vir facebook chat, adobe flash, píšu z ubuntu

[lpjt]

Ahoj,

předem díky za pomoc

Naletěl jsem osobní na zprávu

Vista 32

Hned při začátku ...načtená plocha... při kliknutí na první program se systém sám odhlásí a restartuje.

Udělá to i při spuštění nouzového režimu.

Mám naštěstí grub na Linux ubuntu, z kterého píšu

Předpokládám, že RSIt jentak nespustim, když se rovnou vypnu.

Po připojení exteráku při záloze dat vypovědělo bootování i externí zařízení ( v linux, možná nesouvisí)

Máte nějaké řešení? Jak spustím RSIT, nějaká bios varianta?

LPJT

[Rudy]

Jedině oprava systému z instal. média a následné vyčištění.

[lpjt]

EE, Dal jsem při bootu windows vist F8 a zadal jsem zakázat restartování při chybě systému (nabo tak nějak) , log pošlu za chvilku.

[lpjt]

zase píšu z linuxu

jenom podotýkám, že mám legální systém zakoupený s notebookem asus, který je ovšem aušus a již mu nefunguje mechanika... při stěhování jsem stratil papíry a buzerje mě to, že chce serial key...ačkoliv systém je legálně koupen, nemám jak získat svůj serial key.


Stihl jsem udělat log z RSIT, než mě to zase odlogovalo... stálo by zato uvažovat o obnově systému? (pokud budu vůbec zalogován na tak dlouho)

[lpjt]

Logfile of random's system information tool 1.09 (written by random/random)

Run by kreten at 2011-07-22 21:04:00

Microsoft® Windows Vista™ Home Premium Service Pack 2

System drive C: has 6 GB (3%) free of 177 GB

Total RAM: 2814 MB (52% free)



Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:04:42, on 22.7.2011

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v8.00 (8.00.6001.19088)

Boot mode: Normal



Running processes:

C:\Windows\system32\taskeng.exe

C:\Program Files\ASUS\SmartLogon\sensorsrv.exe

C:\Program Files\ASUS\ASUS Live Update\ALU.exe

C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\AsGHost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Windows\RtHDVCpl.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\ASUS\ATK Media\DMedia.exe

C:\Windows\ASScrPro.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\Common Files\Real\Update_OB\realsched.exe

C:\Windows\update.tray-12-0\svchost.exe

C:\Windows\update.tray-15-0\svchost.exe

C:\Windows\sysdriver32.exe

C:\Windows\ehome\ehtray.exe

C:\Users\kreten\AppData\Local\Google\Update\GoogleUpdate.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Users\kreten\AppData\Local\Google\Update\GoogleUpdate.exe

C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe

C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Program Files\Infineon\Security Platform Software\PSDrt.exe

C:\Program Files\Infineon\Security Platform Software\SpTna.exe

C:\Users\kreten\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\kreten\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\rundll32.exe

C:\Users\kreten\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\wuauclt.exe

C:\Windows\System32\rundll32.exe

C:\Windows\system32\conime.exe

C:\Windows\systemup.exe

C:\Windows\l1rezerv.exe

C:\Users\kreten\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\kreten\Downloads\RSIT.exe

C:\Program Files\trend micro\kreten.exe



R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.easiestutils.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;192.168.*.*

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG10\avgssie.dll (file missing)

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: ASUS Security Protect Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMedia.exe

O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe

O4 - HKLM\..\Run: [IFXSPMGT] C:\Windows\system32\ifxspmgt.exe /NotifyLogon

O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll,RegisterModule

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [ArcSoft Connection Service] C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [wxpdrv] C:\Windows\services32.exe

O4 - HKLM\..\Run: [tray_ico0] C:\Windows\update.tray-12-0\svchost.exe

O4 - HKLM\..\Run: [tray_ico1] C:\Windows\update.tray-15-0\svchost.exe

O4 - HKLM\..\Run: [4183073.exe] "C:\Windows\Temp\4183073.exe"

O4 - HKLM\..\Run: [sysdriver32.exe] "C:\Windows\sysdriver32.exe" rezerv

O4 - HKLM\..\Run: [sysdriver32_.exe] "C:\Windows\sysdriver32_.exe" rezerv

O4 - HKLM\..\Run: [7579287.exe] "C:\Users\kreten\AppData\Local\Temp\7579287.exe"

O4 - HKLM\..\Run: [765735.exe] "C:\Users\kreten\AppData\Local\Temp\765735.exe"

O4 - HKLM\..\Run: [systemup] "C:\Windows\systemup.exe" stand

O4 - HKLM\..\Run: [l1rezerv.exe] "C:\Windows\l1rezerv.exe"

O4 - HKLM\..\Run: [68546014-loader2.exe] "C:\Windows\TEMP\68546014-loader2.exe"

O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\kreten\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O4 - Global Startup: Bluetooth.lnk = ?

O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Stáhnout odkaz s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: Stáhnout všechna videa s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm

O8 - Extra context menu item: Stáhnout všechny odkazy s použitím BitCometu - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm

O9 - Extra button: ASUS Security Protect Manager e-Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll

O9 - Extra 'Tools' menuitem: ASUS Security Protect Manager e-&Wallet - {1009C944-97D5-44A9-9E32-DFF54F498968} - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ASWallet.dll

O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll/206 (file missing)

O10 - Broken Internet access because of LSP provider 'c:\program files\bonjour\mdnsnsp.dll' missing

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG10\avgpp.dll (file missing)

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\Skype4COM.dll

O20 - AppInit_DLLs: APSHook.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe

O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe

O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe

O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe

O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Security Platform Management Service (IFXSpMgtSrv) - Infineon Technologies AG - C:\Windows\system32\ifxspmgt.exe

O23 - Service: Trusted Platform Core Service (IFXTCS) - Infineon Technologies AG - C:\Windows\System32\IFXTCS.exe

O23 - Service: MotoHelper Service (MotoHelper) - Unknown owner - C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe

O23 - Service: Personal Secure Drive Service (PersonalSecureDriveService) - Infineon Technologies AG - C:\Windows\system32\IfxPsdSv.exe

O23 - Service: AMD Safely Remove Disk Drive (SafeRemove) - AMD - C:\Program Files\AMD\Safely Remove Disk\SafeRemoveService.exe

O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe

O23 - Service: srvbtcclient - Unknown owner - C:\Windows\update.5.0\svchost.exe

O23 - Service: srviecheck - Unknown owner - C:\Windows\update.2\svchost.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: wxpdrivers - Unknown owner - C:\Windows\update.1\svchost.exe



--

End of file - 11641 bytes



======Scheduled tasks folder======



C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-740257436-3691931877-2674574622-1000Core.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-740257436-3691931877-2674574622-1000UA.job



=========Mozilla firefox=========



ProfilePath - C:\Users\kreten\AppData\Roaming\Mozilla\Firefox\Profiles\1urbjlyf.default



prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {ABDE892B-13A8-4d1b-88E6-365A6E755758}:1.1.4, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {3f963a5b-e555-4543-90e2-c3908898db71}:10.0.0.1167, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"



"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

"{3112ca9c-de6d-4884-a869-9855de68056c}"=C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

"{3f963a5b-e555-4543-90e2-c3908898db71}"=C:\Program Files\AVG\AVG10\Firefox\





[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 10.1 Plugin

"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]

"Description"=Adobe Shockwave Player

"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]

"Description"=DivX Plus Web Player

"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]

"Description"=Google Earth in your browser

"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]

"Description"=Oracle® Next Generation Java™ Plug-In

"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=C:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]

"Description"=Windows Presentation Foundation plug-in for Mozilla browsers

"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732]

"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In

"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprjplug;version=1.0.3.732]

"Description"=RealJukebox Netscape Plugin

"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprphtml5videoshim;version=1.0.0.0]

"Description"=RealPlayer(tm) HTML5VideoShim Plug-In

"Path"=C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732]

"Description"=6.0.12.732

"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]

"Description"=

"Path"=



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files\Google\Update\1.3.21.57\npGoogleUpdate3.dll



[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@unity3d.com/UnityPlayer]

"Description"=Unity Player 2.5.0f5

"Path"=C:\Program Files\Unity\WebPlayer\loader\npUnity3D32.dll



C:\záser\extensions\

{972ce4c6-7e08-4474-a285-3208198ce6fd}

{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}



C:\záser\components\

browser.xpt

browserdirprovider.dll

brwsrcmp.dll

components.list

FeedConverter.js

FeedProcessor.js

FeedWriter.js

fuelApplication.js

GPSDGeolocationProvider.js

jsconsole-clhandler.js

NetworkGeolocationProvider.js

nppl3260.xpt

nsAddonRepository.js

nsBadCertHandler.js

nsBlocklistService.js

nsBrowserContentHandler.js

nsBrowserGlue.js

nsContentDispatchChooser.js

nsContentPrefService.js

nsDefaultCLH.js

nsDownloadManagerUI.js

nsExtensionManager.js

nsFormAutoComplete.js

nsHandlerService.js

nsHelperAppDlg.js

nsIBitCometAgent.xpt

nsINIProcessor.js

nsIQTScriptablePlugin.xpt

nsJSRealPlayerPlugin.xpt

nsLivemarkService.js

nsLoginInfo.js

nsLoginManager.js

nsLoginManagerPrompter.js

nsMicrosummaryService.js

nsPlacesAutoComplete.js

nsPlacesDBFlush.js

nsPlacesTransactionsService.js

nsPrivateBrowsingService.js

nsProxyAutoConfig.js

nsSafebrowsingApplication.js

nsSearchService.js

nsSearchSuggestions.js

nsSessionStartup.js

nsSessionStore.js

nsSetDefaultBrowser.js

nsSidebar.js

nsTaggingService.js

nsTryToClose.js

nsUpdateService.js

nsUpdateServiceStub.js

nsUpdateTimerManager.js

nsUrlClassifierLib.js

nsUrlClassifierListManager.js

nsURLFormatter.js

nsWebHandlerApp.js

pluginGlue.js

storage-Legacy.js

storage-mozStorage.js

txEXSLTRegExFunctions.js

WebContentConverter.js



C:\záser\plugins\

np-mswmp.dll

npBitCometAgent.dll

npdeployJava1.dll

npnul32.dll

NPOFF12.DLL

nppl3260.dll

npqtplugin.dll

npqtplugin2.dll

npqtplugin3.dll

npqtplugin4.dll

npqtplugin5.dll

npqtplugin6.dll

npqtplugin7.dll

nprjplug.dll

nprpjplug.dll

QuickTimePlugin.class

WMP Firefox Plugin License.rtf

WMP Firefox Plugin RelNotes.txt



C:\záser\searchplugins\

google.xml

jyxo-cz.xml

mall-cz.xml

seznam-cz.xml

slunecnice-cz.xml

wikipedia-cz.xml



C:\Users\kreten\AppData\Roaming\Mozilla\Firefox\Profiles\1urbjlyf.default\extensions\

firefox-ext@youtubekeep.com

{20a82645-c095-46ed-80e3-08825760534b}

{3112ca9c-de6d-4884-a869-9855de68056c}

{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}



======Registry dump======



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2008-06-11 61816]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-05-26 341600]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]

BitComet Helper - C:\Program Files\BitComet\tools\BitCometBHO_1.3.3.2.dll [2009-03-02 636216]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

AVG Safe Search - C:\Program Files\AVG\AVG10\avgssie.dll []



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}]

ASUS Security Protect Manager - C:\Program Files\ASUS Security Center\ASUS Security Protect Manager\Bin\ItIEAddIn.dll [2006-11-21 70928]



[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]

"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-06-13 6183456]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-12-06 1029416]

"ATKMEDIA"=C:\Program Files\ASUS\ATK Media\DMedia.exe [2008-06-25 159744]

"ASUS Screen Saver Protector"=C:\Windows\ASScrPro.exe [2009-09-02 33136]

"IFXSPMGT"=C:\Windows\system32\ifxspmgt.exe [2008-01-25 677144]

"CognizanceTS"=C:\PROGRA~1\ASUSSE~1\ASUSSE~1\Bin\ASTSVCC.dll [2003-12-21 17920]

"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

"ArcSoft Connection Service"=C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-10-27 207424]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888]

"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-05-26 202256]

"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-05-24 336384]

"wxpdrv"=C:\Windows\services32.exe [2011-07-22 1167872]

"tray_ico"= []

"tray_ico0"=C:\Windows\update.tray-12-0\svchost.exe [2011-07-22 1167872]

"tray_ico1"=C:\Windows\update.tray-15-0\svchost.exe [2011-07-22 1167872]

"tray_ico2"= []

"tray_ico3"= []

"tray_ico4"= []

"4183073.exe"=C:\Windows\Temp\4183073.exe [2011-07-22 249344]

"sysdriver32.exe"=C:\Windows\sysdriver32.exe [2011-07-22 249344]

"sysdriver32_.exe"=C:\Windows\sysdriver32_.exe [2011-07-22 249344]

"7579287.exe"=C:\Users\kreten\AppData\Local\Temp\7579287.exe [2011-07-22 249344]

"765735.exe"=C:\Users\kreten\AppData\Local\Temp\765735.exe [2011-07-22 483328]

"systemup"=C:\Windows\systemup.exe [2011-07-22 114176]

"l1rezerv.exe"=C:\Windows\l1rezerv.exe [2011-07-22 110592]

"68546014-loader2.exe"=C:\Windows\TEMP\68546014-loader2.exe [2011-07-22 249344]



[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []

"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]

"Google Update"=C:\Users\kreten\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-30 133104]

"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-21 202240]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-12 39792]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Camera ScreenSaver]

C:\Windows\AsScrProlog.exe [2009-09-02 47672]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATICustomerCare]

C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATKOSD2]

C:\Program Files\ATKOSD2\ATKOSD2.exe [2007-10-18 7737344]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG_TRAY]

C:\Program Files\AVG\AVG10\avgtray.exe []



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]

C:\záser\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]

C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-09-16 1164584]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]

C:\Users\kreten\AppData\Local\Google\Update\GoogleUpdate.exe [2009-09-30 133104]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\M-Audio Taskbar Icon]

C:\Windows\system32\M-AudioTaskBarIcon.exe [2009-11-09 643592]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]

C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

C:\Program Files\Skype\Phone\Skype.exe [2010-09-02 13351304]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-05-26 202256]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^kreten^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CaptureWiz.lnk]

C:\Users\kreten\Desktop\SCREEN~1\CAPTUR~1\Pro\CAPTUR~1.EXE [2010-01-15 3111616]



[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^kreten^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk]

C:\PROGRA~1\MICROS~3\Office12\ONENOTEM.EXE [2009-02-26 97680]



C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="APSHook.dll"



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"notification packages"=scecli
ASWLNPkg



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\wxpdrivers]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]



[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\wxpdrivers]



[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"EnableLUA"=0

"EnableSecureUIAPaths"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0



[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=0



[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]



[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]



[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"MSVideo8"=VfWWDM32.dll

"VIDC.FFDS"=ff_vfw.dll

"vidc.XVID"=xvidvfw.dll

"msacm.ac3filter"=ac3filter.acm

"wave5"=serwvdrv.dll

"wave3"=wdmaud.drv

"mixer3"=wdmaud.drv

"wave4"=wdmaud.drv

"mixer4"=wdmaud.drv

"wave2"=wdmaud.drv

"mixer2"=wdmaud.drv

"wave"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"msacm.avis"=ff_acm.acm

"wave6"=wdmaud.drv

"mixer5"=wdmaud.drv

"wave7"=wdmaud.drv

"mixer6"=wdmaud.drv

"wave8"=wdmaud.drv

"mixer7"=wdmaud.drv

"vidc.DIVX"=DivX.dll

"vidc.yv12"=DivX.dll

"wave9"=wdmaud.drv

"mixer8"=wdmaud.drv

"aux2"=wdmaud.drv

"mixer9"=wdmaud.drv

"aux3"=wdmaud.drv

"Midi"=wdmaud.drv

"midi2"=wdmaud.drv

"aux4"=wdmaud.drv

"midi3"=wdmaud.drv

"aux5"=wdmaud.drv

"midi4"=wdmaud.drv

"aux6"=wdmaud.drv

"midi5"=wdmaud.drv

"aux7"=wdmaud.drv

"midi6"=wdmaud.drv

"aux8"=wdmaud.drv

"midi7"=wdmaud.drv

"aux9"=wdmaud.drv

"midi8"=wdmaud.drv

"midi9"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv



======File associations======



.js - edit -

.js - open - "C:\Program Files\PSPad editor\PSPad.exe" "%1"

.txt - open -



======List of files/folders created in the last 1 month======



2011-07-22 21:04:01 ----D---- C:\Program Files\trend micro

2011-07-22 21:04:00 ----D---- C:\rsit

2011-07-22 21:02:02 ----A---- C:\Windows\ddh_iplist.txt

2011-07-22 21:01:50 ----A---- C:\Windows\l1rezerv.exe

2011-07-22 21:01:40 ----A---- C:\Windows\systemup.exe

2011-07-22 21:01:30 ----A---- C:\Windows\unrar.exe

2011-07-22 21:01:27 ----A---- C:\Windows\iecheck_iplist.txt

2011-07-22 21:01:16 ----A---- C:\Windows\btc_client_iplist.txt

2011-07-22 21:01:04 ----HD---- C:\Windows\update.2

2011-07-22 21:00:47 ----HD---- C:\Windows\update.5.0

2011-07-22 21:00:13 ----A---- C:\Windows\iplist.txt

2011-07-22 20:52:48 ----ASH---- C:\hiberfil.sys

2011-07-22 19:27:14 ----A---- C:\Windows\ntbtlog.txt

2011-07-22 18:34:49 ----D---- C:\Windows\av_ico

2011-07-22 18:34:19 ----A---- C:\Windows\sysdriver32_.exe

2011-07-22 18:33:55 ----A---- C:\Windows\sysdriver32.exe

2011-07-22 18:33:18 ----A---- C:\Windows\front_ip_list.txt

2011-07-22 18:29:20 ----HD---- C:\Windows\update.1

2011-07-22 18:29:10 ----HD---- C:\Windows\update.tray-15-0-lnk

2011-07-22 18:29:10 ----HD---- C:\Windows\update.tray-15-0

2011-07-22 18:29:09 ----HD---- C:\Windows\update.tray-12-0-lnk

2011-07-22 18:29:09 ----HD---- C:\Windows\update.tray-12-0

2011-07-22 18:17:23 ----A---- C:\Windows\winlog-ids.txt

2011-07-22 18:17:23 ----A---- C:\Windows\winlog-dirs.txt

2011-07-22 18:17:17 ----A---- C:\Windows\services32.exe

2011-07-20 03:02:55 ----SHD---- C:\Config.Msi

2011-07-18 21:26:39 ----D---- C:\ProgramData\ATI

2011-07-18 21:26:33 ----D---- C:\Program Files\AMD APP

2011-07-18 21:25:01 ----D---- C:\ProgramData\AMD

2011-07-18 21:24:27 ----A---- C:\Windows\system32\drivers\amdiox86.sys

2011-07-18 21:24:21 ----D---- C:\Program Files\ATI Technologies

2011-07-18 21:15:58 ----A---- C:\Windows\system32\drivers\AtihdLH3.sys

2011-07-18 19:06:55 ----SHD---- C:\found.006

2011-07-15 21:57:07 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS

2011-07-15 21:57:07 ----A---- C:\Windows\system32\drivers\bthport.sys

2011-07-15 21:57:03 ----A---- C:\Windows\system32\win32k.sys

2011-07-15 21:56:59 ----A---- C:\Windows\system32\winsrv.dll

2011-07-15 21:56:59 ----A---- C:\Windows\system32\csrsrv.dll

2011-06-29 01:57:09 ----A---- C:\Windows\system32\schannel.dll

2011-06-23 21:36:54 ----D---- C:\Program Files\Common Files\Steam

2011-06-23 21:24:19 ----SHD---- C:\found.005



======List of files/folders modified in the last 1 month======



2011-07-22 21:04:28 ----D---- C:\Windows\Temp

2011-07-22 21:04:01 ----RD---- C:\Program Files

2011-07-22 21:02:02 ----D---- C:\Windows

2011-07-22 21:02:01 ----D---- C:\Windows\Prefetch

2011-07-22 21:01:27 ----D---- C:\Windows\system32\drivers\etc

2011-07-22 20:54:33 ----D---- C:\Windows\system32\Tasks

2011-07-22 18:29:14 ----SHD---- C:\$Recycle.Bin

2011-07-22 18:26:41 ----D---- C:\Users\kreten\AppData\Roaming\Skype

2011-07-22 18:22:02 ----SHD---- C:\System Volume Information

2011-07-22 17:03:41 ----D---- C:\Users\kreten\AppData\Roaming\skypePM

2011-07-20 10:21:25 ----D---- C:\Windows\System32

2011-07-20 10:21:25 ----A---- C:\Windows\system32\PerfStringBackup.INI

2011-07-20 10:21:24 ----D---- C:\Windows\inf

2011-07-20 03:17:02 ----SHD---- C:\Windows\Installer

2011-07-20 03:16:35 ----D---- C:\ProgramData\Microsoft Help

2011-07-20 03:11:42 ----RSD---- C:\Windows\assembly

2011-07-20 03:00:43 ----D---- C:\Windows\system32\catroot2

2011-07-19 09:44:50 ----D---- C:\Program Files\Microsoft Silverlight

2011-07-19 03:18:40 ----D---- C:\Windows\winsxs

2011-07-19 03:08:57 ----RSD---- C:\Windows\Fonts

2011-07-19 03:08:43 ----D---- C:\Program Files\Common Files\microsoft shared

2011-07-19 03:08:08 ----D---- C:\Program Files\Microsoft Works

2011-07-19 03:04:32 ----AD---- C:\Program Files\Common Files\System

2011-07-19 03:04:32 ----A---- C:\Windows\win.ini

2011-07-18 21:26:39 ----HD---- C:\ProgramData

2011-07-18 21:24:49 ----D---- C:\Windows\system32\drivers

2011-07-18 21:24:48 ----D---- C:\Windows\system32\catroot

2011-07-18 20:26:25 ----SD---- C:\Users\kreten\AppData\Roaming\Microsoft

2011-07-18 19:13:23 ----A---- C:\Windows\system32\acovcnt.exe

2011-07-17 21:08:51 ----D---- C:\Users\kreten\AppData\Roaming\Adobe

2011-07-16 03:02:30 ----A---- C:\Windows\system32\mrt.exe

2011-06-29 12:15:28 ----D---- C:\Windows\Microsoft.NET

2011-06-27 16:17:52 ----D---- C:\Users\kreten\AppData\Roaming\vlc

2011-06-23 21:36:54 ----D---- C:\Program Files\Common Files



======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======



R0 ahcix86s;ahcix86s; C:\Windows\system32\DRIVERS\ahcix86s.sys [2008-05-27 173576]

R0 AtiPcie;ATI PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2008-04-28 14352]

R0 AVGIDSEH;AVGIDSEH; C:\Windows\system32\DRIVERS\AVGIDSEH.Sys [2010-09-13 25680]

R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2010-09-07 26064]

R0 lullaby;lullaby; C:\Windows\system32\DRIVERS\lullaby.sys [2008-05-29 15416]

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-05-08 431672]

R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2010-09-07 249424]

R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2010-09-07 34384]

R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2010-11-09 299984]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-04-18 218688]

R1 PersonalSecureDrive;PersonalSecureDrive; C:\Windows\System32\drivers\psd.sys [2007-07-24 38816]

R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [2010-02-17 12872]

R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [2010-05-10 67656]

R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]

R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]

R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]

R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-07-30 38400]

R3 Afc;PPdus ASPI Shell; C:\Windows\system32\drivers\Afc.sys [2006-11-10 18688]

R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2007-08-23 1201312]

R3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2008-04-27 909824]

R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdLH3.sys [2011-07-18 97808]

R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2008-07-11 3698176]

R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-06-17 146824]

R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]

R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]

R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]

R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2008-05-13 81960]

R3 btwavdt;Bluetooth AVDT; C:\Windows\system32\drivers\btwavdt.sys [2008-05-13 100392]

R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2008-01-29 29736]

R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2008-05-13 17320]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-06-17 2153688]

R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2008-06-03 15928]

R3 MODEMCSA;Unimodem Streaming Filter Device; C:\Windows\system32\drivers\MODEMCSA.sys [2008-01-21 18432]

R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]

R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]

R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]

R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2008-01-21 45624]

R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2008-03-20 22072]

R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]

S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []

S2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2008-02-16 46592]

S3 ag4r264p;ag4r264p; C:\Windows\system32\drivers\ag4r264p.sys []

S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-03-09 104464]

S3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [2010-08-19 123472]

S3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [2010-08-19 30288]

S3 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\AVGIDSShim.Sys [2010-08-19 27216]

S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]

S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]

S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]

S3 MAUSBFASTTRACKPRO;Service for M-Audio FastTrack Pro; C:\Windows\system32\DRIVERS\MAudioFastTrackPro.sys [2009-11-09 158600]

S3 motmodem;Motorola USB CDC ACM Driver; C:\Windows\system32\DRIVERS\motmodem.sys [2010-09-29 24064]

S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]

S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]

S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]

S3 RDID1065;Roland SH-201; C:\Windows\system32\Drivers\rdwm1065.sys [2007-01-22 138112]

S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-05-02 122368]

S3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]

S3 usbaudio;Ovladač zvuků USB (WDM); C:\Windows\system32\drivers\usbaudio.sys [2009-04-11 73216]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2008-01-21 39936]

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-21 83328]

S3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller; C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-02 194048]

S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]

S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]



======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======



R2 ACDaemon;ArcSoft Connect Daemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]

R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Windows\system32\agrsmsvc.exe [2007-08-23 13312]

R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-05-24 294400]

R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2008-01-21 21504]

R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2008-01-21 21504]

R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-03 94208]

R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2008-07-11 692224]

R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]

R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]

R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2008-05-27 522792]

R2 IFXSpMgtSrv;Security Platform Management Service; C:\Windows\system32\ifxspmgt.exe [2008-01-25 677144]

R2 IFXTCS;Trusted Platform Core Service; C:\Windows\System32\IFXTCS.exe [2008-01-25 886040]

R2 MotoHelper;MotoHelper Service; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [2010-12-02 218432]

R2 PersonalSecureDriveService;Personal Secure Drive Service; C:\Windows\system32\IfxPsdSv.exe [2007-07-24 140568]

R2 SafeRemove;AMD Safely Remove Disk Drive; C:\Program Files\AMD\Safely Remove Disk\SafeRemoveService.exe [2008-07-07 147456]

R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]

R2 srvbtcclient;srvbtcclient; C:\Windows\update.5.0\svchost.exe [2011-07-22 340992]

R2 srviecheck;srviecheck; C:\Windows\update.2\svchost.exe [2011-07-22 483328]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]

R2 wxpdrivers;wxpdrivers; C:\Windows\update.1\svchost.exe [2011-07-22 1167872]

S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-09 136176]

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-12-26 1045256]

S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-09 136176]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-03-16 407336]

S4 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe []

S4 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG10\avgwdsvc.exe []

S4 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe []



-----------------EOF-----------------

[Rudy]

Vir tam je. Pokud opravdu máte legální OS, musíte mít na skříni NB nálepku COA, na níž najdete CDKey. Ten vložte do dialogového okna.

[lpjt]

nálepka k mému štěstí nečitelná...Jde o notebook, diagnostika, že tam je vir je od Vás milá. Mimo jiné jsem psal, že mi nejde mechanika.

fór je v tom, že potřebuju udržet moje visty alesoň po tu dobu, co budu zachraňovat ze zálohy systému.

Popřípadě z linuxu postupně mazat a nahrazovat poškozené soubory.
Když poradíte které, budu moc rád.

Zkusím http://virusstell.blogspot.com/2011/07/ ... t-vir.html a napíšu o dopadu.

[Rudy]

nálepka k mému štěstí nečitelná...

Tohle ale není náš problém. Je ve vašem vlastním zájmu ji udržovat v čitelném stavu. Jak byste řešil případný reinstal? Vámi navrhované řešení zkusit můžete. Další možností je vyjmout HDD a přes redukci jej připojit k stolnímu PC jako 2. disk a zkusit proskenovat pomocí MBAM: http://www.malwarebytes.org/mbam.php . Tan by měl pomoci minimálně natolik, že by se systém dal spustit a následně dočistit.

[lpjt]

ha ha ha, tak to si rovnou můžu znovu popovídat s alzou, jak mě vočůrali a s mikrosoftem, že stojí za starou belu... oni Tě platí nebo co?
Co takhle říct, že by mohlo jít o vir W32.Virut.Gen.D-163 ?
Nebo sehnat info, jak to zlikvidovat?

Bavim se tu s cédéčkem

[cernohous13]

Zdravím,

v tak zoufalé situaci zkus můj zoufalý pokus
z Linuxu smaž všechny složky a soubory z toho seznamu

Kód: Vybrat vše

2011-07-22 21:02:02 ----A---- C:\Windows\ddh_iplist.txt
2011-07-22 21:01:50 ----A---- C:\Windows\l1rezerv.exe
2011-07-22 21:01:40 ----A---- C:\Windows\systemup.exe
2011-07-22 21:01:30 ----A---- C:\Windows\unrar.exe
2011-07-22 21:01:27 ----A---- C:\Windows\iecheck_iplist.txt
2011-07-22 21:01:16 ----A---- C:\Windows\btc_client_iplist.txt
2011-07-22 21:01:04 ----HD---- C:\Windows\update.2
2011-07-22 21:00:47 ----HD---- C:\Windows\update.5.0
2011-07-22 21:00:13 ----A---- C:\Windows\iplist.txt
2011-07-22 18:34:49 ----D---- C:\Windows\av_ico
2011-07-22 18:34:19 ----A---- C:\Windows\sysdriver32_.exe
2011-07-22 18:33:55 ----A---- C:\Windows\sysdriver32.exe
2011-07-22 18:33:18 ----A---- C:\Windows\front_ip_list.txt
2011-07-22 18:29:20 ----HD---- C:\Windows\update.1
2011-07-22 18:29:10 ----HD---- C:\Windows\update.tray-15-0-lnk
2011-07-22 18:29:10 ----HD---- C:\Windows\update.tray-15-0
2011-07-22 18:29:09 ----HD---- C:\Windows\update.tray-12-0-lnk
2011-07-22 18:29:09 ----HD---- C:\Windows\update.tray-12-0
2011-07-22 18:17:23 ----A---- C:\Windows\winlog-ids.txt
2011-07-22 18:17:23 ----A---- C:\Windows\winlog-dirs.txt
2011-07-22 18:17:17 ----A---- C:\Windows\services32.exe

registry bohužel nevyčistíme, tak jsem zvědavý co to bude dělat při startu Win

[lpjt]

Mňo, díky, to určitě zkusim. Zatim čistim windows pomocí portable antivirů z linuxu. Zkoušel jsem avast, ale ten není na verzi ubuntu 9.10 už podporován.
Proto používám ClamAV ,kterej mi právě viruta našel. Pokusim se to postupně čistit.

Mám ale pocit, že některý Tebou navrhovaný soubory jsou nezbytně nutný pro chod windows ne? Nevíš který konkrétně? Zkusil bych si stáhnout jejich kopii.

[Rudy]

ha ha ha, tak to si rovnou můžu znovu popovídat s alzou, jak mě vočůrali a s mikrosoftem, že stojí za starou belu... oni Tě platí nebo co?
Co takhle říct, že by mohlo jít o vir W32.Virut.Gen.D-163 ?
Nebo sehnat info, jak to zlikvidovat?

Bavim se tu s cédéčkem

Máte ze mne legraci, přesto, že se snažím vám pomoci, nebo jak to vlastně myslíte?

[cernohous13]

Mňo, díky, to určitě zkusim. Zatim čistim windows pomocí portable antivirů z linuxu. Zkoušel jsem avast, ale ten není na verzi ubuntu 9.10 už podporován.
Proto používám ClamAV ,kterej mi právě viruta našel. Pokusim se to postupně čistit.

Mám ale pocit, že některý Tebou navrhovaný soubory jsou nezbytně nutný pro chod windows ne? Nevíš který konkrétně? Zkusil bych si stáhnout jejich kopii.

Koukni na datum instalace a věř mi, že to nejsou systémové soubory a složky, které při fungujícím systému normálně mažeme
Pokud nám nedůvěřuješ, je to na tobě

[lpjt]

a ještě pro zábavu výpis virů

/media/disk1/Program Files/Google/Update.zip: Trojan.Agent-204 FOUND
/media/disk1/Users/kreten/AppData/Local/Google/Update/1.3.21.57/GoogleCrashHandler.exe: Trojan.Agent-204 FOUND
/media/disk1/Users/kreten/AppData/Local/Temp/1181594585.exe: Trojan.Spy.Banker-5850 FOUND
/media/disk1/Users/kreten/AppData/Local/Temp/365609664.exe: Trojan.Spy.Banker-5850 FOUND
/media/disk1/Users/kreten/AppData/Local/Temp/759729.exe: Trojan.Downloader-110982 FOUND
/media/disk1/Windows/Installer/192fd5d.msp: W32.Virut.Gen.D-163 FOUND
/media/disk1/Windows/Installer/192fe71.msp: W32.Virut.Gen.D-163 FOUND
/media/disk1/Windows/SoftwareDistribution/Download/4d30d858a1c804843f3bf2a824e65990/xlconv.cab: W32.Virut.Gen.D-163 FOUND
/media/disk1/Windows/SoftwareDistribution/Download/c3f7ca0302eca0f38ce31e3bea1395c3/excel.cab: W32.Virut.Gen.D-163 FOUND
LibClamAV Error: cli_readn: read error: Input/output error
LibClamAV Error: cli_readn: read error: Input/output error
/media/disk1/Windows/systemup.exe: Trojan.Downloader-110982 FOUND
/media/disk1/Windows/Temp/13655_myunrar2.exe: Trojan.Spy.Banker-5850 FOUND
/media/disk1/Windows/Temp/996247423.exe: Trojan.Spy.Banker-5850 FOUND

[lpjt]

Ne,supér, jsem fakt happy, že mi pomáháte . . .jenom mě příde postavený na hlavu, že když si něco koupíš, tak to prostě nefunguje, a když je něco open source, tak to prostě funguje.