2012-01-18 16:33:02 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2012-01-18 16:32:55 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2012-01-18 16:32:48 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2012-01-18 16:32:41 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2012-01-18 16:32:35 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2012-01-18 16:32:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2012-01-18 16:32:11 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2012-01-18 16:32:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2012-01-18 16:31:54 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2012-01-18 16:31:45 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2012-01-18 16:31:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2012-01-18 16:31:30 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2012-01-18 16:31:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2012-01-18 16:18:54 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2012-01-17 16:24:41 ----D---- C:\Documents and Settings\admin\Data aplikací\Ubisoft
2012-01-17 16:09:38 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Ubisoft
2012-01-17 15:58:45 ----D---- C:\Documents and Settings\admin\Data aplikací\InstallShield
2012-01-15 15:39:55 ----D---- C:\WINDOWS\system32\cache
2012-01-15 11:34:53 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\ESET
2012-01-15 11:30:13 ----D---- C:\Program Files\AVG Secure Search
2012-01-13 18:23:42 ----D---- C:\Documents and Settings\admin\Data aplikací\NVIDIA
2012-01-13 18:19:37 ----D---- C:\Documents and Settings\admin\Data aplikací\.minecraft
2012-01-13 18:19:22 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\Sun
2012-01-13 18:19:21 ----D---- C:\Program Files\Common Files\Java
2012-01-13 18:18:13 ----A---- C:\WINDOWS\system32\javaws.exe
2012-01-13 18:18:13 ----A---- C:\WINDOWS\system32\javaw.exe
2012-01-13 18:18:13 ----A---- C:\WINDOWS\system32\java.exe
2012-01-13 18:18:13 ----A---- C:\WINDOWS\system32\deployJava1.dll
2012-01-13 18:17:49 ----D---- C:\Program Files\Java
2012-01-13 18:15:44 ----D---- C:\Documents and Settings\admin\Data aplikací\Sun
======List of files/folders modified in the last 1 month======
2012-02-07 16:00:46 ----RD---- C:\Program Files
2012-02-07 15:59:57 ----D---- C:\Documents and Settings\admin\Data aplikací\Skype
2012-02-07 15:48:48 ----D---- C:\WINDOWS\Temp
2012-02-06 21:29:37 ----D---- C:\Documents and Settings\admin\Data aplikací\uTorrent
2012-02-06 17:02:20 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-02-06 13:23:46 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\MFAData
2012-02-05 18:29:57 ----D---- C:\WINDOWS\system32\Restore
2012-02-05 10:27:31 ----D---- C:\WINDOWS\system32
2012-02-04 14:11:31 ----HD---- C:\Program Files\InstallShield Installation Information
2012-02-04 10:26:55 ----SD---- C:\WINDOWS\Downloaded Program Files
2012-02-04 10:26:54 ----D---- C:\Program Files\Common Files\InstallShield
2012-02-04 10:24:20 ----D---- C:\WINDOWS\system32\drivers
2012-02-01 20:51:26 ----SD---- C:\Documents and Settings\admin\Data aplikací\Microsoft
2012-02-01 12:33:21 ----SHD---- C:\WINDOWS\Installer
2012-02-01 12:33:03 ----D---- C:\WINDOWS\system32\drivers\AVG
2012-02-01 12:32:45 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-02-01 12:29:03 ----D---- C:\WINDOWS\system32\CatRoot2
2012-01-29 17:53:33 ----D---- C:\WINDOWS
2012-01-28 17:48:21 ----D---- C:\WINDOWS\system32\DirectX
2012-01-27 15:14:15 ----D---- C:\Documents and Settings\admin\Data aplikací\U3
2012-01-25 11:33:55 ----HD---- C:\WINDOWS\inf
2012-01-22 12:01:44 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\InstallMate
2012-01-21 12:51:15 ----D---- C:\WINDOWS\Help
2012-01-21 11:28:39 ----A---- C:\WINDOWS\imsins.BAK
2012-01-21 11:28:06 ----HD---- C:\WINDOWS\$hf_mig$
2012-01-20 13:47:12 ----D---- C:\WINDOWS\WinSxS
2012-01-20 13:44:09 ----D---- C:\WINDOWS\system32\CatRoot
2012-01-20 13:40:05 ----D---- C:\Program Files\Internet Explorer
2012-01-20 13:39:36 ----D---- C:\WINDOWS\ie8updates
2012-01-20 13:32:41 ----D---- C:\Program Files\Movie Maker
2012-01-20 13:28:29 ----D---- C:\Program Files\Outlook Express
2012-01-19 16:06:44 ----D---- C:\Program Files\Messenger
2012-01-18 16:43:52 ----A---- C:\WINDOWS\OEWABLog.txt
2012-01-18 16:41:40 ----A---- C:\WINDOWS\setuplog.txt
2012-01-18 16:41:07 ----D---- C:\WINDOWS\system32\Setup
2012-01-18 16:41:07 ----D---- C:\WINDOWS\AppPatch
2012-01-18 16:41:06 ----D---- C:\WINDOWS\system32\wbem
2012-01-18 16:41:05 ----RSD---- C:\WINDOWS\Fonts
2012-01-18 16:38:24 ----D---- C:\WINDOWS\security
2012-01-18 16:28:02 ----D---- C:\Program Files\Windows Media Player
2012-01-18 16:27:50 ----D---- C:\WINDOWS\network diagnostic
2012-01-18 16:27:50 ----D---- C:\WINDOWS\ime
2012-01-18 16:27:36 ----D---- C:\WINDOWS\system32\usmt
2012-01-18 16:27:36 ----D---- C:\WINDOWS\system32\cs-cz
2012-01-18 16:27:35 ----D---- C:\WINDOWS\l2schemas
2012-01-18 16:27:34 ----D---- C:\WINDOWS\system32\cs
2012-01-18 16:27:34 ----D---- C:\WINDOWS\system32\bits
2012-01-18 16:27:34 ----D---- C:\WINDOWS\PeerNet
2012-01-18 16:25:06 ----D---- C:\WINDOWS\system32\npp
2012-01-18 16:25:05 ----D---- C:\WINDOWS\msagent
2012-01-18 16:25:03 ----D---- C:\WINDOWS\srchasst
2012-01-18 16:25:03 ----D---- C:\Program Files\NetMeeting
2012-01-18 16:25:01 ----D---- C:\WINDOWS\system32\Com
2012-01-18 16:24:58 ----D---- C:\Program Files\Windows NT
2012-01-18 16:24:51 ----D---- C:\Program Files\Common Files\System
2012-01-18 16:24:29 ----D---- C:\WINDOWS\system32\oobe
2012-01-18 16:24:27 ----D---- C:\WINDOWS\system
2012-01-18 16:18:37 ----D---- C:\WINDOWS\ehome
2012-01-18 16:07:29 ----A---- C:\WINDOWS\system32\MRT.exe
2012-01-18 16:04:11 ----D---- C:\WINDOWS\Minidump
2012-01-17 15:58:28 ----D---- C:\Documents and Settings\admin\Data aplikací\DAEMON Tools Lite
2012-01-15 15:40:08 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\AVG Secure Search
2012-01-15 11:34:53 ----D---- C:\Program Files\ESET
2012-01-14 12:49:53 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2012-01-13 18:19:21 ----D---- C:\Program Files\Common Files
2012-01-13 13:14:32 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2012-01-12 22:02:56 ----D---- C:\Documents and Settings\admin\Data aplikací\vlc
2012-01-08 17:03:54 ----D---- C:\Documents and Settings\All Users.WINDOWS\Data aplikací\SweetIM
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-07-11 23120]
R0 nvgts;nvgts; C:\WINDOWS\system32\DRIVERS\nvgts.sys [2010-04-08 168040]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2006-06-18 43008]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-07-11 295248]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-12-26 239168]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2011-08-04 103112]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2012-02-04 271360]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2012-02-04 18048]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2010-09-03 6139496]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-08-03 12542592]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-06-21 91496]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2009-11-18 1691480]
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2009-11-18 1395800]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-22 974944]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2012-01-13 153376]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-08-03 146024]
S2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
S2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-12-15 75136]
S2 vToolbarUpdater;vToolbarUpdater; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe [2012-01-15 909152]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Zasekané PC , prosím o kontrolu LOGU
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119515
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zasekané PC , prosím o kontrolu LOGU
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
a klikněte na MoveIt!. Po skenu restartujte PC.:files
C:\Program Files\SweetIM
C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_6_2_0.dll
C:\Program Files\BFlix
C:\Program Files\BrowserCompanion\updatebhoWin32.dll
C:\Program Files\Yandex
C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Update
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-2147014839-725345543-1004Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1757981266-2147014839-725345543-1004UA.job
:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00cbb66b-1d3b-46d3-9577-323a336acb50}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C9F4179-6CE2-4c6a-A3E5-67FF3592A12E}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{963B125B-8B21-49A2-A3A8-E37092276531}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C93F72A2-2162-4BBA-A07A-F13663C297A6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=-
"{91397D20-1446-11D4-8AF4-0040CA1127B6}"=-
"{EEE6C35B-6118-11DC-9C72-001320C79847}"=-
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SweetIM"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"=-
:commands
[Purity]
[Emptytemp]
[Emptyflash]
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zasekané PC , prosím o kontrolu LOGU
Děkuji moc
- Rudy
- Site Admin
- Příspěvky: 119515
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zasekané PC , prosím o kontrolu LOGU
Spusťte znovu OTM a klikněte na CleanUp. OTM po sobě uklidí.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.