Facebook vir 2

[motji]

A použila jste T-cleaner a OTC? Použijte ho a pak poprosím znovu o log ze Rsitu

[sengaX]

Jestli ještě můžu??? ... Celou dobu jsem měla problémy se sledováním ivysílání čt, prohlížeče se sekly a jen Google Chrome nahlásil, že nereaguje firefox plugin. Pak jsem vysílání někdy sledovala přes Real Player, někdy to šlo, někdy se taky sekl. Dnes funguje. Kdyby byly problémy, dalo by se to taky řešit tady na fóru?

Jo, ještě jsem teď objevila ve Céčku nějaké soubory Potvora + číslo ... Předpokládám, taky odstranit. Některé jsou prázdné, některé mají něco přes 30kB.

[sengaX]

Ano, použila jsem všechno, log je až po úklidu ...

[sengaX]

T-Cleaner nebyl odstraněný, takže tady nový log po odstranění jeho i stop po Potvoře:

Logfile of random's system information tool 1.06 (written by random/random)
Run by senga at 2010-03-20 20:53:32
Microsoft® Windows Vista™ Ultimate Service Pack 1
System drive C: has 232 GB (76%) free of 305 GB
Total RAM: 1789 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:53:35, on 20.3.2010
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\System Control Manager\MGSysCtrl.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Ask & Record Toolbar\FLVSrvc.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\system32\taskeng.exe
C:\Windows\ehome\ehmsas.exe
C:\Users\senga\AppData\Local\Google\Update\1.2.183.23\GoogleCrashHandler.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Users\senga\Downloads\RSIT.exe
C:\Program Files\trend micro\senga.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Ask and Record FLV Service] "C:\Program Files\Ask & Record Toolbar\FLVSrvc.exe" /run
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\senga\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Micro Star SCM - Micro-Star Int'l Co., Ltd. - C:\Program Files\System Control Manager\MSIService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

--
End of file - 6810 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4049098025-673099186-213311711-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4049098025-673099186-213311711-1000UA.job
C:\Windows\tasks\Wise Registry Cleaner 4.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-19 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-02-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]
{32099AAC-C132-4136-9E9A-4E364A424E17}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-04-04 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-08-20 6265376]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-07-19 13543968]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-07-19 92704]
"MGSysCtrl"=C:\Program Files\System Control Manager\MGSysCtrl.exe [2008-11-11 708608]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-11-10 417792]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"Ask and Record FLV Service"=C:\Program Files\Ask & Record Toolbar\FLVSrvc.exe [2009-03-10 156672]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-02-15 141608]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-03-09 2769336]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-19 202256]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2008-04-04 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-04-04 125952]
"Google Update"=C:\Users\senga\AppData\Local\Google\Update\GoogleUpdate.exe [2009-12-30 135664]

C:\Users\senga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"$INSTDIR\FlvDetector.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlvDetector.exe:*:Enabled:FGFlvDetector"
"C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-03-20 20:17:28 ----D---- C:\rsit
2010-03-19 23:11:20 ----D---- C:\Program Files\Common Files\xing shared
2010-03-19 22:40:06 ----SHD---- C:\$RECYCLE.BIN
2010-03-19 22:40:03 ----D---- C:\Windows\temp
2010-03-19 21:28:50 ----A---- C:\Windows\PEV.exe
2010-03-19 21:28:50 ----A---- C:\Windows\MBR.exe
2010-03-19 21:28:43 ----D---- C:\Windows\ERDNT
2010-03-19 12:01:58 ----D---- C:\Program Files\trend micro
2010-03-17 11:10:02 ----D---- C:\ProgramData\Alwil Software
2010-03-17 10:37:28 ----A---- C:\Windows\system32\jscript.dll
2010-03-16 23:35:14 ----A---- C:\Windows\system32\occache.dll
2010-03-16 23:35:13 ----A---- C:\Windows\system32\msfeeds.dll
2010-03-16 23:35:13 ----A---- C:\Windows\system32\jsproxy.dll
2010-03-16 23:35:13 ----A---- C:\Windows\system32\iepeers.dll
2010-03-16 23:35:12 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-03-16 23:35:12 ----A---- C:\Windows\system32\ieui.dll
2010-03-16 23:35:11 ----A---- C:\Windows\system32\wininet.dll
2010-03-16 23:35:11 ----A---- C:\Windows\system32\iesetup.dll
2010-03-16 23:35:11 ----A---- C:\Windows\system32\iernonce.dll
2010-03-16 23:35:10 ----A---- C:\Windows\system32\msfeedssync.exe
2010-03-16 23:35:10 ----A---- C:\Windows\system32\iertutil.dll
2010-03-16 23:35:10 ----A---- C:\Windows\system32\ie4uinit.exe
2010-03-16 23:35:09 ----A---- C:\Windows\system32\urlmon.dll
2010-03-16 23:35:09 ----A---- C:\Windows\system32\ieUnatt.exe
2010-03-16 23:35:09 ----A---- C:\Windows\system32\iesysprep.dll
2010-03-16 23:35:09 ----A---- C:\Windows\system32\iedkcs32.dll
2010-03-16 23:35:07 ----A---- C:\Windows\system32\ieframe.dll
2010-03-16 23:35:06 ----A---- C:\Windows\system32\mshtml.dll
2010-03-16 23:34:01 ----A---- C:\Windows\system32\mshtmled.dll
2010-03-16 23:34:01 ----A---- C:\Windows\system32\icardie.dll
2010-03-16 23:34:00 ----A---- C:\Windows\system32\msls31.dll
2010-03-16 23:34:00 ----A---- C:\Windows\system32\mshtmler.dll
2010-03-16 23:34:00 ----A---- C:\Windows\system32\admparse.dll
2010-03-16 23:33:59 ----A---- C:\Windows\system32\imgutil.dll
2010-03-16 23:33:59 ----A---- C:\Windows\system32\ieakeng.dll
2010-03-16 23:33:59 ----A---- C:\Windows\system32\dxtmsft.dll
2010-03-16 23:33:59 ----A---- C:\Windows\system32\corpol.dll
2010-03-16 23:33:58 ----A---- C:\Windows\system32\licmgr10.dll
2010-03-16 23:33:58 ----A---- C:\Windows\system32\inseng.dll
2010-03-16 23:33:58 ----A---- C:\Windows\system32\dxtrans.dll
2010-03-16 23:33:57 ----A---- C:\Windows\system32\webcheck.dll
2010-03-16 23:33:57 ----A---- C:\Windows\system32\msrating.dll
2010-03-16 23:33:57 ----A---- C:\Windows\system32\ieaksie.dll
2010-03-16 23:33:56 ----A---- C:\Windows\system32\WinFXDocObj.exe
2010-03-16 23:33:56 ----A---- C:\Windows\system32\wextract.exe
2010-03-16 23:33:56 ----A---- C:\Windows\system32\mstime.dll
2010-03-16 23:33:56 ----A---- C:\Windows\system32\ieakui.dll
2010-03-16 23:33:55 ----A---- C:\Windows\system32\pngfilt.dll
2010-03-16 23:33:55 ----A---- C:\Windows\system32\advpack.dll
2010-03-16 23:33:54 ----A---- C:\Windows\system32\vbscript.dll
2010-03-16 23:33:54 ----A---- C:\Windows\system32\ieapfltr.dll
2010-03-16 23:33:53 ----A---- C:\Windows\system32\url.dll
2010-03-16 23:33:52 ----A---- C:\Windows\system32\mshta.exe
2010-03-16 23:33:51 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2010-03-16 23:33:51 ----A---- C:\Windows\system32\SetDepNx.exe
2010-03-16 23:33:51 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2010-03-16 23:33:51 ----A---- C:\Windows\system32\PDMSetup.exe
2010-03-16 23:33:51 ----A---- C:\Windows\system32\iexpress.exe
2010-03-12 10:38:10 ----A---- C:\Windows\system32\browserchoice.exe
2010-03-11 20:33:17 ----D---- C:\ProgramData\Sun
2010-03-11 20:33:16 ----D---- C:\Program Files\Common Files\Java
2010-03-11 20:32:47 ----A---- C:\Windows\system32\javaws.exe
2010-03-11 20:32:47 ----A---- C:\Windows\system32\javaw.exe
2010-03-11 20:32:47 ----A---- C:\Windows\system32\java.exe
2010-03-11 09:58:04 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-11 09:58:00 ----A---- C:\Windows\system32\httpapi.dll
2010-03-01 23:13:27 ----D---- C:\Users\senga\AppData\Roaming\Apple Computer
2010-03-01 23:13:11 ----DC---- C:\Windows\system32\DRVSTORE
2010-03-01 23:13:11 ----A---- C:\Windows\system32\GEARAspi.dll
2010-03-01 23:12:33 ----D---- C:\Program Files\iPod
2010-03-01 23:12:29 ----D---- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}
2010-03-01 23:12:29 ----D---- C:\Program Files\iTunes
2010-03-01 23:11:55 ----D---- C:\Program Files\Bonjour
2010-02-24 14:10:20 ----A---- C:\Windows\system32\tzres.dll
2010-02-24 14:07:58 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-02-24 14:07:57 ----A---- C:\Windows\system32\RMActivate.exe
2010-02-24 14:07:56 ----A---- C:\Windows\system32\secproc.dll
2010-02-24 14:07:56 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-02-24 14:07:56 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-02-24 14:07:55 ----A---- C:\Windows\system32\secproc_isv.dll
2010-02-24 14:07:52 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-02-24 14:07:52 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-02-24 14:07:52 ----A---- C:\Windows\system32\msdrm.dll
2010-02-21 15:13:26 ----D---- C:\Users\senga\AppData\Roaming\DAEMON Tools Lite
2010-02-21 15:13:22 ----D---- C:\ProgramData\DAEMON Tools Lite

======List of files/folders modified in the last 1 months======

2010-03-20 20:28:36 ----D---- C:\Windows\system32\Tasks
2010-03-20 20:16:52 ----D---- C:\Windows\System32
2010-03-20 20:16:52 ----D---- C:\Windows\inf
2010-03-20 20:16:52 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-03-20 20:10:11 ----D---- C:\Windows
2010-03-20 18:44:34 ----D---- C:\Windows\Debug
2010-03-19 23:11:48 ----D---- C:\Program Files\Common Files\Real
2010-03-19 23:11:45 ----A---- C:\Windows\system32\rmoc3260.dll
2010-03-19 23:11:31 ----A---- C:\Windows\system32\pndx5032.dll
2010-03-19 23:11:31 ----A---- C:\Windows\system32\pndx5016.dll
2010-03-19 23:11:26 ----SHD---- C:\Windows\Installer
2010-03-19 23:11:25 ----D---- C:\Program Files\Real
2010-03-19 23:11:20 ----D---- C:\Program Files\Common Files
2010-03-19 23:10:50 ----A---- C:\Windows\system32\pncrt.dll
2010-03-19 22:34:37 ----A---- C:\Windows\system.ini
2010-03-19 22:34:07 ----RD---- C:\Program Files
2010-03-19 22:30:24 ----D---- C:\Windows\system32\drivers
2010-03-19 22:30:24 ----D---- C:\Windows\AppPatch
2010-03-19 21:29:54 ----D---- C:\Windows\Prefetch
2010-03-19 07:15:54 ----SHD---- C:\System Volume Information
2010-03-18 12:52:01 ----D---- C:\Users\senga\AppData\Roaming\Skype
2010-03-18 09:28:56 ----D---- C:\Users\senga\AppData\Roaming\skypePM
2010-03-18 08:15:25 ----D---- C:\ProgramData\Real
2010-03-18 07:45:53 ----D---- C:\Windows\winsxs
2010-03-18 07:43:09 ----D---- C:\Windows\system32\catroot2
2010-03-17 11:12:40 ----D---- C:\Program Files\Alwil Software
2010-03-17 11:10:02 ----D---- C:\ProgramData
2010-03-17 10:37:14 ----D---- C:\Windows\system32\catroot
2010-03-16 23:55:30 ----D---- C:\Windows\rescache
2010-03-16 23:36:42 ----D---- C:\Windows\system32\migration
2010-03-16 23:36:42 ----D---- C:\Program Files\Internet Explorer
2010-03-16 23:36:41 ----D---- C:\Windows\system32\cs-CZ
2010-03-16 23:36:39 ----D---- C:\Windows\system32\en-US
2010-03-16 23:36:39 ----D---- C:\Windows\PolicyDefinitions
2010-03-16 23:18:13 ----A---- C:\Windows\xUninstall.bat
2010-03-16 23:18:12 ----D---- C:\Windows\JMCR_DIR
2010-03-15 20:58:14 ----D---- C:\Program Files\CCleaner
2010-03-13 17:29:21 ----D---- C:\Users\senga\AppData\Roaming\Real
2010-03-13 11:54:42 ----D---- C:\Program Files\Mozilla Firefox
2010-03-11 20:32:32 ----D---- C:\Program Files\Java
2010-03-11 12:40:59 ----D---- C:\Program Files\Windows Mail
2010-03-11 12:40:59 ----D---- C:\Program Files\Movie Maker
2010-03-09 12:24:05 ----A---- C:\Windows\system32\aswBoot.exe
2010-03-04 19:03:19 ----D---- C:\Downloads
2010-03-03 10:56:28 ----D---- C:\Users\senga\AppData\Roaming\ICQ
2010-03-01 23:12:31 ----D---- C:\Program Files\Common Files\Apple
2010-03-01 23:12:29 ----D---- C:\ProgramData\Apple Computer
2010-03-01 21:30:14 ----A---- C:\Windows\system32\mrt.exe
2010-02-26 22:55:37 ----A---- C:\Windows\cdplayer.ini
2010-02-25 08:46:38 ----RSD---- C:\Windows\Fonts
2010-02-24 10:16:06 ----N---- C:\Windows\system32\MpSigStub.exe
2010-02-22 19:46:20 ----D---- C:\Windows\system32\WDI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-03-09 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-03-09 162640]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-03-09 46672]
R1 CSC;Offline Files Driver; C:\Windows\system32\drivers\csc.sys [2008-04-04 350720]
R2 Aspi32;Aspi32; C:\Windows\system32\drivers\Aspi32.sys [1999-09-10 25244]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-03-09 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-03-09 51792]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2008-02-29 1202560]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-06-30 917504]
R3 CmBatt;Ovladač baterie Microsoft ACPI Control Method Battery; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-04-04 14208]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-08-20 2160792]
R3 JMCR;JMCR; C:\Windows\system32\DRIVERS\jmcr.sys [2008-08-07 97536]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-07-19 7545824]
R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2008-04-01 14848]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-08-06 124928]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-04-04 134016]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-04-04 11264]
S3 adusbmdm6501;AnyDATA CDMA USB Modem Driver (PID 6501); C:\Windows\system32\DRIVERS\adusbmdm65.sys [2005-05-02 64896]
S3 adusbser6501;AnyDATA CDMA USB Serial Port (PID 6501); C:\Windows\system32\DRIVERS\adusbser65.sys [2005-05-02 64896]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-04-04 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-04-04 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-04-04 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-04-04 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-04-04 6016]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2008-04-04 88576]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-04-04 83328]
S4 ErrDev;Ovladače chybového zařízení hardwaru Microsoft; C:\Windows\system32\drivers\errdev.sys [2008-04-04 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-04-04 386616]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2007-12-11 12800]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2008-04-04 21504]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files\System Control Manager\MSIService.exe [2008-11-05 159744]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-07-19 196608]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-02-15 545576]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2008-04-04 21504]
S3 Fax;@%systemroot%\system32\fxsresm.dll,-118; C:\Windows\system32\fxssvc.exe [2008-04-04 523776]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2008-04-04 21504]
S3 wbengine;@%systemroot%\system32\wbengine.exe,-104; C:\Windows\system32\wbengine.exe [2008-04-04 917504]

-----------------EOF-----------------

[motji]

Ještě smažte
C:\Windows\PEV.exe
C:\Windows\MBR.exe


Otevřete si Poznámkový blok a zkopírujte do něj text

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
 

-uložte jako (typ: všechny soubory) kde za název souboru zadáte "smazani.reg" bez uvozovek,
klikněte na uložit, pak na soubor standardně 2X klikněte a potvrďte dialogové okno.


Jsou s počítačem ještě nějaké problémy?

[sengaX]

PC jede pořád bez problémů, nezaznamenala jsem žádnou vadu.

[sengaX]

Pokud je to všechno, tak ještě jednou díky moc a jdu podporovat, kartu už mám hodinu na stole.

P.S. Připadala jsem si tak trochu jako v dobách, kdy jsem se bála na cokoliv kliknout. Tohle zavirování mi připomnělo, že jsem pořád naprostý amatér a opatrnosti není nikdy nazbyt.

[motji]

Můžete omezit spouštění zbytečných programů po startu
- Stáhněte z mého podpisu program StartUpLite
- vypíše seznam zbytečně spouštěných programů po startu,
- vyberete které chcete zastavit,u nich zaškrtnete Disable a klikněte na Continue

Máte pouze firewall ve Vistách. Ten není sice nic moc, ale pro Vás bude asi dostačující. Ale můžete se v sekci firewally porozhlídnout po firewallech


Není zač a za podporu moc děkujeme
Kdyby byli problémy, víte kde nás najdete .

[sengaX]

Byly spuštěny jen čtyři, všechny jsem je vypnula. Ano, vím kde hledat a v případě potíží jsem tu jak na koni. Ještě jednou moc díky a přeju hezký víkend.

P.S. Kartou to nebude, nejsem si na té stránce moc jistá, přes terminál Sazky to pro mě bude jednodušší.

[motji]

Také hezký víkend a děkujeme