Extréemne pomalé vypínanie

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Hette
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 19 Črc 2011 23:25

Extréemne pomalé vypínanie

#1 Příspěvek od Hette »

Dobrý večer, chcel by som poprosiť o konrolu logu, pretože môj notebook sa vypína zhruba 7 minút a rýchlosť notebooku už nie je taká, aká bývala :( prikladám RSIT log



Logfile of random's system information tool 1.09 (written by random/random)
Run by katka at 2011-07-20 00:27:25
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 389 GB (90%) free of 432 GB
Total RAM: 4091 MB (70% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 0:27:39, on 20. 7. 2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe
C:\Users\katka\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files (x86)\USB Camera\VM331_STI.EXE
C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
C:\Program Files (x86)\IObit\Game Booster\gbtray.exe
C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASC.exe
C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\windows\SysWOW64\rundll32.exe
C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\katka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110715125428.dll
O2 - BHO: Pomocník pri prihlasovaní v konte Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [331BigDog] C:\Program Files (x86)\USB Camera\VM331_STI.EXE
O4 - HKLM\..\Run: [VeriFaceManager] C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe
O4 - HKLM\..\Run: [UCam_Menu] "C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Lenovo\YouCam" UpdateWithCreateOnce "Software\CyberLink\YouCam\3.0"
O4 - HKLM\..\Run: [YouCam Mirror Tray icon] "C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\katka\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Advanced SystemCare 4] C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\Lenovo\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: McAfee Application Installer Cleanup (0039021310639213) (0039021310639213mcinstcleanup) - - (no file)
O23 - Service: McAfee Application Installer Cleanup (0069921305984216) (0069921305984216mcinstcleanup) - - (no file)
O23 - Service: McAfee Application Installer Cleanup (0191871304422590) (0191871304422590mcinstcleanup) - - (no file)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: IGRS - Lenovo Group Limited - C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Lenovo ReadyComm AppSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\AppSvc.exe
O23 - Service: Lenovo ReadyComm ConnSvc - Lenovo Group Limited - C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe
O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Activation Service (McAWFwk) - McAfee, Inc. - c:\PROGRA~1\mcafee\msc\mcawfwk.exe
O23 - Service: McAfee Personal Firewall Service (McMPFSvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee VirusScan Announcer (McNaiAnn) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan\mcods.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe
O23 - Service: McShield - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe
O23 - Service: McAfee Firewall Core Service (mfefire) - McAfee, Inc. - C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - Unknown owner - C:\windows\system32\mfevtps.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11911 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\system32\atiesrxx.exe
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\WLANExt.exe 31397808
\??\C:\windows\system32\conhost.exe "-1739774868187848192-1198227721-834894932226038334-66197852020598382771896455952
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
atieclxx
"C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe"
"C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc
"C:\windows\system32\mfevtps.exe"
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
"C:\windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\SITEAD~1\saHook.dll" saHooker_Initialize_and_Wait
"C:\windows\system32\rundll32.exe" "c:\PROGRA~2\mcafee\SITEAD~1\saHook.dll" saHooker_Initialize_and_Wait
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe"
"C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe"
WLIDSvcM.exe 1736
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\windows\System32\svchost.exe -k secsvcs
"taskhost.exe"
taskeng.exe {9A0544BA-9977-4CC5-9468-C87130F7526E}
"C:\windows\system32\Dwm.exe"
"C:\Program Files (x86)\AVG\AVG PC Tuneup 2011\BoostSpeed.exe" -UseTray
C:\windows\Explorer.EXE
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\utility.exe"
"C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe"
"C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe"
"C:\Users\katka\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe" /crashhandler
"C:\Program Files (x86)\USB Camera\VM331_STI.EXE"
"C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe"
"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"
"C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe" /s
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
C:\windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\IObit\Game Booster\gbtray.exe"
C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\windows\system32\NOTEPAD.EXE" C:\Users\katka\Desktop\Nový textový dokument.txt
"C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASC.exe"
"C:\Program Files\Common Files\McAfee\Core\mchost.exe" {7530ea22-9f9e-4038-89a4-bba6c197fbc0} /pid=3068
"C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --disable-client-side-phishing-detection --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WebSocketExperiment/default/ --channel=1872.07D5B988.1007560578 /prefetch:3
"c:\PROGRA~1\mcafee\msc\mcupdmgr.exe" /Resume
"C:\Program Files\McAfee\VirusScan\mcods.exe"
"C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --disable-client-side-phishing-detection --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WebSocketExperiment/default/ --channel=1872.07D5BFA8.981519827 /prefetch:3
"C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --disable-client-side-phishing-detection --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WebSocketExperiment/default/ --channel=1872.098FBE68.1205133013 /prefetch:3
C:\windows\system32\rundll32.exe "C:\Users\katka\AppData\Local\Google\Chrome\APPLIC~1\120742~1.122\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\katka\AppData\Local\Google\Chrome\Application\12.0.742.122\gcswf32.dll" --lang=sk --channel=1872.096DF558.1439460012 /prefetch:4 --flash-broker=5292
"C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --disable-client-side-phishing-detection --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WebSocketExperiment/default/ --channel=1872.0991EE40.654555287 /prefetch:3
C:\PROGRA~1\McAfee\MSM\McSmtFwk.exe {CF10C3DD-7FC1-476f-8546-A12D7DA24BBF}|{97af5b68-6de5-4919-ad41-5bd00e7e1747}
C:\PROGRA~1\McAfee\MSM\McSmtStr.dll
"C:\Users\katka\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --disable-client-side-phishing-detection --lang=sk --force-fieldtest=CacheSize/CacheSizeGroup_6/ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_60/Prefetch/ContentPrefetchDisabled/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_disabled/SpdyCwnd/cwndDynamic/SpdyImpact/npn_with_spdy/WebSocketExperiment/default/ --channel=1872.0957F1A8.1602402953 /prefetch:3
"C:\Users\katka\Downloads\RSITx64 (1).exe"
C:\windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1067309388-1185033214-2816805062-1000Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1067309388-1185033214-2816805062-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files\Common Files\McAfee\SystemCore\ScriptSn.20110521144954.dll [2011-04-14 82576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2011-04-08 309096]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7DB2D5A0-7241-4E79-B68D-6309F01C5231}]
scriptproxy - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20110715125428.dll [2011-04-14 75848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pri prihlasovaní v konte Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF}]
McAfee SiteAdvisor BHO - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2011-04-08 251928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\x64\mcieplg.dll [2011-04-08 309096]
{32099AAC-C132-4136-9E9A-4E364A424E17} -

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - McAfee SiteAdvisor Toolbar - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll [2011-04-08 251928]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-04-27 10775584]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2010-04-27 2040352]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-01-07 1894696]
"EnergyUtility"=C:\Program Files (x86)\Lenovo\Energy Management\utility.exe [2010-04-12 4462496]
"Energy Management"=C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [2010-03-18 7056800]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Google Update"=C:\Users\katka\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-22 136176]
"Advanced SystemCare 4"=C:\Program Files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe [2011-05-28 412560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Power2GoExpress]
C:\Program Files (x86)\Lenovo\Power2Go\Power2GoExpress.exe /Startup []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-06-25 98304]
"331BigDog"=C:\Program Files (x86)\USB Camera\VM331_STI.EXE [2009-09-15 536576]
"VeriFaceManager"=C:\Program Files (x86)\Lenovo\VeriFace\PManage.exe [2010-08-28 3122528]
"UCam_Menu"=C:\Program Files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"YouCam Mirror Tray icon"=C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [2010-03-03 171104]
"mcui_exe"=C:\Program Files\McAfee.com\Agent\mcagent.exe [2011-04-05 1486392]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-06-08 37296]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\Lenovo\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\McMPFSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcmscsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefire]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfefirek.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfehidk.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mfevtp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=255
"NoThumbnailCache"=1
"DisableThumbnailsOnNetworkFolders"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-07-20 00:27:25 ----D---- C:\rsit
2011-07-20 00:27:25 ----D---- C:\Program Files\trend micro
2011-07-18 17:54:37 ----SHD---- C:\Config.Msi
2011-07-15 13:27:13 ----D---- C:\Users\katka\AppData\Roaming\Atari
2011-07-15 13:09:57 ----D---- C:\Program Files (x86)\Atari
2011-07-14 15:13:55 ----A---- C:\windows\system32\KernelBase.dll
2011-07-14 15:13:54 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-14 15:13:54 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-14 15:13:54 ----A---- C:\windows\SYSWOW64\KernelBase.dll
2011-07-14 15:13:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-14 15:13:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-14 15:13:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-14 15:13:53 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-07-14 15:13:53 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-14 15:13:53 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-14 15:13:53 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-14 15:13:53 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-14 15:13:53 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-14 15:13:52 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-14 15:13:51 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-14 15:13:50 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-14 15:13:49 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-07-14 15:13:49 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-14 15:13:49 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-14 15:13:48 ----AH---- C:\windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-07-14 15:13:48 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-14 15:13:39 ----A---- C:\windows\system32\drivers\BTHUSB.SYS
2011-07-14 15:13:39 ----A---- C:\windows\system32\drivers\bthport.sys
2011-07-14 15:13:33 ----A---- C:\windows\system32\win32k.sys
2011-07-14 15:13:10 ----A---- C:\windows\system32\wow64win.dll
2011-07-14 15:13:10 ----A---- C:\windows\system32\winsrv.dll
2011-07-14 15:13:10 ----A---- C:\windows\system32\kernel32.dll
2011-07-14 15:13:10 ----A---- C:\windows\system32\conhost.exe
2011-07-14 15:13:09 ----A---- C:\windows\SYSWOW64\setup16.exe
2011-07-14 15:13:09 ----A---- C:\windows\SYSWOW64\ntvdm64.dll
2011-07-14 15:13:09 ----A---- C:\windows\SYSWOW64\kernel32.dll
2011-07-14 15:13:09 ----A---- C:\windows\system32\wow64.dll
2011-07-14 15:13:09 ----A---- C:\windows\system32\ntvdm64.dll
2011-07-14 15:13:08 ----A---- C:\windows\SYSWOW64\wow32.dll
2011-07-14 15:13:08 ----A---- C:\windows\SYSWOW64\instnm.exe
2011-07-14 15:13:08 ----A---- C:\windows\system32\wow64cpu.dll
2011-07-14 15:13:04 ----A---- C:\windows\SYSWOW64\user.exe
2011-07-14 14:59:19 ----N---- C:\bootsqm.dat
2011-07-14 14:48:33 ----D---- C:\windows\pss
2011-07-08 01:39:22 ----D---- C:\ProgramData\Microsoft Help
2011-07-02 23:28:30 ----D---- C:\Users\katka\AppData\Roaming\AVG10
2011-07-02 23:07:44 ----HD---- C:\ProgramData\Common Files
2011-07-02 23:07:31 ----D---- C:\ProgramData\AVG Security Toolbar
2011-07-02 23:06:19 ----D---- C:\ProgramData\AVG10
2011-07-02 22:50:26 ----D---- C:\ProgramData\MFAData
2011-07-02 09:39:27 ----A---- C:\windows\system32\drivers\PCTCore64.sys
2011-07-02 09:33:48 ----A---- C:\windows\SGDetectionTool.dll
2011-07-02 09:33:48 ----A---- C:\windows\BDTSupport.dll
2011-07-02 09:33:47 ----A---- C:\windows\PCTBDRes.dll
2011-07-02 09:33:47 ----A---- C:\windows\PCTBDCore.dll
2011-07-02 09:24:25 ----A---- C:\windows\system32\drivers\pctwfpfilter64.sys
2011-07-02 09:24:25 ----A---- C:\windows\system32\drivers\pctgntdi64.sys
2011-07-02 09:23:57 ----A---- C:\windows\system32\drivers\pctplsg64.sys
2011-07-02 09:23:49 ----D---- C:\Program Files (x86)\Spyware Doctor
2011-07-01 22:37:58 ----A---- C:\windows\system32\drivers\Cat.DB
2011-07-01 22:28:09 ----D---- C:\Users\katka\AppData\Roaming\PC Tools
2011-07-01 22:28:09 ----D---- C:\ProgramData\PC Tools
2011-06-30 14:25:12 ----D---- C:\output
2011-06-29 05:06:11 ----A---- C:\windows\SYSWOW64\drvinst.exe
2011-06-29 05:06:11 ----A---- C:\windows\SYSWOW64\devrtl.dll
2011-06-29 05:06:11 ----A---- C:\windows\SYSWOW64\devobj.dll
2011-06-29 05:06:11 ----A---- C:\windows\SYSWOW64\cfgmgr32.dll
2011-06-29 05:06:11 ----A---- C:\windows\system32\umpnpmgr.dll
2011-06-29 05:06:02 ----A---- C:\windows\SYSWOW64\tquery.dll
2011-06-29 05:06:02 ----A---- C:\windows\SYSWOW64\SearchIndexer.exe
2011-06-29 05:06:02 ----A---- C:\windows\SYSWOW64\mssrch.dll
2011-06-29 05:06:02 ----A---- C:\windows\system32\tquery.dll
2011-06-29 05:06:02 ----A---- C:\windows\system32\SearchProtocolHost.exe
2011-06-29 05:06:02 ----A---- C:\windows\system32\SearchIndexer.exe
2011-06-29 05:06:02 ----A---- C:\windows\system32\mssrch.dll
2011-06-29 05:06:01 ----A---- C:\windows\SYSWOW64\SearchProtocolHost.exe
2011-06-29 05:06:01 ----A---- C:\windows\SYSWOW64\SearchFilterHost.exe
2011-06-29 05:06:01 ----A---- C:\windows\SYSWOW64\mssvp.dll
2011-06-29 05:06:01 ----A---- C:\windows\SYSWOW64\mssphtb.dll
2011-06-29 05:06:01 ----A---- C:\windows\SYSWOW64\mssph.dll
2011-06-29 05:06:01 ----A---- C:\windows\system32\SearchFilterHost.exe
2011-06-29 05:06:01 ----A---- C:\windows\system32\mssvp.dll
2011-06-29 05:06:01 ----A---- C:\windows\system32\mssphtb.dll
2011-06-29 05:06:01 ----A---- C:\windows\system32\mssph.dll
2011-06-29 05:06:01 ----A---- C:\windows\system32\msscntrs.dll
2011-06-29 05:06:00 ----A---- C:\windows\SYSWOW64\msscntrs.dll
2011-06-28 23:18:12 ----D---- C:\Users\katka\AppData\Roaming\QuickScan
2011-06-28 10:10:57 ----D---- C:\676a689354ac6d7d82a6486bd7ce4f75
2011-06-24 20:41:30 ----D---- C:\Program Files (x86)\ESET

======List of files/folders modified in the last 1 month======

2011-07-20 00:27:43 ----AD---- C:\ProgramData\Temp
2011-07-20 00:27:31 ----D---- C:\windows\Temp
2011-07-20 00:27:25 ----RD---- C:\Program Files
2011-07-19 23:14:34 ----D---- C:\windows\Prefetch
2011-07-19 23:07:28 ----D---- C:\Windows
2011-07-19 23:07:27 ----SHD---- C:\System Volume Information
2011-07-19 21:55:27 ----D---- C:\windows\system32\config
2011-07-19 20:21:41 ----D---- C:\ProgramData\VeriFace
2011-07-18 21:14:06 ----SHD---- C:\windows\Installer
2011-07-18 21:13:17 ----D---- C:\windows\SysWOW64
2011-07-18 21:12:59 ----D---- C:\ProgramData\Adobe
2011-07-18 21:12:52 ----D---- C:\Program Files (x86)\Common Files
2011-07-18 21:12:52 ----D---- C:\Program Files (x86)\Adobe
2011-07-17 01:02:21 ----D---- C:\Users\katka\AppData\Roaming\Skype
2011-07-17 00:01:30 ----D---- C:\Users\katka\AppData\Roaming\skypePM
2011-07-16 18:16:39 ----D---- C:\windows\SYSWOW64\config
2011-07-16 01:11:54 ----D---- C:\windows\system32\Tasks
2011-07-15 20:00:02 ----D---- C:\windows\system32\LogFiles
2011-07-15 16:51:08 ----D---- C:\windows\System32
2011-07-15 16:51:08 ----D---- C:\windows\inf
2011-07-15 16:51:08 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-07-15 13:09:57 ----RD---- C:\Program Files (x86)
2011-07-15 13:09:56 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2011-07-15 11:07:16 ----D---- C:\Program Files (x86)\EA Sports
2011-07-15 11:01:23 ----D---- C:\Users\katka\AppData\Roaming\IObit
2011-07-14 20:43:15 ----D---- C:\ProgramData\IObit
2011-07-14 20:03:35 ----D---- C:\Program Files (x86)\IObit
2011-07-14 19:58:21 ----D---- C:\windows\debug
2011-07-14 19:55:38 ----D---- C:\Program Files (x86)\Lenovo
2011-07-14 15:30:07 ----D---- C:\windows\winsxs
2011-07-14 15:24:25 ----D---- C:\windows\system32\DriverStore
2011-07-14 15:24:25 ----D---- C:\windows\AppPatch
2011-07-14 15:24:24 ----D---- C:\windows\system32\drivers
2011-07-14 15:17:46 ----A---- C:\windows\system32\MRT.exe
2011-07-14 13:25:13 ----D---- C:\ProgramData\Skype Extras
2011-07-14 12:26:51 ----D---- C:\Program Files (x86)\McAfee
2011-07-14 12:00:08 ----D---- C:\windows\system32\catroot
2011-07-14 12:00:07 ----D---- C:\windows\system32\catroot2
2011-07-14 11:45:07 ----D---- C:\windows\Tasks
2011-07-14 11:45:07 ----D---- C:\windows\system32\wfp
2011-07-14 11:45:04 ----D---- C:\windows\system32\wbem
2011-07-14 11:40:35 ----D---- C:\windows\system32\CodeIntegrity
2011-07-14 11:40:27 ----D---- C:\Users\katka\AppData\Roaming\PhotoScape
2011-07-14 11:40:03 ----D---- C:\windows\registration
2011-07-08 03:32:23 ----D---- C:\Users\katka\AppData\Roaming\SoftGrid Client
2011-07-08 01:39:33 ----SD---- C:\Users\katka\AppData\Roaming\Microsoft
2011-07-08 01:39:22 ----HD---- C:\ProgramData
2011-07-03 13:44:56 ----D---- C:\ProgramData\DivX
2011-07-03 13:44:55 ----D---- C:\ProgramData\CyberLink
2011-07-03 13:44:55 ----D---- C:\Program Files\WinRAR
2011-07-03 13:44:55 ----D---- C:\Program Files\Windows Sidebar
2011-07-03 13:44:54 ----D---- C:\Program Files\Windows Photo Viewer
2011-07-03 13:44:54 ----D---- C:\Program Files\Windows NT
2011-07-03 13:44:54 ----D---- C:\Program Files\Windows Media Player
2011-07-03 13:44:54 ----D---- C:\Program Files\Windows Mail
2011-07-03 13:44:54 ----D---- C:\Program Files\Windows Live
2011-07-03 13:44:54 ----D---- C:\Program Files\Windows Journal
2011-07-03 13:44:54 ----D---- C:\Program Files\Windows Defender
2011-07-03 13:44:54 ----D---- C:\Program Files\Synaptics
2011-07-03 13:44:54 ----D---- C:\Program Files\Reference Assemblies
2011-07-03 13:44:54 ----D---- C:\Program Files\Realtek
2011-07-03 13:44:54 ----D---- C:\Program Files\MSBuild
2011-07-03 13:44:54 ----D---- C:\Program Files\Microsoft Office
2011-07-03 13:44:54 ----D---- C:\Program Files\Microsoft Games
2011-07-03 13:44:53 ----D---- C:\Program Files\McAfee.com
2011-07-03 13:44:53 ----D---- C:\Program Files\McAfee
2011-07-03 13:44:52 ----D---- C:\Program Files\Lenovo
2011-07-03 13:44:51 ----D---- C:\Program Files\Internet Explorer
2011-07-03 13:44:50 ----D---- C:\Program Files\DVD Maker
2011-07-03 13:44:50 ----D---- C:\Program Files\DivX
2011-07-03 13:44:50 ----D---- C:\Program Files\DIFX
2011-07-03 13:44:50 ----D---- C:\Program Files\Common Files\System
2011-07-03 13:44:50 ----D---- C:\Program Files\Common Files\SpeechEngines
2011-07-03 13:44:50 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-07-03 13:44:50 ----D---- C:\Program Files\Common Files
2011-07-03 13:44:49 ----D---- C:\Program Files\Common Files\McAfee
2011-07-03 13:44:49 ----D---- C:\Program Files\CCleaner
2011-07-03 13:44:49 ----D---- C:\Program Files\ATI
2011-07-03 13:44:49 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-07-03 13:44:48 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-07-03 13:44:48 ----D---- C:\Program Files (x86)\Windows NT
2011-07-03 13:44:48 ----D---- C:\Program Files (x86)\Windows Media Player
2011-07-03 13:44:48 ----D---- C:\Program Files (x86)\Windows Mail
2011-07-03 13:44:48 ----D---- C:\Program Files (x86)\Windows Live
2011-07-03 13:44:47 ----D---- C:\Program Files (x86)\Windows Defender
2011-07-03 13:44:46 ----D---- C:\Program Files (x86)\VS Revo Group
2011-07-03 13:44:36 ----RD---- C:\Program Files (x86)\Skype
2011-07-03 13:44:36 ----D---- C:\Program Files (x86)\Reference Assemblies
2011-07-03 13:44:36 ----D---- C:\Program Files (x86)\Realtek
2011-07-03 13:44:36 ----D---- C:\Program Files (x86)\MSBuild
2011-07-03 13:44:36 ----D---- C:\Program Files (x86)\Microsoft WSE
2011-07-03 13:44:36 ----D---- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2011-07-03 13:44:36 ----D---- C:\Program Files (x86)\Microsoft
2011-07-03 13:44:35 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2011-07-03 13:44:35 ----D---- C:\Program Files (x86)\Microsoft Office
2011-07-03 13:44:35 ----D---- C:\Program Files (x86)\Microsoft Application Virtualization Client
2011-07-03 13:44:35 ----D---- C:\Program Files (x86)\McAfee.com
2011-07-03 13:44:24 ----D---- C:\Program Files (x86)\Internet Explorer
2011-07-03 13:44:24 ----D---- C:\Program Files (x86)\Google
2011-07-03 13:44:23 ----D---- C:\Program Files (x86)\DivX
2011-07-03 13:44:23 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
2011-07-03 13:44:22 ----D---- C:\Program Files (x86)\Cyberlink
2011-07-03 13:44:20 ----D---- C:\Program Files (x86)\AVG
2011-07-03 13:44:20 ----D---- C:\Program Files (x86)\ATI Technologies
2011-07-03 13:44:19 ----SHD---- C:\$RECYCLE.BIN
2011-07-02 23:31:18 ----SHD---- C:\Recovery
2011-07-01 17:44:13 ----D---- C:\windows\SYSWOW64\migration
2011-07-01 17:44:12 ----RSD---- C:\windows\Fonts
2011-07-01 17:44:12 ----D---- C:\windows\system32\migration
2011-07-01 17:40:53 ----D---- C:\windows\SYSWOW64\wbem
2011-07-01 17:40:22 ----D---- C:\windows\AppCompat
2011-07-01 17:39:24 ----D---- C:\windows\Microsoft.NET
2011-07-01 17:39:10 ----RSD---- C:\windows\assembly
2011-06-25 15:57:46 ----A---- C:\windows\SYSWOW64\PicNotify.dll
2011-06-25 15:57:45 ----A---- C:\windows\SYSWOW64\Oemdspif.dll
2011-06-25 15:57:26 ----A---- C:\windows\SYSWOW64\ILUT.dll
2011-06-25 15:57:26 ----A---- C:\windows\SYSWOW64\ILU.dll
2011-06-25 15:57:25 ----A---- C:\windows\SYSWOW64\igdumd32.dll
2011-06-25 15:57:25 ----A---- C:\windows\SYSWOW64\igd10umd32.dll
2011-06-25 15:57:24 ----A---- C:\windows\SYSWOW64\dpl100.dll
2011-06-25 15:57:24 ----A---- C:\windows\SYSWOW64\divx_xx16.dll
2011-06-25 15:57:24 ----A---- C:\windows\SYSWOW64\divx_xx11.dll
2011-06-25 15:57:23 ----A---- C:\windows\SYSWOW64\divx_xx0c.dll
2011-06-25 15:57:23 ----A---- C:\windows\SYSWOW64\divx_xx0a.dll
2011-06-25 15:57:23 ----A---- C:\windows\SYSWOW64\divx_xx07.dll
2011-06-25 15:57:04 ----A---- C:\windows\SYSWOW64\atipdlxx.dll
2011-06-25 15:57:03 ----A---- C:\windows\SYSWOW64\aticfx32.dll
2011-06-25 15:57:03 ----A---- C:\windows\SYSWOW64\aticalrt.dll
2011-06-25 15:57:03 ----A---- C:\windows\SYSWOW64\aticaldd.dll
2011-06-25 15:57:03 ----A---- C:\windows\SYSWOW64\aticalcl.dll
2011-06-25 15:57:03 ----A---- C:\windows\SYSWOW64\atiadlxy.dll
2011-06-25 15:56:54 ----A---- C:\windows\SYSWOW64\3DImageRenderer.dll
2011-06-25 15:49:15 ----A---- C:\windows\Reg331Unstal.dll
2011-06-23 18:45:21 ----D---- C:\Users\katka\AppData\Roaming\Hamachi
2011-06-23 18:45:20 ----D---- C:\Program Files (x86)\Hamachi
2011-06-21 16:12:55 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 16440]
R0 LHDmgr;LHDmgr; C:\windows\System32\DRIVERS\LhdX64.sys [2010-01-15 39008]
R0 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2011-04-14 530304]
R0 mfewfpk;McAfee Inc. mfewfpk; C:\windows\system32\drivers\mfewfpk.sys [2011-04-14 283744]
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 PCTCore;PCTools KDS; C:\windows\system32\drivers\PCTCore64.sys [2011-07-02 233488]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-05-02 254528]
R1 mfenlfk;McAfee NDIS Light Filter; C:\windows\system32\DRIVERS\mfenlfk.sys [2011-04-14 75160]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-10-19 28176]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atipmdag.sys [2010-03-03 6402560]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2010-03-03 188928]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl664.sys [2010-02-02 3058168]
R3 cfwids;McAfee Inc. cfwids; C:\windows\system32\drivers\cfwids.sys [2011-04-14 63056]
R3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2011-05-14 33344]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-04-27 2357024]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys [2010-02-22 75304]
R3 mfeapfk;McAfee Inc. mfeapfk; C:\windows\system32\drivers\mfeapfk.sys [2011-04-14 121376]
R3 mfeavfk;McAfee Inc. mfeavfk; C:\windows\system32\drivers\mfeavfk.sys [2011-04-14 190520]
R3 mfefirek;McAfee Inc. mfefirek; C:\windows\system32\drivers\mfefirek.sys [2011-04-14 441840]
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys [2009-12-02 721768]
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys [2009-12-02 269672]
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys [2009-12-02 25960]
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys [2009-12-02 22376]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-01-07 302128]
R3 vm331avs;Digital Camera 1; C:\windows\System32\Drivers\vm331avs.sys [2009-11-09 207232]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11280]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-16 79376]
S3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btusbflt;Bluetooth USB Filter; C:\windows\system32\drivers\btusbflt.sys [2009-07-01 52264]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 98344]
S3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2009-07-01 132648]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-07 35104]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 21160]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60a.sys [2009-06-10 270848]
S3 mfeavfk01;McAfee Inc.; C:\windows\system32\drivers\mfeavfk01.sys []
S3 mferkdet;McAfee Inc. mferkdet; C:\windows\system32\drivers\mferkdet.sys [2011-04-14 94992]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2010-03-12 242720]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 151656]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 121840]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2010-03-03 202752]
R2 btwdins;Bluetooth Service; C:\Program Files\Lenovo\Bluetooth Software\btwdins.exe [2009-08-11 864032]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McMPFSvc;McAfee Personal Firewall Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 mcmscsvc;McAfee Services; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McNaiAnn;McAfee VirusScan Announcer; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McNASvc;McAfee Network Agent; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McProxy;McAfee Proxy Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R2 McShield;McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [2011-04-14 200056]
R2 mfefire;McAfee Firewall Core Service; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [2011-04-14 245352]
R2 mfevtp;McAfee Validation Trust Protection Service; C:\windows\system32\mfevtps.exe [2011-04-14 149032]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 McODS;McAfee Scanner; C:\Program Files\McAfee\VirusScan\mcods.exe [2010-10-07 509416]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-14 136176]
S2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe -k IgrsSvcs []
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-14 136176]
S3 IGRS;IGRS; C:\Program Files (x86)\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-09-22 579400]
S3 McAWFwk;McAfee Activation Service; c:\PROGRA~1\mcafee\msc\mcawfwk.exe [2010-08-30 220528]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe -k IgrsSvcs []
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2011-04-17 1255736]
S4 McOobeSv;McAfee OOBE Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Extréemne pomalé vypínanie

#2 Příspěvek od motji »

Hezké odpoledne :)

:arrow: Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

Obrázekzáložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

Obrázekzáložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy :arrow: ok :arrow: zavřít

Obrázek Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.



:arrow: Stahněte MBAM z mého podpisu
-Nainstalujte,dejte úplný sken

NIC NEMAZAT :!:
-MBAM má občas falešné detekce,proto budeme mazat až po kontrole logu.
-Log zkopírujte sem.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Hette
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 19 Črc 2011 23:25

Re: Extréemne pomalé vypínanie

#3 Příspěvek od Hette »

Program malwarebytes' Anti Malware prestal pracovať... vždy mi to vyhodí po 12 sekundách scannu...
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Extréemne pomalé vypínanie

#4 Příspěvek od motji »

I v nouzovém režimu?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Hette
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 19 Črc 2011 23:25

Re: Extréemne pomalé vypínanie

#5 Příspěvek od Hette »

Idem to skúsiť... Mám vypnúť aj antivúrovú ochranu a firewall? :o
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Extréemne pomalé vypínanie

#6 Příspěvek od motji »

Ne, v nouzovém režimu nebudou zapnuté.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Hette
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 19 Črc 2011 23:25

Re: Extréemne pomalé vypínanie

#7 Příspěvek od Hette »

Nie, skúšal som núdzový režim, ale aj tam to prestalo pracovať...






Popis problému:
Názov problémovej udalosti: APPCRASH
Názov aplikácie: mbam.exe
Verzia aplikácie: 1.50.0.0
Časová pečiatka aplikácie: 4cf3c813
Názov chybného modulu: mbamcore.DLL
Verzia chybného modulu: 1.50.0.0
Časová pečiatka chybného modulu: 4cf3cd2a
Kód výnimky: c0000005
Odsadenie výnimky: 0000de41
Verzia OS: 6.1.7601.2.1.0.768.3
Identifikácia miestneho nastavenia: 1051
Ďalšie informácie 1: 57dc
Ďalšie informácie 2: 57dc1304986dca9230289ffa64901279
Ďalšie informácie 3: 6d5c
Ďalšie informácie 4: 6d5c4c1c7f2b2b9a3d2af8e23e14fc6e
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Extréemne pomalé vypínanie

#8 Příspěvek od motji »

:arrow: Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Hette
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 19 Črc 2011 23:25

Re: Extréemne pomalé vypínanie

#9 Příspěvek od Hette »

tu je log z combofixu :)



ComboFix 11-07-20.02 - katka . 07. 2011 19:17:19.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.4091.2976 [GMT 2:00]
Running from: c:\users\katka\Desktop\ComboFix.exe
AV: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee Anti-Virus and Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\s.bat
.
.
((((((((((((((((((((((((( Files Created from 2011-06-20 to 2011-07-20 )))))))))))))))))))))))))))))))
.
.
2011-07-20 17:31 . 2011-07-20 17:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-07-20 17:14 . 2011-07-20 17:14 -------- d-----w- C:\32788R22FWJFW
2011-07-20 15:57 . 2011-07-20 15:57 -------- d-----w- c:\users\katka\AppData\Roaming\Malwarebytes
2011-07-20 15:57 . 2011-07-20 15:57 -------- d-----w- c:\programdata\Malwarebytes
2011-07-20 15:57 . 2010-11-29 15:42 24152 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-07-20 13:45 . 2011-07-20 13:50 -------- d-----w- c:\users\katka\AppData\Roaming\PCStitch Pro
2011-07-19 22:27 . 2011-07-19 22:27 -------- d-----w- C:\rsit
2011-07-19 22:27 . 2011-07-19 22:27 -------- d-----w- c:\program files\trend micro
2011-07-19 10:10 . 2011-06-07 17:10 8873296 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{B98AEBCE-8BCF-4217-83D8-4E8567925CC2}\mpengine.dll
2011-07-18 19:12 . 2011-07-18 19:13 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2011-07-15 11:27 . 2011-07-15 11:27 -------- d-----w- c:\users\katka\AppData\Roaming\Atari
2011-07-15 11:09 . 2011-07-15 11:09 -------- d-----w- c:\program files (x86)\Atari
2011-07-15 11:09 . 2005-04-03 21:00 184320 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iuser.dll
2011-07-15 11:09 . 2005-04-03 21:00 63488 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ISBEW64.exe
2011-07-15 11:08 . 2011-07-15 11:08 200836 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iGdi.dll
2011-07-15 11:08 . 2005-04-03 21:02 753664 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iKernel.dll
2011-07-15 11:08 . 2005-04-03 21:02 69714 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\ctor.dll
2011-07-15 11:08 . 2005-04-03 21:01 274432 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\iscript.dll
2011-07-15 11:08 . 2005-04-03 20:59 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\DotNetInstaller.exe
2011-07-15 11:08 . 2011-07-15 11:08 331908 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\11\00\Intel32\setup.dll
2011-07-07 23:39 . 2011-07-07 23:39 -------- d-----w- c:\programdata\Microsoft Help
2011-07-07 23:39 . 2011-07-07 23:39 -------- d-----w- c:\users\katka\AppData\Local\Microsoft Help
2011-07-07 22:17 . 2011-07-07 22:17 458048 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-07-02 21:28 . 2011-07-02 21:28 -------- d-----w- c:\users\katka\AppData\Roaming\AVG10
2011-07-02 21:07 . 2011-07-02 21:07 -------- d--h--w- c:\programdata\Common Files
2011-07-02 21:07 . 2011-07-03 11:45 -------- d-----w- c:\programdata\AVG Security Toolbar
2011-07-02 21:06 . 2011-07-03 11:45 -------- d-----w- c:\programdata\AVG10
2011-07-02 20:50 . 2011-07-03 11:45 -------- d-----w- c:\programdata\MFAData
2011-07-02 07:39 . 2011-07-02 07:39 233488 ----a-w- c:\windows\system32\drivers\PCTCore64.sys
2011-07-02 07:33 . 2010-01-22 07:56 149456 ----a-w- c:\windows\SGDetectionTool.dll
2011-07-02 07:33 . 2010-01-22 07:55 767952 ----a-w- c:\windows\BDTSupport.dll
2011-07-02 07:33 . 2010-01-22 07:56 165840 ----a-w- c:\windows\PCTBDRes.dll
2011-07-02 07:33 . 2010-01-22 07:56 1652688 ----a-w- c:\windows\PCTBDCore.dll
2011-07-02 07:24 . 2010-02-05 07:18 133072 ----a-w- c:\windows\system32\drivers\pctwfpfilter64.sys
2011-07-02 07:24 . 2010-02-05 07:17 306648 ----a-w- c:\windows\system32\drivers\pctgntdi64.sys
2011-07-02 07:23 . 2011-07-02 07:39 92896 ----a-w- c:\windows\system32\drivers\pctplsg64.sys
2011-07-02 07:23 . 2011-07-03 17:07 -------- d-----w- c:\program files (x86)\Spyware Doctor
2011-07-01 20:28 . 2011-07-03 11:45 -------- d-----w- c:\program files (x86)\Common Files\PC Tools
2011-07-01 20:28 . 2011-07-01 20:43 -------- d-----w- c:\programdata\PC Tools
2011-07-01 20:28 . 2011-07-01 20:28 -------- d-----w- c:\users\katka\AppData\Roaming\PC Tools
2011-06-30 12:25 . 2011-06-30 12:25 -------- d-----w- C:\output
2011-06-28 21:18 . 2011-07-14 08:25 -------- d-----w- c:\users\katka\AppData\Roaming\QuickScan
2011-06-28 08:10 . 2011-07-03 11:44 -------- d-----w- C:\676a689354ac6d7d82a6486bd7ce4f75
2011-06-24 18:41 . 2011-07-03 11:44 -------- d-----w- c:\program files (x86)\ESET
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-07 22:17 . 2011-06-04 09:40 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-06-25 13:57 . 2010-08-27 23:37 655360 ----a-w- c:\windows\SysWow64\vmprp331.ax
2011-06-25 13:57 . 2010-08-28 00:12 1171456 ----a-w- c:\windows\SysWow64\PicNotify.dll
2011-06-25 13:57 . 2010-08-27 23:21 274432 ----a-w- c:\windows\SysWow64\Oemdspif.dll
2011-06-25 13:57 . 2010-08-28 00:12 77824 ----a-w- c:\windows\SysWow64\ILU.dll
2011-06-25 13:57 . 2010-08-28 00:12 32768 ----a-w- c:\windows\SysWow64\ILUT.dll
2011-06-25 13:57 . 2009-07-13 21:59 2531328 ----a-w- c:\windows\SysWow64\igd10umd32.dll
2011-06-25 13:57 . 2009-07-13 21:59 3805184 ----a-w- c:\windows\SysWow64\igdumd32.dll
2011-06-25 13:57 . 2010-11-12 00:44 94208 ----a-w- c:\windows\SysWow64\dpl100.dll
2011-06-25 13:57 . 2010-02-19 19:27 843776 ----a-w- c:\windows\SysWow64\divx_xx16.dll
2011-06-25 13:57 . 2010-02-19 19:27 839680 ----a-w- c:\windows\SysWow64\divx_xx11.dll
2011-06-25 13:57 . 2010-02-19 19:27 856064 ----a-w- c:\windows\SysWow64\divx_xx0c.dll
2011-06-25 13:57 . 2010-02-19 19:27 856064 ----a-w- c:\windows\SysWow64\divx_xx07.dll
2011-06-25 13:57 . 2010-02-19 19:27 847872 ----a-w- c:\windows\SysWow64\divx_xx0a.dll
2011-06-25 13:57 . 2010-08-27 23:21 356352 ----a-w- c:\windows\SysWow64\atipdlxx.dll
2011-06-25 13:57 . 2010-08-27 23:21 53248 ----a-w- c:\windows\SysWow64\aticalrt.dll
2011-06-25 13:57 . 2010-08-27 23:21 53248 ----a-w- c:\windows\SysWow64\aticalcl.dll
2011-06-25 13:57 . 2010-08-27 23:21 446464 ----a-w- c:\windows\SysWow64\aticfx32.dll
2011-06-25 13:57 . 2010-08-27 23:21 3657728 ----a-w- c:\windows\SysWow64\aticaldd.dll
2011-06-25 13:57 . 2010-08-27 23:21 237568 ----a-w- c:\windows\SysWow64\atiadlxy.dll
2011-06-25 13:56 . 2010-08-28 00:12 1044480 ----a-w- c:\windows\SysWow64\3DImageRenderer.dll
2011-06-25 13:49 . 2010-08-27 23:37 208896 ----a-w- c:\windows\Reg331Unstal.dll
2011-06-12 09:13 . 2011-06-12 09:13 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-06-04 09:40 . 2011-06-04 09:40 458048 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-06-03 05:57 . 2011-07-14 13:13 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-05-24 17:14 . 2011-04-18 19:34 270720 ------w- c:\windows\system32\MpSigStub.exe
2011-05-14 12:20 . 2011-05-14 12:20 33344 ----a-w- c:\windows\system32\drivers\hamachi.sys
2011-05-03 05:29 . 2011-06-17 15:02 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-05-03 04:30 . 2011-06-17 15:02 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
2011-05-02 08:45 . 2011-05-02 08:45 254528 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-05-01 17:18 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-05-01 17:18 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-05-01 17:03 . 2011-05-01 17:03 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-05-01 17:03 . 2011-05-01 17:03 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2011-05-01 17:03 . 2011-05-01 17:03 1126912 ----a-w- c:\windows\SysWow64\wininet.dll
2011-05-01 17:03 . 2011-05-01 17:03 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-05-01 17:03 . 2011-05-01 17:03 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-05-01 17:03 . 2011-05-01 17:03 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2011-05-01 17:03 . 2011-05-01 17:03 85504 ----a-w- c:\windows\system32\iesetup.dll
2011-05-01 17:03 . 2011-05-01 17:03 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2011-05-01 17:03 . 2011-05-01 17:03 76800 ----a-w- c:\windows\system32\tdc.ocx
2011-05-01 17:03 . 2011-05-01 17:03 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2011-05-01 17:03 . 2011-05-01 17:03 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2011-05-01 17:03 . 2011-05-01 17:03 603648 ----a-w- c:\windows\system32\vbscript.dll
2011-05-01 17:03 . 2011-05-01 17:03 49664 ----a-w- c:\windows\system32\imgutil.dll
2011-05-01 17:03 . 2011-05-01 17:03 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2011-05-01 17:03 . 2011-05-01 17:03 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-05-01 17:03 . 2011-05-01 17:03 448512 ----a-w- c:\windows\system32\html.iec
2011-05-01 17:03 . 2011-05-01 17:03 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-05-01 17:03 . 2011-05-01 17:03 367104 ----a-w- c:\windows\SysWow64\html.iec
2011-05-01 17:03 . 2011-05-01 17:03 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2011-05-01 17:03 . 2011-05-01 17:03 30720 ----a-w- c:\windows\system32\licmgr10.dll
2011-05-01 17:03 . 2011-05-01 17:03 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2011-05-01 17:03 . 2011-05-01 17:03 222208 ----a-w- c:\windows\system32\msls31.dll
2011-05-01 17:03 . 2011-05-01 17:03 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2011-05-01 17:03 . 2011-05-01 17:03 165888 ----a-w- c:\windows\system32\iexpress.exe
2011-05-01 17:03 . 2011-05-01 17:03 160256 ----a-w- c:\windows\system32\wextract.exe
2011-05-01 17:03 . 2011-05-01 17:03 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2011-05-01 17:03 . 2011-05-01 17:03 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2011-05-01 17:03 . 2011-05-01 17:03 1492992 ----a-w- c:\windows\system32\inetcpl.cpl
2011-05-01 17:03 . 2011-05-01 17:03 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2011-05-01 17:03 . 2011-05-01 17:03 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-05-01 17:03 . 2011-05-01 17:03 1389056 ----a-w- c:\windows\system32\wininet.dll
2011-05-01 17:03 . 2011-05-01 17:03 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-05-01 17:03 . 2011-05-01 17:03 12288 ----a-w- c:\windows\system32\mshta.exe
2011-05-01 17:03 . 2011-05-01 17:03 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2011-05-01 17:03 . 2011-05-01 17:03 114176 ----a-w- c:\windows\system32\admparse.dll
2011-05-01 17:03 . 2011-05-01 17:03 111616 ----a-w- c:\windows\system32\iesysprep.dll
2011-05-01 17:03 . 2011-05-01 17:03 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2011-05-01 17:03 . 2011-05-01 17:03 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2011-04-29 03:06 . 2011-06-17 15:02 467456 ----a-w- c:\windows\system32\drivers\srv.sys
2011-04-29 03:05 . 2011-06-17 15:02 410112 ----a-w- c:\windows\system32\drivers\srv2.sys
2011-04-29 03:05 . 2011-06-17 15:02 168448 ----a-w- c:\windows\system32\drivers\srvnet.sys
2011-04-27 02:40 . 2011-06-17 15:02 158208 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-04-27 02:39 . 2011-06-17 15:02 289280 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2011-04-27 02:39 . 2011-06-17 15:02 128000 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2011-04-25 05:33 . 2011-06-17 15:03 1923968 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-04-25 02:34 . 2011-06-17 15:03 499200 ----a-w- c:\windows\system32\drivers\afd.sys
2011-04-23 01:29 . 2011-06-17 15:25 2303488 ----a-w- c:\windows\system32\jscript9.dll
2011-04-23 01:19 . 2011-06-17 15:25 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-04-22 23:35 . 2011-06-17 15:25 1797632 ----a-w- c:\windows\SysWow64\jscript9.dll
2011-04-22 23:25 . 2011-06-17 15:25 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-04-22 22:15 . 2011-05-25 12:35 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 4"="c:\program files (x86)\IObit\Advanced SystemCare 4\ASCTray.exe" [2011-05-28 412560]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-06-25 98304]
"331BigDog"="c:\program files (x86)\USB Camera\VM331_STI.EXE" [2009-09-15 536576]
"VeriFaceManager"="c:\program files (x86)\Lenovo\VeriFace\PManage.exe" [2010-08-28 3122528]
"UCam_Menu"="c:\program files (x86)\Lenovo\YouCam\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504]
"YouCam Mirror Tray icon"="c:\program files (x86)\Lenovo\YouCam\YouCamTray.exe" [2010-03-02 171104]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-04-05 1486392]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-06-08 37296]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\Lenovo\Bluetooth Software\BTTray.exe [2009-8-11 1080608]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoThumbnailCache"= 1 (0x1)
"DisableThumbnailsOnNetworkFolders"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ \0
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 0039021310639213mcinstcleanup;McAfee Application Installer Cleanup (0039021310639213); [x]
R2 0069921305984216mcinstcleanup;McAfee Application Installer Cleanup (0069921305984216); [x]
R2 0191871304422590mcinstcleanup;McAfee Application Installer Cleanup (0191871304422590); [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-14 136176]
R3 Bridge0;Bridge0;c:\windows\system32\drivers\WDBridge.sys [x]
R3 btusbflt;Bluetooth USB Filter;c:\windows\system32\drivers\btusbflt.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-14 136176]
R3 IGRS;IGRS;c:\program files (x86)\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]
R3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc;c:\program files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
R3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc;c:\program files\Lenovo\ReadyComm\ConnSvc.exe [2009-09-22 579400]
R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2010-08-30 220528]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys [x]
R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 LHDmgr;LHDmgr;c:\windows\System32\DRIVERS\LhdX64.sys [x]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x]
S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [x]
S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2010-03-10 355440]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2011-04-14 245352]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
S3 ACPIVPC;Lenovo Virtual Power Controller Driver;c:\windows\system32\DRIVERS\AcpiVpc.sys [x]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [x]
S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys [x]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
S3 vm331avs;Digital Camera 1;c:\windows\system32\Drivers\vm331avs.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
S3 wdmirror;wdmirror;c:\windows\system32\DRIVERS\WDMirror.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*Deregistered* - mfeavfk01
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
IgrsSvcs REG_MULTI_SZ ReadyComm.DirectRouter PS_MDP
.
Contents of the 'Scheduled Tasks' folder
.
2011-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-14 13:56]
.
2011-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-05-14 13:56]
.
2011-07-06 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1067309388-1185033214-2816805062-1000Core.job
- c:\users\katka\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-22 08:06]
.
2011-07-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1067309388-1185033214-2816805062-1000UA.job
- c:\users\katka\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-22 08:06]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\VeriFace Enc]
@="{771C7324-DA80-49D3-8017-753B0AF60951}"
[HKEY_CLASSES_ROOT\CLSID\{771C7324-DA80-49D3-8017-753B0AF60951}]
2010-08-28 00:12 1502720 ----a-w- c:\windows\System32\IcnOvrly.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-27 10775584]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-04-27 2040352]
"EnergyUtility"="c:\program files (x86)\Lenovo\Energy Management\utility.exe" [2010-04-12 4462496]
"Energy Management"="c:\program files (x86)\Lenovo\Energy Management\Energy Management.exe" [2010-03-18 7056800]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x0
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.sk/
uLocal Page = c:\windows\system32\blank.htm
IE: Send image to &Bluetooth Device... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\Lenovo\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - ORPHANS REMOVED - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1067309388-1185033214-2816805062-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1067309388-1185033214-2816805062-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash10p.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2011-07-20 19:35:45
ComboFix-quarantined-files.txt 2011-07-20 17:35
.
Pre-Run: 410 260 824 064 bytes free
Post-Run: 410 260 955 136 bytes free
.
- - End Of File - - 1DE0AB29BE9A10BE3DD0714D3B82C44D
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Extréemne pomalé vypínanie

#10 Příspěvek od motji »

Změnilo se něco?
AVG jste v pc měli? Můžu po něm smazat složky?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Hette
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 19 Črc 2011 23:25

Re: Extréemne pomalé vypínanie

#11 Příspěvek od Hette »

áno, ale ešte stále seká.... avg??? hej, mal som avg pctuneup aj antivírus a na odinštaláciu používam revo uninstaller :)
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Extréemne pomalé vypínanie

#12 Příspěvek od motji »

:arrow: stáhněte
http://www.slunecnice.cz/sw/crystaldiskinfo/
- spusťte ho a v nabídce zvolte Kopírovat.
-Data ze schránky sem pak vložte pomocí Ctrl+V
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Hette
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 19 Črc 2011 23:25

Re: Extréemne pomalé vypínanie

#13 Příspěvek od Hette »

tu to je :)


----------------------------------------------------------------------------
CrystalDiskInfo 4.0.1 (C) 2008-2011 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Premium Edition SP1 [6.1 Build 7601] (x64)
Date : 2011/07/20 20:58:25

-- Controller Map ----------------------------------------------------------
- ATA Channel 0 (0) [ATA]
- ATA Channel 1 (1) [ATA]
+ Standard Dual Channel PCI IDE Controller [ATA]
+ ATA Channel 0 (0)
- WDC WD5000BEVT-24A0RT0 ATA Device
+ ATA Channel 1 (1)
- Slimtype DVD A DS8A4S ATA Device
+ Standard AHCI 1.0 Serial ATA Controller [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
- ATA Channel 2 (2)

-- Disk List ---------------------------------------------------------------
(1) WDC WD5000BEVT-24A0RT0 : 500.1 GB [0-0-0, pd1]

----------------------------------------------------------------------------
(1) WDC WD5000BEVT-24A0RT0
----------------------------------------------------------------------------
Model : WDC WD5000BEVT-24A0RT0
Firmware : 01.01A02
Serial Number : WD-WXH1A80U5470
Disk Size : 500.1 GB (8.4/137.4/500.1)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/300
Power On Hours : 806 hours
Power On Count : 274 count
Temparature : 65 C (149 F)
Health Status : Good
Features : S.M.A.R.T., APM, AAM, 48bit LBA, NCQ
APM Level : 0080h [ON]
AAM Level : 80FEh [OFF]

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000000 Read Error Rate
03 186 182 _21 0000000006A4 Spin-Up Time
04 100 100 __0 000000000114 Start/Stop Count
05 200 200 140 000000000000 Reallocated Sectors Count
07 100 253 __0 000000000000 Seek Error Rate
09 _99 _99 __0 000000000326 Power-On Hours
0A 100 100 _51 000000000000 Spin Retry Count
0B 100 100 __0 000000000000 Recalibration Retries
0C 100 100 __0 000000000112 Power Cycle Count
C0 200 200 __0 000000000019 Power-off Retract Count
C1 200 200 __0 00000000028E Load/Unload Cycle Count
C2 _82 _75 __0 000000000041 Temperature
C4 200 200 __0 000000000000 Reallocation Event Count
C5 200 200 __0 000000000000 Current Pending Sector Count
C6 100 253 __0 000000000000 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
C8 100 253 _51 000000000000 Write Error Rate

-- IDENTIFY_DEVICE ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 42 7A 3F FF C8 37 00 10 00 00 00 00 00 3F 00 00
010: 00 00 00 00 20 20 20 20 20 57 44 2D 57 58 48 31
020: 41 38 30 55 35 34 37 30 00 00 40 00 00 32 30 31
030: 2E 30 31 41 30 32 57 44 43 20 57 44 35 30 30 30
040: 42 45 56 54 2D 32 34 41 30 52 54 30 20 20 20 20
050: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 80 10
060: 00 00 2F 00 40 01 00 00 00 00 00 07 3F FF 00 10
070: 00 3F FC 10 00 FB 01 10 FF FF 0F FF 00 00 00 07
080: 00 03 00 78 00 78 00 78 00 78 00 00 00 00 00 00
090: 00 00 00 00 00 00 00 1F 1F 06 00 00 00 4C 00 40
0A0: 01 FE 00 00 74 6B 7F 09 61 63 74 69 BC 09 61 63
0B0: 20 7F 00 45 00 45 00 80 FF FE 00 00 80 FE 00 00
0C0: 00 00 00 00 00 00 00 00 60 30 3A 38 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 50 01 4E E6 55 C7 73 31
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 18
0F0: 40 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 29 00 00 00 00 00 00 00 00 16 D3 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 70 37 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 15 18 00 00 00 00 00 00 00 00 10 1E 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 C1 A5
Nahoru
Hette
Návštěvník
Návštěvník
Příspěvky: 46
Registrován: 19 Črc 2011 23:25

Re: Extréemne pomalé vypínanie

#14 Příspěvek od Hette »

niekedy je až moc teplý ale to býval vždy.... takto začal sekať od pripojenia na wifi v škole...
Nahoru
Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Extréemne pomalé vypínanie

#15 Příspěvek od motji »

Ta teplota disku je moc.

Stáhněte tento program, nainstalujte
http://www.stahuj.centrum.cz/utility_a_ ... y/everest/

-pak vyberte záložku počítač, senzory ,a dejte screen.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“