Dva roky notebook bez antiviru..

Zpráva

wackie · #1 Příspěvek od **wackie** » 01 srp 2011 19:38

Zdravim,

před dvěmi lety sem zakoupil notebook, samozřejmě bez antiviru a až asi teď posledních půl roku sem tam vložil kasperskyho..

Notebook se chová už hrozně pomalu, start trvá 7 minut.. šílenost

Prosil bych o nějaký postup jak se toho všeho zbavit.. mám WIN 7 64bit

děkuju moc..

chodnik74 · #2 Příspěvek od **chodnik74** » 01 srp 2011 19:48

Dobrý večer

začneme vložením logu z RSIT

návod vás povede... http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

wackie · #3 Příspěvek od **wackie** » 01 srp 2011 20:39

Logfile of random's system information tool 1.09 (written by random/random)
Run by Bobme at 2011-08-01 20:58:58
Microsoft Windows 7 Home Premium
System drive C: has 57 GB (37%) free of 153 GB
Total RAM: 1790 MB (44% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:45:49, on 1.8.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16800)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\HotkeyApp.exe
C:\Program Files (x86)\Launch Manager\WisKeyState.exe
C:\Program Files (x86)\Launch Manager\OSD.exe
C:\Program Files (x86)\Launch Manager\OSDCtrl.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\trend micro\Bobme.exe
C:\Program Files (x86)\Opera\opera.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Users/Bobme/Desktop/riskuj/riskuj.html#
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O4 - HKLM\..\Run: [HotkeyApp] "C:\Program Files (x86)\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [WisKeyState] "C:\Program Files (x86)\Launch Manager\WisKeyState.exe"
O4 - HKLM\..\Run: [LMgrVolOSD] "C:\Program Files (x86)\Launch Manager\OSD.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files (x86)\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [FullDataBackup] C:\Program Files (x86)\FullDataBackup\Backup.exe -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Přidat do Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: &Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files (x86)\PokerStars.NET\PokerStarsUpdate.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9401 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
"taskhost.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Launch Manager\HotkeyApp.exe"
"C:\Program Files (x86)\Launch Manager\WisKeyState.exe"
"C:\Program Files (x86)\Launch Manager\OSD.exe"
"C:\Program Files (x86)\Launch Manager\OSDCtrl.exe"
"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Launch Manager\WisLMSvc.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -scheduled
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
"C:\Users\Bobme\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
taskmgr.exe /3
"C:\Program Files (x86)\Opera\opera.exe"

=========Mozilla firefox=========

ProfilePath - C:\Users\Bobme\AppData\Roaming\Mozilla\Firefox\Profiles\0cctje53.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://start.icq.com/sm"
prefs.js - "extensions.enabledItems" - "illimitux@illimitux.net:4.0, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.2.6&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Windows.old\Program Files\Mozilla Firefox\extensions\
linkfilter@kaspersky.ru
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

C:\Windows.old\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Windows.old\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Windows.old\Program Files\Mozilla Firefox\searchplugins\
Cetrumcz_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Bobme\AppData\Roaming\Mozilla\Firefox\Profiles\0cctje53.default\extensions\
battlefieldplay4free@ea.com
illimitux@illimitux.net
staged
{800b5000-a755-47e1-992b-48a1c1357f07}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Bobme\AppData\Roaming\Mozilla\Firefox\Profiles\0cctje53.default\searchplugins\
askcom.xml
icqplugin-1.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\ievkbd.dll [2009-07-03 61456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll [2009-07-03 341008]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-07-03 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-11-07 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-08-05 264720]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-06-16 7883296]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-06-16 1833504]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"FullDataBackup"=C:\Program Files (x86)\FullDataBackup\Backup.exe [2011-06-21 4347904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-01-31 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HotkeyApp"=C:\Program Files (x86)\Launch Manager\HotkeyApp.exe [2008-05-23 192512]
"WisKeyState"=C:\Program Files (x86)\Launch Manager\WisKeyState.exe [2008-03-07 208896]
"LMgrVolOSD"=C:\Program Files (x86)\Launch Manager\OSD.exe [2008-03-03 258048]
"LMgrOSD"=C:\Program Files (x86)\Launch Manager\OSDCtrl.exe [2007-12-25 241664]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-06-14 98304]
"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2010-09-16 1164584]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-20 932288]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"AVP"=C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2011-05-16 311680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll,C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\System32\klogon.dll [2009-07-03 223760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2011-08-01 20:59:04 ----D---- C:\Program Files\trend micro
2011-08-01 20:58:58 ----D---- C:\rsit
2011-07-17 12:08:23 ----D---- C:\Program Files (x86)\Adobe Media Player
2011-07-17 12:05:29 ----D---- C:\Program Files\Common Files\Adobe
2011-07-13 07:11:59 ----A---- C:\Windows\system32\KernelBase.dll
2011-07-13 07:11:58 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-07-13 07:11:56 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-13 07:11:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-13 07:10:15 ----A---- C:\Windows\system32\win32k.sys
2011-07-13 07:09:37 ----A---- C:\Windows\system32\kernel32.dll
2011-07-13 07:09:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-07-13 07:09:31 ----A---- C:\Windows\system32\wow64win.dll
2011-07-13 07:09:30 ----A---- C:\Windows\system32\winsrv.dll
2011-07-13 07:09:30 ----A---- C:\Windows\system32\conhost.exe
2011-07-13 07:09:28 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-07-13 07:09:28 ----A---- C:\Windows\system32\wow64.dll
2011-07-13 07:09:28 ----A---- C:\Windows\system32\ntvdm64.dll
2011-07-13 07:09:27 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-07-13 07:09:27 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-07-13 07:09:27 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-07-13 07:09:27 ----A---- C:\Windows\system32\wow64cpu.dll
2011-07-13 07:09:03 ----A---- C:\Windows\SYSWOW64\user.exe
2011-07-08 21:35:36 ----A---- C:\Windows\ntbtlog.txt
2011-07-05 20:31:05 ----AD---- C:\zen-cart-1.3.9h-full czech-pipni-cz
2011-07-05 20:29:37 ----D---- C:\includes
2011-07-05 09:28:27 ----D---- C:\OpenCart v1.5.0.5
2011-07-04 21:31:01 ----D---- C:\shopperpress
2011-07-02 18:52:33 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2011-07-02 18:52:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2011-07-02 18:52:33 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-07-02 18:52:33 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-07-02 18:52:31 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2011-07-02 18:52:31 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-07-02 18:52:29 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2011-07-02 18:52:29 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-07-02 18:52:28 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2011-07-02 18:52:28 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-07-02 18:52:27 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2011-07-02 18:52:27 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-07-02 18:52:26 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2011-07-02 18:52:26 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-07-02 18:52:24 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2011-07-02 18:52:24 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-07-02 18:52:22 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2011-07-02 18:52:22 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2011-07-02 18:52:22 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-07-02 18:52:22 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-07-02 18:52:21 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2011-07-02 18:52:21 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-07-02 18:52:19 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2011-07-02 18:52:19 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-07-02 18:52:16 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2011-07-02 18:52:16 ----A---- C:\Windows\system32\XAudio2_5.dll
2011-07-02 18:52:15 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2011-07-02 18:52:15 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-07-02 18:52:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2011-07-02 18:52:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-07-02 18:52:12 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2011-07-02 18:52:12 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-07-02 18:52:11 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2011-07-02 18:52:11 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-07-02 18:52:10 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2011-07-02 18:52:10 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-07-02 18:52:08 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2011-07-02 18:52:08 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-07-02 18:52:06 ----A---- C:\Windows\SYSWOW64\d3dx10_41.dll
2011-07-02 18:52:06 ----A---- C:\Windows\SYSWOW64\D3DCompiler_41.dll
2011-07-02 18:52:06 ----A---- C:\Windows\system32\d3dx10_41.dll
2011-07-02 18:52:06 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2011-07-02 18:52:05 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2011-07-02 18:52:05 ----A---- C:\Windows\system32\D3DX9_41.dll
2011-07-02 18:52:02 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2011-07-02 18:52:02 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2011-07-02 18:52:02 ----A---- C:\Windows\system32\XAudio2_4.dll
2011-07-02 18:52:02 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2011-07-02 18:52:01 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2011-07-02 18:52:01 ----A---- C:\Windows\system32\xactengine3_4.dll
2011-07-02 18:51:59 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2011-07-02 18:51:59 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2011-07-02 18:51:57 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2011-07-02 18:51:57 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2011-07-02 18:51:57 ----A---- C:\Windows\system32\d3dx10_40.dll
2011-07-02 18:51:57 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2011-07-02 18:51:56 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2011-07-02 18:51:56 ----A---- C:\Windows\system32\D3DX9_40.dll
2011-07-02 18:51:53 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2011-07-02 18:51:53 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2011-07-02 18:51:53 ----A---- C:\Windows\system32\XAudio2_3.dll
2011-07-02 18:51:53 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2011-07-02 18:51:52 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2011-07-02 18:51:52 ----A---- C:\Windows\system32\xactengine3_3.dll
2011-07-02 18:51:51 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2011-07-02 18:51:51 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2011-07-02 18:51:49 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-07-02 18:51:49 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-07-02 18:51:47 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2011-07-02 18:51:47 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-07-02 18:51:46 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-07-02 18:51:46 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-07-02 18:51:45 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-07-02 18:51:42 ----A---- C:\Windows\SYSWOW64\XAudio2_1.dll
2011-07-02 18:51:42 ----A---- C:\Windows\SYSWOW64\XAPOFX1_0.dll
2011-07-02 18:51:42 ----A---- C:\Windows\system32\XAudio2_1.dll
2011-07-02 18:51:42 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2011-07-02 18:51:41 ----A---- C:\Windows\SYSWOW64\xactengine3_1.dll
2011-07-02 18:51:41 ----A---- C:\Windows\system32\xactengine3_1.dll
2011-07-02 18:51:38 ----A---- C:\Windows\SYSWOW64\X3DAudio1_4.dll
2011-07-02 18:51:38 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2011-07-02 18:51:37 ----A---- C:\Windows\SYSWOW64\d3dx10_38.dll
2011-07-02 18:51:37 ----A---- C:\Windows\SYSWOW64\D3DCompiler_38.dll
2011-07-02 18:51:37 ----A---- C:\Windows\system32\d3dx10_38.dll
2011-07-02 18:51:37 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2011-07-02 18:51:34 ----A---- C:\Windows\SYSWOW64\D3DX9_38.dll
2011-07-02 18:51:34 ----A---- C:\Windows\system32\D3DX9_38.dll
2011-07-02 18:51:31 ----A---- C:\Windows\SYSWOW64\XAudio2_0.dll
2011-07-02 18:51:31 ----A---- C:\Windows\system32\XAudio2_0.dll
2011-07-02 18:51:29 ----A---- C:\Windows\SYSWOW64\xactengine3_0.dll
2011-07-02 18:51:29 ----A---- C:\Windows\SYSWOW64\X3DAudio1_3.dll
2011-07-02 18:51:29 ----A---- C:\Windows\system32\xactengine3_0.dll
2011-07-02 18:51:29 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2011-07-02 18:51:28 ----A---- C:\Windows\SYSWOW64\D3DCompiler_37.dll
2011-07-02 18:51:28 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2011-07-02 18:51:27 ----A---- C:\Windows\SYSWOW64\d3dx10_37.dll
2011-07-02 18:51:27 ----A---- C:\Windows\system32\d3dx10_37.dll
2011-07-02 18:51:23 ----A---- C:\Windows\SYSWOW64\D3DX9_37.dll
2011-07-02 18:51:23 ----A---- C:\Windows\system32\D3DX9_37.dll
2011-07-02 18:51:21 ----A---- C:\Windows\SYSWOW64\xactengine2_10.dll
2011-07-02 18:51:21 ----A---- C:\Windows\system32\xactengine2_10.dll
2011-07-02 18:51:19 ----A---- C:\Windows\SYSWOW64\d3dx10_36.dll
2011-07-02 18:51:19 ----A---- C:\Windows\SYSWOW64\D3DCompiler_36.dll
2011-07-02 18:51:19 ----A---- C:\Windows\system32\d3dx10_36.dll
2011-07-02 18:51:19 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2011-07-02 18:51:17 ----A---- C:\Windows\SYSWOW64\d3dx9_36.dll
2011-07-02 18:51:17 ----A---- C:\Windows\system32\d3dx9_36.dll
2011-07-02 18:51:15 ----A---- C:\Windows\SYSWOW64\xactengine2_9.dll
2011-07-02 18:51:15 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-07-02 18:51:14 ----A---- C:\Windows\SYSWOW64\d3dx10_35.dll
2011-07-02 18:51:14 ----A---- C:\Windows\SYSWOW64\D3DCompiler_35.dll
2011-07-02 18:51:14 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-07-02 18:51:14 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-07-02 18:51:11 ----A---- C:\Windows\SYSWOW64\d3dx9_35.dll
2011-07-02 18:51:11 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-07-02 18:51:09 ----A---- C:\Windows\SYSWOW64\xactengine2_8.dll
2011-07-02 18:51:09 ----A---- C:\Windows\SYSWOW64\X3DAudio1_2.dll
2011-07-02 18:51:09 ----A---- C:\Windows\system32\xactengine2_8.dll
2011-07-02 18:51:09 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2011-07-02 18:51:08 ----A---- C:\Windows\SYSWOW64\d3dx10_34.dll
2011-07-02 18:51:08 ----A---- C:\Windows\SYSWOW64\D3DCompiler_34.dll
2011-07-02 18:51:08 ----A---- C:\Windows\system32\d3dx10_34.dll
2011-07-02 18:51:08 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2011-07-02 18:51:06 ----A---- C:\Windows\SYSWOW64\d3dx9_34.dll
2011-07-02 18:51:06 ----A---- C:\Windows\system32\d3dx9_34.dll
2011-07-02 18:51:05 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2011-07-02 18:51:05 ----A---- C:\Windows\system32\xinput1_3.dll
2011-07-02 18:51:01 ----A---- C:\Windows\SYSWOW64\xactengine2_7.dll
2011-07-02 18:51:01 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-07-02 18:51:00 ----A---- C:\Windows\SYSWOW64\d3dx10_33.dll
2011-07-02 18:51:00 ----A---- C:\Windows\SYSWOW64\D3DCompiler_33.dll
2011-07-02 18:51:00 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-07-02 18:51:00 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-07-02 18:50:59 ----A---- C:\Windows\SYSWOW64\d3dx9_33.dll
2011-07-02 18:50:59 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-07-02 18:50:56 ----A---- C:\Windows\SYSWOW64\xactengine2_6.dll
2011-07-02 18:50:56 ----A---- C:\Windows\system32\xactengine2_6.dll
2011-07-02 18:50:53 ----A---- C:\Windows\SYSWOW64\xactengine2_5.dll
2011-07-02 18:50:53 ----A---- C:\Windows\system32\xactengine2_5.dll
2011-07-02 18:50:52 ----A---- C:\Windows\SYSWOW64\d3dx10.dll
2011-07-02 18:50:52 ----A---- C:\Windows\system32\d3dx10.dll
2011-07-02 18:50:51 ----A---- C:\Windows\SYSWOW64\d3dx9_32.dll
2011-07-02 18:50:51 ----A---- C:\Windows\system32\d3dx9_32.dll
2011-07-02 18:50:50 ----A---- C:\Windows\SYSWOW64\xactengine2_4.dll
2011-07-02 18:50:50 ----A---- C:\Windows\SYSWOW64\x3daudio1_1.dll
2011-07-02 18:50:50 ----A---- C:\Windows\system32\xactengine2_4.dll
2011-07-02 18:50:50 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-07-02 18:50:48 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2011-07-02 18:50:48 ----A---- C:\Windows\system32\d3dx9_31.dll
2011-07-02 18:50:46 ----A---- C:\Windows\SYSWOW64\xinput1_2.dll
2011-07-02 18:50:46 ----A---- C:\Windows\SYSWOW64\xactengine2_3.dll
2011-07-02 18:50:46 ----A---- C:\Windows\system32\xinput1_2.dll
2011-07-02 18:50:46 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-07-02 18:50:43 ----A---- C:\Windows\SYSWOW64\xinput1_1.dll
2011-07-02 18:50:43 ----A---- C:\Windows\SYSWOW64\xactengine2_2.dll
2011-07-02 18:50:43 ----A---- C:\Windows\system32\xinput1_1.dll
2011-07-02 18:50:43 ----A---- C:\Windows\system32\xactengine2_2.dll
2011-07-02 18:50:40 ----A---- C:\Windows\SYSWOW64\xactengine2_1.dll
2011-07-02 18:50:40 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-07-02 18:50:33 ----A---- C:\Windows\SYSWOW64\d3dx9_30.dll
2011-07-02 18:50:33 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-07-02 18:50:29 ----A---- C:\Windows\SYSWOW64\xactengine2_0.dll
2011-07-02 18:50:29 ----A---- C:\Windows\SYSWOW64\x3daudio1_0.dll
2011-07-02 18:50:29 ----A---- C:\Windows\system32\xactengine2_0.dll
2011-07-02 18:50:29 ----A---- C:\Windows\system32\x3daudio1_0.dll
2011-07-02 18:50:27 ----A---- C:\Windows\SYSWOW64\d3dx9_29.dll
2011-07-02 18:50:27 ----A---- C:\Windows\system32\d3dx9_29.dll
2011-07-02 18:50:26 ----A---- C:\Windows\SYSWOW64\d3dx9_28.dll
2011-07-02 18:50:26 ----A---- C:\Windows\system32\d3dx9_28.dll
2011-07-02 18:50:22 ----A---- C:\Windows\SYSWOW64\d3dx9_27.dll
2011-07-02 18:50:22 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-07-02 18:50:20 ----A---- C:\Windows\SYSWOW64\d3dx9_26.dll
2011-07-02 18:50:20 ----A---- C:\Windows\system32\d3dx9_26.dll
2011-07-02 18:50:17 ----A---- C:\Windows\SYSWOW64\d3dx9_25.dll
2011-07-02 18:50:17 ----A---- C:\Windows\system32\d3dx9_25.dll
2011-07-02 18:50:14 ----A---- C:\Windows\SYSWOW64\d3dx9_24.dll
2011-07-02 18:50:14 ----A---- C:\Windows\system32\d3dx9_24.dll
2011-07-02 18:37:39 ----HD---- C:\Windows\msdownld.tmp
2011-07-02 18:37:24 ----D---- C:\Windows\SYSWOW64\directx
2011-07-02 18:26:24 ----D---- C:\Program Files (x86)\Telltale Games

======List of files/folders modified in the last 1 month======

2011-08-01 21:45:40 ----D---- C:\Windows\Temp
2011-08-01 21:41:21 ----D---- C:\Users\Bobme\AppData\Roaming\Skype
2011-08-01 21:18:09 ----D---- C:\Windows\Prefetch
2011-08-01 20:59:04 ----RD---- C:\Program Files
2011-08-01 19:35:54 ----D---- C:\Windows\system32\config
2011-07-31 23:49:01 ----D---- C:\ProgramData\Kaspersky Lab
2011-07-31 21:06:42 ----SHD---- C:\Windows\Installer
2011-07-31 21:06:37 ----D---- C:\Windows\system32\Tasks
2011-07-31 21:05:59 ----RD---- C:\Program Files (x86)\Skype
2011-07-31 21:05:57 ----D---- C:\ProgramData\Skype
2011-07-31 21:05:46 ----D---- C:\Program Files (x86)\Common Files
2011-07-31 19:06:07 ----D---- C:\Windows\system32\catroot2
2011-07-31 19:05:47 ----SHD---- C:\System Volume Information
2011-07-31 18:56:54 ----D---- C:\Windows\System32
2011-07-31 18:56:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-07-31 18:56:52 ----D---- C:\Windows\inf
2011-07-31 16:30:13 ----D---- C:\Users\Bobme\AppData\Roaming\skypePM
2011-07-18 07:12:10 ----D---- C:\Users\Bobme\AppData\Roaming\uTorrent
2011-07-17 12:27:54 ----D---- C:\Users\Bobme\AppData\Roaming\Adobe
2011-07-17 12:23:42 ----D---- C:\ProgramData\Adobe
2011-07-17 12:21:02 ----D---- C:\Program Files (x86)\Adobe
2011-07-17 12:08:23 ----RD---- C:\Program Files (x86)
2011-07-17 12:06:26 ----RSD---- C:\Windows\Fonts
2011-07-17 12:05:29 ----D---- C:\Program Files\Common Files
2011-07-17 12:00:21 ----D---- C:\Windows\SysWOW64
2011-07-14 03:24:06 ----D---- C:\Windows\winsxs
2011-07-14 03:21:28 ----D---- C:\Windows\system32\DriverStore
2011-07-14 03:21:28 ----D---- C:\Windows\AppPatch
2011-07-14 03:03:14 ----D---- C:\Windows\debug
2011-07-14 03:03:04 ----A---- C:\Windows\system32\MRT.exe
2011-07-14 03:02:45 ----D---- C:\ProgramData\Microsoft Help
2011-07-13 07:08:40 ----D---- C:\Windows\system32\catroot
2011-07-10 23:23:54 ----D---- C:\ProgramData\Fujitsu
2011-07-08 21:36:07 ----D---- C:\Windows
2011-07-07 23:31:03 ----D---- C:\upload
2011-07-02 18:50:40 ----RSD---- C:\Windows\assembly
2011-07-02 18:50:06 ----D---- C:\Windows\Microsoft.NET

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 KLBG;Kaspersky Lab Boot Guard Driver; C:\Windows\system32\DRIVERS\klbg.sys [2008-12-15 38416]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2009-06-15 156688]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2011-05-16 330768]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2009-05-15 26640]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 91568]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-06-14 6031872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-06-16 1778592]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-05-16 21008]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-19 239616]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-10-10 109056]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\Windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 35112]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 mod7700;DiBcom DIB7700 based TV tuner device; C:\Windows\System32\Drivers\dvb7700all.sys [2008-07-09 663040]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-06-14 203264]
R2 AVP;Kaspersky Internet Security; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2011-05-16 311680]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-05-16 75136]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2011-05-16 189248]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-06-01 2337144]
R3 WisLMSvc;WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [2008-01-15 118784]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-07-17 655624]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-10-23 1255736]

-----------------EOF-----------------

chodnik74 · #4 Příspěvek od **chodnik74** » 01 srp 2011 20:54

Kdyby nešlo,tak nastartujte pc v nouzovém režimu ( při startu pc mačkejte F8) a udělejte RSIT tam

wackie · #5 Příspěvek od **wackie** » 01 srp 2011 20:56

Čekal sem az se to uděla, ale jaksi sem neodšrtl licence, takže sem čekal zbytečně .))

chodnik74 · #6 Příspěvek od **chodnik74** » 01 srp 2011 20:58

Jéj

i to se stává celebritám

wackie · #7 Příspěvek od **wackie** » 01 srp 2011 21:17

Mohl bych poprosit co dál? .))

chodnik74 · #8 Příspěvek od **chodnik74** » 01 srp 2011 21:20

Spustíme si HijackThis

Kód: Vybrat vše

C:\Program Files\trend micro\Bobme.exe

(Pokud nenajdeme nebo nemáme,tak stáhneme ZDE )

Dále klikneme na tlačítko Do a system scan only

Najdeme a označíme následující položky:

Kód: Vybrat vše

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/Users/Bobme/Desktop/riskuj/riskuj.html#
1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files (x86)\PokerStars.NET\PokerStarsUpdate.exe

klikneme na položku Fix checked a potvrdíme tlačítkem Ano

TFC

Stáhneme a spustíme program
Klikneme na Start a potvrdíme OK
Program začne uklízet,poté restartuje pc
po použití program smažte

Údržba PC:

1)Čištění dočasných složek + neplatné registry

Ccleaner

Stáhneme a nainstalujeme program
Spustíme program
ČISTIČ
Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše
Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
>Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner
Registry
>Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
>Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
>opakujte dokud nebude registr bez problémů
Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)

2)Defragmentace disku

Defraggler

Stáhneme a nainstalujeme program
Spustíme program
Vybereme disk ( C:,D:..prostě který používáme)
Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
Proveďte se všemi používanými disky
Provádíme 1x za měsíc

3)Aktualizace programů

FileHippo.com Update Checker

Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
Spustíme program
Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
>X Updates Detected..to jsou dostupné aktualizace..
> klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
> X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní
Provádíme 1x za 14 dní nebo jednou za měsíc

Jak se chová PC

+ nový RSIT

Pro dnešek končím

zítra na to mrknu po práci

máte co dělat

Dobrou noc

Teď mě napadá,mžeme zkontrolovat přítomnost havěti,když už děláme kompletní servis

Malwarebytes' Anti-Malware Obrázek

Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
Vybereme Úplná kontrola a klikneme na tlačítko Prohledat
Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
Objeví se vám log,který mi sem vložte
NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci

chodnik74 · #9 Příspěvek od **chodnik74** » 01 srp 2011 21:21

P.S. neupravujte mi příspěvky,raději vložte nový,pak to přehlédnu

dobrou

wackie · #10 Příspěvek od **wackie** » 02 srp 2011 22:23

Logfile of random's system information tool 1.09 (written by random/random)
Run by Bobme at 2011-08-02 23:21:45
Microsoft Windows 7 Home Premium
System drive C: has 79 GB (52%) free of 153 GB
Total RAM: 1790 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:22:35, on 2.8.2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16800)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Launch Manager\HotkeyApp.exe
C:\Program Files (x86)\Launch Manager\WisKeyState.exe
C:\Program Files (x86)\Launch Manager\OSD.exe
C:\Program Files (x86)\Launch Manager\OSDCtrl.exe
C:\Program Files (x86)\Opera\opera.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\trend micro\Bobme.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O4 - HKLM\..\Run: [HotkeyApp] "C:\Program Files (x86)\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [WisKeyState] "C:\Program Files (x86)\Launch Manager\WisKeyState.exe"
O4 - HKLM\..\Run: [LMgrVolOSD] "C:\Program Files (x86)\Launch Manager\OSD.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files (x86)\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Přidat do Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: &Kontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\PROGRA~2\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~2\KASPER~1\KASPER~1\sbhook.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WisLMSvc - Wistron Corp. - C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8418 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe"
atieclxx
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe"
"C:\Program Files (x86)\Launch Manager\HotkeyApp.exe"
"C:\Program Files (x86)\Launch Manager\WisKeyState.exe"
"C:\Program Files (x86)\Launch Manager\OSD.exe"
"C:\Program Files (x86)\Launch Manager\OSDCtrl.exe"
"C:\Program Files (x86)\Launch Manager\WisLMSvc.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Opera\opera.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Users\Bobme\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup

=========Mozilla firefox=========

ProfilePath - C:\Users\Bobme\AppData\Roaming\Mozilla\Firefox\Profiles\0cctje53.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://start.icq.com/sm"
prefs.js - "extensions.enabledItems" - "illimitux@illimitux.net:4.0, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.15"
prefs.js - "keyword.URL" - "http://search.icq.com/search/afe_result ... r=1.2.6&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

C:\Windows.old\Program Files\Mozilla Firefox\extensions\
linkfilter@kaspersky.ru
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}

C:\Windows.old\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Windows.old\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Windows.old\Program Files\Mozilla Firefox\searchplugins\
Cetrumcz_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Bobme\AppData\Roaming\Mozilla\Firefox\Profiles\0cctje53.default\extensions\
battlefieldplay4free@ea.com
illimitux@illimitux.net
staged
{800b5000-a755-47e1-992b-48a1c1357f07}
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Bobme\AppData\Roaming\Mozilla\Firefox\Profiles\0cctje53.default\searchplugins\
askcom.xml
icqplugin-1.xml
icqplugin.gif
icqplugin.src
icqplugin.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\ievkbd.dll [2009-07-03 61456]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-08-02 75656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\x64\klwtbbho.dll [2009-07-03 341008]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll [2009-07-03 68112]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2010-11-07 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll [2009-08-05 264720]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-06-16 7883296]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-06-16 1833504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"HotkeyApp"=C:\Program Files (x86)\Launch Manager\HotkeyApp.exe [2008-05-23 192512]
"WisKeyState"=C:\Program Files (x86)\Launch Manager\WisKeyState.exe [2008-03-07 208896]
"LMgrVolOSD"=C:\Program Files (x86)\Launch Manager\OSD.exe [2008-03-03 258048]
"LMgrOSD"=C:\Program Files (x86)\Launch Manager\OSDCtrl.exe [2007-12-25 241664]
"AVP"=C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2011-05-16 311680]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe [2010-11-29 443728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\PROGRA~2\KASPER~1\KASPER~1\x64\sbhook64.dll,C:\PROGRA~2\KASPER~1\KASPER~1\x64\kloehk.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\System32\klogon.dll [2009-07-03 223760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - "C:\Program Files (x86)\Adobe\Adobe Dreamweaver CS3\Dreamweaver.exe","%1"

======List of files/folders created in the last 1 month======

2011-08-02 07:17:36 ----D---- C:\Users\Bobme\AppData\Roaming\Malwarebytes
2011-08-02 07:17:13 ----A---- C:\Windows\SYSWOW64\drivers\mbamswissarmy.sys
2011-08-02 07:17:12 ----D---- C:\ProgramData\Malwarebytes
2011-08-02 07:17:08 ----A---- C:\Windows\system32\drivers\mbam.sys
2011-08-02 07:17:07 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware
2011-08-02 07:12:26 ----RD---- C:\Program Files (x86)\Skype
2011-08-02 07:09:50 ----A---- C:\Windows\system32\javaws.exe
2011-08-02 07:09:50 ----A---- C:\Windows\system32\javaw.exe
2011-08-02 07:09:50 ----A---- C:\Windows\system32\java.exe
2011-08-02 07:09:50 ----A---- C:\Windows\system32\deployJava1.dll
2011-08-02 07:08:30 ----D---- C:\Program Files\Java
2011-08-02 07:04:04 ----SHD---- C:\Config.Msi
2011-08-02 06:49:29 ----D---- C:\Program Files (x86)\FileHippo.com
2011-08-01 22:49:23 ----A---- C:\Windows\ntbtlog.txt
2011-08-01 22:48:34 ----D---- C:\Program Files\Defraggler
2011-08-01 20:59:04 ----D---- C:\Program Files\trend micro
2011-08-01 20:58:58 ----D---- C:\rsit
2011-07-17 12:08:23 ----D---- C:\Program Files (x86)\Adobe Media Player
2011-07-17 12:05:29 ----D---- C:\Program Files\Common Files\Adobe
2011-07-13 07:11:59 ----A---- C:\Windows\system32\KernelBase.dll
2011-07-13 07:11:58 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-07-13 07:11:56 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-13 07:11:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-13 07:11:21 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-13 07:11:20 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-13 07:11:19 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-13 07:10:15 ----A---- C:\Windows\system32\win32k.sys
2011-07-13 07:09:37 ----A---- C:\Windows\system32\kernel32.dll
2011-07-13 07:09:35 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-07-13 07:09:31 ----A---- C:\Windows\system32\wow64win.dll
2011-07-13 07:09:30 ----A---- C:\Windows\system32\winsrv.dll
2011-07-13 07:09:30 ----A---- C:\Windows\system32\conhost.exe
2011-07-13 07:09:28 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-07-13 07:09:28 ----A---- C:\Windows\system32\wow64.dll
2011-07-13 07:09:28 ----A---- C:\Windows\system32\ntvdm64.dll
2011-07-13 07:09:27 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-07-13 07:09:27 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-07-13 07:09:27 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-07-13 07:09:27 ----A---- C:\Windows\system32\wow64cpu.dll
2011-07-13 07:09:03 ----A---- C:\Windows\SYSWOW64\user.exe
2011-07-05 20:31:05 ----AD---- C:\zen-cart-1.3.9h-full czech-pipni-cz
2011-07-05 20:29:37 ----D---- C:\includes
2011-07-05 09:28:27 ----D---- C:\OpenCart v1.5.0.5
2011-07-04 21:31:01 ----D---- C:\shopperpress

======List of files/folders modified in the last 1 month======

2011-08-02 23:22:26 ----D---- C:\Windows\Prefetch
2011-08-02 23:22:18 ----D---- C:\Windows\Temp
2011-08-02 23:15:55 ----D---- C:\Users\Bobme\AppData\Roaming\Skype
2011-08-02 23:14:39 ----D---- C:\Windows
2011-08-02 17:49:10 ----D---- C:\Windows\system32\config
2011-08-02 17:36:54 ----SHD---- C:\System Volume Information
2011-08-02 07:17:13 ----D---- C:\Windows\SYSWOW64\drivers
2011-08-02 07:17:12 ----HD---- C:\ProgramData
2011-08-02 07:17:08 ----D---- C:\Windows\system32\drivers
2011-08-02 07:17:07 ----RD---- C:\Program Files (x86)
2011-08-02 07:12:36 ----SHD---- C:\Windows\Installer
2011-08-02 07:12:33 ----D---- C:\Windows\system32\Tasks
2011-08-02 07:12:25 ----D---- C:\ProgramData\Skype
2011-08-02 07:09:50 ----D---- C:\Windows\System32
2011-08-02 07:08:30 ----RD---- C:\Program Files
2011-08-02 07:07:19 ----D---- C:\Users\Bobme\AppData\Roaming\uTorrent
2011-08-02 07:06:57 ----D---- C:\Program Files (x86)\uTorrent
2011-08-02 07:06:08 ----D---- C:\ProgramData\Adobe
2011-08-02 07:06:06 ----D---- C:\Program Files (x86)\Adobe
2011-08-02 07:05:45 ----D---- C:\Program Files\WinRAR
2011-08-02 07:03:51 ----D---- C:\Windows\SysWOW64
2011-08-02 07:03:47 ----D---- C:\Program Files\CCleaner
2011-08-01 22:45:43 ----D---- C:\Program Files (x86)\ProFact 3.0
2011-08-01 22:45:32 ----D---- C:\Program Files (x86)\PokerStars.NET
2011-08-01 22:44:53 ----D---- C:\Program Files (x86)\FullDataBackup
2011-08-01 22:38:34 ----D---- C:\Windows\debug
2011-08-01 22:34:46 ----D---- C:\ProgramData\Kaspersky Lab
2011-07-31 21:05:46 ----D---- C:\Program Files (x86)\Common Files
2011-07-31 19:06:07 ----D---- C:\Windows\system32\catroot2
2011-07-31 18:56:54 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-07-31 18:56:52 ----D---- C:\Windows\inf
2011-07-31 16:30:13 ----D---- C:\Users\Bobme\AppData\Roaming\skypePM
2011-07-17 12:27:54 ----D---- C:\Users\Bobme\AppData\Roaming\Adobe
2011-07-17 12:06:26 ----RSD---- C:\Windows\Fonts
2011-07-17 12:05:29 ----D---- C:\Program Files\Common Files
2011-07-14 03:24:06 ----D---- C:\Windows\winsxs
2011-07-14 03:21:28 ----D---- C:\Windows\system32\DriverStore
2011-07-14 03:21:28 ----D---- C:\Windows\AppPatch
2011-07-14 03:03:04 ----A---- C:\Windows\system32\MRT.exe
2011-07-14 03:02:45 ----D---- C:\ProgramData\Microsoft Help
2011-07-13 07:08:40 ----D---- C:\Windows\system32\catroot
2011-07-10 23:23:54 ----D---- C:\ProgramData\Fujitsu
2011-07-08 07:19:00 ----D---- C:\Program Files (x86)\Telltale Games
2011-07-07 23:31:03 ----D---- C:\upload

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 KLBG;Kaspersky Lab Boot Guard Driver; C:\Windows\system32\DRIVERS\klbg.sys [2008-12-15 38416]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R1 kl1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2009-06-15 156688]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2011-05-16 330768]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2009-05-15 26640]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2010-04-12 91568]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-05 1542656]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-06-14 6031872]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-06-16 1778592]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-05-16 21008]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-08-19 239616]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-10-10 109056]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\Windows\system32\DRIVERS\teamviewervpn.sys [2011-03-30 35112]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 mod7700;DiBcom DIB7700 based TV tuner device; C:\Windows\System32\Drivers\dvb7700all.sys [2008-07-09 663040]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-06-14 203264]
R2 AVP;Kaspersky Internet Security; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe [2011-05-16 311680]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-05-16 75136]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2011-05-16 189248]
R2 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-06-01 2337144]
R3 WisLMSvc;WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [2008-01-15 118784]
S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-07-17 655624]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-10-23 1255736]

-----------------EOF-----------------

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Verze databáze: 7351

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

2.8.2011 23:20:26
mbam-log-2011-08-02 (23-20-10).txt

Typ kontroly: Úplný test (C:\|)
Testované objekty: 450536
Uplynulý čas: 4 hodin, 57 minut, 21 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Users\Bobme\documents\games\nfs - underground 2 by guffwolf\SetupReg.exe (Trojan.Nuker) -> No action taken.

chodnik74 · #11 Příspěvek od **chodnik74** » 03 srp 2011 13:42

Aktualizace Service Pack 1 + IE 9

Otevřeme si Poznámkový blok Obrázek

(stiskneme klávesovou kombinaci WIN+R a napíšeme ,,notepad,, bez úvozovek a dáme enter)

Vložíme do něj následující script:

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=-

Soubor uložíme jako oprava.reg (při ukládání nastavte Uložit jako typ:Všechny soubory)
Poté tento soubor spustíme a potvrdíme

jinak je vše v pořádku..jak se chová pc

wackie · #12 Příspěvek od **wackie** » 03 srp 2011 20:29

No je to o něco lepší, ale bohužel jakmile teď zapnu skype, objeví se modrá "smrt".
Vím že je to kvůli Skypu, jelikož když je vyplý vše jede jak má, když ne restartuje se PC kvuli modré obrazovce.
Zkoušel sem několikrát unninstal a install, jiné verze, ale nic nepomohlo.

Jinak jestli je ještě nějakej fígl na zrychlení PC, tak určitě sem s ním. Jelikož stále to není ono

Ale myslím si že červů je ten míň, ale bohužel sem zklamaný tim skypem, protože ho dost vyuzivam.

#13 Příspěvek od **vyosek** » 04 srp 2011 06:14

Zdravim a pekny den preji

Kolega me poprosil o zaskok jelikoz je mimo

Ono hlavni problem s rychlsti je v nainstalovanem systemu - zcela zbytecne tam mate 64bit system - na dane mnozsti RAM je zcela nevyuzitelny - 64bit OS se hodi jen pokud mate 4giga RAM a vice. Doporucoval bych prechod na 32bit system

Zkuste pouzit nejakou hodne starsi verzi Skype, pripadne pak uz jen zbyva kontaktovat jejich podporu. Ale tez to muze mit souvislost s tim OS - na 1,79GB RAM je x64 OS zcela na nic.

Taktez doinstalujte Service Pack 1 a i dalsi aktualizace - resi mnoho problemu a chyb.

wackie · #14 Příspěvek od **wackie** » 04 srp 2011 14:25

Tak ten skype sem už vyřešil, on do doby než sem udělal nějaké ty "čachry machry" v PC tak běžel normálně.
Ale včera sem si hrál s mikrofonem, a jeho nastavením, a poté vždy když sem spustil skype tak mi to hodilo již zmiňovanou "modrou smrt".
Vrátil sem to do původního stavu a vše jede jak má.

Ale! Nastal jeden z dalších problémů.

externí HDD:
Byli na něm pouze zástupci složek a házelo to jakousi chybu RECYCLER 0X0 bla bla...
Použil sem vyhledávání zde na fóru a našel nějaké řešení se souborem del.bat, do kterého sem vložil upravený skript a spustil.
Vše proběhlo v pořádku až na to že složky s diakritikou, pouze zmizeli, nikoliv se objevili, dle zabraného místa na disku tam jsou, jen nevím jak je znovu obnovit aby se zobrazovali.

Dekuju.

#15 Příspěvek od **vyosek** » 04 srp 2011 20:12

No ono ten soubor del.bat je potreba napsat presne pro dany disk. Zacneme USBFixem

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
Spustte a kliknete na Deletion
Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

VIRY.CZ

Dva roky notebook bez antiviru..

Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..

Re: Dva roky notebook bez antiviru..