Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

POmalé pc

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
STAR
Návštěvník
Návštěvník
Příspěvky: 65
Registrován: 09 srp 2007 22:12
Kontaktovat uživatele:
Kontaktovat uživatele STAR

POmalé pc

#1 Příspěvek od STAR »

Logfile of random's system information tool 1.09 (written by random/random)
Run by jaaaroy at 2011-09-02 08:10:10
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 43 GB (33%) free of 131 GB
Total RAM: 1023 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:10:18, on 2.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Documents and Settings\jaaaroy\Plocha\Obrázky\RSIT.exe
C:\Program Files\trend micro\jaaaroy.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [HotkeyP] C:\DOCUME~1\jaaaroy\LOCALS~1\Temp\Rar$EX04.344\HotkeyP.exe 0
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O4 - Global Startup: GamersFirst LIVE!.lnk = C:\Program Files\GamersFirst\LIVE!\Live.exe
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\skype4com.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 6032 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\jaaaroy\Data aplikací\Mozilla\Firefox\Profiles\5tvjx04u.default

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@gamersfirst.com/LiveLauncher]
"Description"=GamersFirst LIVE! Web Launcher
"Path"=C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Webzen.com/NPGameWebStarter]
"Description"=Webzen Game Controller
"Path"=C:\Program Files\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-03 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-07-03 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-05-25 13895272]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-05-05 1632360]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"=C:\Program Files\Pando Networks\Media Booster\PMB.exe [2011-08-22 3077528]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"HotkeyP"=C:\DOCUME~1\jaaaroy\LOCALS~1\Temp\Rar$EX04.344\HotkeyP.exe [2011-07-30 60928]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe
GamersFirst LIVE!.lnk - C:\Program Files\GamersFirst\LIVE!\Live.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\BlastShark\hellgate\BlastShark.exe"="C:\Program Files\BlastShark\hellgate\BlastShark.exe:*:Enabled:hellgate"
"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Petroglyph\Rise of Immortals\RoIClientR.exe"="C:\Program Files\Petroglyph\Rise of Immortals\RoIClientR.exe:*:Enabled:Rise of Immortals"
"C:\Program Files\Steam\steamapps\jarous1337\condition zero\hl.exe"="C:\Program Files\Steam\steamapps\jarous1337\condition zero\hl.exe:*:Enabled:Counter-Strike: Condition Zero"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\BrawlBusters(EN)CBT\bin\PbLauncher.exe"="C:\Program Files\BrawlBusters(EN)CBT\bin\PbLauncher.exe:*:Enabled:BrawlBusters Launcher"
"C:\Program Files\BrawlBusters(EN)CBT\bin\pbclient.exe"="C:\Program Files\BrawlBusters(EN)CBT\bin\pbclient.exe:*:Enabled:BrawlBusters"
"C:\CherryDeGames\Dragon Nest\DragonNest.exe"="C:\CherryDeGames\Dragon Nest\DragonNest.exe:*:Enabled:Dragon Nest"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Steam\steamapps\jarous1337\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\jarous1337\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=i420vfw.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
"VIDC.VP40"=vp4vfw.dll
"msacm.voxacm160"=vct3216.acm
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"midi1"=wdmaud.drv
"vidc.VP70"=vp7vfw.dll
"vidc.X264"=x264vfw.dll
"VIDC.FPS1"=frapsvid.dll
"vidc.VP60"=vp6vfw.dll
"vidc.VP61"=vp6vfw.dll
"vidc.VP62"=vp6vfw.dll
"vidc.DIVX"=DivX.dll
"VIDC.DRAW"=DVIDEO.DLL
"midi2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.MSUD"=msulvc05.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-09-02 08:10:10 ----D---- C:\rsit
2011-09-01 22:09:00 ----D---- C:\WINDOWS\ShellNew
2011-09-01 22:08:58 ----D---- C:\Program Files\AutoHotkey
2011-08-28 20:12:04 ----D---- C:\Program Files\LastGoldEmpire
2011-08-27 09:38:16 ----A---- C:\Documents and Settings\jaaaroy\Data aplikací\flstudio_9.0.exe
2011-08-24 16:56:21 ----A---- C:\WINDOWS\game.ini
2011-08-22 21:48:33 ----D---- C:\AeriaGames
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarterCore.exe
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarter_Kor.dll
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarter_Eng.dll
2011-08-22 19:39:49 ----D---- C:\Program Files\Webzen
2011-08-22 18:22:45 ----D---- C:\gamigo
2011-08-22 17:45:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-08-22 00:24:26 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\RIFT
2011-08-22 00:24:12 ----D---- C:\Program Files\RIFT Game
2011-08-21 22:51:05 ----D---- C:\CherryDeGames
2011-08-21 21:42:06 ----D---- C:\Program Files\GamePark
2011-08-21 21:38:08 ----D---- C:\Program Files\GamePark2
2011-08-21 21:05:23 ----D---- C:\Program Files\Kylotonn Entertainment
2011-08-20 12:28:10 ----D---- C:\WINDOWS\RegisteredPackages
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-20 12:27:35 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-20 12:27:35 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-20 12:27:34 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-08-20 12:27:32 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2011-08-20 01:40:49 ----A---- C:\WINDOWS\system32\npptNT2.sys
2011-08-20 01:40:41 ----D---- C:\Program Files\Common Files\INCA Shared
2011-08-20 01:34:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\GamesCampus
2011-08-19 23:42:00 ----D---- C:\WINDOWS\system32\xlive
2011-08-19 23:41:51 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2011-08-19 23:35:31 ----D---- C:\Program Files\TalismanOnline
2011-08-19 14:49:52 ----D---- C:\Program Files\NovaLogic
2011-08-19 13:06:13 ----D---- C:\Program Files\JoWooD
2011-08-19 11:14:28 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\XnView
2011-08-18 22:46:13 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Media Player Classic
2011-08-15 13:01:39 ----D---- C:\Program Files\Wolfenstein - Enemy Territory
2011-08-15 11:23:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\M-Photo
2011-08-15 11:15:00 ----D---- C:\TiskProRadost
2011-08-15 11:14:35 ----D---- C:\Program Files\TiskProRadost
2011-08-15 11:14:32 ----A---- C:\WINDOWS\system32\TiskProRadost_AlbumMaker_uninstaller.exe
2011-08-08 10:36:18 ----A---- C:\WINDOWS\Thps3.INI
2011-08-08 10:19:29 ----A---- C:\Documents and Settings\jaaaroy\Data aplikací\prfs.ini
2011-08-06 21:42:10 ----A---- C:\memory.txt
2011-08-06 21:06:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2011-08-06 20:13:27 ----D---- C:\Program Files\Activision
2011-08-04 23:40:57 ----D---- C:\Program Files\SprintCars 2007
2011-08-04 22:56:03 ----D---- C:\Program Files\Common Files\DirectX
2011-08-04 22:51:09 ----D---- C:\Program Files\Bethesda Softworks
2011-08-04 22:39:15 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-08-04 22:34:44 ----D---- C:\Program Files\Virgin Interactive
2011-08-04 21:20:20 ----D---- C:\Program Files\Heroes of Newerth
2011-08-04 18:35:29 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Atari
2011-08-04 18:34:24 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-08-04 18:25:21 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Leadertech
2011-08-04 18:22:06 ----D---- C:\Program Files\Atari
2011-08-04 17:28:26 ----SHD---- C:\RECYCLER
2011-08-04 16:51:45 ----D---- C:\WINDOWS\Prefetch
2011-08-04 16:51:44 ----A---- C:\ComboFix.txt
2011-08-04 16:42:55 ----A---- C:\Boot.bak
2011-08-04 16:42:49 ----RASHD---- C:\cmdcons
2011-08-04 16:25:50 ----N---- C:\WINDOWS\system32\smtpapi.dll
2011-08-04 16:25:50 ----N---- C:\WINDOWS\system32\rwnh.dll
2011-08-04 16:25:46 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\credssp.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\azroles.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3svc.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3msm.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3api.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dimsroam.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapsvc.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappprxy.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapphost.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappgnui.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappcfg.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapolqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\dot3ui.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdpash.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcperf.exe
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcex.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\kmsvc.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napstat.exe
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napmontr.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napipsec.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\mssha.dll
2011-08-04 16:25:34 ----N---- C:\WINDOWS\system32\qagent.dll
2011-08-04 16:25:34 ----N---- C:\WINDOWS\system32\onex.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\setupn.exe
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\rasqec.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qutil.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qcliprov.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qagentrt.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\verclsid.exe
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tspkg.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-08-04 16:25:30 ----N---- C:\WINDOWS\system32\wlanapi.dll
2011-08-04 16:25:27 ----N---- C:\WINDOWS\system32\xmllite.dll
2011-08-04 16:25:25 ----D---- C:\WINDOWS\system32\cs
2011-08-04 16:25:25 ----D---- C:\WINDOWS\l2schemas
2011-08-04 16:25:24 ----D---- C:\WINDOWS\system32\bits
2011-08-04 16:17:56 ----D---- C:\WINDOWS\network diagnostic
2011-08-04 16:17:51 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys
2011-08-04 16:16:20 ----A---- C:\WINDOWS\005353_.tmp

======List of files/folders modified in the last 1 month======

2011-09-02 08:10:16 ----D---- C:\Program Files\trend micro
2011-09-02 07:51:24 ----D---- C:\Program Files\Steam
2011-09-02 07:51:24 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\uTorrent
2011-09-02 07:51:21 ----D---- C:\WINDOWS\temp
2011-09-02 07:51:21 ----D---- C:\WINDOWS\Minidump
2011-09-02 07:51:21 ----D---- C:\WINDOWS
2011-09-02 07:32:30 ----D---- C:\Program Files\Common Files\Akamai
2011-09-02 07:32:29 ----A---- C:\WINDOWS\system32\bscs.ini
2011-09-02 00:10:38 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-09-01 22:08:58 ----RD---- C:\Program Files
2011-08-30 21:38:42 ----D---- C:\Program Files\Trillian
2011-08-28 23:07:35 ----D---- C:\Program Files\Mozilla Firefox
2011-08-28 22:56:36 ----D---- C:\WINDOWS\system32\drivers
2011-08-28 15:59:28 ----D---- C:\Program Files\GamersFirst
2011-08-28 15:09:40 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-28 15:09:39 ----SHD---- C:\WINDOWS\Installer
2011-08-28 13:29:20 ----HD---- C:\WINDOWS\inf
2011-08-28 13:29:15 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-27 09:44:32 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\TS3Client
2011-08-27 09:44:16 ----D---- C:\WINDOWS\Logs
2011-08-27 09:44:16 ----D---- C:\WINDOWS\Debug
2011-08-24 18:15:17 ----D---- C:\WINDOWS\system32
2011-08-24 18:15:13 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-22 20:09:11 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-08-20 12:28:26 ----D---- C:\WINDOWS\system32\DirectX
2011-08-20 12:28:10 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-20 09:55:07 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\vlc
2011-08-20 09:47:37 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\GHISLER
2011-08-20 09:44:53 ----D---- C:\Qoobox
2011-08-20 01:40:41 ----D---- C:\Program Files\Common Files
2011-08-20 01:33:27 ----RSD---- C:\WINDOWS\assembly
2011-08-19 23:41:29 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-08-19 23:41:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-08-19 13:49:26 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-08-19 11:24:48 ----RSD---- C:\WINDOWS\Fonts
2011-08-18 19:51:24 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-08-16 22:54:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-08-15 16:13:02 ----D---- C:\Program Files\Opera
2011-08-15 00:25:59 ----HD---- C:\WINDOWS\msdownld.tmp
2011-08-15 00:25:44 ----D---- C:\WINDOWS\WinSxS
2011-08-13 23:03:53 ----D---- C:\Program Files\Pando Networks
2011-08-07 23:14:34 ----SD---- C:\Documents and Settings\jaaaroy\Data aplikací\Microsoft
2011-08-06 19:01:10 ----D---- C:\Program Files\Common Files\Steam
2011-08-06 18:40:51 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-04 22:40:06 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-04 22:37:50 ----D---- C:\WINDOWS\system32\Setup
2011-08-04 22:37:50 ----D---- C:\WINDOWS\AppPatch
2011-08-04 22:37:49 ----D---- C:\WINDOWS\system32\wbem
2011-08-04 19:05:17 ----D---- C:\Program Files\Electronic Arts
2011-08-04 16:50:14 ----A---- C:\WINDOWS\system.ini
2011-08-04 16:50:06 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-04 16:49:39 ----D---- C:\Program Files\Messenger
2011-08-04 16:42:55 ----RASH---- C:\boot.ini
2011-08-04 16:38:51 ----D---- C:\WINDOWS\security
2011-08-04 16:32:54 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-04 16:26:13 ----D---- C:\WINDOWS\ServicePackFiles
2011-08-04 16:26:11 ----D---- C:\Program Files\Windows Media Player
2011-08-04 16:26:09 ----D---- C:\WINDOWS\Help
2011-08-04 16:25:51 ----D---- C:\WINDOWS\EHome
2011-08-04 16:25:50 ----D---- C:\WINDOWS\system32\inetsrv
2011-08-04 16:25:49 ----D---- C:\WINDOWS\ime
2011-08-04 16:25:27 ----D---- C:\WINDOWS\system32\cs-CZ
2011-08-04 16:25:26 ----D---- C:\WINDOWS\system32\usmt
2011-08-04 16:25:26 ----D---- C:\Program Files\Internet Explorer
2011-08-04 16:25:24 ----D---- C:\WINDOWS\peernet
2011-08-04 16:25:24 ----D---- C:\Program Files\Movie Maker
2011-08-04 16:20:56 ----D---- C:\WINDOWS\system32\Restore
2011-08-04 16:20:55 ----D---- C:\WINDOWS\system32\npp
2011-08-04 16:20:54 ----D---- C:\WINDOWS\msagent
2011-08-04 16:20:51 ----D---- C:\WINDOWS\srchasst
2011-08-04 16:20:50 ----D---- C:\Program Files\NetMeeting
2011-08-04 16:20:48 ----D---- C:\WINDOWS\system32\Com
2011-08-04 16:20:44 ----D---- C:\Program Files\Windows NT
2011-08-04 16:20:43 ----D---- C:\Program Files\Outlook Express
2011-08-04 16:20:38 ----D---- C:\Program Files\Common Files\System
2011-08-04 16:20:09 ----D---- C:\WINDOWS\system32\oobe
2011-08-04 16:20:06 ----D---- C:\WINDOWS\system
2011-08-04 16:16:18 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-04 16:15:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2009-01-07 20744]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0x01000000 papycpu2;papycpu2; C:\WINDOWS\System32\DRIVERS\papycpu2.sys [2003-01-17 1984]
R0x01000000 papyjoy;papyjoy; C:\WINDOWS\System32\DRIVERS\papyjoy.sys [2003-01-17 1856]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-17 31088]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2004-11-29 1337850]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2008-12-07 30088]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-05-25 12753664]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2007-02-06 90880]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2011-01-15 30208]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2009-01-08 31880]
S3 1394hub;1394 Enabled Hub; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 APR;APR; \??\C:\Program Files\GamersFirst\Knight Online\APR.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2008-11-25 33800]
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2008-11-25 27528]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2008-12-07 14088]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2009-01-03 39304]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-04-14 272896]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2004-11-29 55320]
S3 catchme;catchme; \??\C:\DOCUME~1\jaaaroy\LOCALS~1\Temp\catchme.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2009-10-14 32000]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2008-01-21 14856]
S3 XDva380;XDva380; \??\C:\WINDOWS\system32\XDva380.sys []
S3 XDva386;XDva386; \??\C:\WINDOWS\system32\XDva386.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2009-02-27 850432]
R2 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2004-11-29 254007]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-07-03 153376]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-05-25 154728]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-06-13 75136]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-08-24 214520]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 98407]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-05-03 4756216]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-08-06 411432]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 zář 2010 21:30
Bydliště: Napajedla
Kontaktovat uživatele:
Kontaktovat uživatele chodnik74

Re: POmalé pc

#2 Příspěvek od chodnik74 »

Dobrý den :welcome:

:!: Vy jste používal Combofix?Vložte mi sem jeho log:C:\ComboFix.txt

:arrow: Nebezpeči Combofixu
  • Program je primárně určený pro rádce,takže svévolným použitím ztrácíte nárok na pomoc
  • Maže stopy po veškeré havěti,takže když ho použijete sami,tak v RSITU nic nejde vidět
  • Výsledný log je potřeba doluštit a dočistit,protože Combofix neumí mazat vše
  • Combofix může mít chybu,zboří vám systém a pokud nevíte,kam ukládá své zálohy a jak je obnovit,tak vás čeká reinstall systémuu
  • Combofix nekontroluje důležité knihovny(například hall.dll)



:arrow: Stáhneme si na Plochu program OTMObrázek
  • Spustíme soubor OTM.exe (pokud máte Windows Vista nebo Windows 7,tak na soubor klikněte pravým tlačítkem myši a dejte ,,Spustit jako správce,,)
  • Spustí se nám program OTM a do levého okna ,,Paste Instructions for Items to be Moved,, vložíme následující skript a stiskneme tlačítko MoveIt

    Kód: Vybrat vše

    :files
C:\WINDOWS\system32\XDva380.sys
C:\WINDOWS\system32\XDva386.sys
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\GamersFirst LIVE!.lnk

:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvMediaCenter"=-
"KernelFaultCheck"=-
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"=-
"MSMSGS"=-
"HotkeyP"=-

:services
Akamai
XDva380
XDva386

:commands
[resethosts]
[emptytemp]
[clearallrestorepoints]
[emptyflash]
  • Po restartu pc se vám objeví log z OTM,ten mi sem prosím vložte..
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2
Nahoru
STAR
Návštěvník
Návštěvník
Příspěvky: 65
Registrován: 09 srp 2007 22:12
Kontaktovat uživatele:
Kontaktovat uživatele STAR

Re: POmalé pc

#3 Příspěvek od STAR »

ComboFix 11-09-01.03 - jaaaroy 02.09.2011 8:15.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1023.644 [GMT 2:00]
Spuštěný z: c:\documents and settings\jaaaroy\Plocha\Obrßzky\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\jaaaroy\Data aplikací\flstudio_9.0.exe
c:\windows\ehome\medctrro.exe
c:\windows\system32\nvdispco3220150.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-02 do 2011-09-02 )))))))))))))))))))))))))))))))
.
.
2011-09-02 06:10 . 2011-09-02 06:10 -------- d-----w- C:\rsit
2011-09-01 20:09 . 2011-09-01 20:09 -------- d-----w- c:\windows\ShellNew
2011-09-01 20:08 . 2011-09-01 20:09 -------- d-----w- c:\program files\AutoHotkey
2011-08-28 18:12 . 2011-08-28 20:56 -------- d-----w- c:\program files\LastGoldEmpire
2011-08-28 14:07 . 2011-08-28 14:07 -------- d-----w- c:\documents and settings\jaaaroy\Local Settings\Data aplikací\GamersFirst LIVE!
2011-08-22 19:48 . 2011-08-22 19:48 -------- d-----w- C:\AeriaGames
2011-08-22 18:09 . 2010-11-04 16:49 53616 ----a-w- c:\windows\system32\CMStarter_Eng.dll
2011-08-22 18:09 . 2010-11-04 16:49 53616 ----a-w- c:\windows\system32\CMStarter_Kor.dll
2011-08-22 18:09 . 2010-11-04 16:49 364912 ----a-w- c:\windows\system32\CMStarterCore.exe
2011-08-22 17:39 . 2011-08-22 19:02 -------- d-----w- c:\program files\Webzen
2011-08-22 16:22 . 2011-08-22 16:22 -------- d-----w- C:\gamigo
2011-08-22 15:45 . 2011-09-02 06:24 -------- d-----w- c:\documents and settings\jaaaroy\Local Settings\Data aplikací\PMB Files
2011-08-22 15:45 . 2011-08-30 10:30 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PMB Files
2011-08-21 22:24 . 2011-08-22 04:22 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\RIFT
2011-08-21 22:24 . 2011-08-28 13:09 -------- d-----w- c:\program files\RIFT Game
2011-08-21 20:51 . 2011-08-21 20:51 -------- d-----w- C:\CherryDeGames
2011-08-21 19:42 . 2011-08-21 19:42 -------- d-----w- c:\program files\GamePark
2011-08-21 19:05 . 2011-08-21 19:05 -------- d-----w- c:\program files\Kylotonn Entertainment
2011-08-20 10:09 . 2011-08-20 10:09 -------- d-----w- c:\documents and settings\jaaaroy\Games
2011-08-19 23:41 . 2011-05-03 16:08 4756216 ----a-w- c:\windows\system32\GameMon.des
2011-08-19 23:40 . 2005-01-01 09:43 4682 ----a-w- c:\windows\system32\npptNT2.sys
2011-08-19 23:40 . 2003-07-17 18:17 5174 ----a-w- c:\windows\system32\nppt9x.vxd
2011-08-19 23:40 . 2011-08-19 23:40 -------- d-----w- c:\program files\Common Files\INCA Shared
2011-08-19 23:34 . 2011-08-19 23:34 -------- d-----w- c:\documents and settings\All Users\Data aplikací\GamesCampus
2011-08-19 21:42 . 2011-08-19 21:42 -------- d-----w- c:\windows\system32\xlive
2011-08-19 21:41 . 2011-08-20 00:13 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
2011-08-19 21:35 . 2011-08-21 19:12 -------- d-----w- c:\program files\TalismanOnline
2011-08-19 12:49 . 2011-08-19 12:49 -------- d-----w- c:\program files\NovaLogic
2011-08-19 11:06 . 2011-08-19 11:06 -------- d-----w- c:\program files\JoWooD
2011-08-19 09:14 . 2011-08-20 07:56 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\XnView
2011-08-18 20:50 . 2011-08-19 07:37 -------- d-----w- c:\documents and settings\jaaaroy\Local Settings\Data aplikací\WMTools Downloaded Files
2011-08-18 20:46 . 2011-08-27 07:44 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\Media Player Classic
2011-08-15 11:58 . 2011-08-24 16:15 214520 ----a-w- c:\windows\system32\PnkBstrB.xtr
2011-08-15 11:01 . 2011-08-16 22:49 -------- d-----w- c:\program files\Wolfenstein - Enemy Territory
2011-08-15 09:23 . 2011-08-15 09:23 -------- d-----w- c:\documents and settings\All Users\Data aplikací\M-Photo
2011-08-15 09:15 . 2011-08-15 09:15 -------- d-----w- C:\TiskProRadost
2011-08-15 09:14 . 2011-08-15 20:26 -------- d-----w- c:\program files\TiskProRadost
2011-08-15 09:14 . 2011-08-15 09:14 22193754 ----a-w- c:\windows\system32\TiskProRadost_AlbumMaker_uninstaller.exe
2011-08-06 19:06 . 2011-08-06 19:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Trymedia
2011-08-06 18:13 . 2011-08-24 14:51 -------- d-----w- c:\program files\Activision
2011-08-05 17:41 . 2011-08-30 10:29 -------- d-----w- c:\documents and settings\jaaaroy\riotsGamesLogs
2011-08-04 21:40 . 2011-08-06 16:52 -------- d-----w- c:\program files\SprintCars 2007
2011-08-04 20:56 . 2011-08-04 20:56 -------- d-----w- c:\program files\Common Files\DirectX
2011-08-04 20:51 . 2011-08-04 20:51 -------- d-----w- c:\program files\Bethesda Softworks
2011-08-04 20:39 . 2008-04-14 06:52 221184 ----a-w- c:\windows\system32\wmpns.dll
2011-08-04 20:34 . 2011-08-04 20:34 -------- d-----w- c:\program files\Virgin Interactive
2011-08-04 19:20 . 2011-08-19 12:09 -------- d-----w- c:\program files\Heroes of Newerth
2011-08-04 16:35 . 2011-08-04 16:35 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\Atari
2011-08-04 16:34 . 2011-08-19 11:08 108144 ----a-w- c:\windows\system32\CmdLineExt.dll
2011-08-04 16:25 . 2011-08-04 16:25 -------- d-----w- c:\documents and settings\jaaaroy\Data aplikací\Leadertech
2011-08-04 16:22 . 2011-08-06 19:02 -------- d-----w- c:\program files\Atari
2011-08-04 16:20 . 2011-08-04 16:20 282756 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2011-08-04 16:20 . 2011-08-04 16:20 163972 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2011-08-04 16:20 . 2003-02-27 14:12 696320 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2011-08-04 16:20 . 2002-12-05 12:10 155648 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2011-08-04 16:20 . 2002-12-02 13:22 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2011-08-04 16:20 . 2002-12-02 11:33 57344 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2011-08-04 16:20 . 2002-12-02 11:33 237568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2011-08-04 14:25 . 2008-04-14 06:49 102912 -c----w- c:\windows\system32\dllcache\dpcdll.dll
2011-08-04 14:21 . 2008-04-14 06:51 33792 -c----w- c:\windows\system32\dllcache\custsat.dll
2011-08-04 14:17 . 2008-04-13 22:10 10240 ------w- c:\windows\system32\drivers\sffp_mmc.sys
2011-08-04 14:16 . 2006-12-28 22:31 19569 ----a-w- c:\windows\005353_.tmp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-24 16:15 . 2011-06-13 06:23 137464 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-08-24 16:15 . 2011-06-13 06:23 214520 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-08-24 16:14 . 2011-06-13 06:23 214520 ----a-w- c:\windows\system32\PnkBstrB.ex0
2011-07-11 02:54 . 2011-07-11 02:54 86528 ----a-w- c:\windows\bnetunin.exe
2011-07-03 15:36 . 2011-07-03 15:36 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-07-03 15:36 . 2011-07-03 15:36 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-06-21 18:26 . 2011-06-09 20:47 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-21 01:46 . 2011-06-21 01:47 258352 ----a-w- c:\windows\system32\unicows.dll
2011-06-16 08:00 . 2011-06-23 10:18 73216 ----a-w- c:\windows\system32\ff_vfw.dll
2011-06-13 06:23 . 2011-06-13 06:23 138056 ----a-w- c:\documents and settings\jaaaroy\Data aplikací\PnkBstrK.sys
2011-06-13 06:23 . 2011-06-13 06:23 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-06-09 20:46 . 2011-06-09 20:46 315392 ----a-w- c:\windows\HideWin.exe
2011-08-28 21:07 . 2011-06-21 18:24 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Pando Media Booster"="c:\program files\Pando Networks\Media Booster\PMB.exe" [2011-08-22 3077528]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-04-10 16126464]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-05-25 13895272]
"NvMediaCenter"="NvMCTray.dll" [2011-05-25 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-05-04 1632360]
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
GamePark klient 2.lnk - c:\program files\GamePark2\gpcl.exe [2011-8-21 409088]
GamersFirst LIVE!.lnk - c:\program files\GamersFirst\LIVE!\Live.exe [2010-7-7 2805104]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\BlastShark\\hellgate\\BlastShark.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleilCS.exe"=
"c:\\WINDOWS\\system32\\dplaysvr.exe"=
"c:\\Program Files\\Steam\\steamapps\\jarous1337\\condition zero\\hl.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\CherryDeGames\\Dragon Nest\\DragonNest.exe"=
"c:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Program Files\\Steam\\steamapps\\jarous1337\\counter-strike\\hl.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"58852:TCP"= 58852:TCP:Pando Media Booster
"58852:UDP"= 58852:UDP:Pando Media Booster
"6881:TCP"= 6881:TCP:Blizzard Downloader: 6881
"58143:TCP"= 58143:TCP:Pando Media Booster
"58143:UDP"= 58143:UDP:Pando Media Booster
"58252:TCP"= 58252:TCP:Pando Media Booster
"58252:UDP"= 58252:UDP:Pando Media Booster
"3179:TCP"= 3179:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [7.1.2009 23:39 20744]
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [25.10.2001 14:00 14336]
R2 BsMobileCS;BsMobileCS;c:\program files\IVT Corporation\BlueSoleil\BsMobileCS.exe [27.2.2009 16:40 143467]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [9.6.2011 22:52 2214504]
R3 btnetBUs;Bluetooth PAN Bus Service;c:\windows\system32\drivers\btnetBus.sys [7.12.2008 12:44 30088]
R3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [2.7.2008 14:58 26248]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 1394hub;1394 Enabled Hub;c:\windows\system32\svchost.exe -k netsvcs [25.10.2001 14:00 14336]
S3 APR;APR;\??\c:\program files\GamersFirst\Knight Online\APR.sys --> c:\program files\GamersFirst\Knight Online\APR.sys [?]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S3 XDva380;XDva380;\??\c:\windows\system32\XDva380.sys --> c:\windows\system32\XDva380.sys [?]
S3 XDva386;XDva386;\??\c:\windows\system32\XDva386.sys --> c:\windows\system32\XDva386.sys [?]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
.
------- Doplňkový sken -------
.
IE: Send by Bluetooth - c:\program files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
IE: Send To &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send via &Message... - c:\program files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
TCP: DhcpNameServer = 10.0.0.138 10.0.0.138
FF - ProfilePath - c:\documents and settings\jaaaroy\Data aplikací\Mozilla\Firefox\Profiles\5tvjx04u.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-02 08:24
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\ćHőwć*]
"DisplayName"="???\17?\11\09"
"DeviceDesc"="???\17?\11\09"
"ProviderName"="???\11???\11??"
"MFG"="???????"
"ReinstallString"=".10.1000.7"
"DeviceInstanceIds"=multi:"d:\\ati\\atidrv\\sbdrv\\smbus\\smbusati.inf\00"
.
Celkový čas: 2011-09-02 08:26:44
ComboFix-quarantined-files.txt 2011-09-02 06:26
ComboFix2.txt 2011-08-04 14:51
.
Před spuštěním: Volných bajtů: 45 483 655 168
Po spuštění: Volných bajtů: 45 474 766 848
.
- - End Of File - - 6AF7C4A68BD6429F6FE8D1610D7A0B5E
Nahoru
STAR
Návštěvník
Návštěvník
Příspěvky: 65
Registrován: 09 srp 2007 22:12
Kontaktovat uživatele:
Kontaktovat uživatele STAR

Re: POmalé pc

#4 Příspěvek od STAR »

All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\system32\XDva380.sys not found.
File/Folder C:\WINDOWS\system32\XDva386.sys not found.
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\GamersFirst LIVE!.lnk moved successfully.
========== REGISTRY ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\NvMediaCenter deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Pando Media Booster deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\MSMSGS not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\HotkeyP not found.
========== SERVICES/DRIVERS ==========
Service Akamai stopped successfully!
Service Akamai deleted successfully!
Service XDva380 stopped successfully!
Service XDva380 deleted successfully!
Service XDva386 stopped successfully!
Service XDva386 deleted successfully!
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: jaaaroy
->Temp folder emptied: 45360921 bytes
->Temporary Internet Files folder emptied: 65603 bytes
->Java cache emptied: 43391579 bytes
->FireFox cache emptied: 43080029 bytes
->Opera cache emptied: 21070331 bytes
->Flash cache emptied: 3121140 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 1339662 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 185328 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 150,00 mb


Restore points cleared and new OTM Restore Point set!

OTM by OldTimer - Version 3.1.18.0 log created on 09022011_082853

Files moved on Reboot...

Registry entries deleted on Reboot...
Nahoru
Uživatelský avatar
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 zář 2010 21:30
Bydliště: Napajedla
Kontaktovat uživatele:
Kontaktovat uživatele chodnik74

Re: POmalé pc

#5 Příspěvek od chodnik74 »

Vy jste ten CF spouštěl kdy? :evil: nepouštějte ho jak se vám zamane :twisted:

Vložte mi log z RSIT :)
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2
Nahoru
STAR
Návštěvník
Návštěvník
Příspěvky: 65
Registrován: 09 srp 2007 22:12
Kontaktovat uživatele:
Kontaktovat uživatele STAR

Re: POmalé pc

#6 Příspěvek od STAR »

:o :D

Logfile of random's system information tool 1.09 (written by random/random)
Run by jaaaroy at 2011-09-02 08:40:06
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 56 GB (42%) free of 131 GB
Total RAM: 1023 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:40:13, on 2.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Documents and Settings\jaaaroy\Plocha\Obrázky\RSIT.exe
C:\Program Files\trend micro\jaaaroy.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\skype4com.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 5462 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\jaaaroy\Data aplikací\Mozilla\Firefox\Profiles\5tvjx04u.default

"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@gamersfirst.com/LiveLauncher]
"Description"=GamersFirst LIVE! Web Launcher
"Path"=C:\Program Files\GamersFirst\LIVE!\nplivelauncher.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.7]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Webzen.com/NPGameWebStarter]
"Description"=Webzen Game Controller
"Path"=C:\Program Files\WEBZEN\WebzenGameStarter\NPGameWebStarter.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-07-03 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-07-03 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2007-04-10 16126464]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-05-25 13895272]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2011-05-05 1632360]
"VirtualCloneDrive"=C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [2011-03-07 89456]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\BlastShark\hellgate\BlastShark.exe"="C:\Program Files\BlastShark\hellgate\BlastShark.exe:*:Enabled:hellgate"
"C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe"="C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe:*:Enabled:BlueSoleilCS"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\Program Files\Steam\steamapps\jarous1337\condition zero\hl.exe"="C:\Program Files\Steam\steamapps\jarous1337\condition zero\hl.exe:*:Enabled:Counter-Strike: Condition Zero"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\CherryDeGames\Dragon Nest\DragonNest.exe"="C:\CherryDeGames\Dragon Nest\DragonNest.exe:*:Enabled:Dragon Nest"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Program Files\Steam\steamapps\jarous1337\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\jarous1337\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=i420vfw.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"VIDC.WMV3"=wmv9vcm.dll
"VIDC.VP40"=vp4vfw.dll
"msacm.voxacm160"=vct3216.acm
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"midi1"=wdmaud.drv
"vidc.VP70"=vp7vfw.dll
"vidc.X264"=x264vfw.dll
"VIDC.FPS1"=frapsvid.dll
"vidc.VP60"=vp6vfw.dll
"vidc.VP61"=vp6vfw.dll
"vidc.VP62"=vp6vfw.dll
"vidc.DIVX"=DivX.dll
"VIDC.DRAW"=DVIDEO.DLL
"midi2"=wdmaud.drv
"aux1"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.MSUD"=msulvc05.dll
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-09-02 08:29:02 ----SHD---- C:\RECYCLER
2011-09-02 08:28:53 ----D---- C:\_OTM
2011-09-02 08:26:45 ----A---- C:\ComboFix.txt
2011-09-02 08:10:10 ----D---- C:\rsit
2011-09-01 22:09:00 ----D---- C:\WINDOWS\ShellNew
2011-09-01 22:08:58 ----D---- C:\Program Files\AutoHotkey
2011-08-28 20:12:04 ----D---- C:\Program Files\LastGoldEmpire
2011-08-24 16:56:21 ----A---- C:\WINDOWS\game.ini
2011-08-22 21:48:33 ----D---- C:\AeriaGames
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarterCore.exe
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarter_Kor.dll
2011-08-22 20:09:11 ----A---- C:\WINDOWS\system32\CMStarter_Eng.dll
2011-08-22 19:39:49 ----D---- C:\Program Files\Webzen
2011-08-22 18:22:45 ----D---- C:\gamigo
2011-08-22 17:45:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-08-22 00:24:26 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\RIFT
2011-08-22 00:24:12 ----D---- C:\Program Files\RIFT Game
2011-08-21 22:51:05 ----D---- C:\CherryDeGames
2011-08-21 21:42:06 ----D---- C:\Program Files\GamePark
2011-08-21 21:38:08 ----D---- C:\Program Files\GamePark2
2011-08-21 21:05:23 ----D---- C:\Program Files\Kylotonn Entertainment
2011-08-20 12:28:10 ----D---- C:\WINDOWS\RegisteredPackages
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-20 12:27:36 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-20 12:27:35 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-20 12:27:35 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-20 12:27:34 ----A---- C:\WINDOWS\system32\drivers\mstee.sys
2011-08-20 12:27:32 ----A---- C:\WINDOWS\system32\dxdllreg.exe
2011-08-20 01:40:49 ----A---- C:\WINDOWS\system32\npptNT2.sys
2011-08-20 01:40:41 ----D---- C:\Program Files\Common Files\INCA Shared
2011-08-20 01:34:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\GamesCampus
2011-08-19 23:42:00 ----D---- C:\WINDOWS\system32\xlive
2011-08-19 23:41:51 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2011-08-19 23:35:31 ----D---- C:\Program Files\TalismanOnline
2011-08-19 14:49:52 ----D---- C:\Program Files\NovaLogic
2011-08-19 13:06:13 ----D---- C:\Program Files\JoWooD
2011-08-19 11:14:28 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\XnView
2011-08-18 22:46:13 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Media Player Classic
2011-08-15 13:01:39 ----D---- C:\Program Files\Wolfenstein - Enemy Territory
2011-08-15 11:23:55 ----D---- C:\Documents and Settings\All Users\Data aplikací\M-Photo
2011-08-15 11:15:00 ----D---- C:\TiskProRadost
2011-08-15 11:14:35 ----D---- C:\Program Files\TiskProRadost
2011-08-15 11:14:32 ----A---- C:\WINDOWS\system32\TiskProRadost_AlbumMaker_uninstaller.exe
2011-08-08 10:36:18 ----A---- C:\WINDOWS\Thps3.INI
2011-08-08 10:19:29 ----A---- C:\Documents and Settings\jaaaroy\Data aplikací\prfs.ini
2011-08-06 21:42:10 ----A---- C:\memory.txt
2011-08-06 21:06:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Trymedia
2011-08-06 20:13:27 ----D---- C:\Program Files\Activision
2011-08-04 23:40:57 ----D---- C:\Program Files\SprintCars 2007
2011-08-04 22:56:03 ----D---- C:\Program Files\Common Files\DirectX
2011-08-04 22:51:09 ----D---- C:\Program Files\Bethesda Softworks
2011-08-04 22:39:15 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-08-04 22:34:44 ----D---- C:\Program Files\Virgin Interactive
2011-08-04 21:20:20 ----D---- C:\Program Files\Heroes of Newerth
2011-08-04 18:35:29 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Atari
2011-08-04 18:34:24 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-08-04 18:25:21 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\Leadertech
2011-08-04 18:22:06 ----D---- C:\Program Files\Atari
2011-08-04 16:51:45 ----D---- C:\WINDOWS\Prefetch
2011-08-04 16:42:55 ----A---- C:\Boot.bak
2011-08-04 16:42:49 ----RASHD---- C:\cmdcons
2011-08-04 16:25:50 ----N---- C:\WINDOWS\system32\smtpapi.dll
2011-08-04 16:25:50 ----N---- C:\WINDOWS\system32\rwnh.dll
2011-08-04 16:25:46 ----N---- C:\WINDOWS\system32\aaclient.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\credssp.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2011-08-04 16:25:42 ----N---- C:\WINDOWS\system32\azroles.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3svc.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3msm.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dot3api.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dimsroam.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2011-08-04 16:25:41 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapsvc.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappprxy.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapphost.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappgnui.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eappcfg.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\eapolqec.dll
2011-08-04 16:25:40 ----N---- C:\WINDOWS\system32\dot3ui.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdpash.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2011-08-04 16:25:37 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcperf.exe
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\mmcex.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2011-08-04 16:25:36 ----N---- C:\WINDOWS\system32\kmsvc.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napstat.exe
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napmontr.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\napipsec.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2011-08-04 16:25:35 ----N---- C:\WINDOWS\system32\mssha.dll
2011-08-04 16:25:34 ----N---- C:\WINDOWS\system32\qagent.dll
2011-08-04 16:25:34 ----N---- C:\WINDOWS\system32\onex.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\setupn.exe
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\rasqec.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qutil.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qcliprov.dll
2011-08-04 16:25:33 ----N---- C:\WINDOWS\system32\qagentrt.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\xpsp3res.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\verclsid.exe
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tzchange.exe
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tspkg.dll
2011-08-04 16:25:31 ----N---- C:\WINDOWS\system32\tsgqec.dll
2011-08-04 16:25:30 ----N---- C:\WINDOWS\system32\wlanapi.dll
2011-08-04 16:25:27 ----N---- C:\WINDOWS\system32\xmllite.dll
2011-08-04 16:25:25 ----D---- C:\WINDOWS\system32\cs
2011-08-04 16:25:25 ----D---- C:\WINDOWS\l2schemas
2011-08-04 16:25:24 ----D---- C:\WINDOWS\system32\bits
2011-08-04 16:17:56 ----D---- C:\WINDOWS\network diagnostic
2011-08-04 16:17:51 ----N---- C:\WINDOWS\system32\drivers\sffp_mmc.sys

======List of files/folders modified in the last 1 month======

2011-09-02 08:40:10 ----D---- C:\Program Files\trend micro
2011-09-02 08:31:25 ----D---- C:\WINDOWS
2011-09-02 08:31:19 ----A---- C:\WINDOWS\system32\bscs.ini
2011-09-02 08:30:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-02 08:29:40 ----SHD---- C:\System Volume Information
2011-09-02 08:29:40 ----D---- C:\WINDOWS\system32\Restore
2011-09-02 08:29:02 ----D---- C:\WINDOWS\system32
2011-09-02 08:28:56 ----D---- C:\WINDOWS\system32\drivers\etc
2011-09-02 08:28:55 ----D---- C:\WINDOWS\temp
2011-09-02 08:26:46 ----D---- C:\Qoobox
2011-09-02 08:24:29 ----A---- C:\WINDOWS\system.ini
2011-09-02 08:23:52 ----D---- C:\WINDOWS\EHome
2011-09-02 08:20:51 ----D---- C:\WINDOWS\system32\drivers
2011-09-02 08:20:51 ----D---- C:\WINDOWS\AppPatch
2011-09-02 08:20:48 ----D---- C:\Program Files\Common Files
2011-09-02 08:15:31 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-02 07:51:24 ----D---- C:\Program Files\Steam
2011-09-02 07:51:24 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\uTorrent
2011-09-02 07:51:23 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\TS3Client
2011-09-02 07:51:21 ----D---- C:\WINDOWS\Minidump
2011-09-02 07:32:30 ----D---- C:\Program Files\Common Files\Akamai
2011-09-01 22:08:58 ----RD---- C:\Program Files
2011-08-30 21:38:42 ----D---- C:\Program Files\Trillian
2011-08-28 23:07:35 ----D---- C:\Program Files\Mozilla Firefox
2011-08-28 15:59:28 ----D---- C:\Program Files\GamersFirst
2011-08-28 15:09:40 ----HD---- C:\Program Files\InstallShield Installation Information
2011-08-28 15:09:39 ----SHD---- C:\WINDOWS\Installer
2011-08-28 13:29:20 ----HD---- C:\WINDOWS\inf
2011-08-27 09:44:16 ----D---- C:\WINDOWS\Logs
2011-08-27 09:44:16 ----D---- C:\WINDOWS\Debug
2011-08-24 18:15:13 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-22 20:09:11 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-08-20 12:28:26 ----D---- C:\WINDOWS\system32\DirectX
2011-08-20 12:28:10 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-20 09:55:07 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\vlc
2011-08-20 09:47:37 ----D---- C:\Documents and Settings\jaaaroy\Data aplikací\GHISLER
2011-08-20 01:33:27 ----RSD---- C:\WINDOWS\assembly
2011-08-19 23:41:29 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-08-19 23:41:29 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-08-19 13:49:26 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2011-08-19 11:24:48 ----RSD---- C:\WINDOWS\Fonts
2011-08-18 19:51:24 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-08-16 22:54:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-08-15 16:13:02 ----D---- C:\Program Files\Opera
2011-08-15 00:25:44 ----D---- C:\WINDOWS\WinSxS
2011-08-13 23:03:53 ----D---- C:\Program Files\Pando Networks
2011-08-07 23:14:34 ----SD---- C:\Documents and Settings\jaaaroy\Data aplikací\Microsoft
2011-08-06 19:01:10 ----D---- C:\Program Files\Common Files\Steam
2011-08-06 18:40:51 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-04 22:40:06 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-04 22:37:50 ----D---- C:\WINDOWS\system32\Setup
2011-08-04 22:37:49 ----D---- C:\WINDOWS\system32\wbem
2011-08-04 19:05:17 ----D---- C:\Program Files\Electronic Arts
2011-08-04 16:49:39 ----D---- C:\Program Files\Messenger
2011-08-04 16:42:55 ----RASH---- C:\boot.ini
2011-08-04 16:38:51 ----D---- C:\WINDOWS\security
2011-08-04 16:32:54 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-04 16:26:13 ----D---- C:\WINDOWS\ServicePackFiles
2011-08-04 16:26:11 ----D---- C:\Program Files\Windows Media Player
2011-08-04 16:26:09 ----D---- C:\WINDOWS\Help
2011-08-04 16:25:50 ----D---- C:\WINDOWS\system32\inetsrv
2011-08-04 16:25:49 ----D---- C:\WINDOWS\ime
2011-08-04 16:25:27 ----D---- C:\WINDOWS\system32\cs-CZ
2011-08-04 16:25:26 ----D---- C:\WINDOWS\system32\usmt
2011-08-04 16:25:26 ----D---- C:\Program Files\Internet Explorer
2011-08-04 16:25:24 ----D---- C:\WINDOWS\peernet
2011-08-04 16:25:24 ----D---- C:\Program Files\Movie Maker
2011-08-04 16:20:55 ----D---- C:\WINDOWS\system32\npp
2011-08-04 16:20:54 ----D---- C:\WINDOWS\msagent
2011-08-04 16:20:51 ----D---- C:\WINDOWS\srchasst
2011-08-04 16:20:50 ----D---- C:\Program Files\NetMeeting
2011-08-04 16:20:48 ----D---- C:\WINDOWS\system32\Com
2011-08-04 16:20:44 ----D---- C:\Program Files\Windows NT
2011-08-04 16:20:43 ----D---- C:\Program Files\Outlook Express
2011-08-04 16:20:38 ----D---- C:\Program Files\Common Files\System
2011-08-04 16:20:09 ----D---- C:\WINDOWS\system32\oobe
2011-08-04 16:20:06 ----D---- C:\WINDOWS\system
2011-08-04 16:16:18 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-08-04 16:15:55 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 BtHidBus;Bluetooth HID Bus Service; C:\WINDOWS\System32\Drivers\BtHidBus.sys [2009-01-07 20744]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\System32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R0x01000000 papycpu2;papycpu2; C:\WINDOWS\System32\DRIVERS\papycpu2.sys [2003-01-17 1984]
R0x01000000 papyjoy;papyjoy; C:\WINDOWS\System32\DRIVERS\papyjoy.sys [2003-01-17 1856]
R1 AmdK8;Ovladač procesoru AMD; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [2006-07-01 43008]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-17 31088]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\System32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS\system32\DRIVERS\btkrnl.sys [2004-11-29 1337850]
R3 btnetBUs;Bluetooth PAN Bus Service; C:\WINDOWS\System32\Drivers\btnetBus.sys [2008-12-07 30088]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\System32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-04-10 4397568]
R3 IvtBtBUs;IVT Bluetooth Bus Service; C:\WINDOWS\System32\Drivers\IvtBtBus.sys [2008-07-02 26248]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-05-25 12753664]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys [2007-02-06 90880]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2011-01-15 30208]
R3 VcommMgr;Bluetooth VComm Manager Service; C:\WINDOWS\System32\Drivers\VcommMgr.sys [2009-01-08 31880]
S3 1394hub;1394 Enabled Hub; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 APR;APR; \??\C:\Program Files\GamersFirst\Knight Online\APR.sys []
S3 BlueletAudio;Bluetooth Audio Service; C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [2008-11-25 33800]
S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\WINDOWS\system32\DRIVERS\BlueletSCOAudio.sys [2008-11-25 27528]
S3 BT;Bluetooth PAN Network Adapter; C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [2008-12-07 14088]
S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\WINDOWS\System32\Drivers\btcusb.sys [2009-01-03 39304]
S3 BthEnum;Služba Bluetooth Enumerator; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-04-14 272896]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 BTNetFilter;Bluetooth Network Filter; \??\C:\Program Files\IVT Corporation\BlueSoleil\Device\Win2k\BTNetFilter.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys [2004-11-29 55320]
S3 catchme;catchme; \??\C:\DOCUME~1\jaaaroy\LOCALS~1\Temp\catchme.sys []
S3 EagleXNt;EagleXNt; \??\C:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 PnkBstrK;PnkBstrK; \??\C:\WINDOWS\system32\drivers\PnkBstrK.sys []
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 tap0901;TAP-Win32 Adapter V9; C:\WINDOWS\system32\DRIVERS\tap0901.sys [2009-10-14 32000]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 VComm;Virtual Serial port driver; C:\WINDOWS\system32\DRIVERS\VComm.sys [2008-01-21 14856]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2009-02-27 850432]
R2 BsMobileCS;BsMobileCS; C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe [2009-02-27 143467]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe [2004-11-29 254007]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-07-03 153376]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2011-05-25 154728]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-25 2214504]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-06-13 75136]
R2 PnkBstrB;PnkBstrB; C:\WINDOWS\system32\PnkBstrB.exe [2011-08-24 214520]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 BsHelpCS;BsHelpCS; C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe [2009-02-27 98407]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 npggsvc;nProtect GameGuard Service; C:\WINDOWS\system32\GameMon.des [2011-05-03 4756216]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-08-06 411432]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
chodnik74
Přítel fóra
Přítel fóra
Příspěvky: 4975
Registrován: 13 zář 2010 21:30
Bydliště: Napajedla
Kontaktovat uživatele:
Kontaktovat uživatele chodnik74

Re: POmalé pc

#7 Příspěvek od chodnik74 »

No ten smích vás přejde,až si něco odpálíte ;-)


:arrow: Stiskněte klávesovou kombinaci WIN+R( nebo start-spustit ),čímž se vám otevře okno pro zadání příkazu pro spuštění a zkopírujte a vložte sem následujíci text: Combofix /Uninstall a dejte enter

:arrow: ObrázekT-Cleaner
  • Spustíme,zmáčkneme klávesu A a potvrdíme ENTER(některé antiviry mohou detekovat utilitu jako vir-jedá se o falešný poplach,proto IGNOROVAT nebo dočasně vypnout antivir )
  • po použití T-Cleaner smažte ;-)


:arrow: Obrázek TFC
  • Stáhneme a spustíme program
  • Klikneme na Start a potvrdíme OK
  • Program začne uklízet,poté restartuje pc
  • po použití program smažte


Údržba PC:

1)Čištění dočasných složek + neplatné registry
:arrow: ObrázekCcleaner
  • Stáhneme a nainstalujeme program
  • Spustíme program
  • ČISTIČ
    Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše
    Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
    >Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner
  • Registry
    >Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
    >Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu
    obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
    >opakujte dokud nebude registr bez problémů
  • Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)
2)Defragmentace disku
:arrow: ObrázekDefraggler
  • Stáhneme a nainstalujeme program
  • Spustíme program
  • Vybereme disk ( C:,D:..prostě který používáme)
  • Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
  • Proveďte se všemi používanými disky
  • Provádíme 1x za měsíc
3)Aktualizace programů
:arrow: ObrázekFileHippo.com Update Checker
  • Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
  • Spustíme program
  • Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
  • Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
    >X Updates Detected..to jsou dostupné aktualizace..
    > klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
    > :!: X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní :)
  • Provádíme 1x za 14 dní nebo jednou za měsíc

:arrow: Jak se chová počítač?
Napiš mi: chodnik74@gmail.com nebo Obrázek

>RSIT<>MBAM<>VirusTotal

Doporučuji:Obrázek | Obrázek

:!: Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. ;-) Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! :!:

:!: Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!

:idea: Jste s naší pomocí spokojeni :???: Neváhejte a podpořte forum ZDE.

Pravidla fora: č.1 a č.2
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: POmalé pc

#8 Příspěvek od vyosek »

Zdravim a pekny den preji :)

Uzivateli STAR, myslite si, ze vase jednani vuci nasim radcum je ferove a uprimne :???: Uz je u vas jedna negativni poznamka v interni sekci. Pokud nehodlate se prizpusobit nasim pozadavku a slusnemu jednani, budeme to resit jinym zpusobem...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“