Prosim o preventivku

[vasek4444]

Logfile of random's system information tool 1.09 (written by random/random)
Run by Vašek at 2011-08-18 14:29:24
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 190 GB (62%) free of 305 GB
Total RAM: 2047 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:29:26, on 18.8.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\PixArt\Pac7302\Monitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Windows\system32\taskhost.exe
C:\Users\Vašek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vašek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\Vašek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vašek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vašek\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Vašek\Desktop\RSIT.exe
C:\Program Files\trend micro\Vašek.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\Windows\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKCU\..\Run: [Weather Widget (HTC Home)] "C:\Program Files\HTC Home\Weather.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2917143775-3904350555-2029814924-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2917143775-3904350555-2029814924-1001\..\Run: [Weather Widget (HTC Home)] "C:\Program Files\HTC Home\Weather.exe" (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2917143775-3904350555-2029814924-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EEAE0F75-E090-41AE-9BFF-011645363FDE}: NameServer = 213.226.224.12,194.213.224.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Protection Technology - C:\Windows\System32\appdrvrem01.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 5889 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2917143775-3904350555-2029814924-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2917143775-3904350555-2029814924-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-06-14 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-04-02 266240]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]
"PAC7302_Monitor"=C:\Windows\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2011-07-07 10754664]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Weather Widget (HTC Home)"=C:\Program Files\HTC Home\Weather.exe [2011-06-21 890880]
""= []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"VIDC.FPS1"=frapsvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-08-18 14:29:24 ----D---- C:\rsit
2011-08-18 14:29:24 ----D---- C:\Program Files\trend micro
2011-08-18 14:05:41 ----A---- C:\Windows\system32\drivers\Cat.DB
2011-08-18 14:04:25 ----D---- C:\Program Files\Common Files\PC Tools
2011-08-18 14:04:25 ----AD---- C:\ProgramData\TEMP
2011-08-18 14:02:16 ----D---- C:\ProgramData\PC Tools
2011-08-18 13:57:24 ----HDC---- C:\ProgramData\~0
2011-08-18 13:51:27 ----D---- C:\Users\Vašek\AppData\Roaming\VSRevoGroup
2011-08-18 10:16:47 ----D---- C:\Users\Vašek\AppData\Roaming\vlc
2011-08-16 13:33:15 ----D---- C:\Users\Vašek\AppData\Roaming\OpenOffice.org
2011-08-16 13:31:45 ----D---- C:\Program Files\OpenOffice.org 3
2011-08-15 15:25:56 ----A---- C:\Windows\system32\msvcr71.dll
2011-08-15 15:25:56 ----A---- C:\Windows\system32\MSVCR70.dll
2011-08-15 15:25:56 ----A---- C:\Windows\system32\msvcp71.dll
2011-08-15 15:25:56 ----A---- C:\Windows\system32\MSVCP70.dll
2011-08-15 15:25:56 ----A---- C:\Windows\system32\MSVCI70.dll
2011-08-15 15:25:56 ----A---- C:\Windows\system32\MFC71.dll
2011-08-15 15:25:56 ----A---- C:\Windows\system32\MFC70DEU.DLL
2011-08-15 15:25:56 ----A---- C:\Windows\system32\MFC70.DLL
2011-08-15 15:24:46 ----D---- C:\Users\Vašek\AppData\Roaming\WatchTVProEx
2011-08-14 15:29:29 ----A---- C:\Windows\system32\OpenCL.dll
2011-08-14 15:29:29 ----A---- C:\Windows\system32\nvoglv32.dll
2011-08-14 15:29:29 ----A---- C:\Windows\system32\nvgenco32.dll
2011-08-14 15:29:29 ----A---- C:\Windows\system32\nvdispco32.dll
2011-08-14 15:29:29 ----A---- C:\Windows\system32\nvcuvid.dll
2011-08-14 15:29:29 ----A---- C:\Windows\system32\nvcuvenc.dll
2011-08-14 15:29:29 ----A---- C:\Windows\system32\nvcuda.dll
2011-08-14 15:29:29 ----A---- C:\Windows\system32\nvcompiler.dll
2011-08-14 15:29:29 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2011-08-10 18:23:40 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-10 18:23:40 ----A---- C:\Windows\system32\iertutil.dll
2011-08-10 18:23:39 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-10 18:23:39 ----A---- C:\Windows\system32\jscript9.dll
2011-08-10 18:23:39 ----A---- C:\Windows\system32\jscript.dll
2011-08-10 18:23:39 ----A---- C:\Windows\system32\ieui.dll
2011-08-10 18:23:38 ----A---- C:\Windows\system32\wininet.dll
2011-08-10 18:23:38 ----A---- C:\Windows\system32\urlmon.dll
2011-08-10 18:23:38 ----A---- C:\Windows\system32\url.dll
2011-08-10 18:23:37 ----A---- C:\Windows\system32\ieframe.dll
2011-08-10 18:23:36 ----A---- C:\Windows\system32\mshtml.dll
2011-08-10 18:16:23 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-08-10 18:16:22 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-10 18:16:21 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-08-10 18:16:20 ----A---- C:\Windows\system32\xmllite.dll
2011-08-10 18:16:19 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-10 18:16:02 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-10 18:16:02 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-10 18:16:02 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-10 18:16:02 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-10 18:16:02 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-10 18:16:02 ----A---- C:\Windows\system32\winsrv.dll
2011-08-10 18:16:02 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-10 18:16:02 ----A---- C:\Windows\system32\kernel32.dll
2011-08-10 18:16:02 ----A---- C:\Windows\system32\conhost.exe
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-10 18:16:01 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-10 18:16:00 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-10 18:15:52 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-10 18:15:52 ----A---- C:\Windows\system32\odbcjt32.dll
2011-08-10 18:15:52 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-10 18:15:52 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-10 18:15:52 ----A---- C:\Windows\system32\odbccp32.dll
2011-08-03 03:31:54 ----A---- C:\Windows\system32\nvStreaming.exe
2011-08-02 11:07:23 ----RD---- C:\Program Files\Skype
2011-07-28 17:16:44 ----A---- C:\Windows\system32\ezGOSvcApp.exe
2011-07-28 17:16:44 ----A---- C:\Windows\system32\ezGOSvc.dll
2011-07-28 09:18:59 ----D---- C:\Program Files\PC Connectivity Solution
2011-07-27 19:02:06 ----D---- C:\Users\Vašek\AppData\Roaming\go
2011-07-27 19:02:01 ----D---- C:\ProgramData\EasyBits GO
2011-07-27 16:17:37 ----D---- C:\Program Files\CCleaner
2011-07-27 09:41:30 ----D---- C:\Windows\system32\RTCOM
2011-07-27 09:40:55 ----A---- C:\Windows\system32\WavesLib.dll
2011-07-27 09:40:54 ----A---- C:\Windows\system32\WavesGUILib.dll
2011-07-27 09:40:53 ----A---- C:\Windows\system32\SRSWOW.dll
2011-07-27 09:40:53 ----A---- C:\Windows\system32\SRSTSXT.dll
2011-07-27 09:40:53 ----A---- C:\Windows\system32\SRSTSHD.dll
2011-07-27 09:40:53 ----A---- C:\Windows\system32\SRSHP360.dll
2011-07-27 09:40:51 ----A---- C:\Windows\system32\SFNHK.dll
2011-07-27 09:40:51 ----A---- C:\Windows\system32\SFCOM.dll
2011-07-27 09:40:50 ----A---- C:\Windows\system32\SFAPO.dll
2011-07-27 09:40:49 ----A---- C:\Windows\system32\RtkPgExt.dll
2011-07-27 09:40:49 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys
2011-07-27 09:40:48 ----A---- C:\Windows\system32\RtkCoInst.dll
2011-07-27 09:40:48 ----A---- C:\Windows\system32\RtkApoApi.dll
2011-07-27 09:40:47 ----A---- C:\Windows\system32\RtkAPO.dll
2011-07-27 09:40:45 ----A---- C:\Windows\system32\RTEEP32A.dll
2011-07-27 09:40:44 ----A---- C:\Windows\system32\RTEEL32A.dll
2011-07-27 09:40:44 ----A---- C:\Windows\system32\RTEEG32A.dll
2011-07-27 09:40:44 ----A---- C:\Windows\system32\RTEED32A.dll
2011-07-27 09:40:43 ----A---- C:\Windows\system32\RP3DHT32.dll
2011-07-27 09:40:43 ----A---- C:\Windows\system32\RP3DAA32.dll
2011-07-27 09:40:43 ----A---- C:\Windows\system32\RCoRes.dat
2011-07-27 09:40:43 ----A---- C:\Windows\system32\R4EEP32A.dll
2011-07-27 09:40:43 ----A---- C:\Windows\system32\R4EEL32A.dll
2011-07-27 09:40:43 ----A---- C:\Windows\system32\R4EEG32A.dll
2011-07-27 09:40:42 ----A---- C:\Windows\system32\R4EED32A.dll
2011-07-27 09:40:42 ----A---- C:\Windows\system32\R4EEA32A.dll
2011-07-27 09:40:41 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2011-07-27 09:40:39 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2011-07-27 09:40:38 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2011-07-27 09:40:38 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2011-07-27 09:40:37 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2011-07-27 09:40:37 ----A---- C:\Windows\system32\MaxxAudioAPO.dll
2011-07-27 09:40:35 ----A---- C:\Windows\system32\KAAPORT.dll
2011-07-27 09:40:15 ----A---- C:\Windows\system32\FMAPO.dll
2011-07-27 09:40:15 ----A---- C:\Windows\system32\DTSVoiceClarityDLL.dll
2011-07-27 09:40:14 ----A---- C:\Windows\system32\DTSSymmetryDLL.dll
2011-07-27 09:40:13 ----A---- C:\Windows\system32\DTSS2SpeakerDLL.dll
2011-07-27 09:40:12 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL.dll
2011-07-27 09:40:12 ----A---- C:\Windows\system32\DTSNeoPCDLL.dll
2011-07-27 09:40:11 ----A---- C:\Windows\system32\DTSLimiterDLL.dll
2011-07-27 09:40:11 ----A---- C:\Windows\system32\DTSLFXAPO.dll
2011-07-27 09:40:10 ----A---- C:\Windows\system32\DTSGFXAPONS.dll
2011-07-27 09:40:10 ----A---- C:\Windows\system32\DTSGFXAPO.dll
2011-07-27 09:40:10 ----A---- C:\Windows\system32\DTSGainCompensatorDLL.dll
2011-07-27 09:40:09 ----A---- C:\Windows\system32\DTSBoostDLL.dll
2011-07-27 09:40:08 ----A---- C:\Windows\system32\DTSBassEnhancementDLL.dll
2011-07-27 09:40:03 ----A---- C:\Windows\system32\AERTARen.dll
2011-07-27 09:40:03 ----A---- C:\Windows\system32\AERTACap.dll
2011-07-20 14:34:08 ----D---- C:\Program Files\Rockstar Games

======List of files/folders modified in the last 1 month======

2011-08-18 14:29:24 ----RD---- C:\Program Files
2011-08-18 14:28:32 ----D---- C:\Windows\Temp
2011-08-18 14:24:49 ----D---- C:\Windows\system32\drivers
2011-08-18 14:24:47 ----D---- C:\Windows
2011-08-18 14:24:23 ----SHD---- C:\System Volume Information
2011-08-18 14:04:25 ----HD---- C:\ProgramData
2011-08-18 14:04:25 ----D---- C:\Program Files\Common Files
2011-08-18 14:01:31 ----D---- C:\Windows\system32\Tasks
2011-08-18 14:01:30 ----D---- C:\Windows\Tasks
2011-08-18 13:32:50 ----D---- C:\Windows\system32\config
2011-08-18 13:21:07 ----D---- C:\Program Files\HTC Home
2011-08-18 13:19:40 ----D---- C:\ProgramData\NVIDIA
2011-08-17 17:15:51 ----D---- C:\Program Files\Mozilla Thunderbird
2011-08-16 18:18:29 ----SHD---- C:\Windows\Installer
2011-08-16 18:18:17 ----D---- C:\Program Files\Google
2011-08-16 13:32:25 ----RSD---- C:\Windows\assembly
2011-08-16 13:31:56 ----RSD---- C:\Windows\Fonts
2011-08-15 15:35:57 ----D---- C:\Windows\winsxs
2011-08-15 15:25:56 ----D---- C:\Windows\System32
2011-08-15 10:43:37 ----D---- C:\Windows\Microsoft.NET
2011-08-15 09:46:18 ----D---- C:\Windows\inf
2011-08-14 15:31:17 ----D---- C:\Program Files\NVIDIA Corporation
2011-08-14 15:31:13 ----D---- C:\Windows\system32\DriverStore
2011-08-14 15:31:13 ----D---- C:\Windows\system32\catroot
2011-08-13 13:35:21 ----D---- C:\Program Files\FreeRapid-0.85u1-build566
2011-08-12 13:15:18 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-08-12 12:00:41 ----D---- C:\Users\Vašek\AppData\Roaming\Skype
2011-08-12 10:44:28 ----D---- C:\Windows\system32\catroot2
2011-08-11 15:19:42 ----D---- C:\Users\Vašek\AppData\Roaming\uTorrent
2011-08-10 18:25:59 ----D---- C:\Windows\system32\migration
2011-08-10 18:25:59 ----D---- C:\Program Files\Internet Explorer
2011-08-10 18:19:12 ----D---- C:\Windows\debug
2011-08-10 18:19:11 ----A---- C:\Windows\system32\MRT.exe
2011-08-08 09:09:28 ----D---- C:\Windows\Prefetch
2011-08-05 15:51:34 ----SHD---- C:\Boot
2011-08-05 15:42:00 ----D---- C:\ProgramData\TuneUp Software
2011-08-04 18:34:13 ----D---- C:\Windows\system32\NDF
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvwgf2um.dll
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvvsvc.exe
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvsvcr.dll
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvsvc.dll
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvshext.dll
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvmctray.dll
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvd3dum.dll
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvcpl.dll
2011-08-03 13:50:00 ----A---- C:\Windows\system32\nvapi.dll
2011-08-03 13:50:00 ----A---- C:\Windows\system32\easyupdatusapiu.dll
2011-08-02 11:07:23 ----D---- C:\ProgramData\Skype
2011-08-01 14:28:18 ----SD---- C:\Users\Vašek\AppData\Roaming\Microsoft
2011-07-29 17:33:07 ----D---- C:\Program Files\Microsoft Security Client
2011-07-28 09:19:37 ----D---- C:\Program Files\Common Files\Nokia
2011-07-28 09:19:04 ----DC---- C:\Windows\system32\DRVSTORE
2011-07-28 09:18:32 ----D---- C:\Program Files\Nokia
2011-07-28 09:11:38 ----D---- C:\Program Files\uTorrent
2011-07-27 19:02:06 ----D---- C:\ProgramData\Skype Extras
2011-07-27 16:21:17 ----D---- C:\Users\Vašek\AppData\Roaming\DAEMON Tools Lite
2011-07-27 16:21:03 ----D---- C:\Windows\Logs
2011-07-27 09:41:47 ----HD---- C:\Program Files\Temp
2011-07-27 09:39:59 ----HD---- C:\Program Files\InstallShield Installation Information

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 appdrv01;Application Driver (01); C:\Windows\System32\Drivers\appdrv01.sys [2011-06-15 2911848]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-06-12 218688]
R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKsl58bd8987;MpKsl58bd8987; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C3DC9BCB-341C-4534-8309-ADB52AC14EA3}\MpKsl58bd8987.sys [2011-08-18 28752]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-07-07 3531176]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 43392]
R3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 65024]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x32.sys [2009-07-14 347264]
R3 PAC7302;iLook 310; C:\Windows\system32\DRIVERS\PAC7302.SYS [2009-04-28 461824]
R4 PCTCore;PCTools KDS; C:\Windows\system32\drivers\PCTCore.sys []
R4 pctDS;PC Tools Data Store; C:\Windows\system32\drivers\pctDS.sys []
R4 pctEFA;PC Tools Extended File Attributes; C:\Windows\system32\drivers\pctEFA.sys []
R4 PCTSD;PC Tools Spyware Doctor Driver; C:\Windows\System32\Drivers\PCTSD.sys []
S1 MpKsl182818ad;MpKsl182818ad; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{05D368FB-1F86-4226-AE12-008CFF844041}\MpKsl182818ad.sys []
S1 MpKsl9cd8dbe0;MpKsl9cd8dbe0; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{0E3AD2B0-646E-4E4C-83F9-DA0FF34E152D}\MpKsl9cd8dbe0.sys []
S1 MpKsle1a72f20;MpKsle1a72f20; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{C008A8EF-54C5-46F3-A02B-BD1CCB29562D}\MpKsle1a72f20.sys []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2010-11-20 27648]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]
R2 ezGOSvc;Easybits GO Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-08-03 599144]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-08-03 2255464]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-06-15 66872]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2011-06-15 107832]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-08-03 379496]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 208944]
S2 appdrvrem01;Application Driver Auto Removal Service (01); C:\Windows\System32\appdrvrem01.exe [2011-06-15 304528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-08-16 136176]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-08-16 136176]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2011-06-08 633856]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-06-11 1343400]

-----------------EOF-----------------

[Mc_Murphy]

Zdravím.

Momentík, hnedle se na to mrknu.

[Mc_Murphy]

Log vypadá čistý.

Jen smažeme pár zbytečností:


Zatím si stáhni utilitu OTM z jednoho z těchto odkazů:

• http://oldtimer.geekstogo.com/OTM.exe
  http://oldtimer.geekstogo.com/OTM.com
  http://oldtimer.geekstogo.com/OTM.scr

Ulož ji na Plochu a dvojklikem spusť.

Do levého okna Paste Instructions for Items to be Moved zkopíruj tento script:

Kód: Vybrat vše

:Reg
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"=-
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"=-
[HKEY_USERS\S-1-5-21-2917143775-3904350555-2029814924-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
""=-

:Files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp /s
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2917143775-3904350555-2029814924-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2917143775-3904350555-2029814924-1000UA.job

:Commands
[Purity]
[ResetHosts]
[EmptyTemp]
[ClearAllRestorePoints]

Nyní klikni na tlačítko [MoveIt!], čímž vše spustíš.
Po restartu mi sem hoď log, který najdeš v C:\_OTM\MovedFiles\


Dále klikni na Start >> Spustit... (nebo Win+R) >> do okénka napiš services.msc >> [Enter]

Najdi služby:

Adobe Acrobat Update Service (AdobeARMservice)
Služba Google Update (gupdate) (gupdate)
Služba Google Update (gupdatem) (gupdatem)

Klikni na ně pravým myšítkem, zvol Vlastnosti, na další kartě nejprve služby zastav tlačítkem Zastavit a u položky Typ spouštění zvol Zakázáno.


DOPORUČENÍ:

Odinstaloval bych Easy Photo Print Toolbar.