Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry.

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#16 Příspěvek od vyosek »

:arrow: Jeste jeden skript pro CFko - postup jako minule (vytvorit CFScript.txt, pretahnout nad CF, nechat probehnout, po restartu vlozit log), F8 a posledni znama konfigurace se pouziva jen pokud windows nechce nabehnout

Kód: Vybrat vše

KillAll::

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-
"AdobeAAMUpdater-1.0"=-
"combofix"=-

Reboot::
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
48ondra
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 31 srp 2011 10:39

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#17 Příspěvek od 48ondra »

já ale furt nechápu co mám dělat stim F8 :D kdy to mám zmáčknout..
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#18 Příspěvek od vyosek »

Pouze v pripade ze Vam nebudou chtit nabehnout windows - je to takova posledni zachrana - windows nebudou chtit nabehnout, neustale se bude restartovat PC...Ted by to nemelo hrozit
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
48ondra
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 31 srp 2011 10:39

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#19 Příspěvek od 48ondra »

ComboFix 11-08-31.04 - Ondra 31.08.2011 23:39:15.3.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.4063.2407 [GMT 2:00]
Spuštěný z: c:\users\Ondra\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Ondra\Desktop\CFScript.txt
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-28 do 2011-08-31 )))))))))))))))))))))))))))))))
.
.
2011-08-31 21:45 . 2011-08-31 21:45 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-08-31 09:56 . 2011-08-31 09:56 -------- d-----w- c:\program files\trend micro
2011-08-31 09:56 . 2011-08-31 09:57 -------- d-----w- C:\rsit
2011-08-30 20:08 . 2011-08-12 04:10 8862544 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6C9A9370-54DF-4F97-9480-12A2E5900B3D}\mpengine.dll
2011-08-27 05:05 . 2011-08-27 05:05 -------- d-----w- c:\program files (x86)\2K Games
2011-08-25 13:49 . 2011-08-25 14:05 -------- d-----w- c:\program files\Mafia
2011-08-24 03:00 . 2011-07-09 05:26 2048 ----a-w- c:\windows\system32\tzres.dll
2011-08-24 03:00 . 2011-07-09 04:29 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-08-22 07:29 . 2011-08-25 10:40 -------- d-----w- c:\program files (x86)\McAfeeScanAndRepair
2011-08-21 17:12 . 2011-08-21 17:12 -------- d-----w- c:\program files (x86)\AMD APP
2011-08-12 15:56 . 2011-07-16 05:21 3072 ---ha-w- c:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-05 10:43 . 2011-08-05 10:43 -------- d-----w- c:\windows\system32\SPReview
2011-08-05 10:41 . 2011-08-05 10:41 -------- d-----w- c:\windows\system32\EventProviders
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-30 16:33 . 2010-03-10 06:16 280736 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr
2011-08-30 16:33 . 2010-02-09 15:24 280736 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2011-08-30 16:25 . 2010-02-09 15:24 281544 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2011-08-21 16:07 . 2010-01-09 21:02 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-08-21 16:07 . 2010-01-31 11:30 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2011-08-12 15:48 . 2010-01-11 17:22 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-08-12 15:48 . 2010-01-09 21:02 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-08-05 11:01 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-08-05 11:01 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-07-28 15:49 . 2011-07-28 15:49 60416 ----a-w- c:\windows\system32\OVDecode64.dll
2011-07-28 15:48 . 2011-07-28 15:48 51200 ----a-w- c:\windows\system32\OpenCL.dll
2011-07-28 15:48 . 2011-07-28 15:48 16552960 ----a-w- c:\windows\system32\amdocl64.dll
2011-07-17 21:54 . 2011-07-17 21:54 59904 ----a-w- c:\windows\SysWow64\OVDecode.dll
2011-07-17 21:53 . 2011-07-17 21:53 51712 ----a-w- c:\windows\SysWow64\OpenCL.dll
2011-07-17 21:53 . 2011-07-17 21:53 12385280 ----a-w- c:\windows\SysWow64\amdocl.dll
2011-07-16 04:26 . 2011-08-12 15:57 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2011-06-16 01:34 . 2011-06-16 01:34 2971648 ----a-w- c:\windows\system32\SlotMaximizerBe.dll
2011-06-16 01:34 . 2011-06-16 01:34 105984 ----a-w- c:\windows\system32\SlotMaximizerAg.dll
2011-06-11 03:07 . 2011-07-13 20:06 3137536 ----a-w- c:\windows\system32\win32k.sys
2011-06-07 12:44 . 2011-06-07 12:44 40128 ----a-w- c:\windows\system32\drivers\tap0901.sys
.
.
((((((((((((((((((((((((((((( SnapShot@2011-08-31_12.25.04 )))))))))))))))))))))))))))))))))))))))))
.
- 2009-07-14 04:54 . 2011-08-25 10:42 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-07-14 04:54 . 2011-08-31 21:47 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-07-14 04:54 . 2011-08-25 10:42 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-08-31 21:47 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-08-18 21:45 . 2011-08-31 17:12 70958 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
- 2009-07-14 05:10 . 2011-08-25 10:45 49312 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-07-14 05:10 . 2011-08-31 17:12 49312 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
+ 2009-11-26 09:46 . 2011-08-31 17:12 19266 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2810233194-878912617-1183046435-1000_UserData.bin
- 2009-11-26 17:37 . 2011-08-25 22:51 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-11-26 17:37 . 2011-08-31 16:24 16384 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-11-26 17:37 . 2011-08-25 22:51 49152 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-11-26 17:37 . 2011-08-31 16:24 49152 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-07-14 04:54 . 2011-08-25 22:51 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-07-14 04:54 . 2011-08-31 16:24 16384 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-11-26 09:48 . 2011-08-25 10:44 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-11-26 09:48 . 2011-08-31 17:11 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
+ 2009-11-26 09:48 . 2011-08-31 17:11 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- 2009-11-26 09:48 . 2011-08-25 10:44 32768 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-11-26 09:48 . 2011-08-31 17:11 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- 2009-11-26 09:48 . 2011-08-25 10:44 16384 c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-12-01 08:00 . 2011-08-31 21:47 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-01 08:00 . 2011-08-31 12:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- 2009-12-01 08:00 . 2011-08-31 12:03 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-12-01 08:00 . 2011-08-31 21:47 16384 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
+ 2009-08-18 23:18 . 2011-08-31 21:45 3683 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat
- 2009-08-18 23:18 . 2011-08-21 17:56 3683 c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Bluetooth\bthservsdp.dat
+ 2011-08-31 21:46 . 2011-08-31 21:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
- 2011-08-21 17:56 . 2011-08-25 10:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
+ 2011-08-31 21:46 . 2011-08-31 21:46 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2011-08-21 17:56 . 2011-08-25 10:40 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
- 2009-07-14 04:54 . 2011-08-25 10:42 671744 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 04:54 . 2011-08-31 21:47 671744 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
+ 2009-07-14 02:36 . 2011-08-31 17:16 661686 c:\windows\system32\perfh009.dat
- 2009-07-14 02:36 . 2011-08-25 19:23 661686 c:\windows\system32\perfh009.dat
+ 2009-08-18 22:23 . 2011-08-31 17:16 677142 c:\windows\system32\perfh005.dat
- 2009-08-18 22:23 . 2011-08-25 19:23 677142 c:\windows\system32\perfh005.dat
+ 2009-07-14 02:36 . 2011-08-31 17:16 125876 c:\windows\system32\perfc009.dat
- 2009-07-14 02:36 . 2011-08-25 19:23 125876 c:\windows\system32\perfc009.dat
- 2009-08-18 22:23 . 2011-08-25 19:23 146016 c:\windows\system32\perfc005.dat
+ 2009-08-18 22:23 . 2011-08-31 17:16 146016 c:\windows\system32\perfc005.dat
- 2009-07-14 05:01 . 2011-08-21 17:56 479592 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2009-07-14 05:01 . 2011-08-31 21:45 479592 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
+ 2011-08-21 17:56 . 2011-08-31 16:15 801344 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2810233194-878912617-1183046435-1000-12288.dat
+ 2009-12-24 22:32 . 2011-08-31 16:15 2132784 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
- 2009-12-24 22:32 . 2011-08-21 17:56 2132784 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-05-26 317288]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2009-11-26 26624]
"SHTtray.exe"="c:\program files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe" [2009-07-28 99624]
"SMART Board Service"="c:\program files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe" [2010-01-05 3372328]
"SMART SNMP Agent"="c:\program files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe" [2010-01-05 1053992]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-01-04 336384]
"ATICustomerCare"="c:\program files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe" [2010-05-04 311296]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-2 1079584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableSecureUIAPaths"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2009-07-01 19:49 98304 ----a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
R3 McAfee ScanAndRepair Svc;McAfee ScanAndRepair Svc;c:\program files (x86)\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [2011-04-06 694864]
R3 MSICDSetup;MSICDSetup;G:\CDriver64.sys [x]
R3 nmwcdx64;Nokia USB Phone Parent;c:\windows\system32\drivers\nmwcdx64.sys [x]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [x]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [x]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-06-26 357672]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-18 110888]
R3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update 5\VUAgent.exe [2011-04-20 1021840]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
S2 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [x]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [2007-10-16 81920]
S2 GS In-Game Service;GS In-Game Service;c:\program files (x86)\GameTracker\GSInGameService.exe [2010-04-14 1648480]
S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [2009-07-24 189984]
S2 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-28 120104]
S2 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-28 70952]
S2 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-28 427304]
S2 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-28 75048]
S2 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-28 91432]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-08-22 411496]
S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-22 642920]
S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-26 468264]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2009-08-13 522240]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [x]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2007-10-16 2711552]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [x]
S3 SMARTMouseFilterx64;HID-compliant mouse;c:\windows\system32\DRIVERS\SMARTMouseFilterx64.sys [x]
S3 SMARTVHidMiniVistaAmd64;SMART HID Device;c:\windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [x]
S3 SMARTVTabletPCx64;SMART Virtual TabletPC;c:\windows\system32\DRIVERS\SMARTVTabletPCx64.sys [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-24 7938080]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-07-24 1833504]
"Apoint"="c:\program files (x86)\Apoint\Apoint.exe" [BU]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-05 186904]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [BU]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local;<local>
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube to DVD Converter - c:\users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetodvdconverter.htm
IE: Free YouTube to MP3 Converter - c:\users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: {{FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files (x86)\PokerStars.NET\PokerStarsUpdate.exe
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 94.142.233.120 94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\140524C616E637B6F613: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\75966496025502441EE616: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\84163707C696B6: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454F53554655425: NameServer = 94.142.233.120,94.142.233.140
TCP: Interfaces\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}\C45736B697E45647F564255454F565953484F444: NameServer = 94.142.233.120,94.142.233.140
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
BHO-{e3a8aa9e-bc25-caeb-0e8c-f1e0df261042} - (no file)
WebBrowser-{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - (no file)
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Bonjour\mDNSResponder.exe
c:\program files (x86)\Google\Update\GoogleUpdate.exe
c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
c:\windows\SysWOW64\PnkBstrA.exe
c:\program files (x86)\Sony\VAIO Event Service\VESMgr.exe
c:\windows\SysWOW64\DllHost.exe
c:\program files (x86)\Sony\VAIO Event Service\VESMgrSub.exe
c:\program files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
.
**************************************************************************
.
Celkový čas: 2011-08-31 23:53:44 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-08-31 21:53
ComboFix2.txt 2011-08-31 16:36
ComboFix3.txt 2011-08-31 12:58
.
Před spuštěním: Volných bajtů: 34 760 974 336
Po spuštění: Volných bajtů: 34 474 209 280
.
- - End Of File - - 166E5B9916312A208147D10779F3BC8D
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#20 Příspěvek od vyosek »

:arrow: Odinstalujte Combofix
  • Prejmenujte ComboFix na Uninstall
  • Spustte jej
  • Tohle smaze Combofix a jeho slozky
:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: v nouzovem rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti) projedte PC temito utilitami, at se zbavime zbytku antiviru co tam mate :arrow: Stahnete Ccleaner (viz muj podpis)
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: Pokud nemate na ESET koupenou licenci, tak nainstalujte Avast Free http://www.avast.com/cs-cz/free-antivirus-download

:arrow: Dejte novy log z RSIT a napiste jak se chova PC
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
48ondra
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 31 srp 2011 10:39

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#21 Příspěvek od 48ondra »

jak probíhá ta odistalace combofixu mě to dělá to samý jako když jsme ho zapínal předtim..
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#22 Příspěvek od vyosek »

Tak odinstalaci CFka vynechte a pokracujte dale
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
48ondra
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 31 srp 2011 10:39

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#23 Příspěvek od 48ondra »

ten na mě ais budete naštvaný ale jak zapnu nouzový řežim?
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#24 Příspěvek od vyosek »

Nastvany nebudu zcela urcite, od toho tu jsem,abych poradil...
Ne nadarmo mam v podpisu vetu Postup si důkladně a raději se 3x zeptejte, než abyste udělali chybný krok - havěť a její odstraňování netolerují chyby !!!

Do nouzoveho rezimu se dostanete nasledovne: restart PC, mackat F8, zvolit Stav nouze s praci v siti
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
48ondra
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 31 srp 2011 10:39

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#25 Příspěvek od 48ondra »

raLogfile of random's system information tool 1.09 (written by random/random)
Run by Ondra at 2011-09-03 11:57:16
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 34 GB (18%) free of 188 GB
Total RAM: 4063 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:57:18, on 3.9.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe
C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe
C:\Users\Ondra\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Ondra.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SMART Notebook Download Plugin - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\SMART Notebook\NotebookPlugin.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: everyflv - {e3a8aa9e-bc25-caeb-0e8c-f1e0df261042} - (no file)
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - (no file)
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [MarketingTools] C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
O4 - HKLM\..\Run: [SHTtray.exe] C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe
O4 - HKLM\..\Run: [SMART Board Service] C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe
O4 - HKLM\..\Run: [SMART SNMP Agent] C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe -e
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - Startup: MLB.TV NexDef Plug-in.lnk = Ondra\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to DVD Converter - C:\Users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetodvdconverter.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Ondra\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe (file missing)
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe (file missing)
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - C:\Program Files (x86)\PokerStars.NET\PokerStarsUpdate.exe
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
O17 - HKLM\System\CS1\Services\Tcpip\..\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
O17 - HKLM\System\CS2\Services\Tcpip\..\{020DDA5E-9B25-4C93-9510-1FF471DF3E84}: NameServer = 94.142.233.120,94.142.233.140
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - (no file)
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - FirebirdSQL Project - C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe
O23 - Service: GS In-Game Service - ClanServers Hosting LLC - C:\Program Files (x86)\GameTracker\GSInGameService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: McAfee ScanAndRepair Svc - McAfee, Inc. - C:\Program Files (x86)\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
O23 - Service: VAIO Media plus Database Manager (SOHDBSvr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
O23 - Service: VAIO Media plus Playlist Manager (SOHPlMgr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VSNService - Sony Corporation - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: VUAgent - Sony Corporation - C:\Program Files\Sony\VAIO Update 5\VUAgent.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14212 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
"C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe"
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
/QuitInfo:00000000000003B8;00000000000003BC; /AddRef;
taskeng.exe {6CBD3204-76C3-4A94-B57A-DD2E31BA1D67}
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Bonjour\mDNSResponder.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe" -s DefaultInstance
"C:\Program Files (x86)\GameTracker\GSInGameService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe"
"C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe"
"C:\Program Files\Sony\VAIO Power Management\SPMService.exe"
"taskhost.exe"
C:\Windows\SysWOW64\DllHost.exe /Processid:{78FD0120-D39C-45D8-A9BE-2B802B3C23E5}
taskeng.exe {F5BED0EF-3401-4A4F-8109-95EAEB215882}
/QuitInfo:000000000000064C;0000000000000650; /AddRef;
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /c
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
/QuitInfo:000000000000063C;0000000000000658;
"C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe"
/loadhooks /Parent:0000000000000A10
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe"
"C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe"
"C:\Program Files\Apoint\Apoint.exe"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
"C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
"C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe"
"C:\Program Files\Sony\VAIO Smart Network\VSNService.exe"
"C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe"
"C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe" -e
"C:\Users\Ondra\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe"
/Device:00000061
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe"
"C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe"
"C:\Program Files\Sony\VAIO Power Management\SPMgr.exe" /Start
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4184.0438E2C0.1226747971 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4184.07AE0C60.988653129 /prefetch:3
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4184.07AE0840.781002318 /prefetch:3
WLIDSvcM.exe 3944
C:\Windows\system32\rundll32.exe "C:\PROGRA~2\Google\Chrome\APPLIC~1\130782~1.218\gcswf32.dll",BrokerMain browser=chrome
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Program Files (x86)\Google\Chrome\Application\13.0.782.218\gcswf32.dll" --lang=cs --channel=4184.05A3FE00.92635294 --flash-broker=3880 /prefetch:4
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe" -s DefaultInstance
"C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe" -RunBySCM
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\System32\alg.exe
"C:\Program Files\Apoint\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe" -Embedding
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ba432af4-a32d-4024-acf2-033aca926152 -SystemEventPortName:HostProcess-9eed7986-5e29-4772-a3fc-2155e4d95bd5 -IoCancelEventPortName:HostProcess-004e750d-ed34-4caf-b7a6-3bfc39c49796 -NonStateChangingEventPortName:HostProcess-67852c60-2533-4dad-9ee5-bacb6ce071d3 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:3882d40a-048b-41a1-aa4c-3317e4aef064
"C:\Program Files\Apoint\Apvfb.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "-1508510019-2497162281148155352-1819093728-1589873930999480555-1348488359619783737
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe" /Stationary
"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"
C:\Windows\system32\vssvc.exe
C:\Windows\System32\svchost.exe -k swprv
C:\Windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SSLFalseStart/FalseStart_enabled/SpdyImpact/npn_with_spdy/ --disable-client-side-phishing-detection --channel=4184.083EC840.1147615120 /prefetch:3
"C:\Users\Ondra\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 532336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-08-19 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-27 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{67BCF957-85FC-4036-8DC4-D4D80E00A77B}]
CIEDownload Object - C:\Program Files (x86)\SMART Technologies\SMART Notebook\NotebookPlugin.dll [2010-01-08 247080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e3a8aa9e-bc25-caeb-0e8c-f1e0df261042}]
everyflv

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{855F3B16-6D32-4FE6-8A56-BBB695989046}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-07-24 7938080]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-07-24 1833504]
"Apoint"=C:\Program Files\Apoint\Apoint.exe [2009-08-03 208384]
"IAAnotif"=C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-05 186904]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GameTracker]
C:\Program Files (x86)\GameTracker\GTLite.exe [2010-04-14 3831648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2008-12-03 3882312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files (x86)\Steam\Steam.exe -silent []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"=C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [2009-05-26 317288]
"MarketingTools"=C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe [2009-11-26 26624]
"SHTtray.exe"=C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [2009-07-28 99624]
"SMART Board Service"=C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTBoardService.exe [2010-01-05 3372328]
"SMART SNMP Agent"=C:\Program Files (x86)\SMART Technologies\SMART Product Drivers\SMARTSNMPAgent.exe [2010-01-05 1053992]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-01-04 336384]
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-05-04 311296]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MLB.TV NexDef Plug-in.lnk - C:\Users\Ondra\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-08-05 258560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2010-11-20 290304]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux3"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux4"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"aux5"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv
"aux6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-09-03 11:57:16 ----D---- C:\rsit
2011-09-01 19:50:57 ----SD---- C:\Unistall
2011-08-31 23:47:58 ----D---- C:\$RECYCLE.BIN
2011-08-31 18:37:02 ----D---- C:\Windows\temp
2011-08-31 14:06:55 ----D---- C:\Windows\ERDNT
2011-08-31 11:56:34 ----D---- C:\Program Files\trend micro
2011-08-27 07:05:36 ----D---- C:\Program Files (x86)\2K Games
2011-08-25 15:49:35 ----D---- C:\Program Files\Mafia
2011-08-24 05:00:30 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-08-24 05:00:30 ----A---- C:\Windows\system32\tzres.dll
2011-08-22 09:29:34 ----D---- C:\Program Files (x86)\McAfeeScanAndRepair
2011-08-21 19:12:48 ----D---- C:\Program Files (x86)\AMD APP
2011-08-12 17:57:27 ----A---- C:\Windows\system32\xmllite.dll
2011-08-12 17:57:26 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2011-08-12 17:57:09 ----A---- C:\Windows\system32\kernel32.dll
2011-08-12 17:57:09 ----A---- C:\Windows\system32\conhost.exe
2011-08-12 17:57:08 ----A---- C:\Windows\system32\winsrv.dll
2011-08-12 17:57:07 ----A---- C:\Windows\SYSWOW64\setup16.exe
2011-08-12 17:57:07 ----A---- C:\Windows\system32\wow64.dll
2011-08-12 17:57:07 ----A---- C:\Windows\system32\KernelBase.dll
2011-08-12 17:57:06 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2011-08-12 17:57:06 ----A---- C:\Windows\system32\ntvdm64.dll
2011-08-12 17:57:05 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2011-08-12 17:57:05 ----A---- C:\Windows\system32\wow64win.dll
2011-08-12 17:57:05 ----A---- C:\Windows\system32\wow64cpu.dll
2011-08-12 17:57:04 ----A---- C:\Windows\SYSWOW64\wow32.dll
2011-08-12 17:57:04 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2011-08-12 17:57:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-12 17:57:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2011-08-12 17:57:03 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-12 17:57:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2011-08-12 17:57:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-12 17:57:02 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-08-12 17:57:02 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-08-12 17:57:01 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-12 17:57:00 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-08-12 17:56:59 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2011-08-12 17:56:59 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-12 17:56:59 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-08-12 17:56:58 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2011-08-12 17:56:58 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-08-12 17:56:58 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-08-12 17:56:57 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-12 17:56:57 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-08-12 17:56:56 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-08-12 17:56:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2011-08-12 17:56:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-12 17:56:55 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2011-08-12 17:56:55 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-08-12 17:56:54 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-08-12 17:56:53 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2011-08-12 17:56:53 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-08-12 17:56:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2011-08-12 17:56:52 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2011-08-12 17:56:52 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-08-12 17:56:51 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2011-08-12 17:56:51 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-08-12 17:56:50 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2011-08-12 17:56:50 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-08-12 17:56:49 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2011-08-12 17:56:47 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2011-08-12 17:56:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2011-08-12 17:56:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2011-08-12 17:56:46 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2011-08-12 17:56:45 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2011-08-12 17:56:45 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-08-12 17:56:44 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2011-08-12 17:56:44 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-08-12 17:56:43 ----A---- C:\Windows\SYSWOW64\user.exe
2011-08-12 17:56:43 ----A---- C:\Windows\SYSWOW64\instnm.exe
2011-08-12 17:56:38 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2011-08-12 17:56:38 ----A---- C:\Windows\system32\odbctrac.dll
2011-08-12 17:56:38 ----A---- C:\Windows\system32\odbccu32.dll
2011-08-12 17:56:38 ----A---- C:\Windows\system32\odbccr32.dll
2011-08-12 17:56:38 ----A---- C:\Windows\system32\odbccp32.dll
2011-08-12 17:56:37 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2011-08-12 17:56:37 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2011-08-12 17:56:36 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2011-08-12 17:56:36 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2011-08-12 17:56:33 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2011-08-12 17:56:29 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-08-12 17:56:15 ----A---- C:\Windows\system32\mshtml.dll
2011-08-12 17:56:10 ----A---- C:\Windows\system32\iertutil.dll
2011-08-12 17:56:09 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-08-12 17:56:03 ----A---- C:\Windows\system32\ieframe.dll
2011-08-12 17:55:50 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-08-12 17:55:47 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-08-12 17:55:43 ----A---- C:\Windows\system32\urlmon.dll
2011-08-12 17:55:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-08-12 17:55:41 ----A---- C:\Windows\system32\wininet.dll
2011-08-12 17:55:41 ----A---- C:\Windows\system32\msfeeds.dll
2011-08-12 17:55:39 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-08-12 17:55:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-08-12 17:55:38 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-08-12 17:55:38 ----A---- C:\Windows\system32\url.dll
2011-08-12 17:55:38 ----A---- C:\Windows\system32\mshtmled.dll
2011-08-12 17:55:38 ----A---- C:\Windows\system32\ieui.dll
2011-08-12 17:55:37 ----A---- C:\Windows\SYSWOW64\url.dll
2011-08-12 17:55:37 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-08-12 17:55:36 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-08-12 17:55:36 ----A---- C:\Windows\system32\jsproxy.dll
2011-08-12 17:55:07 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2011-08-12 17:55:05 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-08-12 17:55:03 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2011-08-05 12:43:04 ----D---- C:\Windows\system32\SPReview
2011-08-05 12:41:18 ----D---- C:\Windows\system32\EventProviders

======List of files/folders modified in the last 1 month======

2011-09-03 11:55:01 ----SHD---- C:\Windows\Installer
2011-09-03 11:54:36 ----SHD---- C:\System Volume Information
2011-09-03 11:50:11 ----D---- C:\Windows\System32
2011-09-03 11:50:11 ----D---- C:\Windows\inf
2011-09-03 11:50:11 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-09-03 11:48:36 ----D---- C:\Windows
2011-09-03 11:47:40 ----D---- C:\Windows\Minidump
2011-09-03 11:47:40 ----D---- C:\Windows\debug
2011-09-03 11:46:53 ----D---- C:\Windows\system32\config
2011-09-03 11:42:25 ----D---- C:\Windows\system32\drivers
2011-09-03 10:34:00 ----D---- C:\Windows\SysWOW64
2011-09-03 10:33:56 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2011-09-03 00:06:16 ----D---- C:\Windows\system32\catroot2
2011-09-02 23:08:12 ----D---- C:\Users\Ondra\AppData\Roaming\Mumble
2011-09-01 19:51:50 ----D---- C:\Windows\Prefetch
2011-08-31 23:48:04 ----A---- C:\Windows\system.ini
2011-08-31 23:47:54 ----D---- C:\Windows\system32\drivers\etc
2011-08-31 23:42:35 ----D---- C:\Windows\SYSWOW64\drivers
2011-08-31 23:42:35 ----D---- C:\Windows\AppPatch
2011-08-31 23:42:33 ----D---- C:\Program Files\Common Files
2011-08-31 23:42:33 ----D---- C:\Program Files (x86)\Common Files
2011-08-31 18:06:08 ----RD---- C:\Program Files (x86)
2011-08-31 18:05:58 ----D---- C:\Windows\Tasks
2011-08-31 18:05:55 ----D---- C:\Program Files (x86)\TenchisTV
2011-08-31 18:05:31 ----D---- C:\Program Files (x86)\DVDVideoSoftTB
2011-08-31 16:42:39 ----D---- C:\Windows\system32\Tasks
2011-08-31 14:17:14 ----D---- C:\ProgramData
2011-08-31 14:17:14 ----D---- C:\Program Files (x86)\Steam
2011-08-31 12:55:02 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2011-08-31 11:56:34 ----RD---- C:\Program Files
2011-08-31 11:05:46 ----D---- C:\ProgramData\Easybits GO
2011-08-31 09:35:43 ----D---- C:\Users\Ondra\AppData\Roaming\go
2011-08-30 01:40:40 ----D---- C:\Windows\rescache
2011-08-27 21:56:33 ----D---- C:\Users\Ondra\AppData\Roaming\uTorrent
2011-08-25 03:01:21 ----D---- C:\Windows\winsxs
2011-08-25 03:01:13 ----D---- C:\Windows\SYSWOW64\cs-CZ
2011-08-25 03:01:13 ----D---- C:\Windows\system32\cs-CZ
2011-08-24 04:58:17 ----D---- C:\Windows\system32\catroot
2011-08-15 12:52:40 ----D---- C:\Windows\system32\NDF
2011-08-13 13:17:14 ----RSD---- C:\Windows\assembly
2011-08-13 13:17:14 ----D---- C:\Windows\Microsoft.NET
2011-08-13 03:32:00 ----D---- C:\Windows\SYSWOW64\migration
2011-08-13 03:32:00 ----D---- C:\Windows\system32\migration
2011-08-13 03:32:00 ----D---- C:\Program Files\Internet Explorer
2011-08-13 03:32:00 ----D---- C:\Program Files (x86)\Internet Explorer
2011-08-13 03:15:53 ----D---- C:\ProgramData\Microsoft Help
2011-08-13 03:11:37 ----A---- C:\Windows\system32\MRT.exe
2011-08-13 03:10:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2011-08-09 08:05:36 ----D---- C:\Users\Ondra\AppData\Roaming\vlc
2011-08-08 13:40:59 ----A---- C:\Users\Ondra\AppData\Roaming\myMPQ.ini
2011-08-05 22:11:03 ----D---- C:\Windows\system32\DriverStore
2011-08-05 22:05:15 ----D---- C:\Program Files (x86)\Windows Sidebar
2011-08-05 22:05:15 ----D---- C:\Program Files (x86)\Windows Portable Devices
2011-08-05 22:05:15 ----D---- C:\Program Files (x86)\Windows Mail
2011-08-05 22:05:14 ----D---- C:\Program Files (x86)\Windows Media Player
2011-08-05 22:05:13 ----D---- C:\Program Files (x86)\Windows Photo Viewer
2011-08-05 22:05:09 ----D---- C:\Program Files\Windows Sidebar
2011-08-05 22:05:09 ----D---- C:\Program Files\Windows Mail
2011-08-05 22:05:09 ----D---- C:\Program Files\DVD Maker
2011-08-05 22:05:08 ----D---- C:\Program Files\Windows Portable Devices
2011-08-05 22:05:08 ----D---- C:\Program Files\Windows Media Player
2011-08-05 22:05:07 ----D---- C:\Program Files\Windows Photo Viewer
2011-08-05 22:05:07 ----D---- C:\Program Files\Windows Journal
2011-08-05 22:05:03 ----D---- C:\Windows\servicing
2011-08-05 22:05:03 ----D---- C:\Program Files\Windows Defender
2011-08-05 22:05:02 ----D---- C:\Windows\ehome
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\oobe
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\ko-KR
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\it-IT
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\en-US
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\el-GR
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\de-DE
2011-08-05 22:04:46 ----D---- C:\Windows\SYSWOW64\da-DK
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\sv-SE
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\Setup
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\ru-RU
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\he-IL
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\fr-FR
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\fi-FI
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\cs
2011-08-05 22:04:45 ----D---- C:\Windows\SYSWOW64\AdvancedInstallers
2011-08-05 22:04:42 ----D---- C:\Windows\SYSWOW64\zh-CN
2011-08-05 22:04:42 ----D---- C:\Windows\SYSWOW64\pt-PT
2011-08-05 22:04:42 ----D---- C:\Windows\SYSWOW64\manifeststore
2011-08-05 22:04:42 ----D---- C:\Windows\SYSWOW64\hu-HU
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\zh-TW
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\wbem
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\tr-TR
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\th-TH
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\sppui
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\ro-RO
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\pl-PL
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\ja-JP
2011-08-05 22:04:41 ----D---- C:\Windows\SYSWOW64\es-ES
2011-08-05 22:04:40 ----D---- C:\Windows\SYSWOW64\nl-NL
2011-08-05 22:04:40 ----D---- C:\Windows\SYSWOW64\nb-NO
2011-08-05 22:04:40 ----D---- C:\Windows\SYSWOW64\ar-SA
2011-08-05 22:04:39 ----D---- C:\Windows\SYSWOW64\migwiz
2011-08-05 22:04:39 ----D---- C:\Windows\SYSWOW64\Dism
2011-08-05 22:04:38 ----D---- C:\Windows\SYSWOW64\pt-BR
2011-08-05 22:04:04 ----D---- C:\Windows\system32\da-DK
2011-08-05 22:04:04 ----D---- C:\Windows\PolicyDefinitions
2011-08-05 22:04:03 ----D---- C:\Windows\system32\ko-KR
2011-08-05 22:04:03 ----D---- C:\Windows\system32\it-IT
2011-08-05 22:04:03 ----D---- C:\Windows\system32\en-US
2011-08-05 22:04:03 ----D---- C:\Windows\system32\de-DE
2011-08-05 22:04:02 ----D---- C:\Windows\system32\oobe
2011-08-05 22:04:02 ----D---- C:\Windows\system32\el-GR
2011-08-05 22:04:00 ----D---- C:\Windows\system32\ru-RU
2011-08-05 22:04:00 ----D---- C:\Windows\system32\AdvancedInstallers
2011-08-05 22:03:59 ----D---- C:\Windows\system32\sv-SE
2011-08-05 22:03:59 ----D---- C:\Windows\system32\Setup
2011-08-05 22:03:59 ----D---- C:\Windows\system32\he-IL
2011-08-05 22:03:59 ----D---- C:\Windows\system32\fr-FR
2011-08-05 22:03:58 ----D---- C:\Windows\system32\fi-FI
2011-08-05 22:03:58 ----D---- C:\Windows\system32\cs
2011-08-05 22:03:53 ----D---- C:\Windows\system32\zh-TW
2011-08-05 22:03:53 ----D---- C:\Windows\system32\zh-CN
2011-08-05 22:03:53 ----D---- C:\Windows\system32\pt-PT
2011-08-05 22:03:53 ----D---- C:\Windows\system32\manifeststore
2011-08-05 22:03:53 ----D---- C:\Windows\system32\hu-HU
2011-08-05 22:03:53 ----D---- C:\Windows\system32\es-ES
2011-08-05 22:03:52 ----D---- C:\Windows\system32\sppui
2011-08-05 22:03:52 ----D---- C:\Windows\system32\pl-PL
2011-08-05 22:03:52 ----D---- C:\Windows\system32\ja-JP
2011-08-05 22:03:51 ----D---- C:\Windows\system32\th-TH
2011-08-05 22:03:51 ----D---- C:\Windows\system32\ro-RO
2011-08-05 22:03:50 ----D---- C:\Windows\system32\drivers\pt-BR
2011-08-05 22:03:50 ----D---- C:\Windows\system32\drivers\it-IT
2011-08-05 22:03:50 ----D---- C:\Windows\system32\drivers\he-IL
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\pt-PT
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\pl-PL
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\nl-NL
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\ko-KR
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\hu-HU
2011-08-05 22:03:49 ----D---- C:\Windows\system32\drivers\el-GR
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\tr-TR
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\th-TH
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\sv-SE
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\fr-FR
2011-08-05 22:03:48 ----D---- C:\Windows\system32\drivers\fi-FI
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\zh-TW
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\zh-CN
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\es-ES
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\de-DE
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\cs-CZ
2011-08-05 22:03:47 ----D---- C:\Windows\system32\drivers\ar-SA
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\ru-RU
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\ro-RO
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\nb-NO
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\ja-JP
2011-08-05 22:03:46 ----D---- C:\Windows\system32\drivers\da-DK
2011-08-05 22:03:45 ----D---- C:\Windows\system32\drivers\en-US
2011-08-05 22:03:44 ----D---- C:\Windows\system32\wbem
2011-08-05 22:03:44 ----D---- C:\Windows\system32\tr-TR
2011-08-05 22:03:43 ----D---- C:\Windows\system32\nl-NL
2011-08-05 22:03:43 ----D---- C:\Windows\system32\nb-NO
2011-08-05 22:03:42 ----D---- C:\Windows\system32\migwiz
2011-08-05 22:03:42 ----D---- C:\Windows\system32\ar-SA
2011-08-05 22:03:41 ----D---- C:\Windows\system32\pt-BR
2011-08-05 22:03:41 ----D---- C:\Windows\system32\Dism
2011-08-05 22:03:01 ----RSD---- C:\Windows\Fonts
2011-08-05 22:01:53 ----D---- C:\Windows\system32\Boot
2011-08-05 22:00:44 ----D---- C:\Windows\system32\drivers\UMDF
2011-08-05 13:05:54 ----D---- C:\Windows\Logs
2011-08-05 13:05:51 ----D---- C:\Program Files (x86)\Microsoft Office
2011-08-05 13:01:30 ----A---- C:\Windows\SYSWOW64\msclmd.dll
2011-08-05 13:01:29 ----A---- C:\Windows\system32\msclmd.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-05 408600]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2009-05-20 55280]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2007-02-07 14104]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-06 834544]
R1 vpcnfltr;Virtual PC Network Filter Driver; C:\Windows\system32\DRIVERS\vpcnfltr.sys [2010-11-20 59392]
R1 vpcvmm;@%SystemRoot%\system32\drivers\vpcvmm.sys,-100; C:\Windows\system32\drivers\vpcvmm.sys [2010-11-20 360832]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 acedrv11;acedrv11; \??\C:\Windows\system32\drivers\acedrv11.sys [2009-01-19 334344]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimssn64.sys [2009-07-31 86528]
R2 risdptsk;risdptsk; C:\Windows\system32\DRIVERS\risdsn64.sys [2009-07-31 76288]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2009-08-03 250928]
R3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect; C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-27 19968]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-27 6037504]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2009-07-30 98344]
R3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2009-07-30 132648]
R3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2009-07-30 35104]
R3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2009-07-30 21160]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-07-24 1822112]
R3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-05 5435904]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-07-24 201472]
R3 SFEP;Sony Firmware Extension Parser; C:\Windows\system32\DRIVERS\SFEP.sys [2009-06-11 11392]
R3 SMARTMouseFilterx64;HID-compliant mouse; C:\Windows\system32\DRIVERS\SMARTMouseFilterx64.sys [2009-12-15 12584]
R3 SMARTVHidMiniVistaAmd64;SMART HID Device; C:\Windows\system32\DRIVERS\SMARTVHidMiniVistaAmd64.sys [2009-12-15 15784]
R3 SMARTVTabletPCx64;SMART Virtual TabletPC; C:\Windows\system32\DRIVERS\SMARTVTabletPCx64.sys [2009-12-15 18432]
R3 tap0901;tap0901; C:\Windows\system32\DRIVERS\tap0901.sys [2011-06-07 40128]
R3 vpcbus;Služba hostitelské sběrnice programu Virtual PC; C:\Windows\system32\DRIVERS\vpchbus.sys [2010-11-20 194944]
R3 vpcusb;Služba konektoru virtualizace rozhraní USB; C:\Windows\system32\DRIVERS\vpcusb.sys [2010-11-20 95232]
S3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-07-31 1484800]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-08-05 7345632]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2009-08-05 139264]
S3 MSICDSetup;MSICDSetup; \??\G:\CDriver64.sys []
S3 nmwcdx64;Nokia USB Phone Parent; C:\Windows\system32\drivers\nmwcdx64.sys [2007-06-28 173056]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 WinUsb;WinUsb; C:\Windows\system32\drivers\WinUsb.sys [2010-11-20 41984]
S4 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\Windows\System32\drivers\sfdrv01.sys [2005-08-10 68608]
S4 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\Windows\System32\drivers\sfhlp02.sys [2005-05-16 7168]
S4 sfvfs02;StarForce Protection VFS Driver (version 2.x); C:\Windows\System32\drivers\sfvfs02.sys [2005-11-03 89600]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-27 203264]
R2 Bonjour Service;Bonjour Service; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2008-08-29 238888]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-02 864032]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbguard.exe [2007-10-16 81920]
R2 GS In-Game Service;GS In-Game Service; C:\Program Files (x86)\GameTracker\GSInGameService.exe [2010-04-14 1648480]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-05 354840]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-05-01 75136]
R2 RtkAudioService;Realtek Audio Service; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [2009-07-24 189984]
R2 SOHCImp;VAIO Media plus Content Importer; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-28 120104]
R2 SOHDBSvr;VAIO Media plus Database Manager; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-28 70952]
R2 SOHDms;VAIO Media plus Digital Media Server; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-28 427304]
R2 SOHDs;VAIO Media plus Device Searcher; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-28 75048]
R2 SOHPlMgr;VAIO Media plus Playlist Manager; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-28 91432]
R2 uCamMonitor;CamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
R2 VAIO Event Service;VAIO Event Service; C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe [2010-05-07 205168]
R2 VAIO Power Management;VAIO Power Management; C:\Program Files\Sony\VAIO Power Management\SPMService.exe [2009-08-23 411496]
R2 VCFw;VAIO Content Folder Watcher; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-23 642920]
R2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-27 468264]
R2 VSNService;VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [2009-08-13 522240]
R2 VzCdbSvc;VAIO Entertainment Database Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [2009-07-23 206336]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 2291568]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_1\bin\fbserver.exe [2007-10-16 2711552]
R3 Vcsw;VAIO Entertainment UPnP Client Adapter; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [2009-07-23 313264]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 Roxio Upnp Server 10;Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [2010-03-18 113152]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 McAfee ScanAndRepair Svc;McAfee ScanAndRepair Svc; C:\Program Files (x86)\McAfeeScanAndRepair\McAfeeScanRepairSvc.exe [2011-04-06 694864]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2011-08-06 411432]
S3 VAIO Entertainment TV Device Arbitration Service;VAIO Entertainment TV Device Arbitration Service; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe [2009-07-23 69632]
S3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager; C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-06-27 357672]
S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface; C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-18 110888]
S3 VUAgent;VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [2011-04-20 1021840]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-03 1255736]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#26 Příspěvek od vyosek »

vyosek píše: :arrow: Pokud nemate na ESET koupenou licenci, tak nainstalujte Avast Free http://www.avast.com/cs-cz/free-antivirus-download
Nyni tam neni ESET ani Avast...Takze jak je to s ESETem, je koupeny :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
48ondra
Návštěvník
Návštěvník
Příspěvky: 24
Registrován: 31 srp 2011 10:39

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#27 Příspěvek od 48ondra »

myslim že je ale nevim kdeje takže jsem stáhnul AVAST
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: taky FB vir s adobe... CPU beží jak kdybych hrál dvě hry

#28 Příspěvek od vyosek »

Fajn, nahodte Avast a poprosim o novy log z RSIT
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“