POmalé pc

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
STAR
Návštěvník
Návštěvník
Příspěvky: 65
Registrován: 09 Srp 2007 22:12
Kontaktovat uživatele:
Kontaktovat uživatele STAR

POmalé pc

#1 Příspěvek od STAR »

Logfile of random's system information tool 1.09 (written by random/random)
Run by jaaaroy at 2011-09-02 08:10:10
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 43 GB (33%) free of 131 GB
Total RAM: 1023 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:10:18, on 2.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Documents and Settings\jaaaroy\Plocha\Obrázky\RSIT.exe
C:\Program Files\trend micro\jaaaroy.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [HotkeyP] C:\DOCUME~1\jaaaroy\LOCALS~1\Temp\Rar$EX04.344\HotkeyP.exe 0
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O4 - Global Startup: GamersFirst LIVE!.lnk = C:\Program Files\GamersFirst\LIVE!\Live.exe
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\skype4com.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 6032 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\jaaaroy\Data aplikací\Mozilla\Firefox\Profiles\5tvjx04u.default

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@gamersfirst.com/LiveLauncher]
"Description"=GamersFirst LIVE! Web Launcher
"Path"=C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Webzen.com/NPGameWebStarter]
"Description"=Webzen Game Controller
"Path"=C:\Program Files\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-03 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-07-03 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-05-25 13895272]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-05-05 1632360]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"=C:\Program Files\Pando Networks\Media Booster\PMB.exe [2011-08-22 3077528]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"HotkeyP"=C:\DOCUME~1\jaaaroy\LOCALS~1\Temp\Rar$EX04.344\HotkeyP.exe [2011-07-30 60928]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe
GamersFirst LIVE!.lnk - C:\Program Files\GamersFirst\LIVE!\Live.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\BlastShark\hellgate\BlastShark.exe"="C:\Program Files\BlastShark\hellgate\BlastShark.exe:*:Enabled:hellgate"
"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Petroglyph\Rise of Immortals\RoIClientR.exe"="C:\Program Files\Petroglyph\Rise of Immortals\RoIClientR.exe:*:Enabled:Rise of Immortals"
"C:\Program Files\Steam\steamapps\jarous1337\condition zero\hl.exe"="C:\Program Files\Steam\steamapps\jarous1337\condition zero\hl.exe:*:Enabled:Counter-Strike: Condition Zero"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\BrawlBusters(EN)CBT\bin\PbLauncher.exe"="C:\Program Files\BrawlBusters(EN)CBT\bin\PbLauncher.exe:*:Enabled:BrawlBusters Launcher"
"C:\Program Files\BrawlBusters(EN)CBT\bin\pbclient.exe"="C:\Program Files\BrawlBusters(EN)CBT\bin\pbclient.exe:*:Enabled:BrawlBusters"
"C:\CherryDeGames\Dragon Nest\DragonNest.exe"="C:\CherryDeGames\Dragon Nest\DragonNest.exe:*:Enabled:Dragon Nest"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Steam\steamapps\jarous1337\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\jarous1337\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=i420vfw.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
"VIDC.VP40"=vp4vfw.dll
"msacm.voxacm160"=vct3216.acm
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"midi1"=wdmaud.drv
"vidc.VP70"=vp7vfw.dll
"vidc.X264"=x264vfw.dll
"VIDC.FPS1"=frapsvid.dll
"vidc.VP60"=vp6vfw.dll
"vidc.VP61"=vp6vfw.dll
"vidc.VP62"=vp6vfw.dll
"vidc.DIVX"=DivX.dll
"VIDC.DRAW"=DVIDEO.DLL
"midi2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.MSUD"=msulvc05.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-09-02 08:10:10 ----D---- C:\rsit
2011-09-01 22:09:00 ----D---- C:\WINDOWS\ShellNew
2011-09-01 22:08:58 ----D---- C:\Program Files\AutoHotkey
2011-08-28 20:12:04 ----D---- C:\Program Files\LastGoldEmpire
2011-08-27 09:38:16 ----A---- C:\Documents and Settings\jaaaroy\Data aplikací\flstudio_9.0.exe
2011-08-24 16:56:21 ----A---- C:\WINDOWS\game.ini
2011-08-22 21:48:33 ----D---- C:\AeriaGames
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarterCore.exe
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarter_Kor.dll
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarter_Eng.dll
2011-08-22 19:39:49 ----D---- C:\Program Files\Webzen
2011-08-22 18:22:45 ----D---- C:\gamigo
2011-08-22 17:45:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-08-22 00:24:26 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\RIFT
2011-08-22 00:24:12 ----D---- C:\Program Files\RIFT Game
2011-08-21 22:51:05 ----D---- C:\CherryDeGames
2011-08-21 21:42:06 ----D---- C:\Program Files\GamePark
2011-08-21 21:38:08 ----D---- C:\Program Files\GamePark2
2011-08-21 21:05:23 ----D---- C:\Program Files\Kylotonn Entertainment
2011-08-20 12:28:10 ----D---- C:\WINDOWS\RegisteredPackages
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-20 12:27:35 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-20 12:27:35 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-20 12:27:34 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-08-20 12:27:32 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2011-08-20 01:40:49 ----A---- C:\WINDOWS\system32\npptNT2.sys
2011-08-20 01:40:41 ----D---- C:\Program Files\Common Files\INCA Shared
2011-08-20 01:34:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\GamesCampus
2011-08-19 23:42:00 ----D---- C:\WINDOWS\system32\xlive
2011-08-19 23:41:51 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2011-08-19 23:35:31 ----D---- C:\Program Files\TalismanOnline
2011-08-19 14:49:52 ----D---- C:\Program Files\NovaLogic
2011-08-19 13:06:13 ----D---- C:\Program Files\JoWooD
2011-08-19 11:14:28 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\XnView
2011-08-18 22:46:13 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Media Player Classic
2011-08-15 13:01:39 ----D---- C:\Program Files\Wolfenstein - Enemy Territory
2011-08-15 11:23:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\M-Photo
2011-08-15 11:15:00 ----D---- C:\TiskProRadost
2011-08-15 11:14:35 ----D---- C:\Program Files\TiskProRadost
2011-08-15 11:14:32 ----A---- C:\WINDOWS\system32\TiskProRadost_AlbumMaker_uninstaller.exe
2011-08-08 10:36:18 ----A---- C:\WINDOWS\Thps3.INI
2011-08-08 10:19:29 ----A---- C:\Documents and Settings\jaaaroy\Data aplikací\prfs.ini
2011-08-06 21:42:10 ----A---- C:\memory.txt
2011-08-06 21:06:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2011-08-06 20:13:27 ----D---- C:\Program Files\Activision
2011-08-04 23:40:57 ----D---- C:\Program Files\SprintCars 2007
2011-08-04 22:56:03 ----D---- C:\Program Files\Common Files\DirectX
2011-08-04 22:51:09 ----D---- C:\Program Files\Bethesda Softworks
2011-08-04 22:39:15 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-08-04 22:34:44 ----D---- C:\Program Files\Virgin Interactive
2011-08-04 21:20:20 ----D---- C:\Program Files\Heroes of Newerth
2011-08-04 18:35:29 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Atari
2011-08-04 18:34:24 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-08-04 18:25:21 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Leadertech
2011-08-04 18:22:06 ----D---- C:\Program Files\Atari
2011-08-04 17:28:26 ----SHD---- C:\RECYCLER
2011-08-04 16:51:45 ----D---- C:\WINDOWS\Prefetch
2011-08-04 16:51:44 ----A---- C:\ComboFix.txt
2011-08-04 16:42:55 ----A---- C:\Boot.bak
2011-08-04 16:42:49 ----RASHD---- C:\cmdcons
2011-08-04 16:25:50 ----N---- C:\WINDOWS\system32\smtpapi.dll
2011-08-04 16:25:50 ----N---- C:\WINDOWS\system32\rwnh.dll
2011-08-04 16:25:46 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\credssp.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\azroles.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3svc.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3msm.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3api.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dimsroam.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapsvc.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappprxy.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapphost.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappgnui.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappcfg.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapolqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\dot3ui.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdpash.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcperf.exe
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcex.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\kmsvc.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napstat.exe
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napmontr.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napipsec.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\mssha.dll
2011-08-04 16:25:34 ----N---- C:\WINDOWS\system32\qagent.dll
2011-08-04 16:25:34 ----N---- C:\WINDOWS\system32\onex.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\setupn.exe
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\rasqec.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qutil.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qcliprov.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qagentrt.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\verclsid.exe
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tspkg.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-08-04 16:25:30 ----N---- C:\WINDOWS\system32\wlanapi.dll
2011-08-04 16:25:27 ----N---- C:\WINDOWS\system32\xmllite.dll
2011-08-04 16:25:25 ----D---- C:\WINDOWS\system32\cs
2011-08-04 16:25:25 ----D---- C:\WINDOWS\l2schemas
2011-08-04 16:25:24 ----D---- C:\WINDOWS\system32\bits
2011-08-04 16:17:56 ----D---- C:\WINDOWS\network diagnostic
2011-08-04 16:17:51 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2011-08-04 16:16:20 ----A---- C:\WINDOWS\005353_.tmp

======List of files/folders modified in the last 1 month======

2011-09-02 08:10:16 ----D---- C:\Program Files\trend micro
2011-09-02 07:51:24 ----D---- C:\Program Files\Steam
2011-09-02 07:51:24 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\uTorrent
2011-09-02 07:51:21 ----D---- C:\WINDOWS\temp
2011-09-02 07:51:21 ----D---- C:\WINDOWS\Minidump
2011-09-02 07:51:21 ----D---- C:\WINDOWS
2011-09-02 07:32:30 ----D---- C:\Program Files\Common Files\Akamai
2011-09-02 07:32:29 ----A---- C:\WINDOWS\system32\bscs.ini
2011-09-02 00:10:38 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-09-01 22:08:58 ----RD---- C:\Program Files
2011-08-30 21:38:42 ----D---- C:\Program Files\Trillian
2011-08-28 23:07:35 ----D---- C:\Program Files\Mozilla Firefox
2011-08-28 22:56:36 ----D---- C:\WINDOWS\system32\drivers
2011-08-28 15:59:28 ----D---- C:\Program Files\GamersFirst
2011-08-28 15:09:40 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-28 15:09:39 ----SHD---- C:\WINDOWS\Installer
2011-08-28 13:29:20 ----HD---- C:\WINDOWS\inf
2011-08-28 13:29:15 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-27 09:44:32 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\TS3Client
2011-08-27 09:44:16 ----D---- C:\WINDOWS\Logs
2011-08-27 09:44:16 ----D---- C:\WINDOWS\Debug
2011-08-24 18:15:17 ----D---- C:\WINDOWS\system32
2011-08-24 18:15:13 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-22 20:09:11 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-08-20 12:28:26 ----D---- C:\WINDOWS\system32\DirectX
2011-08-20 12:28:10 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-20 09:55:07 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\vlc
2011-08-20 09:47:37 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\GHISLER
2011-08-20 09:44:53 ----D---- C:\Qoobox
2011-08-20 01:40:41 ----D---- C:\Program Files\Common Files
2011-08-20 01:33:27 ----RSD---- C:\WINDOWS\assembly
2011-08-19 23:41:29 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-08-19 23:41:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-08-19 13:49:26 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-08-19 11:24:48 ----RSD---- C:\WINDOWS\Fonts
2011-08-18 19:51:24 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-08-16 22:54:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-08-15 16:13:02 ----D---- C:\Program Files\Opera
2011-08-15 00:25:59 ----HD---- C:\WINDOWS\msdownld.tmp
2011-08-15 00:25:44 ----D---- C:\WINDOWS\WinSxS
2011-08-13 23:03:53 ----D---- C:\Program Files\Pando Networks
2011-08-07 23:14:34 ----SD---- C:\Documents and Settings\jaaaroy\Data aplikací\Microsoft
2011-08-06 19:01:10 ----D---- C:\Program Files\Common Files\Steam
2011-08-06 18:40:51 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-04 22:40:06 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-04 22:37:50 ----D---- C:\WINDOWS\system32\Setup
2011-08-04 22:37:50 ----D---- C:\WINDOWS\AppPatch
2011-08-04 22:37:49 ----D---- C:\WINDOWS\system32\wbem
2011-08-04 19:05:17 ----D---- C:\Program Files\Electronic Arts
2011-08-04 16:50:14 ----A---- C:\WINDOWS\system.ini
2011-08-04 16:50:06 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-04 16:49:39 ----D---- C:\Program Files\Messenger
2011-08-04 16:42:55 ----RASH---- C:\boot.ini
2011-08-04 16:38:51 ----D---- C:\WINDOWS\security
2011-08-04 16:32:54 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-04 16:26:13 ----D---- C:\WINDOWS\ServicePackFiles
2011-08-04 16:26:11 ----D---- C:\Program Files\Windows Media Player
2011-08-04 16:26:09 ----D---- C:\WINDOWS\Help
2011-08-04 16:25:51 ----D---- C:\WINDOWS\EHome
2011-08-04 16:25:50 ----D---- C:\WINDOWS\system32\inetsrv
2011-08-04 16:25:49 ----D---- C:\WINDOWS\ime
2011-08-04 16:25:27 ----D---- C:\WINDOWS\system32\cs-CZ
2011-08-04 16:25:26 ----D---- C:\WINDOWS\system32\usmt
2011-08-04 16:25:26 ----D---- C:\Program Files\Internet Explorer
2011-08-04 16:25:24 ----D---- C:\WINDOWS\peernet
2011-08-04 16:25:24 ----D---- C:\Program Files\Movie Maker
2011-08-04 16:20:56 ----D---- C:\WINDOWS\system32\Restore
2011-08-04 16:20:55 ----D---- C:\WINDOWS\system32\npp
2011-08-04 16:20:54 ----D---- C:\WINDOWS\msagent
2011-08-04 16:20:51 ----D---- C:\WINDOWS\srchasst
2011-08-04 16:20:50 ----D---- C:\Program Files\NetMeeting
2011-08-04 16:20:48 ----D---- C:\WINDOWS\system32\Com
2011-08-04 16:20:44 ----D---- C:\Program Files\Windows NT
2011-08-04 16:20:43 ----D---- C:\Program Files\Outlook Express
2011-08-04 16:20:38 ----D---- C:\Program Files\Common Files\System
2011-08-04 16:20:09 ----D---- C:\WINDOWS\system32\oobe
2011-08-04 16:20:06 ----D---- C:\WINDOWS\system
2011-08-04 16:16:18 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-04 16:15:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2009-01-07 20744]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0x01000000 papycpu2;papycpu2; C:\WINDOWS\System32\DRIVERS\papycpu2.sys [2003-01-17 1984]
R0x01000000 papyjoy;papyjoy; C:\WINDOWS\System32\DRIVERS\papyjoy.sys [2003-01-17 1856]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-17 31088]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2004-11-29 1337850]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2008-12-07 30088]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-05-25 12753664]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2007-02-06 90880]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2011-01-15 30208]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2009-01-08 31880]
S3 1394hub;1394 Enabled Hub; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 APR;APR; \??\C:\Program Files\GamersFirst\Knight Online\APR.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2008-11-25 33800]
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2008-11-25 27528]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2008-12-07 14088]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2009-01-03 39304]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-04-14 272896]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2004-11-29 55320]
S3 catchme;catchme; \??\C:\DOCUME~1\jaaaroy\LOCALS~1\Temp\catchme.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2009-10-14 32000]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2008-01-21 14856]
S3 XDva380;XDva380; \??\C:\WINDOWS\system32\XDva380.sys []
S3 XDva386;XDva386; \??\C:\WINDOWS\system32\XDva386.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2009-02-27 850432]
R2 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2004-11-29 254007]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-07-03 153376]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-05-25 154728]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-06-13 75136]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-08-24 214520]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 98407]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-05-03 4756216]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-08-06 411432]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Avatar uživatele
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 Zář 2010 21:30
Místo/Bydliště: Napajedla
Kontaktovat uživatele:
Kontaktovat uživatele chodnik74

Re: POmalé pc

#2 Příspěvek od chodnik74 »

Dobrý den :welcome:

:!: Vy jste používal Combofix?Vložte mi sem jeho log:C:\ComboFix.txt

:arrow: Nebezpeči Combofixu
  • Program je primárně určený pro rádce,takže svévolným použitím ztrácíte nárok na pomoc
  • Maže stopy po veškeré havěti,takže když ho použijete sami,tak v RSITU nic nejde vidět
  • Výsledný log je potřeba doluštit a dočistit,protože Combofix neumí mazat vše
  • Combofix může mít chybu,zboří vám systém a pokud nevíte,kam ukládá své zálohy a jak je obnovit,tak vás čeká reinstall systémuu
  • Combofix nekontroluje důležité knihovny(například hall.dll)



:arrow: Stáhneme si na Plochu program OTMObrázek
  • Spustíme soubor OTM.exe (pokud máte Windows Vista nebo Windows 7,tak na soubor klikněte pravým tlačítkem myši a dejte ,,Spustit jako správce,,)
  • Spustí se nám program OTM a do levého okna ,,Paste Instructions for Items to be Moved,, vložíme následující skript a stiskneme tlačítko MoveIt

    Kód: Vybrat vše

    :files
C:\WINDOWS\system32\XDva380.sys
C:\WINDOWS\system32\XDva386.sys
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\GamersFirst LIVE!.lnk

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"=-
"KernelFaultCheck"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"=-
"MSMSGS"=-
"HotkeyP"=-

:services
Akamai
XDva380
XDva386

:commands
[resethosts]
[emptytemp]
[clearallrestorepoints]
[emptyflash]
  • Po restartu pc se vám objeví log z OTM,ten mi sem prosím vložte..
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2
Nahoru
STAR
Návštěvník
Návštěvník
Příspěvky: 65
Registrován: 09 Srp 2007 22:12
Kontaktovat uživatele:
Kontaktovat uživatele STAR

Re: POmalé pc

#3 Příspěvek od STAR »

ComboFix 11-09-01.03 - jaaaroy 02.09.2011 8:15.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.644 [GMT 2:00]
Spuštěný z: c:\documents and settings\jaaaroy\Plocha\Obrßzky\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\jaaaroy\Data aplikací\flstudio_9.0.exe
c:\windows\ehome\medctrro.exe
c:\windows\system32\nvdispco3220150.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-02 do 2011-09-02 )))))))))))))))))))))))))))))))
.
.
2011-09-02 06:10 . 2011-09-02 06:10 -------- d-----w- C:\rsit
2011-09-01 20:09 . 2011-09-01 20:09 -------- d-----w- c:\windows\ShellNew
2011-09-01 20:08 . 2011-09-01 20:09 -------- d-----w- c:\program files\AutoHotkey
2011-08-28 18:12 . 2011-08-28 20:56 -------- d-----w- c:\program files\LastGoldEmpire
2011-08-28 14:07 . 2011-08-28 14:07 -------- d-----w- c:\documents and settings\jaaaroy\Local Settings\Data aplikací\GamersFirst LIVE!
2011-08-22 19:48 . 2011-08-22 19:48 -------- d-----w- C:\AeriaGames
2011-08-22 18:09 . 2010-11-04 16:49 53616 ----a-w- c:\windows\system32\CMStarter_Eng.dll
2011-08-22 18:09 . 2010-11-04 16:49 53616 ----a-w- c:\windows\system32\CMStarter_Kor.dll
2011-08-22 18:09 . 2010-11-04 16:49 364912 ----a-w- c:\windows\system32\CMStarterCore.exe
2011-08-22 17:39 . 2011-08-22 19:02 -------- d-----w- c:\program files\Webzen
2011-08-22 16:22 . 2011-08-22 16:22 -------- d-----w- C:\gamigo
2011-08-22 15:45 . 2011-09-02 06:24 -------- d-----w- c:\documents and settings\jaaaroy\Local Settings\Data aplikací\PMB Files
2011-08-22 15:45 . 2011-08-30 10:30 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PMB Files
2011-08-21 22:24 . 2011-08-22 04:22 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\RIFT
2011-08-21 22:24 . 2011-08-28 13:09 -------- d-----w- c:\program files\RIFT Game
2011-08-21 20:51 . 2011-08-21 20:51 -------- d-----w- C:\CherryDeGames
2011-08-21 19:42 . 2011-08-21 19:42 -------- d-----w- c:\program files\GamePark
2011-08-21 19:05 . 2011-08-21 19:05 -------- d-----w- c:\program files\Kylotonn Entertainment
2011-08-20 10:09 . 2011-08-20 10:09 -------- d-----w- c:\documents and settings\jaaaroy\Games
2011-08-19 23:41 . 2011-05-03 16:08 4756216 ----a-w- c:\windows\system32\GameMon.des
2011-08-19 23:40 . 2005-01-01 09:43 4682 ----a-w- c:\windows\system32\npptNT2.sys
2011-08-19 23:40 . 2003-07-17 18:17 5174 ----a-w- c:\windows\system32\nppt9x.vxd
2011-08-19 23:40 . 2011-08-19 23:40 -------- d-----w- c:\program files\Common Files\INCA Shared
2011-08-19 23:34 . 2011-08-19 23:34 -------- d-----w- c:\documents and settings\All Users\Data aplikací\GamesCampus
2011-08-19 21:42 . 2011-08-19 21:42 -------- d-----w- c:\windows\system32\xlive
2011-08-19 21:41 . 2011-08-20 00:13 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2011-08-19 21:35 . 2011-08-21 19:12 -------- d-----w- c:\program files\TalismanOnline
2011-08-19 12:49 . 2011-08-19 12:49 -------- d-----w- c:\program files\NovaLogic
2011-08-19 11:06 . 2011-08-19 11:06 -------- d-----w- c:\program files\JoWooD
2011-08-19 09:14 . 2011-08-20 07:56 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\XnView
2011-08-18 20:50 . 2011-08-19 07:37 -------- d-----w- c:\documents and settings\jaaaroy\Local Settings\Data aplikací\WMTools Downloaded Files
2011-08-18 20:46 . 2011-08-27 07:44 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\Media Player Classic
2011-08-15 11:58 . 2011-08-24 16:15 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-08-15 11:01 . 2011-08-16 22:49 -------- d-----w- c:\program files\Wolfenstein - Enemy Territory
2011-08-15 09:23 . 2011-08-15 09:23 -------- d-----w- c:\documents and settings\All Users\Data aplikací\M-Photo
2011-08-15 09:15 . 2011-08-15 09:15 -------- d-----w- C:\TiskProRadost
2011-08-15 09:14 . 2011-08-15 20:26 -------- d-----w- c:\program files\TiskProRadost
2011-08-15 09:14 . 2011-08-15 09:14 22193754 ----a-w- c:\windows\system32\TiskProRadost_AlbumMaker_uninstaller.exe
2011-08-06 19:06 . 2011-08-06 19:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Trymedia
2011-08-06 18:13 . 2011-08-24 14:51 -------- d-----w- c:\program files\Activision
2011-08-05 17:41 . 2011-08-30 10:29 -------- d-----w- c:\documents and settings\jaaaroy\riotsGamesLogs
2011-08-04 21:40 . 2011-08-06 16:52 -------- d-----w- c:\program files\SprintCars 2007
2011-08-04 20:56 . 2011-08-04 20:56 -------- d-----w- c:\program files\Common Files\DirectX
2011-08-04 20:51 . 2011-08-04 20:51 -------- d-----w- c:\program files\Bethesda Softworks
2011-08-04 20:39 . 2008-04-14 06:52 221184 ----a-w- c:\windows\system32\wmpns.dll
2011-08-04 20:34 . 2011-08-04 20:34 -------- d-----w- c:\program files\Virgin Interactive
2011-08-04 19:20 . 2011-08-19 12:09 -------- d-----w- c:\program files\Heroes of Newerth
2011-08-04 16:35 . 2011-08-04 16:35 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\Atari
2011-08-04 16:34 . 2011-08-19 11:08 108144 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-08-04 16:25 . 2011-08-04 16:25 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\Leadertech
2011-08-04 16:22 . 2011-08-06 19:02 -------- d-----w- c:\program files\Atari
2011-08-04 16:20 . 2011-08-04 16:20 282756 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2011-08-04 16:20 . 2011-08-04 16:20 163972 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2011-08-04 16:20 . 2003-02-27 14:12 696320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2011-08-04 16:20 . 2002-12-05 12:10 155648 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2011-08-04 16:20 . 2002-12-02 13:22 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2011-08-04 16:20 . 2002-12-02 11:33 57344 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2011-08-04 16:20 . 2002-12-02 11:33 237568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2011-08-04 14:25 . 2008-04-14 06:49 102912 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2011-08-04 14:21 . 2008-04-14 06:51 33792 -c----w- c:\windows\system32\dllcache\custsat.dll
2011-08-04 14:17 . 2008-04-13 22:10 10240 ------w- c:\windows\system32\drivers\sffp_mmc.sys
2011-08-04 14:16 . 2006-12-28 22:31 19569 ----a-w- c:\windows\005353_.tmp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-24 16:15 . 2011-06-13 06:23 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-08-24 16:15 . 2011-06-13 06:23 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-08-24 16:14 . 2011-06-13 06:23 214520 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-07-11 02:54 . 2011-07-11 02:54 86528 ----a-w- c:\windows\bnetunin.exe
2011-07-03 15:36 . 2011-07-03 15:36 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-07-03 15:36 . 2011-07-03 15:36 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-06-21 18:26 . 2011-06-09 20:47 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-21 01:46 . 2011-06-21 01:47 258352 ----a-w- c:\windows\system32\unicows.dll
2011-06-16 08:00 . 2011-06-23 10:18 73216 ----a-w- c:\windows\system32\ff_vfw.dll
2011-06-13 06:23 . 2011-06-13 06:23 138056 ----a-w- c:\documents and settings\jaaaroy\Data aplikací\PnkBstrK.sys
2011-06-13 06:23 . 2011-06-13 06:23 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-06-09 20:46 . 2011-06-09 20:46 315392 ----a-w- c:\windows\HideWin.exe
2011-08-28 21:07 . 2011-06-21 18:24 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2011-08-22 3077528]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-10 16126464]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-05-25 13895272]
"NvMediaCenter"="NvMCTray.dll" [2011-05-25 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-05-04 1632360]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
GamePark klient 2.lnk - c:\program files\GamePark2\gpcl.exe [2011-8-21 409088]
GamersFirst LIVE!.lnk - c:\program files\GamersFirst\LIVE!\Live.exe [2010-7-7 2805104]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\BlastShark\\hellgate\\BlastShark.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleilCS.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Program Files\\Steam\\steamapps\\jarous1337\\condition zero\\hl.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\CherryDeGames\\Dragon Nest\\DragonNest.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Steam\\steamapps\\jarous1337\\counter-strike\\hl.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"58852:TCP"= 58852:TCP:Pando Media Booster
"58852:UDP"= 58852:UDP:Pando Media Booster
"6881:TCP"= 6881:TCP:Blizzard Downloader: 6881
"58143:TCP"= 58143:TCP:Pando Media Booster
"58143:UDP"= 58143:UDP:Pando Media Booster
"58252:TCP"= 58252:TCP:Pando Media Booster
"58252:UDP"= 58252:UDP:Pando Media Booster
"3179:TCP"= 3179:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [7.1.2009 23:39 20744]
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [25.10.2001 14:00 14336]
R2 BsMobileCS;BsMobileCS;c:\program files\IVT Corporation\BlueSoleil\BsMobileCS.exe [27.2.2009 16:40 143467]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [9.6.2011 22:52 2214504]
R3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [7.12.2008 12:44 30088]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [2.7.2008 14:58 26248]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 1394hub;1394 Enabled Hub;c:\windows\system32\svchost.exe -k netsvcs [25.10.2001 14:00 14336]
S3 APR;APR;\??\c:\program files\GamersFirst\Knight Online\APR.sys --> c:\program files\GamersFirst\Knight Online\APR.sys [?]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S3 XDva380;XDva380;\??\c:\windows\system32\XDva380.sys --> c:\windows\system32\XDva380.sys [?]
S3 XDva386;XDva386;\??\c:\windows\system32\XDva386.sys --> c:\windows\system32\XDva386.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
.
------- Doplňkový sken -------
.
IE: Send by Bluetooth - c:\program files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
IE: Send To &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send via &Message... - c:\program files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
TCP: DhcpNameServer = 10.0.0.138 10.0.0.138
FF - ProfilePath - c:\documents and settings\jaaaroy\Data aplikací\Mozilla\Firefox\Profiles\5tvjx04u.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-02 08:24
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\ćHőwć*]
"DisplayName"="???\17?\11\09"
"DeviceDesc"="???\17?\11\09"
"ProviderName"="???\11???\11??"
"MFG"="???????"
"ReinstallString"=".10.1000.7"
"DeviceInstanceIds"=multi:"d:\\ati\\atidrv\\sbdrv\\smbus\\smbusati.inf\00"
.
Celkový čas: 2011-09-02 08:26:44
ComboFix-quarantined-files.txt 2011-09-02 06:26
ComboFix2.txt 2011-08-04 14:51
.
Před spuštěním: Volných bajtů: 45 483 655 168
Po spuštění: Volných bajtů: 45 474 766 848
.
- - End Of File - - 6AF7C4A68BD6429F6FE8D1610D7A0B5E
Nahoru
STAR
Návštěvník
Návštěvník
Příspěvky: 65
Registrován: 09 Srp 2007 22:12
Kontaktovat uživatele:
Kontaktovat uživatele STAR

Re: POmalé pc

#4 Příspěvek od STAR »

All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\system32\XDva380.sys not found.
File/Folder C:\WINDOWS\system32\XDva386.sys not found.
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\GamersFirst LIVE!.lnk moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NvMediaCenter deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Pando Media Booster deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\HotkeyP not found.
========== SERVICES/DRIVERS ==========
Service Akamai stopped successfully!
Service Akamai deleted successfully!
Service XDva380 stopped successfully!
Service XDva380 deleted successfully!
Service XDva386 stopped successfully!
Service XDva386 deleted successfully!
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: jaaaroy
->Temp folder emptied: 45360921 bytes
->Temporary Internet Files folder emptied: 65603 bytes
->Java cache emptied: 43391579 bytes
->FireFox cache emptied: 43080029 bytes
->Opera cache emptied: 21070331 bytes
->Flash cache emptied: 3121140 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1339662 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 185328 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 150,00 mb


Restore points cleared and new OTM Restore Point set!

OTM by OldTimer - Version 3.1.18.0 log created on 09022011_082853

Files moved on Reboot...

Registry entries deleted on Reboot...
Nahoru
Avatar uživatele
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 Zář 2010 21:30
Místo/Bydliště: Napajedla
Kontaktovat uživatele:
Kontaktovat uživatele chodnik74

Re: POmalé pc

#5 Příspěvek od chodnik74 »

Vy jste ten CF spouštěl kdy? :evil: nepouštějte ho jak se vám zamane :twisted:

Vložte mi log z RSIT :)
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2
Nahoru
STAR
Návštěvník
Návštěvník
Příspěvky: 65
Registrován: 09 Srp 2007 22:12
Kontaktovat uživatele:
Kontaktovat uživatele STAR

Re: POmalé pc

#6 Příspěvek od STAR »

:o :D

Logfile of random's system information tool 1.09 (written by random/random)
Run by jaaaroy at 2011-09-02 08:40:06
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 56 GB (42%) free of 131 GB
Total RAM: 1023 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:40:13, on 2.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Documents and Settings\jaaaroy\Plocha\Obrázky\RSIT.exe
C:\Program Files\trend micro\jaaaroy.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\skype4com.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 5462 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\jaaaroy\Data aplikací\Mozilla\Firefox\Profiles\5tvjx04u.default

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@gamersfirst.com/LiveLauncher]
"Description"=GamersFirst LIVE! Web Launcher
"Path"=C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Webzen.com/NPGameWebStarter]
"Description"=Webzen Game Controller
"Path"=C:\Program Files\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-03 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-07-03 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-05-25 13895272]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-05-05 1632360]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\BlastShark\hellgate\BlastShark.exe"="C:\Program Files\BlastShark\hellgate\BlastShark.exe:*:Enabled:hellgate"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Steam\steamapps\jarous1337\condition zero\hl.exe"="C:\Program Files\Steam\steamapps\jarous1337\condition zero\hl.exe:*:Enabled:Counter-Strike: Condition Zero"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\CherryDeGames\Dragon Nest\DragonNest.exe"="C:\CherryDeGames\Dragon Nest\DragonNest.exe:*:Enabled:Dragon Nest"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Steam\steamapps\jarous1337\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\jarous1337\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=i420vfw.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
"VIDC.VP40"=vp4vfw.dll
"msacm.voxacm160"=vct3216.acm
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"midi1"=wdmaud.drv
"vidc.VP70"=vp7vfw.dll
"vidc.X264"=x264vfw.dll
"VIDC.FPS1"=frapsvid.dll
"vidc.VP60"=vp6vfw.dll
"vidc.VP61"=vp6vfw.dll
"vidc.VP62"=vp6vfw.dll
"vidc.DIVX"=DivX.dll
"VIDC.DRAW"=DVIDEO.DLL
"midi2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.MSUD"=msulvc05.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-09-02 08:29:02 ----SHD---- C:\RECYCLER
2011-09-02 08:28:53 ----D---- C:\_OTM
2011-09-02 08:26:45 ----A---- C:\ComboFix.txt
2011-09-02 08:10:10 ----D---- C:\rsit
2011-09-01 22:09:00 ----D---- C:\WINDOWS\ShellNew
2011-09-01 22:08:58 ----D---- C:\Program Files\AutoHotkey
2011-08-28 20:12:04 ----D---- C:\Program Files\LastGoldEmpire
2011-08-24 16:56:21 ----A---- C:\WINDOWS\game.ini
2011-08-22 21:48:33 ----D---- C:\AeriaGames
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarterCore.exe
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarter_Kor.dll
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarter_Eng.dll
2011-08-22 19:39:49 ----D---- C:\Program Files\Webzen
2011-08-22 18:22:45 ----D---- C:\gamigo
2011-08-22 17:45:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-08-22 00:24:26 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\RIFT
2011-08-22 00:24:12 ----D---- C:\Program Files\RIFT Game
2011-08-21 22:51:05 ----D---- C:\CherryDeGames
2011-08-21 21:42:06 ----D---- C:\Program Files\GamePark
2011-08-21 21:38:08 ----D---- C:\Program Files\GamePark2
2011-08-21 21:05:23 ----D---- C:\Program Files\Kylotonn Entertainment
2011-08-20 12:28:10 ----D---- C:\WINDOWS\RegisteredPackages
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-20 12:27:35 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-20 12:27:35 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-20 12:27:34 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-08-20 12:27:32 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2011-08-20 01:40:49 ----A---- C:\WINDOWS\system32\npptNT2.sys
2011-08-20 01:40:41 ----D---- C:\Program Files\Common Files\INCA Shared
2011-08-20 01:34:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\GamesCampus
2011-08-19 23:42:00 ----D---- C:\WINDOWS\system32\xlive
2011-08-19 23:41:51 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2011-08-19 23:35:31 ----D---- C:\Program Files\TalismanOnline
2011-08-19 14:49:52 ----D---- C:\Program Files\NovaLogic
2011-08-19 13:06:13 ----D---- C:\Program Files\JoWooD
2011-08-19 11:14:28 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\XnView
2011-08-18 22:46:13 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Media Player Classic
2011-08-15 13:01:39 ----D---- C:\Program Files\Wolfenstein - Enemy Territory
2011-08-15 11:23:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\M-Photo
2011-08-15 11:15:00 ----D---- C:\TiskProRadost
2011-08-15 11:14:35 ----D---- C:\Program Files\TiskProRadost
2011-08-15 11:14:32 ----A---- C:\WINDOWS\system32\TiskProRadost_AlbumMaker_uninstaller.exe
2011-08-08 10:36:18 ----A---- C:\WINDOWS\Thps3.INI
2011-08-08 10:19:29 ----A---- C:\Documents and Settings\jaaaroy\Data aplikací\prfs.ini
2011-08-06 21:42:10 ----A---- C:\memory.txt
2011-08-06 21:06:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2011-08-06 20:13:27 ----D---- C:\Program Files\Activision
2011-08-04 23:40:57 ----D---- C:\Program Files\SprintCars 2007
2011-08-04 22:56:03 ----D---- C:\Program Files\Common Files\DirectX
2011-08-04 22:51:09 ----D---- C:\Program Files\Bethesda Softworks
2011-08-04 22:39:15 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-08-04 22:34:44 ----D---- C:\Program Files\Virgin Interactive
2011-08-04 21:20:20 ----D---- C:\Program Files\Heroes of Newerth
2011-08-04 18:35:29 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Atari
2011-08-04 18:34:24 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-08-04 18:25:21 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Leadertech
2011-08-04 18:22:06 ----D---- C:\Program Files\Atari
2011-08-04 16:51:45 ----D---- C:\WINDOWS\Prefetch
2011-08-04 16:42:55 ----A---- C:\Boot.bak
2011-08-04 16:42:49 ----RASHD---- C:\cmdcons
2011-08-04 16:25:50 ----N---- C:\WINDOWS\system32\smtpapi.dll
2011-08-04 16:25:50 ----N---- C:\WINDOWS\system32\rwnh.dll
2011-08-04 16:25:46 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\credssp.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\azroles.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3svc.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3msm.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3api.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dimsroam.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapsvc.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappprxy.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapphost.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappgnui.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappcfg.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapolqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\dot3ui.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdpash.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcperf.exe
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcex.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\kmsvc.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napstat.exe
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napmontr.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napipsec.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\mssha.dll
2011-08-04 16:25:34 ----N---- C:\WINDOWS\system32\qagent.dll
2011-08-04 16:25:34 ----N---- C:\WINDOWS\system32\onex.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\setupn.exe
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\rasqec.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qutil.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qcliprov.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qagentrt.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\verclsid.exe
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tspkg.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-08-04 16:25:30 ----N---- C:\WINDOWS\system32\wlanapi.dll
2011-08-04 16:25:27 ----N---- C:\WINDOWS\system32\xmllite.dll
2011-08-04 16:25:25 ----D---- C:\WINDOWS\system32\cs
2011-08-04 16:25:25 ----D---- C:\WINDOWS\l2schemas
2011-08-04 16:25:24 ----D---- C:\WINDOWS\system32\bits
2011-08-04 16:17:56 ----D---- C:\WINDOWS\network diagnostic
2011-08-04 16:17:51 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys

======List of files/folders modified in the last 1 month======

2011-09-02 08:40:10 ----D---- C:\Program Files\trend micro
2011-09-02 08:31:25 ----D---- C:\WINDOWS
2011-09-02 08:31:19 ----A---- C:\WINDOWS\system32\bscs.ini
2011-09-02 08:30:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-02 08:29:40 ----SHD---- C:\System Volume Information
2011-09-02 08:29:40 ----D---- C:\WINDOWS\system32\Restore
2011-09-02 08:29:02 ----D---- C:\WINDOWS\system32
2011-09-02 08:28:56 ----D---- C:\WINDOWS\system32\drivers\etc
2011-09-02 08:28:55 ----D---- C:\WINDOWS\temp
2011-09-02 08:26:46 ----D---- C:\Qoobox
2011-09-02 08:24:29 ----A---- C:\WINDOWS\system.ini
2011-09-02 08:23:52 ----D---- C:\WINDOWS\EHome
2011-09-02 08:20:51 ----D---- C:\WINDOWS\system32\drivers
2011-09-02 08:20:51 ----D---- C:\WINDOWS\AppPatch
2011-09-02 08:20:48 ----D---- C:\Program Files\Common Files
2011-09-02 08:15:31 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-02 07:51:24 ----D---- C:\Program Files\Steam
2011-09-02 07:51:24 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\uTorrent
2011-09-02 07:51:23 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\TS3Client
2011-09-02 07:51:21 ----D---- C:\WINDOWS\Minidump
2011-09-02 07:32:30 ----D---- C:\Program Files\Common Files\Akamai
2011-09-01 22:08:58 ----RD---- C:\Program Files
2011-08-30 21:38:42 ----D---- C:\Program Files\Trillian
2011-08-28 23:07:35 ----D---- C:\Program Files\Mozilla Firefox
2011-08-28 15:59:28 ----D---- C:\Program Files\GamersFirst
2011-08-28 15:09:40 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-28 15:09:39 ----SHD---- C:\WINDOWS\Installer
2011-08-28 13:29:20 ----HD---- C:\WINDOWS\inf
2011-08-27 09:44:16 ----D---- C:\WINDOWS\Logs
2011-08-27 09:44:16 ----D---- C:\WINDOWS\Debug
2011-08-24 18:15:13 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-22 20:09:11 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-08-20 12:28:26 ----D---- C:\WINDOWS\system32\DirectX
2011-08-20 12:28:10 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-20 09:55:07 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\vlc
2011-08-20 09:47:37 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\GHISLER
2011-08-20 01:33:27 ----RSD---- C:\WINDOWS\assembly
2011-08-19 23:41:29 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-08-19 23:41:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-08-19 13:49:26 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-08-19 11:24:48 ----RSD---- C:\WINDOWS\Fonts
2011-08-18 19:51:24 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-08-16 22:54:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-08-15 16:13:02 ----D---- C:\Program Files\Opera
2011-08-15 00:25:44 ----D---- C:\WINDOWS\WinSxS
2011-08-13 23:03:53 ----D---- C:\Program Files\Pando Networks
2011-08-07 23:14:34 ----SD---- C:\Documents and Settings\jaaaroy\Data aplikací\Microsoft
2011-08-06 19:01:10 ----D---- C:\Program Files\Common Files\Steam
2011-08-06 18:40:51 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-04 22:40:06 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-04 22:37:50 ----D---- C:\WINDOWS\system32\Setup
2011-08-04 22:37:49 ----D---- C:\WINDOWS\system32\wbem
2011-08-04 19:05:17 ----D---- C:\Program Files\Electronic Arts
2011-08-04 16:49:39 ----D---- C:\Program Files\Messenger
2011-08-04 16:42:55 ----RASH---- C:\boot.ini
2011-08-04 16:38:51 ----D---- C:\WINDOWS\security
2011-08-04 16:32:54 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-04 16:26:13 ----D---- C:\WINDOWS\ServicePackFiles
2011-08-04 16:26:11 ----D---- C:\Program Files\Windows Media Player
2011-08-04 16:26:09 ----D---- C:\WINDOWS\Help
2011-08-04 16:25:50 ----D---- C:\WINDOWS\system32\inetsrv
2011-08-04 16:25:49 ----D---- C:\WINDOWS\ime
2011-08-04 16:25:27 ----D---- C:\WINDOWS\system32\cs-CZ
2011-08-04 16:25:26 ----D---- C:\WINDOWS\system32\usmt
2011-08-04 16:25:26 ----D---- C:\Program Files\Internet Explorer
2011-08-04 16:25:24 ----D---- C:\WINDOWS\peernet
2011-08-04 16:25:24 ----D---- C:\Program Files\Movie Maker
2011-08-04 16:20:55 ----D---- C:\WINDOWS\system32\npp
2011-08-04 16:20:54 ----D---- C:\WINDOWS\msagent
2011-08-04 16:20:51 ----D---- C:\WINDOWS\srchasst
2011-08-04 16:20:50 ----D---- C:\Program Files\NetMeeting
2011-08-04 16:20:48 ----D---- C:\WINDOWS\system32\Com
2011-08-04 16:20:44 ----D---- C:\Program Files\Windows NT
2011-08-04 16:20:43 ----D---- C:\Program Files\Outlook Express
2011-08-04 16:20:38 ----D---- C:\Program Files\Common Files\System
2011-08-04 16:20:09 ----D---- C:\WINDOWS\system32\oobe
2011-08-04 16:20:06 ----D---- C:\WINDOWS\system
2011-08-04 16:16:18 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-04 16:15:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2009-01-07 20744]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0x01000000 papycpu2;papycpu2; C:\WINDOWS\System32\DRIVERS\papycpu2.sys [2003-01-17 1984]
R0x01000000 papyjoy;papyjoy; C:\WINDOWS\System32\DRIVERS\papyjoy.sys [2003-01-17 1856]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-17 31088]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2004-11-29 1337850]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2008-12-07 30088]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-05-25 12753664]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2007-02-06 90880]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2011-01-15 30208]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2009-01-08 31880]
S3 1394hub;1394 Enabled Hub; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 APR;APR; \??\C:\Program Files\GamersFirst\Knight Online\APR.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2008-11-25 33800]
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2008-11-25 27528]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2008-12-07 14088]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2009-01-03 39304]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-04-14 272896]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2004-11-29 55320]
S3 catchme;catchme; \??\C:\DOCUME~1\jaaaroy\LOCALS~1\Temp\catchme.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2009-10-14 32000]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2008-01-21 14856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2009-02-27 850432]
R2 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2004-11-29 254007]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-07-03 153376]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-05-25 154728]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-06-13 75136]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-08-24 214520]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 98407]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-05-03 4756216]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-08-06 411432]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Avatar uživatele
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 Zář 2010 21:30
Místo/Bydliště: Napajedla
Kontaktovat uživatele:
Kontaktovat uživatele chodnik74

Re: POmalé pc

#7 Příspěvek od chodnik74 »

No ten smích vás přejde,až si něco odpálíte ;-)


:arrow: Stiskněte klávesovou kombinaci WIN+R( nebo start-spustit ),čímž se vám otevře okno pro zadání příkazu pro spuštění a zkopírujte a vložte sem následujíci text: Combofix /Uninstall a dejte enter

:arrow: ObrázekT-Cleaner
  • Spustíme,zmáčkneme klávesu A a potvrdíme ENTER(některé antiviry mohou detekovat utilitu jako vir-jedá se o falešný poplach,proto IGNOROVAT nebo dočasně vypnout antivir )
  • po použití T-Cleaner smažte ;-)


:arrow: Obrázek TFC
  • Stáhneme a spustíme program
  • Klikneme na Start a potvrdíme OK
  • Program začne uklízet,poté restartuje pc
  • po použití program smažte


Údržba PC:

1)Čištění dočasných složek + neplatné registry
:arrow: ObrázekCcleaner
  • Stáhneme a nainstalujeme program
  • Spustíme program
  • ČISTIČ
    Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše
    Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
    >Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner
  • Registry
    >Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
    >Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu
    obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
    >opakujte dokud nebude registr bez problémů
  • Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)
2)Defragmentace disku
:arrow: ObrázekDefraggler
  • Stáhneme a nainstalujeme program
  • Spustíme program
  • Vybereme disk ( C:,D:..prostě který používáme)
  • Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
  • Proveďte se všemi používanými disky
  • Provádíme 1x za měsíc
3)Aktualizace programů
:arrow: ObrázekFileHippo.com Update Checker
  • Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
  • Spustíme program
  • Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
  • Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
    >X Updates Detected..to jsou dostupné aktualizace..
    > klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
    > :!: X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní :)
  • Provádíme 1x za 14 dní nebo jednou za měsíc

:arrow: Jak se chová počítač?
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: POmalé pc

#8 Příspěvek od vyosek »

Zdravim a pekny den preji :)

Uzivateli STAR, myslite si, ze vase jednani vuci nasim radcum je ferove a uprimne :???: Uz je u vas jedna negativni poznamka v interni sekci. Pokud nehodlate se prizpusobit nasim pozadavku a slusnemu jednani, budeme to resit jinym zpusobem...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“