Dobrý den, chtěl bych vás poprosit o zkontrolování PC. Poslední dobou sem i dějí divné věci a také se mi zdá dost zpomalený. Předem děkuji za váš čas.
Problémy:
Zabrzděný Počítač.
Neúmyslné vypínání, restarty.
Crashe a Errory ve Hrách a Systému.
Zpomalené PC, pády, neůmyslné restarty.
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpomalené PC, pády, neůmyslné restarty.
Naposledy upravil(a) Kastab dne 23 Zář 2011 08:55, celkem upraveno 1 x.
-
chodnik74
- Přítel fóra
- Příspěvky: 4975
- Registrován: 13 Zář 2010 21:30
- Místo/Bydliště: Napajedla
- Kontaktovat uživatele:
Re: Zpomalené PC, pády, neůmyslné restarty.
Dobré ránko 
nejsem bohužel věštec a věšteckou kouli má pouze náš admin,tak mi prosím vložte pro začátek log z RSIT,návod vás povede: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895
nejsem bohužel věštec a věšteckou kouli má pouze náš admin,tak mi prosím vložte pro začátek log z RSIT,návod vás povede: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895
Napiš mi: chodnik74@gmail.com nebo 
>RSIT<>MBAM<>VirusTotal
Doporučuji:
| 
Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. 
Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce!
Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!
Jste s naší pomocí spokojeni 
Neváhejte a podpořte forum ZDE.
Pravidla fora: č.1 a č.2
>RSIT<>MBAM<>VirusTotal
Doporučuji:
| Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce! Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.Pravidla fora: č.1 a č.2
Re: Zpomalené PC, pády, neůmyslné restarty.
Oh, promiňte.
Logfile of random's system information tool 1.09 (written by random/random)
Run by wqrxs at 2011-09-19 18:32:40
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 47 GB (21%) free of 230 GB
Total RAM: 1023 MB (67% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:32:48, on 19.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Gamesy\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
C:\Gamesy\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.33\deploy\LoLLauncher.exe
C:\WINDOWS\ALCFDRTM.EXE
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\wqrxs\Plocha\RSIT.exe
C:\Program Files\trend micro\wqrxs.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 5419 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003Core1cc0b11bfe8090a.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003UA.job
C:\WINDOWS\tasks\WGASetup.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\wqrxs\Data aplikací\Mozilla\Firefox\Profiles\4aaxh742.default
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-05 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-03-05 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-01-07 111208]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-11-04 1753192]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2011-05-03 399736]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\wqrxs\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-02-28 136176]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2011-08-18 17360520]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2011-05-03 399736]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^GamePark klient 2.lnk]
C:\PROGRA~1\GAMEPA~1\gpcl.exe [2011-07-29 409088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Nero BackItUp Scheduler 4.0"=2
"Nero BackItUp Scheduler 3"=2
"Hamachi2Svc"=2
"PLFlash DeviceIoControl Service"=2
"JavaQuickStarterService"=2
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Gamesy\Activision\Call of Duty 4\iw3mp.exe"="C:\Gamesy\Activision\Call of Duty 4\iw3mp.exe:*:Enabled:iw3mp"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Gamesy\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Gamesy\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Gamesy\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe"="C:\Gamesy\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat"="C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Gamesy\League of Legends\air\LolClient.exe"="C:\Gamesy\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Gamesy\League of Legends\game\League of Legends.exe"="C:\Gamesy\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Program Files\Movie Maker\Movie Maker\Sindicate\client.bin"="C:\Program Files\Movie Maker\Movie Maker\Sindicate\client.bin:*:Enabled:client"
"C:\Program Files\Movie Maker\Movie Maker\Sindicate\Launcher.exe"="C:\Program Files\Movie Maker\Movie Maker\Sindicate\Launcher.exe:*:Enabled:Launcher"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.937\Patcher\celestialworld.bin"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.937\Patcher\celestialworld.bin:*:Enabled:celestialworld"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.843\Patcher\celestialworld.bin"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.843\Patcher\celestialworld.bin:*:Enabled:celestialworld"
"C:\Gamesy\League of Legends\lol.launcher.exe"="C:\Gamesy\League of Legends\lol.launcher.exe:*:Enabled:League of Legends Launcher"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX10.281\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX10.281\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX19.7531\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX19.7531\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX59.937\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX59.937\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Gamesy\Lolko\air\LolClient.exe"="C:\Gamesy\Lolko\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Gamesy\Lolko\game\League of Legends.exe"="C:\Gamesy\Lolko\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Gamesy\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Gamesy\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Gamesy\Counter-Strike Source\hl2.exe"="C:\Gamesy\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"C:\Gamesy\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\Settlers7R.exe"="C:\Gamesy\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\Settlers7R.exe:*:Enabled:The Settlers 7 - Paths to a Kingdom"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"wave5"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer4"=wdmaud.drv
"msacm.divxa32"=msaud32_divx.acm
"VIDC.FPS1"=frapsvid.dll
"VIDC.FMVC"=fmcodec.dll
======List of files/folders created in the last 1 month======
2011-09-17 22:48:04 ----D---- C:\Program Files\DsNET Corp
2011-09-17 09:37:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2616676$
2011-09-15 23:06:23 ----A---- C:\WINDOWS\eReg.dat
2011-09-15 22:59:13 ----A---- C:\WINDOWS\CD_Start.INI
2011-09-14 13:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2011-09-14 07:24:08 ----SHD---- C:\found.000
2011-09-07 22:14:13 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Prison Break
2011-09-07 11:57:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-09-06 05:24:09 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Opera
2011-09-06 05:24:01 ----D---- C:\Program Files\Opera
2011-09-06 05:15:12 ----A---- C:\WINDOWS\system32\msvcr71.dll
2011-09-06 05:15:11 ----A---- C:\WINDOWS\system32\msvcp71.dll
2011-09-06 05:13:06 ----A---- C:\WINDOWS\system32\mfc71.dll
2011-09-05 12:20:41 ----A---- C:\WINDOWS\WORDPAD.INI
2011-09-04 19:59:01 ----D---- C:\WINDOWS\system32\appmgmt
2011-09-03 09:56:15 ----D---- C:\Program Files\Ubisoft
2011-08-31 07:20:01 ----D---- C:\Program Files\GamePark2
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-30 23:22:28 ----A---- C:\WINDOWS\system32\drivers\atksgt.sys
2011-08-30 23:22:27 ----A---- C:\WINDOWS\system32\drivers\lirsgt.sys
2011-08-29 17:30:03 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Allstar
2011-08-29 10:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-29 10:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-29 10:21:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-29 10:21:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-08-29 10:21:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-29 10:16:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-08-29 10:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-29 10:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
======List of files/folders modified in the last 1 month======
2011-09-19 18:32:43 ----D---- C:\Program Files\trend micro
2011-09-19 18:06:47 ----D---- C:\WINDOWS\Temp
2011-09-19 18:05:44 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\uTorrent
2011-09-19 14:49:05 ----D---- C:\WINDOWS\Microsoft.NET
2011-09-19 12:09:56 ----D---- C:\WINDOWS\system32
2011-09-19 12:09:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-19 08:51:47 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-19 08:51:43 ----SHD---- C:\WINDOWS\Installer
2011-09-19 08:02:26 ----D---- C:\WINDOWS
2011-09-19 05:01:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-09-18 12:38:13 ----D---- C:\WINDOWS\Prefetch
2011-09-18 10:22:52 ----D---- C:\WINDOWS\Debug
2011-09-17 22:48:22 ----HD---- C:\WINDOWS\inf
2011-09-17 22:48:21 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-17 22:48:04 ----RD---- C:\Program Files
2011-09-17 09:37:28 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-17 09:28:36 ----A---- C:\WINDOWS\system32\MRT.exe
2011-09-16 06:37:13 ----D---- C:\Gamesy
2011-09-16 06:27:22 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-09-16 05:33:55 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-15 23:12:19 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-15 23:02:29 ----RSD---- C:\WINDOWS\Fonts
2011-09-15 20:51:16 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Skype
2011-09-15 14:54:33 ----A---- C:\WINDOWS\NeroDigital.ini
2011-09-15 06:07:55 ----D---- C:\Program Files\DaemonicMU Season IV
2011-09-13 23:08:54 ----D---- C:\WINDOWS\WinSxS
2011-09-13 23:08:46 ----D---- C:\WINDOWS\system32\DirectX
2011-09-13 23:08:03 ----RSD---- C:\WINDOWS\assembly
2011-09-10 09:57:19 ----D---- C:\WINDOWS\security
2011-09-09 11:12:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-09-08 13:07:22 ----A---- C:\WINDOWS\win.ini
2011-09-08 13:07:22 ----A---- C:\WINDOWS\system.ini
2011-09-08 13:07:21 ----D---- C:\WINDOWS\pss
2011-09-06 22:45:29 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-09-06 01:33:13 ----D---- C:\WINDOWS\Minidump
2011-09-05 18:11:36 ----D---- C:\Program Files\Mozilla Firefox
2011-09-03 18:02:52 ----RD---- C:\Program Files\Skype
2011-09-03 18:02:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-03 15:01:15 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-31 07:10:47 ----D---- C:\WINDOWS\RegisteredPackages
2011-08-31 07:10:45 ----D---- C:\WINDOWS\system32\drivers
2011-08-31 07:09:56 ----A---- C:\WINDOWS\game.ini
2011-08-30 17:14:50 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-29 10:16:47 ----D---- C:\Program Files\Internet Explorer
2011-08-29 10:16:40 ----D---- C:\WINDOWS\ie8updates
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-05-17 92800]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-09-06 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-09-06 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-09-06 442200]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-09-06 320856]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-09-06 52568]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-01 218688]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-09-06 110552]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-08-30 279712]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-08-30 25888]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-11-18 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-04-06 33536]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-11-12 100456]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-04-06 12928]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-03-01 75136]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-03-05 153376]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
S4 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by wqrxs at 2011-09-19 18:32:40
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 47 GB (21%) free of 230 GB
Total RAM: 1023 MB (67% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:32:48, on 19.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Gamesy\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
C:\Gamesy\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.33\deploy\LoLLauncher.exe
C:\WINDOWS\ALCFDRTM.EXE
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\wqrxs\Plocha\RSIT.exe
C:\Program Files\trend micro\wqrxs.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 5419 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003Core1cc0b11bfe8090a.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003UA.job
C:\WINDOWS\tasks\WGASetup.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\wqrxs\Data aplikací\Mozilla\Firefox\Profiles\4aaxh742.default
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-11-22 1242504]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-03-05 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-03-05 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-09-06 806456]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-09-06 3722416]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-01-07 111208]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [2010-11-04 1753192]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2011-05-03 399736]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\wqrxs\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-02-28 136176]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2011-08-18 17360520]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2011-05-03 399736]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^GamePark klient 2.lnk]
C:\PROGRA~1\GAMEPA~1\gpcl.exe [2011-07-29 409088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Nero BackItUp Scheduler 4.0"=2
"Nero BackItUp Scheduler 3"=2
"Hamachi2Svc"=2
"PLFlash DeviceIoControl Service"=2
"JavaQuickStarterService"=2
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Gamesy\Activision\Call of Duty 4\iw3mp.exe"="C:\Gamesy\Activision\Call of Duty 4\iw3mp.exe:*:Enabled:iw3mp"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Gamesy\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Gamesy\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Gamesy\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe"="C:\Gamesy\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat"="C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"C:\Gamesy\League of Legends\air\LolClient.exe"="C:\Gamesy\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Gamesy\League of Legends\game\League of Legends.exe"="C:\Gamesy\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Program Files\Movie Maker\Movie Maker\Sindicate\client.bin"="C:\Program Files\Movie Maker\Movie Maker\Sindicate\client.bin:*:Enabled:client"
"C:\Program Files\Movie Maker\Movie Maker\Sindicate\Launcher.exe"="C:\Program Files\Movie Maker\Movie Maker\Sindicate\Launcher.exe:*:Enabled:Launcher"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.937\Patcher\celestialworld.bin"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.937\Patcher\celestialworld.bin:*:Enabled:celestialworld"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.843\Patcher\celestialworld.bin"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.843\Patcher\celestialworld.bin:*:Enabled:celestialworld"
"C:\Gamesy\League of Legends\lol.launcher.exe"="C:\Gamesy\League of Legends\lol.launcher.exe:*:Enabled:League of Legends Launcher"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX10.281\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX10.281\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX19.7531\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX19.7531\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX59.937\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX59.937\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Gamesy\Lolko\air\LolClient.exe"="C:\Gamesy\Lolko\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Gamesy\Lolko\game\League of Legends.exe"="C:\Gamesy\Lolko\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Gamesy\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Gamesy\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Gamesy\Counter-Strike Source\hl2.exe"="C:\Gamesy\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"C:\Gamesy\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\Settlers7R.exe"="C:\Gamesy\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\Settlers7R.exe:*:Enabled:The Settlers 7 - Paths to a Kingdom"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Pando Networks\Media Booster\PMB.exe"="C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"wave5"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer4"=wdmaud.drv
"msacm.divxa32"=msaud32_divx.acm
"VIDC.FPS1"=frapsvid.dll
"VIDC.FMVC"=fmcodec.dll
======List of files/folders created in the last 1 month======
2011-09-17 22:48:04 ----D---- C:\Program Files\DsNET Corp
2011-09-17 09:37:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2616676$
2011-09-15 23:06:23 ----A---- C:\WINDOWS\eReg.dat
2011-09-15 22:59:13 ----A---- C:\WINDOWS\CD_Start.INI
2011-09-14 13:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2011-09-14 07:24:08 ----SHD---- C:\found.000
2011-09-07 22:14:13 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Prison Break
2011-09-07 11:57:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-09-06 05:24:09 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Opera
2011-09-06 05:24:01 ----D---- C:\Program Files\Opera
2011-09-06 05:15:12 ----A---- C:\WINDOWS\system32\msvcr71.dll
2011-09-06 05:15:11 ----A---- C:\WINDOWS\system32\msvcp71.dll
2011-09-06 05:13:06 ----A---- C:\WINDOWS\system32\mfc71.dll
2011-09-05 12:20:41 ----A---- C:\WINDOWS\WORDPAD.INI
2011-09-04 19:59:01 ----D---- C:\WINDOWS\system32\appmgmt
2011-09-03 09:56:15 ----D---- C:\Program Files\Ubisoft
2011-08-31 07:20:01 ----D---- C:\Program Files\GamePark2
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-30 23:22:28 ----A---- C:\WINDOWS\system32\drivers\atksgt.sys
2011-08-30 23:22:27 ----A---- C:\WINDOWS\system32\drivers\lirsgt.sys
2011-08-29 17:30:03 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Allstar
2011-08-29 10:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-29 10:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-29 10:21:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-29 10:21:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-08-29 10:21:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-29 10:16:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-08-29 10:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-29 10:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
======List of files/folders modified in the last 1 month======
2011-09-19 18:32:43 ----D---- C:\Program Files\trend micro
2011-09-19 18:06:47 ----D---- C:\WINDOWS\Temp
2011-09-19 18:05:44 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\uTorrent
2011-09-19 14:49:05 ----D---- C:\WINDOWS\Microsoft.NET
2011-09-19 12:09:56 ----D---- C:\WINDOWS\system32
2011-09-19 12:09:56 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-19 08:51:47 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-19 08:51:43 ----SHD---- C:\WINDOWS\Installer
2011-09-19 08:02:26 ----D---- C:\WINDOWS
2011-09-19 05:01:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\PMB Files
2011-09-18 12:38:13 ----D---- C:\WINDOWS\Prefetch
2011-09-18 10:22:52 ----D---- C:\WINDOWS\Debug
2011-09-17 22:48:22 ----HD---- C:\WINDOWS\inf
2011-09-17 22:48:21 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-17 22:48:04 ----RD---- C:\Program Files
2011-09-17 09:37:28 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-17 09:28:36 ----A---- C:\WINDOWS\system32\MRT.exe
2011-09-16 06:37:13 ----D---- C:\Gamesy
2011-09-16 06:27:22 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-09-16 05:33:55 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-15 23:12:19 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-15 23:02:29 ----RSD---- C:\WINDOWS\Fonts
2011-09-15 20:51:16 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Skype
2011-09-15 14:54:33 ----A---- C:\WINDOWS\NeroDigital.ini
2011-09-15 06:07:55 ----D---- C:\Program Files\DaemonicMU Season IV
2011-09-13 23:08:54 ----D---- C:\WINDOWS\WinSxS
2011-09-13 23:08:46 ----D---- C:\WINDOWS\system32\DirectX
2011-09-13 23:08:03 ----RSD---- C:\WINDOWS\assembly
2011-09-10 09:57:19 ----D---- C:\WINDOWS\security
2011-09-09 11:12:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-09-08 13:07:22 ----A---- C:\WINDOWS\win.ini
2011-09-08 13:07:22 ----A---- C:\WINDOWS\system.ini
2011-09-08 13:07:21 ----D---- C:\WINDOWS\pss
2011-09-06 22:45:29 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-09-06 01:33:13 ----D---- C:\WINDOWS\Minidump
2011-09-05 18:11:36 ----D---- C:\Program Files\Mozilla Firefox
2011-09-03 18:02:52 ----RD---- C:\Program Files\Skype
2011-09-03 18:02:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-03 15:01:15 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-31 07:10:47 ----D---- C:\WINDOWS\RegisteredPackages
2011-08-31 07:10:45 ----D---- C:\WINDOWS\system32\drivers
2011-08-31 07:09:56 ----A---- C:\WINDOWS\game.ini
2011-08-30 17:14:50 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-29 10:16:47 ----D---- C:\Program Files\Internet Explorer
2011-08-29 10:16:40 ----D---- C:\WINDOWS\ie8updates
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-05-17 92800]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-09-06 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-09-06 34392]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-09-06 442200]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-09-06 320856]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-09-06 52568]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-01 218688]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-09-06 20568]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-09-06 110552]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-08-30 279712]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-08-30 25888]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-11-18 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-04-06 33536]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-11-12 100456]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-04-06 12928]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-09-06 44768]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-03-01 75136]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-03-05 153376]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
S4 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
-----------------EOF-----------------
-
chodnik74
- Přítel fóra
- Příspěvky: 4975
- Registrován: 13 Zář 2010 21:30
- Místo/Bydliště: Napajedla
- Kontaktovat uživatele:
Re: Zpomalené PC, pády, neůmyslné restarty.
Mrknu na to zítra,zatím mám pro vás bojový úkol 
Jděte do složky C:\Windows\Minidump, pokud zde najdete soubory,tak je zabalte( třeba programem winrar) a nahrajte na http://www.leteckaposta.cz , sem mi vložte odkaz na stažení
Jděte do složky C:\Windows\Minidump, pokud zde najdete soubory,tak je zabalte( třeba programem winrar) a nahrajte na http://www.leteckaposta.cz , sem mi vložte odkaz na staženíNapiš mi: chodnik74@gmail.com nebo
>RSIT<>MBAM<>VirusTotal
Doporučuji: |
Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce!
Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!
Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.
Pravidla fora: č.1 a č.2
>RSIT<>MBAM<>VirusTotal
Doporučuji:
| Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce! Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.Pravidla fora: č.1 a č.2
-
chodnik74
- Přítel fóra
- Příspěvky: 4975
- Registrován: 13 Zář 2010 21:30
- Místo/Bydliště: Napajedla
- Kontaktovat uživatele:
Re: Zpomalené PC, pády, neůmyslné restarty.
Je tu chyba ovladače od Avastu..zkusil bych odinstalovat avast pomocí utility: http://files.avast.com/files/eng/aswclear.exe
Poté sledujte jak se chová počítač..později nainstalujeme znovu Avast nebo vybereme jiný AV
Ještě vám doporučím údržbu pc..
TFC
Údržba PC:
1)Čištění dočasných složek + neplatné registry
Ccleaner
Defraggler
FileHippo.com Update Checker
Jak se chová PC
Poté sledujte jak se chová počítač..později nainstalujeme znovu Avast nebo vybereme jiný AV
Ještě vám doporučím údržbu pc.. TFC
- Stáhneme a spustíme program
- Klikneme na Start a potvrdíme OK
- Program začne uklízet,poté restartuje pc
- po použití program smažte
Údržba PC:
1)Čištění dočasných složek + neplatné registry
- Stáhneme a nainstalujeme program
- Spustíme program
- ČISTIČ
Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše a odškrkneme volbu Zbytky souborů v paměti
Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
>Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner - Registry
>Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
>Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
>opakujte dokud nebude registr bez problémů - Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)
Defraggler
- Stáhneme a nainstalujeme program
- Spustíme program
- Vybereme disk ( C:,D:..prostě který používáme)
- Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
- Proveďte se všemi používanými disky
- Provádíme 1x za měsíc
FileHippo.com Update Checker
- Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
- Spustíme program
- Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
- Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
>X Updates Detected..to jsou dostupné aktualizace..
> klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
> X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní - Provádíme 1x za 14 dní nebo jednou za měsíc
Jak se chová PC Napiš mi: chodnik74@gmail.com nebo
>RSIT<>MBAM<>VirusTotal
Doporučuji: |
Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce!
Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!
Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.
Pravidla fora: č.1 a č.2
>RSIT<>MBAM<>VirusTotal
Doporučuji:
| Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce! Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.Pravidla fora: č.1 a č.2
Re: Zpomalené PC, pády, neůmyslné restarty.
Dobrý den na PC mi vyšel čas až dnes, tak se do toho pustím a pak dám vědět .
Zjištěné problémy:
Když chci nainstalovat novější verzi Display ovladačů a updatnout Daemon Tools, tak mi to hodí Modrou Smrt.
Také se mi už 2x od sebe vypnul sám počítač (jako by ho někdo odpojil ze zásuvky a zase zapojil), ale to si myslím, že je jen dočasné, protože byla mnoha instalací a odinstalací za jedno spuštění.
// Zatím PC běží svižnější než předtím,
// Ještě se pokusím dořešit problémy s tím Deamonem a Ovladačem na Grafiku v nouzovém režimu, kdyby byl ještě nějaký problém tak napíši. Zatím vše vypadá dobře. Až odejdu nechám PC defragmentovat, jinak jsem udělal zatím vše podle vašich pokynů.
.Zjištěné problémy:
Když chci nainstalovat novější verzi Display ovladačů a updatnout Daemon Tools, tak mi to hodí Modrou Smrt.
Také se mi už 2x od sebe vypnul sám počítač (jako by ho někdo odpojil ze zásuvky a zase zapojil), ale to si myslím, že je jen dočasné, protože byla mnoha instalací a odinstalací za jedno spuštění
.// Zatím PC běží svižnější než předtím,
// Ještě se pokusím dořešit problémy s tím Deamonem a Ovladačem na Grafiku v nouzovém režimu, kdyby byl ještě nějaký problém tak napíši. Zatím vše vypadá dobře
. Až odejdu nechám PC defragmentovat, jinak jsem udělal zatím vše podle vašich pokynů.-
chodnik74
- Přítel fóra
- Příspěvky: 4975
- Registrován: 13 Zář 2010 21:30
- Místo/Bydliště: Napajedla
- Kontaktovat uživatele:
Re: Zpomalené PC, pády, neůmyslné restarty.
Počkám na výsledek v nouzovém režimu
Napiš mi: chodnik74@gmail.com nebo
>RSIT<>MBAM<>VirusTotal
Doporučuji: |
Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce!
Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!
Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.
Pravidla fora: č.1 a č.2
>RSIT<>MBAM<>VirusTotal
Doporučuji:
| Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce! Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.Pravidla fora: č.1 a č.2
Re: Zpomalené PC, pády, neůmyslné restarty.
Dobrý den omlouvám se, ale dříve jsem se k PC nedostal, v nouzovém režimu jsem vše nainstaloval. Dnes se mi, ale vyskytl další problém a to s tím, že se mi do jedné hodiny restartoval desetkrát počítač. Dám log z Rsitu.
Logfile of random's system information tool 1.09 (written by random/random)
Run by wqrxs at 2011-09-25 21:12:37
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 65 GB (28%) free of 230 GB
Total RAM: 1023 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:12:40, on 25.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\wqrxs\Plocha\RSIT.exe
C:\Program Files\trend micro\wqrxs.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Aktualizovat ESET licenci.lnk = C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 6763519312
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 5650 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003Core1cc0b11bfe8090a.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003UA.job
C:\WINDOWS\tasks\WGASetup.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\wqrxs\Data aplikací\Mozilla\Firefox\Profiles\4aaxh742.default
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
C:\Program Files\Mozilla Firefox\searchplugins\
amazondotcom.xml
bing.xml
eBay.xml
google.xml
wikipedia.xml
yahoo.xml
C:\Documents and Settings\wqrxs\Data aplikací\Mozilla\Firefox\Profiles\4aaxh742.default\extensions\
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
C:\Documents and Settings\wqrxs\Data aplikací\Mozilla\Firefox\Profiles\4aaxh742.default\searchplugins\
conduit.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-09-23 56712]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-01-07 111208]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet []
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-05-04 252136]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-08 3076144]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileHippo.com]
C:\Program Files\FileHippo.com\UpdateChecker.exe [2010-08-09 248832]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\wqrxs\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-02-28 136176]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2011-09-12 17351304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2011-09-23 641400]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^GamePark klient 2.lnk]
C:\PROGRA~1\GAMEPA~1\gpcl.exe [2011-07-29 409088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Nero BackItUp Scheduler 4.0"=2
"Nero BackItUp Scheduler 3"=2
"Hamachi2Svc"=2
"PLFlash DeviceIoControl Service"=2
"JavaQuickStarterService"=2
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Aktualizovat ESET licenci.lnk - C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Gamesy\Activision\Call of Duty 4\iw3mp.exe"="C:\Gamesy\Activision\Call of Duty 4\iw3mp.exe:*:Enabled:iw3mp"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Gamesy\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Gamesy\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Gamesy\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe"="C:\Gamesy\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat"="C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\Gamesy\League of Legends\air\LolClient.exe"="C:\Gamesy\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Gamesy\League of Legends\game\League of Legends.exe"="C:\Gamesy\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Program Files\Movie Maker\Movie Maker\Sindicate\client.bin"="C:\Program Files\Movie Maker\Movie Maker\Sindicate\client.bin:*:Enabled:client"
"C:\Program Files\Movie Maker\Movie Maker\Sindicate\Launcher.exe"="C:\Program Files\Movie Maker\Movie Maker\Sindicate\Launcher.exe:*:Enabled:Launcher"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.937\Patcher\celestialworld.bin"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.937\Patcher\celestialworld.bin:*:Enabled:celestialworld"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.843\Patcher\celestialworld.bin"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.843\Patcher\celestialworld.bin:*:Enabled:celestialworld"
"C:\Gamesy\League of Legends\lol.launcher.exe"="C:\Gamesy\League of Legends\lol.launcher.exe:*:Enabled:League of Legends Launcher"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX10.281\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX10.281\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX19.7531\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX19.7531\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX59.937\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX59.937\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Gamesy\Lolko\air\LolClient.exe"="C:\Gamesy\Lolko\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Gamesy\Lolko\game\League of Legends.exe"="C:\Gamesy\Lolko\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Gamesy\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Gamesy\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Gamesy\Counter-Strike Source\hl2.exe"="C:\Gamesy\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"wave5"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer4"=wdmaud.drv
"msacm.divxa32"=msaud32_divx.acm
"VIDC.FPS1"=frapsvid.dll
"msacm.siren"=sirenacm.dll
======List of files/folders created in the last 1 month======
2011-09-24 20:38:52 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-09-24 20:28:18 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2011-09-23 09:19:20 ----D---- C:\Program Files\TNod User & Password Finder
2011-09-23 09:06:08 ----D---- C:\Program Files\ESET
2011-09-23 09:06:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-09-23 08:51:09 ----A---- C:\WINDOWS\system32\msi.dll
2011-09-23 08:51:08 ----A---- C:\WINDOWS\system32\msisip.dll
2011-09-23 08:51:08 ----A---- C:\WINDOWS\system32\msimsg.dll
2011-09-23 08:51:08 ----A---- C:\WINDOWS\system32\msihnd.dll
2011-09-23 08:51:08 ----A---- C:\WINDOWS\system32\msiexec.exe
2011-09-23 08:50:32 ----D---- C:\Program Files\Microsoft
2011-09-23 08:50:18 ----D---- C:\Program Files\Windows Live SkyDrive
2011-09-23 08:49:55 ----D---- C:\Program Files\Windows Live
2011-09-23 08:47:37 ----D---- C:\Program Files\Common Files\Windows Live
2011-09-23 08:38:19 ----A---- C:\Documents and Settings\wqrxs\Data aplikací\pcouffin.sys
2011-09-23 08:38:19 ----A---- C:\Documents and Settings\wqrxs\Data aplikací\inst.exe
2011-09-23 08:28:43 ----D---- C:\Program Files\Common Files\Java
2011-09-23 08:28:28 ----A---- C:\WINDOWS\system32\javaws.exe
2011-09-23 08:28:28 ----A---- C:\WINDOWS\system32\javaw.exe
2011-09-23 08:28:28 ----A---- C:\WINDOWS\system32\java.exe
2011-09-23 08:21:21 ----D---- C:\Program Files\FileHippo.com
2011-09-23 07:20:30 ----SHD---- C:\Config.Msi
2011-09-17 22:48:04 ----D---- C:\Program Files\DsNET Corp
2011-09-17 09:37:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2616676$
2011-09-15 23:06:23 ----A---- C:\WINDOWS\eReg.dat
2011-09-15 22:59:13 ----A---- C:\WINDOWS\CD_Start.INI
2011-09-14 13:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2011-09-14 07:24:08 ----SHD---- C:\found.000
2011-09-07 22:14:13 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Prison Break
2011-09-07 11:57:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-09-06 05:24:09 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Opera
2011-09-06 05:24:01 ----D---- C:\Program Files\Opera
2011-09-06 05:15:12 ----A---- C:\WINDOWS\system32\msvcr71.dll
2011-09-06 05:15:11 ----A---- C:\WINDOWS\system32\msvcp71.dll
2011-09-06 05:13:06 ----A---- C:\WINDOWS\system32\mfc71.dll
2011-09-05 12:20:41 ----A---- C:\WINDOWS\WORDPAD.INI
2011-09-04 19:59:01 ----D---- C:\WINDOWS\system32\appmgmt
2011-08-31 07:20:01 ----D---- C:\Program Files\GamePark2
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-30 23:22:28 ----A---- C:\WINDOWS\system32\drivers\atksgt.sys
2011-08-30 23:22:27 ----A---- C:\WINDOWS\system32\drivers\lirsgt.sys
2011-08-29 17:30:03 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Allstar
2011-08-29 10:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-29 10:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-29 10:21:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-29 10:21:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-08-29 10:21:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-29 10:16:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-08-29 10:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-29 10:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
======List of files/folders modified in the last 1 month======
2011-09-25 21:12:39 ----D---- C:\Program Files\trend micro
2011-09-25 20:58:32 ----D---- C:\WINDOWS\Temp
2011-09-25 20:52:03 ----D---- C:\WINDOWS
2011-09-25 18:08:11 ----D---- C:\WINDOWS\Minidump
2011-09-25 18:03:20 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-25 17:34:21 ----SHD---- C:\WINDOWS\Installer
2011-09-25 17:34:21 ----D---- C:\WINDOWS\system32\DirectX
2011-09-25 17:34:20 ----HD---- C:\WINDOWS\inf
2011-09-25 17:34:10 ----RSD---- C:\WINDOWS\assembly
2011-09-25 17:33:55 ----D---- C:\WINDOWS\Logs
2011-09-25 17:32:59 ----D---- C:\WINDOWS\Prefetch
2011-09-25 17:10:39 ----D---- C:\WINDOWS\Microsoft.NET
2011-09-25 16:55:46 ----D---- C:\WINDOWS\system32
2011-09-24 21:15:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-24 20:28:25 ----D---- C:\WINDOWS\WinSxS
2011-09-24 20:28:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-24 20:24:33 ----D---- C:\WINDOWS\SxsCaPendDel
2011-09-24 20:24:01 ----D---- C:\Gamesy
2011-09-23 11:43:25 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\DAEMON Tools Lite
2011-09-23 11:43:24 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\uTorrent
2011-09-23 10:06:50 ----A---- C:\WINDOWS\NeroDigital.ini
2011-09-23 09:38:54 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-09-23 09:38:54 ----D---- C:\WINDOWS\SoftwareDistribution
2011-09-23 09:36:36 ----A---- C:\WINDOWS\win.ini
2011-09-23 09:36:36 ----A---- C:\WINDOWS\system.ini
2011-09-23 09:19:20 ----RD---- C:\Program Files
2011-09-23 09:16:24 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-23 09:06:58 ----D---- C:\WINDOWS\system32\drivers
2011-09-23 09:00:17 ----SD---- C:\WINDOWS\Tasks
2011-09-23 08:56:55 ----D---- C:\WINDOWS\Help
2011-09-23 08:55:22 ----D---- C:\Program Files\World of Warcraft TBC
2011-09-23 08:50:03 ----RSD---- C:\WINDOWS\Fonts
2011-09-23 08:47:37 ----D---- C:\Program Files\Common Files
2011-09-23 08:47:24 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-09-23 08:46:27 ----D---- C:\Program Files\Mozilla Firefox
2011-09-23 08:42:31 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Skype
2011-09-23 08:38:33 ----D---- C:\Program Files\VSO
2011-09-23 08:38:19 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Vso
2011-09-23 08:37:34 ----D---- C:\Program Files\uTorrent
2011-09-23 08:31:59 ----RD---- C:\Program Files\Skype
2011-09-23 08:31:07 ----D---- C:\Program Files\The KMPlayer
2011-09-23 08:28:14 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-09-23 08:28:11 ----D---- C:\Program Files\Java
2011-09-23 08:25:44 ----D---- C:\Program Files\WinRAR
2011-09-23 08:23:08 ----D---- C:\Program Files\CCleaner
2011-09-23 08:14:53 ----D---- C:\Program Files\AVAST Software
2011-09-21 14:32:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-18 10:22:52 ----D---- C:\WINDOWS\Debug
2011-09-17 09:28:36 ----A---- C:\WINDOWS\system32\MRT.exe
2011-09-16 06:27:22 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-09-15 23:12:19 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-15 06:07:55 ----D---- C:\Program Files\DaemonicMU Season IV
2011-09-10 09:57:19 ----D---- C:\WINDOWS\security
2011-09-09 11:12:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-09-08 13:07:21 ----D---- C:\WINDOWS\pss
2011-09-03 18:02:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-03 15:01:15 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-31 07:10:47 ----D---- C:\WINDOWS\RegisteredPackages
2011-08-31 07:09:56 ----A---- C:\WINDOWS\game.ini
2011-08-30 17:14:50 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-29 10:16:47 ----D---- C:\Program Files\Internet Explorer
2011-08-29 10:16:40 ----D---- C:\WINDOWS\ie8updates
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-05-17 92800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-01 218688]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2011-08-04 103112]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-08-30 279712]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-08-30 25888]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-11-18 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-04-06 33536]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-11-12 100456]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-04-06 12928]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-08 974944]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-03-01 75136]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2011-09-23 161664]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
S4 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
-----------------EOF-----------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by wqrxs at 2011-09-25 21:12:37
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 65 GB (28%) free of 230 GB
Total RAM: 1023 MB (55% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:12:40, on 25.9.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\wqrxs\Plocha\RSIT.exe
C:\Program Files\trend micro\wqrxs.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (file missing)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide1] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Aktualizovat ESET licenci.lnk = C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microso ... 6763519312
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 5650 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003Core1cc0b11bfe8090a.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1614895754-113007714-682003330-1003UA.job
C:\WINDOWS\tasks\WGASetup.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\wqrxs\Data aplikací\Mozilla\Firefox\Profiles\4aaxh742.default
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
C:\Program Files\Mozilla Firefox\searchplugins\
amazondotcom.xml
bing.xml
eBay.xml
google.xml
wikipedia.xml
yahoo.xml
C:\Documents and Settings\wqrxs\Data aplikací\Mozilla\Firefox\Profiles\4aaxh742.default\extensions\
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}
C:\Documents and Settings\wqrxs\Data aplikací\Mozilla\Firefox\Profiles\4aaxh742.default\searchplugins\
conduit.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-08-16 3942048]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2011-09-23 56712]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2011-01-07 111208]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2011-01-07 13880424]
"nwiz"=C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /installquiet []
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-05-04 252136]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-09-08 3076144]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FileHippo.com]
C:\Program Files\FileHippo.com\UpdateChecker.exe [2010-08-09 248832]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Documents and Settings\wqrxs\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-02-28 136176]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-06-24 1840424]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe [2008-06-08 2221352]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe [2008-06-19 570664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2011-09-12 17351304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2011-09-23 641400]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^GamePark klient 2.lnk]
C:\PROGRA~1\GAMEPA~1\gpcl.exe [2011-07-29 409088]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"Nero BackItUp Scheduler 4.0"=2
"Nero BackItUp Scheduler 3"=2
"Hamachi2Svc"=2
"PLFlash DeviceIoControl Service"=2
"JavaQuickStarterService"=2
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Aktualizovat ESET licenci.lnk - C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Gamesy\Activision\Call of Duty 4\iw3mp.exe"="C:\Gamesy\Activision\Call of Duty 4\iw3mp.exe:*:Enabled:iw3mp"
"C:\Program Files\uTorrent\uTorrent.exe"="C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\PnkBstrA.exe"="C:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\WINDOWS\system32\PnkBstrB.exe"="C:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\Gamesy\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe"="C:\Gamesy\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) "
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Gamesy\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe"="C:\Gamesy\World of Warcraft\WoW-x.x.x.x-4.0.0.12911-Downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat"="C:\Gamesy\Electronic Arts\The Battle for Middle-earth (tm) II\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\Gamesy\League of Legends\air\LolClient.exe"="C:\Gamesy\League of Legends\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Gamesy\League of Legends\game\League of Legends.exe"="C:\Gamesy\League of Legends\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Program Files\Movie Maker\Movie Maker\Sindicate\client.bin"="C:\Program Files\Movie Maker\Movie Maker\Sindicate\client.bin:*:Enabled:client"
"C:\Program Files\Movie Maker\Movie Maker\Sindicate\Launcher.exe"="C:\Program Files\Movie Maker\Movie Maker\Sindicate\Launcher.exe:*:Enabled:Launcher"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.937\Patcher\celestialworld.bin"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.937\Patcher\celestialworld.bin:*:Enabled:celestialworld"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.843\Patcher\celestialworld.bin"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX00.843\Patcher\celestialworld.bin:*:Enabled:celestialworld"
"C:\Gamesy\League of Legends\lol.launcher.exe"="C:\Gamesy\League of Legends\lol.launcher.exe:*:Enabled:League of Legends Launcher"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX10.281\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX10.281\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX19.7531\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX19.7531\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX59.937\Dinamik Mt2\mc.exe"="C:\Documents and Settings\wqrxs\Local Settings\Temp\Rar$EX59.937\Dinamik Mt2\mc.exe:*:Enabled:mc"
"C:\Gamesy\Lolko\air\LolClient.exe"="C:\Gamesy\Lolko\air\LolClient.exe:*:Enabled:League of Legends Lobby"
"C:\Gamesy\Lolko\game\League of Legends.exe"="C:\Gamesy\Lolko\game\League of Legends.exe:*:Enabled:League of Legends Game Client"
"C:\Gamesy\Activision\Call of Duty 2\CoD2MP_s.exe"="C:\Gamesy\Activision\Call of Duty 2\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Gamesy\Counter-Strike Source\hl2.exe"="C:\Gamesy\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Windows Live\Messenger\wlcsdk.exe"="C:\Program Files\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"wave5"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer4"=wdmaud.drv
"msacm.divxa32"=msaud32_divx.acm
"VIDC.FPS1"=frapsvid.dll
"msacm.siren"=sirenacm.dll
======List of files/folders created in the last 1 month======
2011-09-24 20:38:52 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-09-24 20:28:18 ----HDC---- C:\WINDOWS\$NtUninstallKB961503$
2011-09-23 09:19:20 ----D---- C:\Program Files\TNod User & Password Finder
2011-09-23 09:06:08 ----D---- C:\Program Files\ESET
2011-09-23 09:06:08 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-09-23 08:51:09 ----A---- C:\WINDOWS\system32\msi.dll
2011-09-23 08:51:08 ----A---- C:\WINDOWS\system32\msisip.dll
2011-09-23 08:51:08 ----A---- C:\WINDOWS\system32\msimsg.dll
2011-09-23 08:51:08 ----A---- C:\WINDOWS\system32\msihnd.dll
2011-09-23 08:51:08 ----A---- C:\WINDOWS\system32\msiexec.exe
2011-09-23 08:50:32 ----D---- C:\Program Files\Microsoft
2011-09-23 08:50:18 ----D---- C:\Program Files\Windows Live SkyDrive
2011-09-23 08:49:55 ----D---- C:\Program Files\Windows Live
2011-09-23 08:47:37 ----D---- C:\Program Files\Common Files\Windows Live
2011-09-23 08:38:19 ----A---- C:\Documents and Settings\wqrxs\Data aplikací\pcouffin.sys
2011-09-23 08:38:19 ----A---- C:\Documents and Settings\wqrxs\Data aplikací\inst.exe
2011-09-23 08:28:43 ----D---- C:\Program Files\Common Files\Java
2011-09-23 08:28:28 ----A---- C:\WINDOWS\system32\javaws.exe
2011-09-23 08:28:28 ----A---- C:\WINDOWS\system32\javaw.exe
2011-09-23 08:28:28 ----A---- C:\WINDOWS\system32\java.exe
2011-09-23 08:21:21 ----D---- C:\Program Files\FileHippo.com
2011-09-23 07:20:30 ----SHD---- C:\Config.Msi
2011-09-17 22:48:04 ----D---- C:\Program Files\DsNET Corp
2011-09-17 09:37:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2616676$
2011-09-15 23:06:23 ----A---- C:\WINDOWS\eReg.dat
2011-09-15 22:59:13 ----A---- C:\WINDOWS\CD_Start.INI
2011-09-14 13:04:17 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2011-09-14 07:24:08 ----SHD---- C:\found.000
2011-09-07 22:14:13 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Prison Break
2011-09-07 11:57:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2607712$
2011-09-06 05:24:09 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Opera
2011-09-06 05:24:01 ----D---- C:\Program Files\Opera
2011-09-06 05:15:12 ----A---- C:\WINDOWS\system32\msvcr71.dll
2011-09-06 05:15:11 ----A---- C:\WINDOWS\system32\msvcp71.dll
2011-09-06 05:13:06 ----A---- C:\WINDOWS\system32\mfc71.dll
2011-09-05 12:20:41 ----A---- C:\WINDOWS\WORDPAD.INI
2011-09-04 19:59:01 ----D---- C:\WINDOWS\system32\appmgmt
2011-08-31 07:20:01 ----D---- C:\Program Files\GamePark2
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\psisdecd.dll
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\wstcodec.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\streamip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\slip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\ndisip.sys
2011-08-31 07:10:21 ----A---- C:\WINDOWS\system32\drivers\nabtsfec.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\msdv.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\mpe.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\ccdecode.sys
2011-08-31 07:10:20 ----A---- C:\WINDOWS\system32\drivers\bdasup.sys
2011-08-30 23:22:28 ----A---- C:\WINDOWS\system32\drivers\atksgt.sys
2011-08-30 23:22:27 ----A---- C:\WINDOWS\system32\drivers\lirsgt.sys
2011-08-29 17:30:03 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Allstar
2011-08-29 10:23:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2570791$
2011-08-29 10:22:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-29 10:21:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-29 10:21:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2011-08-29 10:21:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-29 10:16:54 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-08-29 10:16:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-29 10:16:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
======List of files/folders modified in the last 1 month======
2011-09-25 21:12:39 ----D---- C:\Program Files\trend micro
2011-09-25 20:58:32 ----D---- C:\WINDOWS\Temp
2011-09-25 20:52:03 ----D---- C:\WINDOWS
2011-09-25 18:08:11 ----D---- C:\WINDOWS\Minidump
2011-09-25 18:03:20 ----D---- C:\WINDOWS\system32\CatRoot2
2011-09-25 17:34:21 ----SHD---- C:\WINDOWS\Installer
2011-09-25 17:34:21 ----D---- C:\WINDOWS\system32\DirectX
2011-09-25 17:34:20 ----HD---- C:\WINDOWS\inf
2011-09-25 17:34:10 ----RSD---- C:\WINDOWS\assembly
2011-09-25 17:33:55 ----D---- C:\WINDOWS\Logs
2011-09-25 17:32:59 ----D---- C:\WINDOWS\Prefetch
2011-09-25 17:10:39 ----D---- C:\WINDOWS\Microsoft.NET
2011-09-25 16:55:46 ----D---- C:\WINDOWS\system32
2011-09-24 21:15:22 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-09-24 20:28:25 ----D---- C:\WINDOWS\WinSxS
2011-09-24 20:28:20 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-09-24 20:24:33 ----D---- C:\WINDOWS\SxsCaPendDel
2011-09-24 20:24:01 ----D---- C:\Gamesy
2011-09-23 11:43:25 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\DAEMON Tools Lite
2011-09-23 11:43:24 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\uTorrent
2011-09-23 10:06:50 ----A---- C:\WINDOWS\NeroDigital.ini
2011-09-23 09:38:54 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-09-23 09:38:54 ----D---- C:\WINDOWS\SoftwareDistribution
2011-09-23 09:36:36 ----A---- C:\WINDOWS\win.ini
2011-09-23 09:36:36 ----A---- C:\WINDOWS\system.ini
2011-09-23 09:19:20 ----RD---- C:\Program Files
2011-09-23 09:16:24 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-23 09:06:58 ----D---- C:\WINDOWS\system32\drivers
2011-09-23 09:00:17 ----SD---- C:\WINDOWS\Tasks
2011-09-23 08:56:55 ----D---- C:\WINDOWS\Help
2011-09-23 08:55:22 ----D---- C:\Program Files\World of Warcraft TBC
2011-09-23 08:50:03 ----RSD---- C:\WINDOWS\Fonts
2011-09-23 08:47:37 ----D---- C:\Program Files\Common Files
2011-09-23 08:47:24 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-09-23 08:46:27 ----D---- C:\Program Files\Mozilla Firefox
2011-09-23 08:42:31 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Skype
2011-09-23 08:38:33 ----D---- C:\Program Files\VSO
2011-09-23 08:38:19 ----D---- C:\Documents and Settings\wqrxs\Data aplikací\Vso
2011-09-23 08:37:34 ----D---- C:\Program Files\uTorrent
2011-09-23 08:31:59 ----RD---- C:\Program Files\Skype
2011-09-23 08:31:07 ----D---- C:\Program Files\The KMPlayer
2011-09-23 08:28:14 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-09-23 08:28:11 ----D---- C:\Program Files\Java
2011-09-23 08:25:44 ----D---- C:\Program Files\WinRAR
2011-09-23 08:23:08 ----D---- C:\Program Files\CCleaner
2011-09-23 08:14:53 ----D---- C:\Program Files\AVAST Software
2011-09-21 14:32:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-09-18 10:22:52 ----D---- C:\WINDOWS\Debug
2011-09-17 09:28:36 ----A---- C:\WINDOWS\system32\MRT.exe
2011-09-16 06:27:22 ----A---- C:\WINDOWS\system32\CmdLineExt.dll
2011-09-15 23:12:19 ----HD---- C:\Program Files\InstallShield Installation Information
2011-09-15 06:07:55 ----D---- C:\Program Files\DaemonicMU Season IV
2011-09-10 09:57:19 ----D---- C:\WINDOWS\security
2011-09-09 11:12:04 ----A---- C:\WINDOWS\system32\crypt32.dll
2011-09-08 13:07:21 ----D---- C:\WINDOWS\pss
2011-09-03 18:02:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-09-03 15:01:15 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2011-08-31 07:10:47 ----D---- C:\WINDOWS\RegisteredPackages
2011-08-31 07:09:56 ----A---- C:\WINDOWS\game.ini
2011-08-30 17:14:50 ----D---- C:\Program Files\Common Files\InstallShield
2011-08-29 10:16:47 ----D---- C:\Program Files\Internet Explorer
2011-08-29 10:16:40 ----D---- C:\WINDOWS\ie8updates
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-05-17 92800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-01 218688]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2011-08-04 103112]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 atksgt;atksgt; C:\WINDOWS\system32\DRIVERS\atksgt.sys [2011-08-30 279712]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 lirsgt;lirsgt; C:\WINDOWS\system32\DRIVERS\lirsgt.sys [2011-08-30 25888]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-04-25 4030144]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-11-18 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2011-01-08 9888672]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-04-06 33536]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2010-11-12 100456]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-04-06 12928]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 EverestDriver;Lavalys EVEREST Kernel Driver; \??\C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-09-23 26176]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-09-08 974944]
R2 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2011-03-01 75136]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-06-24 537896]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2011-09-23 161664]
S4 Nero BackItUp Scheduler 3;Nero BackItUp Scheduler 3; C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe [2008-06-08 877864]
S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
S4 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2011-01-07 156776]
S4 PLFlash DeviceIoControl Service;PLFlash DeviceIoControl Service; C:\WINDOWS\system32\IoctlSvc.exe [2006-12-19 81920]
-----------------EOF-----------------
-
chodnik74
- Přítel fóra
- Příspěvky: 4975
- Registrován: 13 Zář 2010 21:30
- Místo/Bydliště: Napajedla
- Kontaktovat uživatele:
Re: Zpomalené PC, pády, neůmyslné restarty.
Bohužel nebudeme moci dále pokračovat,dokud budete mít v pc nelegální programy... Jako je třeba ESET
Pravidla fora: č.1 a č.2, č.3
Pravidla fora: č.1 a č.2, č.3
Napiš mi: chodnik74@gmail.com nebo
>RSIT<>MBAM<>VirusTotal
Doporučuji: |
Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce!
Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce!
Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.
Pravidla fora: č.1 a č.2
>RSIT<>MBAM<>VirusTotal
Doporučuji:
| Postup si raději vícekrát přečtěte a v případě jakýchkoliv nejasností či pochybností se ptejte. Pokud máte infikovaný počítač nebo se nechová jako obvykle, tak si zálohujte všechny data a pozorně postupujte dle pokynů rádce! Nepoužívejte utilitu Combofix bez dohledu a doporučení rádce! Jste s naší pomocí spokojeni Neváhejte a podpořte forum ZDE.Pravidla fora: č.1 a č.2
Přispějete na provoz fóra?