Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Prosím o kontrolu

#1 Příspěvek od Eliška »

Dobrý večer, prosím o preventivní kontrolu. :)

Děkuji.


Logfile of random's system information tool 1.09 (written by random/random)
Run by User at 2012-02-19 21:40:42
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 236 GB (80%) free of 295 GB
Total RAM: 3956 MB (37% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:40:53, on 19.2.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe
C:\Windows\SysWOW64\RunDll32.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\ICQ7.7\ICQ.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe
c:\windows\syswow64\rundll32.exe
C:\Program Files\trend micro\User.exe
c:\windows\syswow64\rundll32.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource= ... =CT3072253
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {687578b9-7132-4a7a-80e4-30ee31099e03} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\IPS\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\coIEPlg.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.7 - {77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - C:\Program Files (x86)\ICQ7.7\ICQ.exe
O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Send to &Bluetooth Device... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @c:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - c:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TurboBoost - Intel(R) Corporation - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11271 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe 20641808
\??\C:\Windows\system32\conhost.exe "-901054708-8168046116121783151483315547-1944914697399279991602495931832905160
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe"
"C:\Program Files (x86)\Launch Manager\dsiwmis.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe"
"C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe"
"C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\diMaster.dll" /prefetch:1
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
"C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe"
"C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE"
"C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files\Apoint2K\Apoint.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe"
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe"
WLIDSvcM.exe 2608
"C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe" /c /a /s UserSession
C:\Windows\SysWOW64\RunDll32.exe "C:\Program Files\WIDCOMM\Bluetooth Software\SysWOW64\BtMmHook.dll",SetAndWaitBtMmHook
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Launch Manager\LManager.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe"
"C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe"
"C:\Program Files (x86)\Launch Manager\LMworker.exe"
"C:\Program Files (x86)\Winamp\winampa.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Apoint2K\ApMsgFwd.exe" -s{05FA8492-C047-4207-BE65-780D8591C113}
"C:\Program Files\Apoint2K\HidFind.exe"
"Apntex.exe"
\??\C:\Windows\system32\conhost.exe "-2129341962492281703-1716567417-1328853012-1136250311159116830620916864271480330629
"C:\Program Files\Intel\TurboBoost\TurboBoost.exe"
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"c:\Program Files (x86)\Nero\Update\NASvc.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k SDRSVC
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Windows\system32\mspaint.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe" /PhotoViewerComServer {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} -Embedding
"C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe" /PhotoViewerComServer {00F30F64-AC33-42F5-8FD1-5DC2D3FDE06C} -Embedding
"C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe" --type=extension --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_http/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=7108.026956E0.1527459385 --ignored=" --type=renderer " /prefetch:3
"C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_http/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=7108.0625B160.934430787 /prefetch:3
"C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtest=ConnCountImpact/conn_count_6/ConnnectBackupJobs/ConnectBackupJobsEnabled/DnsImpact/default_enabled_prefetch/DnsParallelism/parallel_default/GlobalSdch/global_enable_sdch/IdleSktToImpact/idle_timeout_10/Prefetch/ContentPrefetchPrerender2/ProxyConnectionImpact/proxy_connections_32/SpdyCwnd/cwndMin16/SpdyImpact/npn_with_http/SuggestHostPrefix/Www_Prefix/WarmSocketImpact/warm_socket/ --enable-print-preview --channel=7108.064C29A0.875783990 /prefetch:3
"C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
"C:\Program Files (x86)\ICQ7.7\ICQ.exe"
C:\Windows\system32\rundll32.exe "C:\Users\User\AppData\Local\Google\Chrome\APPLIC~1\150874~1.102\gcswf32.dll",BrokerMain browser=chrome
"C:\Users\User\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path="C:\Users\User\AppData\Local\Google\Chrome\Application\15.0.874.102\gcswf32.dll" --lang=cs --channel=7108.08B4F380.157071434 --flash-broker=2932 /prefetch:4
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\User\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
c:\windows\syswow64\rundll32.exe "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.1.0.37\definitions\virusdefs\20120218.008\cceraser.dll", RunServer S-1-5-21-1721255151-886926654-136957646-1000
c:\windows\syswow64\rundll32.exe "c:\programdata\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\nis_18.1.0.37\definitions\virusdefs\20120218.008\cceraser.dll", RunServer pS-1-5-21-1721255151-886926654-136957646-1000

======Scheduled tasks folder======

C:\Windows\tasks\Packard Bell Registration - Reminder Recall task.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - c:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\coIEPlg.dll [2011-12-09 436152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\IPS\IPSBHO.DLL [2011-03-31 210872]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-02-04 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-02-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\coIEPlg.dll [2011-12-09 436152]
{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2010-06-10 324608]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-07-29 11101800]
"Apoint"=C:\Program Files\Apoint2K\Apoint.exe [2009-10-22 325120]
"Acer ePower Management"=C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2011-01-06 860040]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-21 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
c:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-28 35696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray]
C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [2010-06-28 263936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files (x86)\ICQ7.7\ICQ.exe [2012-02-01 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Norton Online Backup]
C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-01 1155928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2012-01-20 5487488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files (x86)\Winamp\winampa.exe [2011-12-09 74752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~2\MICROS~4\Office10\OSA.EXE [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-01-22 98304]
"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2010-08-11 975952]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-02-19 17:01:07 ----A---- C:\Users\User\AppData\Roaming\GDIPFONTCACHEV1.DAT
2012-02-18 13:41:20 ----D---- C:\Users\User\AppData\Roaming\TSRWorkshop
2012-02-18 13:40:06 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2012-02-18 13:40:06 ----A---- C:\Windows\system32\D3DX9_41.dll
2012-02-18 13:40:06 ----A---- C:\Windows\system32\d3dx10_41.dll
2012-02-18 13:40:06 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2012-02-18 13:40:05 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2012-02-18 13:40:05 ----A---- C:\Windows\system32\XAudio2_4.dll
2012-02-18 13:40:05 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2012-02-18 13:40:04 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2012-02-18 13:40:04 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2012-02-18 13:40:03 ----A---- C:\Windows\SYSWOW64\xinput1_3.dll
2012-02-18 13:40:03 ----A---- C:\Windows\system32\xinput1_3.dll
2012-02-18 12:44:03 ----D---- C:\Program Files (x86)\EA GAMES
2012-02-18 12:44:02 ----RA---- C:\Windows\SYSWOW64\vp6vfw.dll
2012-02-18 12:32:45 ----A---- C:\Windows\SYSWOW64\d3dx9_31.dll
2012-02-18 12:31:46 ----D---- C:\Program Files (x86)\Winamp Detect
2012-02-18 12:31:21 ----D---- C:\Users\User\AppData\Roaming\Winamp
2012-02-18 12:31:21 ----D---- C:\Program Files (x86)\Winamp
2012-02-15 07:23:02 ----A---- C:\Windows\system32\mshtmled.dll
2012-02-15 07:23:00 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-02-15 07:23:00 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-02-15 07:23:00 ----A---- C:\Windows\system32\iertutil.dll
2012-02-15 07:22:59 ----A---- C:\Windows\SYSWOW64\url.dll
2012-02-15 07:22:59 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-02-15 07:22:59 ----A---- C:\Windows\system32\url.dll
2012-02-15 07:22:59 ----A---- C:\Windows\system32\jscript9.dll
2012-02-15 07:22:59 ----A---- C:\Windows\system32\ieui.dll
2012-02-15 07:22:58 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-02-15 07:22:58 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-02-15 07:22:58 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-02-15 07:22:58 ----A---- C:\Windows\system32\urlmon.dll
2012-02-15 07:22:58 ----A---- C:\Windows\system32\jscript.dll
2012-02-15 07:22:57 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-02-15 07:22:57 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-02-15 07:22:57 ----A---- C:\Windows\system32\wininet.dll
2012-02-15 07:22:57 ----A---- C:\Windows\system32\jsproxy.dll
2012-02-15 07:22:56 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-02-15 07:22:55 ----A---- C:\Windows\system32\mshtml.dll
2012-02-15 07:22:54 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-02-15 07:22:54 ----A---- C:\Windows\system32\ieframe.dll
2012-02-15 07:05:40 ----A---- C:\Windows\system32\shell32.dll
2012-02-15 07:05:39 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-02-15 07:05:39 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-02-15 07:05:39 ----A---- C:\Windows\system32\ntshrui.dll
2012-02-15 07:05:19 ----A---- C:\Windows\system32\win32k.sys
2012-02-15 07:05:12 ----A---- C:\Windows\system32\drivers\afd.sys
2012-02-15 07:04:56 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-02-15 07:04:56 ----A---- C:\Windows\system32\msvcrt.dll
2012-02-14 20:52:39 ----D---- C:\Program Files (x86)\SpeedFan
2012-02-13 14:42:36 ----D---- C:\Program Files\Golden
2012-02-13 14:41:25 ----D---- C:\Users\User\AppData\Roaming\PSpad
2012-02-13 10:44:09 ----D---- C:\Users\User\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2012-02-09 20:47:52 ----D---- C:\Windows\pss
2012-02-08 19:28:49 ----D---- C:\Users\User\AppData\Roaming\Mozilla
2012-02-08 19:28:47 ----D---- C:\Program Files (x86)\Conduit
2012-02-08 19:26:34 ----D---- C:\Program Files (x86)\uTorrent
2012-02-08 19:25:29 ----D---- C:\Users\User\AppData\Roaming\uTorrent
2012-02-05 18:56:23 ----A---- C:\Windows\ODBC.INI
2012-02-05 18:54:25 ----D---- C:\Windows\Msagent
2012-02-04 21:20:37 ----D---- C:\Windows\Sun
2012-02-04 21:20:34 ----D---- C:\ProgramData\Sun
2012-02-04 21:20:20 ----A---- C:\Windows\SYSWOW64\deployJava1.dll
2012-02-04 21:20:19 ----A---- C:\Windows\SYSWOW64\javaws.exe
2012-02-04 21:20:19 ----A---- C:\Windows\SYSWOW64\javaw.exe
2012-02-04 21:20:19 ----A---- C:\Windows\SYSWOW64\java.exe
2012-02-04 21:20:01 ----D---- C:\Program Files (x86)\Java
2012-02-04 18:44:27 ----D---- C:\Users\User\AppData\Roaming\Opera
2012-02-04 18:44:16 ----D---- C:\Program Files (x86)\Opera
2012-02-04 16:29:25 ----D---- C:\Program Files (x86)\Metin2
2012-02-04 12:15:52 ----D---- C:\Users\User\AppData\Roaming\SUPERAntiSpyware.com
2012-02-04 12:15:30 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2012-02-04 12:15:30 ----D---- C:\Program Files\SUPERAntiSpyware
2012-02-04 10:06:02 ----A---- C:\Windows\system32\drivers\nhcDriver.sys
2012-02-04 10:05:56 ----D---- C:\Users\User\AppData\Roaming\Notebook Hardware Control
2012-02-04 09:59:34 ----D---- C:\swsetup
2012-02-03 14:19:39 ----D---- C:\Users\User\AppData\Roaming\Windows Live Writer
2012-02-03 14:07:12 ----D---- C:\Chcete být milionářem LT
2012-02-03 13:44:07 ----RD---- C:\Program Files (x86)\Skype
2012-02-03 13:44:06 ----D---- C:\Users\User\AppData\Roaming\Skype
2012-02-03 12:47:37 ----D---- C:\Program Files (x86)\My life 1.5
2012-02-03 10:56:36 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2012-02-03 10:00:50 ----D---- C:\rsit
2012-02-03 10:00:50 ----D---- C:\Program Files\trend micro
2012-02-03 09:47:12 ----D---- C:\Program Files (x86)\Microsoft.NET
2012-02-02 21:08:35 ----D---- C:\Users\User\AppData\Roaming\Floodlight Games
2012-02-02 21:08:35 ----D---- C:\ProgramData\Floodlight Games
2012-02-02 19:01:56 ----D---- C:\Users\User\AppData\Roaming\vlc
2012-02-02 19:01:31 ----D---- C:\Program Files (x86)\VideoLAN
2012-02-01 18:40:49 ----A---- C:\Windows\system32\drivers\usbuhci.sys
2012-02-01 18:40:49 ----A---- C:\Windows\system32\drivers\usbport.sys
2012-02-01 18:40:49 ----A---- C:\Windows\system32\drivers\usbohci.sys
2012-02-01 18:40:49 ----A---- C:\Windows\system32\drivers\usbhub.sys
2012-02-01 18:40:49 ----A---- C:\Windows\system32\drivers\usbehci.sys
2012-02-01 18:40:49 ----A---- C:\Windows\system32\drivers\usbd.sys
2012-02-01 18:40:49 ----A---- C:\Windows\system32\drivers\usbccgp.sys
2012-02-01 18:40:43 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2012-02-01 18:40:43 ----A---- C:\Windows\system32\drivers\bthport.sys
2012-02-01 18:40:33 ----A---- C:\Windows\SYSWOW64\fsutil.exe
2012-02-01 18:40:33 ----A---- C:\Windows\SYSWOW64\esent.dll
2012-02-01 18:40:33 ----A---- C:\Windows\system32\fsutil.exe
2012-02-01 18:40:33 ----A---- C:\Windows\system32\esent.dll
2012-02-01 18:40:33 ----A---- C:\Windows\system32\drivers\USBSTOR.SYS
2012-02-01 18:40:33 ----A---- C:\Windows\system32\drivers\storport.sys
2012-02-01 18:40:33 ----A---- C:\Windows\system32\drivers\nvstor.sys
2012-02-01 18:40:33 ----A---- C:\Windows\system32\drivers\nvraid.sys
2012-02-01 18:40:33 ----A---- C:\Windows\system32\drivers\ntfs.sys
2012-02-01 18:40:33 ----A---- C:\Windows\system32\drivers\iaStorV.sys
2012-02-01 18:40:33 ----A---- C:\Windows\system32\drivers\amdxata.sys
2012-02-01 18:40:33 ----A---- C:\Windows\system32\drivers\amdsata.sys
2012-02-01 18:38:46 ----D---- C:\Users\User\AppData\Roaming\ICQ
2012-02-01 18:38:41 ----D---- C:\Program Files (x86)\ICQ7.7
2012-01-30 08:32:17 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-01-30 08:32:17 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-01-30 08:32:17 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-01-30 08:32:17 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-01-30 08:32:17 ----A---- C:\Windows\system32\webio.dll
2012-01-30 08:32:17 ----A---- C:\Windows\system32\sspisrv.dll
2012-01-30 08:32:17 ----A---- C:\Windows\system32\sspicli.dll
2012-01-30 08:32:17 ----A---- C:\Windows\system32\schannel.dll
2012-01-30 08:32:17 ----A---- C:\Windows\system32\secur32.dll
2012-01-30 08:32:17 ----A---- C:\Windows\system32\lsass.exe
2012-01-30 08:32:17 ----A---- C:\Windows\system32\lsasrv.dll
2012-01-30 08:32:17 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-01-30 08:32:17 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-01-30 08:32:17 ----A---- C:\Windows\system32\drivers\cng.sys
2012-01-30 08:32:14 ----A---- C:\Windows\SYSWOW64\quartz.dll
2012-01-30 08:32:14 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2012-01-30 08:32:14 ----A---- C:\Windows\system32\quartz.dll
2012-01-30 08:32:14 ----A---- C:\Windows\system32\qdvd.dll
2012-01-30 08:31:59 ----A---- C:\Windows\SYSWOW64\xmllite.dll
2012-01-30 08:31:59 ----A---- C:\Windows\system32\xmllite.dll
2012-01-30 08:31:58 ----A---- C:\Windows\SYSWOW64\odbcjt32.dll
2012-01-30 08:31:58 ----A---- C:\Windows\SYSWOW64\odbccu32.dll
2012-01-30 08:31:58 ----A---- C:\Windows\SYSWOW64\odbccr32.dll
2012-01-30 08:31:58 ----A---- C:\Windows\SYSWOW64\odbccp32.dll
2012-01-30 08:31:58 ----A---- C:\Windows\system32\odbctrac.dll
2012-01-30 08:31:58 ----A---- C:\Windows\system32\odbccu32.dll
2012-01-30 08:31:58 ----A---- C:\Windows\system32\odbccr32.dll
2012-01-30 08:31:58 ----A---- C:\Windows\system32\odbccp32.dll
2012-01-30 08:31:57 ----A---- C:\Windows\SYSWOW64\odbctrac.dll
2012-01-30 08:31:53 ----A---- C:\Windows\SYSWOW64\poqexec.exe
2012-01-30 08:31:53 ----A---- C:\Windows\system32\poqexec.exe
2012-01-30 08:31:51 ----A---- C:\Windows\SYSWOW64\explorer.exe
2012-01-30 08:31:51 ----A---- C:\Windows\explorer.exe
2012-01-30 08:31:50 ----A---- C:\Windows\SYSWOW64\CPFilters.dll
2012-01-30 08:31:50 ----A---- C:\Windows\system32\CPFilters.dll
2012-01-30 08:31:49 ----A---- C:\Windows\SYSWOW64\sbe.dll
2012-01-30 08:31:49 ----A---- C:\Windows\system32\sbe.dll
2012-01-30 08:31:18 ----A---- C:\Windows\system32\tquery.dll
2012-01-30 08:31:18 ----A---- C:\Windows\system32\SearchIndexer.exe
2012-01-30 08:31:18 ----A---- C:\Windows\system32\mssrch.dll
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\tquery.dll
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\SearchProtocolHost.exe
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\SearchIndexer.exe
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\SearchFilterHost.exe
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\mssvp.dll
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\mssrch.dll
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\mssphtb.dll
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\mssph.dll
2012-01-30 08:31:17 ----A---- C:\Windows\SYSWOW64\msscntrs.dll
2012-01-30 08:31:17 ----A---- C:\Windows\system32\SearchProtocolHost.exe
2012-01-30 08:31:17 ----A---- C:\Windows\system32\SearchFilterHost.exe
2012-01-30 08:31:17 ----A---- C:\Windows\system32\mssvp.dll
2012-01-30 08:31:17 ----A---- C:\Windows\system32\mssphtb.dll
2012-01-30 08:31:17 ----A---- C:\Windows\system32\mssph.dll
2012-01-30 08:31:17 ----A---- C:\Windows\system32\msscntrs.dll
2012-01-30 08:31:16 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2012-01-30 08:31:16 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2012-01-30 08:31:15 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2012-01-30 08:31:11 ----A---- C:\Windows\system32\csrsrv.dll
2012-01-30 08:31:10 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2012-01-30 08:31:09 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2012-01-30 08:31:03 ----A---- C:\Windows\system32\drivers\tcpip.sys
2012-01-30 08:31:02 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2012-01-30 08:31:02 ----A---- C:\Windows\system32\XpsPrint.dll
2012-01-30 08:31:01 ----A---- C:\Windows\system32\mfc42u.dll
2012-01-30 08:31:01 ----A---- C:\Windows\system32\mfc42.dll
2012-01-30 08:31:00 ----A---- C:\Windows\SYSWOW64\mfc42u.dll
2012-01-30 08:31:00 ----A---- C:\Windows\SYSWOW64\mfc42.dll
2012-01-30 08:30:49 ----A---- C:\Windows\system32\drivers\Diskdump.sys
2012-01-30 08:30:48 ----A---- C:\Windows\SYSWOW64\dnscacheugc.exe
2012-01-30 08:30:48 ----A---- C:\Windows\SYSWOW64\dnsapi.dll
2012-01-30 08:30:48 ----A---- C:\Windows\system32\dnsrslvr.dll
2012-01-30 08:30:48 ----A---- C:\Windows\system32\dnscacheugc.exe
2012-01-30 08:30:48 ----A---- C:\Windows\system32\dnsapi.dll
2012-01-30 08:30:47 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2012-01-30 08:30:47 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2012-01-30 08:30:47 ----A---- C:\Windows\system32\atmlib.dll
2012-01-30 08:30:47 ----A---- C:\Windows\system32\atmfd.dll
2012-01-30 08:30:46 ----A---- C:\Windows\system32\drivers\srv2.sys
2012-01-30 08:30:46 ----A---- C:\Windows\system32\drivers\srv.sys
2012-01-30 08:30:45 ----A---- C:\Windows\system32\drivers\srvnet.sys
2012-01-30 08:30:43 ----A---- C:\Windows\SYSWOW64\psisdecd.dll
2012-01-30 08:30:43 ----A---- C:\Windows\system32\psisdecd.dll
2012-01-30 08:30:34 ----A---- C:\Windows\system32\winresume.exe
2012-01-30 08:30:34 ----A---- C:\Windows\system32\winload.exe
2012-01-30 08:30:34 ----A---- C:\Windows\system32\kdusb.dll
2012-01-30 08:30:34 ----A---- C:\Windows\system32\kdcom.dll
2012-01-30 08:30:34 ----A---- C:\Windows\system32\kd1394.dll
2012-01-30 08:23:41 ----A---- C:\Windows\system32\drivers\athrx.sys
2012-01-30 08:23:40 ----D---- C:\Windows\system32\nn-NO
2012-01-30 08:23:40 ----D---- C:\Program Files (x86)\Atheros
2012-01-30 08:23:40 ----A---- C:\Windows\system32\athihvui.dll
2012-01-30 08:23:40 ----A---- C:\Windows\system32\athihvs.dll
2012-01-30 08:22:44 ----D---- C:\ProgramData\Atheros
2012-01-23 06:12:53 ----D---- C:\Windows\SYSWOW64\Wat
2012-01-23 06:12:53 ----D---- C:\Windows\system32\Wat
2012-01-22 22:28:30 ----D---- C:\Program Files (x86)\MSXML 4.0
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2012-01-22 22:06:28 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2012-01-22 22:06:28 ----A---- C:\Windows\SYSWOW64\wow32.dll
2012-01-22 22:06:28 ----A---- C:\Windows\SYSWOW64\setup16.exe
2012-01-22 22:06:28 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2012-01-22 22:06:28 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2012-01-22 22:06:28 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2012-01-22 22:06:28 ----A---- C:\Windows\SYSWOW64\instnm.exe
2012-01-22 22:06:28 ----A---- C:\Windows\system32\wow64win.dll
2012-01-22 22:06:28 ----A---- C:\Windows\system32\wow64cpu.dll
2012-01-22 22:06:28 ----A---- C:\Windows\system32\wow64.dll
2012-01-22 22:06:28 ----A---- C:\Windows\system32\winsrv.dll
2012-01-22 22:06:28 ----A---- C:\Windows\system32\ntvdm64.dll
2012-01-22 22:06:28 ----A---- C:\Windows\system32\KernelBase.dll
2012-01-22 22:06:28 ----A---- C:\Windows\system32\kernel32.dll
2012-01-22 22:06:28 ----A---- C:\Windows\system32\conhost.exe
2012-01-22 22:06:27 ----A---- C:\Windows\SYSWOW64\user.exe
2012-01-22 22:06:16 ----A---- C:\Windows\SYSWOW64\drvinst.exe
2012-01-22 22:06:16 ----A---- C:\Windows\SYSWOW64\devrtl.dll
2012-01-22 22:06:16 ----A---- C:\Windows\SYSWOW64\devobj.dll
2012-01-22 22:06:16 ----A---- C:\Windows\SYSWOW64\cfgmgr32.dll
2012-01-22 22:06:16 ----A---- C:\Windows\system32\umpnpmgr.dll
2012-01-22 22:06:13 ----A---- C:\Windows\SYSWOW64\prevhost.exe
2012-01-22 22:06:13 ----A---- C:\Windows\system32\prevhost.exe
2012-01-22 22:06:12 ----A---- C:\Windows\system32\FXSCOVER.exe
2012-01-22 22:06:10 ----A---- C:\Windows\SYSWOW64\inetcomm.dll
2012-01-22 22:06:10 ----A---- C:\Windows\system32\inetcomm.dll
2012-01-22 22:05:56 ----A---- C:\Windows\system32\drivers\bowser.sys
2012-01-22 22:05:49 ----A---- C:\Windows\SYSWOW64\oleaut32.dll
2012-01-22 22:05:49 ----A---- C:\Windows\SYSWOW64\oleacc.dll
2012-01-22 22:05:49 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2012-01-22 22:05:49 ----A---- C:\Windows\system32\oleaut32.dll
2012-01-22 22:05:49 ----A---- C:\Windows\system32\oleacc.dll
2012-01-22 22:05:49 ----A---- C:\Windows\system32\EncDec.dll
2012-01-22 22:05:46 ----A---- C:\Windows\SYSWOW64\tzres.dll
2012-01-22 22:05:46 ----A---- C:\Windows\system32\tzres.dll
2012-01-22 22:05:36 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2012-01-22 22:05:36 ----A---- C:\Windows\system32\ntdll.dll
2012-01-22 22:05:33 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2012-01-22 22:05:32 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2012-01-22 22:05:32 ----A---- C:\Windows\system32\ntoskrnl.exe
2012-01-22 22:05:17 ----A---- C:\Windows\SYSWOW64\packager.dll
2012-01-22 22:05:17 ----A---- C:\Windows\system32\packager.dll
2012-01-22 17:32:18 ----D---- C:\ProgramData\VirtualizedApplications
2012-01-22 14:56:40 ----D---- C:\ProgramData\Microsoft Help
2012-01-22 14:54:05 ----RHD---- C:\MSOCache
2012-01-22 14:48:51 ----D---- C:\Users\User\AppData\Roaming\SoftGrid Client
2012-01-22 14:48:11 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2012-01-22 14:48:05 ----D---- C:\Program Files\Microsoft Office
2012-01-22 14:48:05 ----D---- C:\Program Files (x86)\Microsoft Application Virtualization Client
2012-01-22 14:47:47 ----D---- C:\Users\User\AppData\Roaming\TP

======List of files/folders modified in the last 1 month======

2012-02-19 20:52:33 ----D---- C:\Windows\Temp
2012-02-19 19:50:43 ----D---- C:\Windows\System32
2012-02-19 19:50:43 ----D---- C:\Windows\inf
2012-02-19 19:50:43 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-02-19 17:19:54 ----D---- C:\Windows\Microsoft.NET
2012-02-19 17:19:53 ----RSD---- C:\Windows\assembly
2012-02-19 17:01:50 ----SD---- C:\Users\User\AppData\Roaming\Microsoft
2012-02-19 16:34:22 ----D---- C:\Windows\Tasks
2012-02-19 16:34:22 ----D---- C:\Windows\system32\Tasks
2012-02-19 10:19:55 ----D---- C:\Windows\system32\config
2012-02-19 10:15:36 ----SHD---- C:\System Volume Information
2012-02-19 10:11:23 ----SHD---- C:\Windows\Installer
2012-02-19 09:41:20 ----A---- C:\Windows\SYSWOW64\log.txt
2012-02-19 01:09:30 ----D---- C:\Windows\system32\wdi
2012-02-18 13:43:20 ----RD---- C:\Program Files (x86)
2012-02-18 13:40:06 ----D---- C:\Windows\SysWOW64
2012-02-16 16:51:25 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2012-02-15 16:41:58 ----D---- C:\Windows\winsxs
2012-02-15 16:39:57 ----D---- C:\Windows\system32\drivers
2012-02-15 16:39:56 ----D---- C:\Program Files\Internet Explorer
2012-02-15 16:39:56 ----D---- C:\Program Files (x86)\Internet Explorer
2012-02-15 16:39:54 ----D---- C:\Windows\SYSWOW64\migration
2012-02-15 16:39:54 ----D---- C:\Windows\system32\migration
2012-02-15 07:23:42 ----D---- C:\Windows\system32\catroot
2012-02-15 07:23:39 ----D---- C:\Windows\system32\catroot2
2012-02-13 14:42:36 ----RD---- C:\Program Files
2012-02-11 13:39:03 ----D---- C:\Windows
2012-02-11 13:37:13 ----D---- C:\Program Files (x86)\Common Files
2012-02-11 07:22:43 ----D---- C:\Windows\system32\drivers\NISx64
2012-02-09 18:33:10 ----D---- C:\Windows\system32\DriverStore
2012-02-08 20:42:47 ----D---- C:\ProgramData\boost_interprocess
2012-02-06 18:02:05 ----D---- C:\ProgramData\Adobe
2012-02-05 18:56:48 ----RSD---- C:\Windows\Fonts
2012-02-05 18:55:52 ----A---- C:\Windows\win.ini
2012-02-05 18:55:08 ----D---- C:\Windows\ShellNew
2012-02-05 18:54:45 ----D---- C:\Program Files (x86)\Microsoft Office
2012-02-05 18:54:25 ----D---- C:\Windows\Help
2012-02-05 18:54:15 ----SD---- C:\ProgramData\Microsoft
2012-02-05 18:51:49 ----D---- C:\Windows\system
2012-02-04 21:20:34 ----HD---- C:\ProgramData
2012-02-04 17:13:20 ----D---- C:\Users\User\AppData\Roaming\Adobe
2012-02-04 09:52:24 ----D---- C:\Windows\Prefetch
2012-02-03 13:43:59 ----D---- C:\ProgramData\Skype
2012-02-03 09:52:51 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-02-03 09:52:51 ----D---- C:\Windows\system32\cs-CZ
2012-02-03 09:47:13 ----D---- C:\Windows\SYSWOW64\en-US
2012-02-03 09:47:13 ----D---- C:\Windows\system32\en-US
2012-02-02 21:08:35 ----D---- C:\ProgramData\WildTangent
2012-02-01 18:31:36 ----D---- C:\Windows\ehome
2012-02-01 18:31:36 ----D---- C:\Program Files\Common Files\System
2012-02-01 18:31:28 ----D---- C:\Windows\AppPatch
2012-02-01 18:31:27 ----D---- C:\Windows\system32\Boot
2012-02-01 18:26:30 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-01-30 09:40:41 ----SHD---- C:\$Recycle.Bin
2012-01-30 08:23:40 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-01-30 08:23:40 ----D---- C:\Windows\system32\zh-TW
2012-01-30 08:23:40 ----D---- C:\Windows\system32\zh-CN
2012-01-30 08:23:40 ----D---- C:\Windows\system32\tr-TR
2012-01-30 08:23:40 ----D---- C:\Windows\system32\sv-SE
2012-01-30 08:23:40 ----D---- C:\Windows\system32\ru-RU
2012-01-30 08:23:40 ----D---- C:\Windows\system32\pt-PT
2012-01-30 08:23:40 ----D---- C:\Windows\system32\pl-PL
2012-01-30 08:23:40 ----D---- C:\Windows\system32\nl-NL
2012-01-30 08:23:40 ----D---- C:\Windows\system32\ko-KR
2012-01-30 08:23:40 ----D---- C:\Windows\system32\ja-JP
2012-01-30 08:23:40 ----D---- C:\Windows\system32\it-IT
2012-01-30 08:23:40 ----D---- C:\Windows\system32\hu-HU
2012-01-30 08:23:40 ----D---- C:\Windows\system32\fr-FR
2012-01-30 08:23:40 ----D---- C:\Windows\system32\fi-FI
2012-01-30 08:23:40 ----D---- C:\Windows\system32\es-ES
2012-01-30 08:23:40 ----D---- C:\Windows\system32\el-GR
2012-01-30 08:23:40 ----D---- C:\Windows\system32\de-DE
2012-01-30 08:23:40 ----D---- C:\Windows\system32\da-DK
2012-01-23 06:12:45 ----D---- C:\Windows\SYSWOW64\sk-SK
2012-01-23 06:12:43 ----D---- C:\Windows\system32\sk-SK
2012-01-22 14:50:10 ----D---- C:\Program Files\Symantec
2012-01-22 14:36:51 ----D---- C:\Windows\system32\LogFiles
2012-01-22 14:14:00 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-03-04 540696]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R0 speedfan;speedfan; C:\Windows\SysWOW64\speedfan.sys [2011-03-18 29592]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMDS64.SYS [2011-01-27 450680]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMEFA64.SYS [2011-03-15 912504]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20120215.001\BHDrvx64.sys [2011-12-23 1157240]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2012-02-04 482936]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20120217.003\IDSvia64.sys [2011-12-01 488568]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1207000.00D\SRTSPX64.SYS [2011-03-31 40568]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1207000.00D\Ironx64.SYS [2011-01-27 171128]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1207000.00D\SYMNETS.SYS [2011-04-21 386168]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2009-11-02 13784]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-01-22 6233088]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-01-22 161280]
R3 ApfiltrService;Alps Pointing-device Filter Driver; C:\Windows\system32\DRIVERS\Apfiltr.sys [2009-10-22 272432]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-03-11 2712064]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2009-09-30 121872]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-02-04 138360]
R3 HECIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2009-10-26 151936]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-29 2445672]
R3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-06-08 406056]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20120218.008\ENG64.SYS [2012-01-22 117880]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20120218.008\EX64.SYS [2012-01-22 2048632]
R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2009-05-06 18432]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2009-12-02 721768]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2009-12-02 269672]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2009-12-02 25960]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2009-12-02 22376]
R3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1207000.00D\SRTSP64.SYS [2011-03-31 744568]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2012-01-22 174200]
R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2009-05-06 16896]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-03-02 4720704]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-06-26 342056]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys [2010-06-26 102952]
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys [2010-06-26 135720]
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys [2010-06-26 39464]
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys [2010-06-26 21544]
S3 E1G60;Intel(R) PRO/1000 NDIS 6 Adapter Driver; C:\Windows\system32\DRIVERS\E1G6032E.sys [2009-06-10 145792]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20); C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-06-20 54272]
S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; syswow64\drivers\pcdrndisuio.sys []
S3 PCDSRVC{91725DDC-3E01AB72-06020101}_0;PCDSRVC{91725DDC-3E01AB72-06020101}_0 - PCDR Kernel Mode Service Helper Driver; \??\c:\users\user\appdata\local\temp\c2be7hwux45i\pcdrdiag\bin\pcdsrvc_x64.pkms []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-12 140672]
R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; c:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-01-22 202752]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2010-06-25 952096]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2010-02-28 821664]
R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2010-08-11 321104]
R2 ePowerSvc;Acer ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2011-01-06 867712]
R2 GREGService;GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2010-01-08 23584]
R2 Live Updater Service;Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2011-01-31 244624]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-03-03 268824]
R2 NAUpdate;@c:\Program Files (x86)\Nero\Update\NASvc.exe,-200; c:\Program Files (x86)\Nero\Update\NASvc.exe [2010-05-04 503080]
R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\18.7.0.13\ccSvcHst.exe [2011-04-17 130008]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-01 2804568]
R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [2010-06-28 255744]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2009-12-02 483688]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-03-03 2320920]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]
R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2009-11-19 4925184]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2009-12-02 209768]
R3 TurboBoost;TurboBoost; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-11-02 126352]
S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-01-22 1255736]
S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Re: Prosím o kontrolu

#2 Příspěvek od Eliška »

Ještě dodám, že mi nějak blbne otevírání wordu. Viz obrázek. http://leteckaposta.cz/791336916 - není to wordicon vir?
Naposledy upravil(a) Eliška dne 20 úno 2012 20:05, celkem upraveno 1 x.

Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Re: Prosím o kontrolu

#3 Příspěvek od Eliška »

Dobry den, mohl by se na to nekdo, prosim, podivat?

Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Re: Prosím o kontrolu

#4 Příspěvek od Eliška »

Právě mi SAS našel dva soubory heur.agent/gen-whitebox

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu

#5 Příspěvek od Rudy »

Log vypadá čistý. Vše, co SaS nalezl, smažte. Pak udělejte pro jistotu kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Re: Prosím o kontrolu

#6 Příspěvek od Eliška »

Děkuji za reakci, tady je log:

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.60.1.1000
www.malwarebytes.org

Verze databáze: v2012.02.20.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
User :: USER-PC [administrátor]

Ochrana: Povolena

20.2.2012 19:20:15
Log mbab

Typ: Úplná kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 341835
Uplynulý čas: 55 minut, 39 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 3
C:\Users\User\Downloads\my-life-1-5.exe (Adware.Onlinegames) -> Žádná instrukce nebyla provedena.
D:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00109d (Adware.Onlinegames) -> Žádná instrukce nebyla provedena.
D:\Users\User\Downloads\my-life-1-5.exe (Adware.Onlinegames) -> Žádná instrukce nebyla provedena.

(konec)

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu

#7 Příspěvek od Rudy »

Vše, co MBAM nalezl, smažte. Pokud některá část Office nefunguje korketně, office přeinstalujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Re: Prosím o kontrolu

#8 Příspěvek od Eliška »

A dival jste se na ten obrázek, co jsem dala na leteckou poštu? Nemáte tušení, proč mi to to píše? Pokud není jiná možnost, přeinstaluju.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu

#9 Příspěvek od Rudy »

Tomu asi předcházel dialog, o zvolení programu, ve kterém ho chcete otevřít. Zvolte Word a mělo by to být OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Re: Prosím o kontrolu

#10 Příspěvek od Eliška »

Právě jsem ho zvolila a napsalo mi to toto, jedná se o word z balíku microsoft office xp.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu

#11 Příspěvek od Rudy »

Eliška píše:Právě jsem ho zvolila a napsalo mi to toto, jedná se o word z balíku microsoft office xp.
Odkud by měl být? Word je, samozřejmě, součást MSOffice.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Re: Prosím o kontrolu

#12 Příspěvek od Eliška »

V ntb mám i office 2010, ale v tom pracovat nechci. Nahrála jsem si do ntb microsoft office xp, ale při výběru výchozího programu mi to ten word z balíku xp asi nenajde a místo toho to napíše wordicon - viz obrázek.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu

#13 Příspěvek od Rudy »

V tom bude ten problém. Systém pochopitelně upřednostní novější verzi. Pokud budete mít v PC více verzí, bude to dělat problémy. Jednu si zvolte a druhou odinstalujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Eliška
Návštěvník
Návštěvník
Příspěvky: 52
Registrován: 15 pro 2011 11:15

Re: Prosím o kontrolu

#14 Příspěvek od Eliška »

Dobrý den, dám si sem ty office znova.
Děkuji za váš čas a reakce.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Prosím o kontrolu

#15 Příspěvek od Rudy »

Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Odpovědět