Logfile of random's system information tool 1.09 (written by random/random)
Run by Dada at 2012-03-03 13:15:07
Microsoft Windows 7 Home Basic Service Pack 1
System drive C: has 9 GB (30%) free of 31 GB
Total RAM: 8189 MB (77% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:15:12, on 3.3.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\EXPERTool\TBPANEL.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASC.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Dada.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.seznam.cz
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe"
O4 - HKCU\..\Run: [GAINWARD] C:\Program Files (x86)\EXPERTool\TBPanel.exe /A
O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Přidat do Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
O9 - Extra button: &Virtuální klávesnice - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O9 - Extra button: K&ontrola adres URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Služba Kaspersky Anti-Virus (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: PhenomMsrTweaker service (PhenomMsrTweaker) - Unknown owner - C:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 6391 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe"
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe" -r
"C:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming
"C:\Program Files (x86)\EXPERTool\TBPANEL.exe" /A
"C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe"
KHALMNPR.EXE /API
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASC.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -no-remote
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtblfs.exe" -Embedding
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1700.136066b0.1817390258 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 1700 "\\.\pipe\gecko-crash-server-pipe.1700" plugin
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=1700.62c7e30.1727681520 "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll" E7CF176E110C211B -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" 1700 "\\.\pipe\gecko-crash-server-pipe.1700" plugin
"C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file "E:\Serialy\Kaceri pribehy\Kaceri pribehy (37).avi"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtblfs.exe" -Embedding
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe8_ Global\UsGthrCtrlFltPipeMssGthrPipe8 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524
"C:\Users\Dada\Desktop\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"c:\program files\windows defender\MpCmdRun.exe" SpyNetService -RestrictPrivileges -AccessKey 1C6AC631-6463-93DE-D2F0-2F2AA5D8B58F -Reinvoke
=========Mozilla firefox=========
ProfilePath - C:\Users\Dada\AppData\Roaming\Mozilla\Firefox\Profiles\61jqqhs5.default
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\ievkbd.dll [2011-04-24 91536]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-02-19 79240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\x64\klwtbbho.dll [2011-04-24 292752]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C}]
IEVkbdBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll [2011-04-24 86416]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2011-12-26 325408]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-12-26 42272]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E33CF602-D945-461A-83F0-819F76A199F8}]
FilterBHO Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll [2011-04-24 229776]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2010-10-29 1680976]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"GAINWARD"=C:\Program Files (x86)\EXPERTool\TBPanel.exe [2011-08-02 2273608]
"Advanced SystemCare 5"=C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe [2011-12-29 620376]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-02-13 3481408]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Wise Memory Optimizer]
[]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dada^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Registrace produktu.lnk]
C:\PROGRA~2\COMMON~1\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AVP"=C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [2011-04-24 202296]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon]
C:\Windows\System32\klogon.dll [2011-04-24 234896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2010-10-28 66640]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35.sys]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoWinKeys"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"VIDC.XFR1"=xfcodec64.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2012-03-03 13:15:08 ----D---- C:\Program Files\trend micro
2012-03-03 13:15:07 ----D---- C:\rsit
2012-03-02 14:18:01 ----A---- C:\Windows\ntbtlog.txt
2012-03-02 13:04:59 ----D---- C:\Users\Dada\AppData\Roaming\TeamViewer
2012-03-01 22:28:09 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2012-03-01 21:50:44 ----D---- C:\Users\Dada\AppData\Roaming\IObit
2012-02-29 20:21:24 ----A---- C:\Windows\SYSWOW64\xfcodec.dll
2012-02-29 20:21:24 ----A---- C:\Windows\system32\xfcodec64.dll
2012-02-29 18:56:01 ----D---- C:\ProgramData\IObit
2012-02-29 18:56:01 ----D---- C:\Program Files (x86)\IObit
2012-02-27 13:39:31 ----D---- C:\Users\Dada\AppData\Roaming\WinRAR
2012-02-26 14:43:55 ----A---- C:\Windows\system32\FNTCACHE.DAT
2012-02-26 14:30:43 ----D---- C:\Users\Dada\AppData\Roaming\SUPERAntiSpyware.com
2012-02-26 14:29:52 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2012-02-26 14:29:52 ----D---- C:\Program Files\SUPERAntiSpyware
2012-02-26 13:25:58 ----D---- C:\Users\Dada\AppData\Roaming\GlarySoft
2012-02-24 11:03:12 ----D---- C:\Users\Dada\AppData\Roaming\Download Manager
2012-02-19 19:01:13 ----D---- C:\Program Files (x86)\GamePark
2012-02-19 04:50:34 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2012-02-19 04:50:34 ----A---- C:\Windows\system32\mshtmled.dll
2012-02-19 04:50:33 ----A---- C:\Windows\SYSWOW64\url.dll
2012-02-19 04:50:33 ----A---- C:\Windows\SYSWOW64\ieui.dll
2012-02-19 04:50:33 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2012-02-19 04:50:33 ----A---- C:\Windows\system32\url.dll
2012-02-19 04:50:33 ----A---- C:\Windows\system32\jscript9.dll
2012-02-19 04:50:33 ----A---- C:\Windows\system32\iertutil.dll
2012-02-19 04:50:32 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2012-02-19 04:50:32 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2012-02-19 04:50:32 ----A---- C:\Windows\SYSWOW64\jscript.dll
2012-02-19 04:50:32 ----A---- C:\Windows\system32\urlmon.dll
2012-02-19 04:50:32 ----A---- C:\Windows\system32\jscript.dll
2012-02-19 04:50:32 ----A---- C:\Windows\system32\ieui.dll
2012-02-19 04:50:31 ----A---- C:\Windows\SYSWOW64\wininet.dll
2012-02-19 04:50:31 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2012-02-19 04:50:31 ----A---- C:\Windows\system32\wininet.dll
2012-02-19 04:50:31 ----A---- C:\Windows\system32\jsproxy.dll
2012-02-19 04:50:30 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2012-02-19 04:50:29 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2012-02-19 04:50:29 ----A---- C:\Windows\system32\mshtml.dll
2012-02-19 04:50:28 ----A---- C:\Windows\system32\ieframe.dll
2012-02-19 04:36:53 ----A---- C:\Windows\system32\drivers\hitmanpro35.sys
2012-02-19 03:01:43 ----A---- C:\Windows\system32\shell32.dll
2012-02-19 03:01:42 ----A---- C:\Windows\SYSWOW64\shell32.dll
2012-02-19 03:01:42 ----A---- C:\Windows\SYSWOW64\ntshrui.dll
2012-02-19 03:01:42 ----A---- C:\Windows\system32\ntshrui.dll
2012-02-19 03:01:41 ----A---- C:\Windows\SYSWOW64\webio.dll
2012-02-19 03:01:41 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2012-02-19 03:01:41 ----A---- C:\Windows\SYSWOW64\schannel.dll
2012-02-19 03:01:41 ----A---- C:\Windows\SYSWOW64\secur32.dll
2012-02-19 03:01:41 ----A---- C:\Windows\system32\webio.dll
2012-02-19 03:01:41 ----A---- C:\Windows\system32\sspisrv.dll
2012-02-19 03:01:41 ----A---- C:\Windows\system32\sspicli.dll
2012-02-19 03:01:41 ----A---- C:\Windows\system32\schannel.dll
2012-02-19 03:01:41 ----A---- C:\Windows\system32\secur32.dll
2012-02-19 03:01:41 ----A---- C:\Windows\system32\lsass.exe
2012-02-19 03:01:41 ----A---- C:\Windows\system32\lsasrv.dll
2012-02-19 03:01:41 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2012-02-19 03:01:41 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2012-02-19 03:01:41 ----A---- C:\Windows\system32\drivers\cng.sys
2012-02-19 03:01:39 ----A---- C:\Windows\system32\win32k.sys
2012-02-19 03:01:39 ----A---- C:\Windows\system32\drivers\afd.sys
2012-02-19 03:01:35 ----A---- C:\Windows\SYSWOW64\msvcrt.dll
2012-02-19 03:01:35 ----A---- C:\Windows\system32\msvcrt.dll
2012-02-19 01:30:53 ----D---- C:\Windows\Sun
2012-02-19 01:21:16 ----A---- C:\Windows\system32\javaws.exe
2012-02-19 01:21:16 ----A---- C:\Windows\system32\javaw.exe
2012-02-19 01:21:16 ----A---- C:\Windows\system32\java.exe
2012-02-19 01:21:14 ----D---- C:\Program Files\Java
2012-02-19 01:17:33 ----A---- C:\Windows\system32\drivers\dtsoftbus01.sys
2012-02-19 01:17:29 ----D---- C:\Program Files (x86)\DAEMON Tools Lite
======List of files/folders modified in the last 1 month======
2012-03-03 13:15:12 ----D---- C:\System odklon
2012-03-03 13:15:08 ----RD---- C:\Program Files
2012-03-03 11:34:31 ----D---- C:\ProgramData\Kaspersky Lab
2012-03-03 10:40:45 ----D---- C:\Windows\system32\config
2012-03-03 10:30:20 ----D---- C:\Windows\Temp
2012-03-03 09:28:38 ----D---- C:\Windows\System32
2012-03-03 09:28:38 ----D---- C:\Windows\inf
2012-03-03 09:28:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-03-02 23:50:43 ----D---- C:\Windows\SysWOW64
2012-03-02 23:50:42 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2012-03-02 23:50:36 ----D---- C:\Users\Dada\AppData\Roaming\HLSW
2012-03-02 18:43:36 ----D---- C:\Users\Dada\AppData\Roaming\Xfire
2012-03-02 14:18:04 ----D---- C:\Windows
2012-03-02 12:23:29 ----D---- C:\ProgramData\Adobe
2012-03-02 12:22:53 ----SD---- C:\Users\Dada\AppData\Roaming\Microsoft
2012-03-02 12:22:53 ----D---- C:\Users\Dada\AppData\Roaming\Adobe
2012-03-02 00:52:59 ----D---- C:\Windows\system32\Tasks
2012-03-01 23:41:48 ----RSD---- C:\Windows\assembly
2012-03-01 23:41:48 ----D---- C:\Windows\Microsoft.NET
2012-03-01 23:38:57 ----SHD---- C:\System Volume Information
2012-03-01 22:22:18 ----SHD---- C:\Windows\Installer
2012-03-01 22:22:18 ----SHD---- C:\Config.Msi
2012-03-01 22:08:14 ----D---- C:\Windows\system32\catroot2
2012-03-01 22:05:26 ----D---- C:\Program Files\Common Files\System
2012-03-01 22:05:26 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-03-01 22:03:42 ----D---- C:\Program Files (x86)\Mozilla Firefox
2012-03-01 21:59:07 ----SHD---- C:\$Recycle.Bin
2012-03-01 21:53:03 ----RD---- C:\Program Files (x86)
2012-03-01 21:53:02 ----D---- C:\Windows\Tasks
2012-03-01 20:07:02 ----D---- C:\ProgramData\Xfire
2012-03-01 20:07:02 ----D---- C:\Program Files (x86)\Xfire
2012-03-01 15:10:13 ----SD---- C:\ProgramData\Microsoft
2012-02-29 20:02:27 ----D---- C:\Windows\system32\NDF
2012-02-29 18:56:01 ----HD---- C:\ProgramData
2012-02-27 16:34:52 ----D---- C:\Windows\rescache
2012-02-27 12:28:06 ----D---- C:\Windows\winsxs
2012-02-27 12:27:26 ----D---- C:\Windows\SYSWOW64\migration
2012-02-27 12:27:26 ----D---- C:\Windows\SYSWOW64\cs-CZ
2012-02-27 12:27:26 ----D---- C:\Windows\system32\migration
2012-02-27 12:27:26 ----D---- C:\Windows\system32\cs-CZ
2012-02-27 12:27:26 ----D---- C:\Windows\PolicyDefinitions
2012-02-27 12:18:22 ----D---- C:\Users\Dada\AppData\Roaming\Identities
2012-02-27 12:16:36 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-02-27 08:12:38 ----D---- C:\Windows\system32\LogFiles
2012-02-26 16:48:40 ----D---- C:\Windows\system32\wdi
2012-02-26 14:17:52 ----D---- C:\Windows\system32\drivers
2012-02-26 13:42:25 ----D---- C:\Windows\SoftwareDistribution
2012-02-26 13:39:01 ----D---- C:\Program Files\Windows Sidebar
2012-02-26 13:39:00 ----D---- C:\Program Files (x86)\Windows Sidebar
2012-02-26 13:38:59 ----D---- C:\Windows\system32\wbem
2012-02-26 13:26:16 ----D---- C:\Windows\SYSWOW64\config
2012-02-26 13:26:16 ----D---- C:\Program Files\TeamSpeak 3 Client
2012-02-26 13:22:44 ----SD---- C:\Program Files (x86)\HLSW
2012-02-26 11:54:55 ----D---- C:\Windows\pss
2012-02-19 12:43:29 ----D---- C:\Windows\debug
2012-02-19 08:05:06 ----D---- C:\Program Files\Internet Explorer
2012-02-19 08:05:06 ----D---- C:\Program Files (x86)\Internet Explorer
2012-02-19 04:50:59 ----A---- C:\Windows\system32\MRT.exe
2012-02-19 04:50:44 ----D---- C:\Windows\system32\catroot
2012-02-19 04:17:55 ----D---- C:\Users\Dada\AppData\Roaming\TS3Client
2012-02-19 01:21:14 ----A---- C:\Windows\system32\npdeployJava1.dll
2012-02-19 01:21:14 ----A---- C:\Windows\system32\deployJava1.dll
2012-02-19 01:18:04 ----D---- C:\Users\Dada\AppData\Roaming\DAEMON Tools Lite
2012-02-19 01:17:39 ----D---- C:\Windows\system32\DriverStore
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 KL1;kl1; C:\Windows\system32\DRIVERS\kl1.sys [2011-03-04 460888]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-02-19 283200]
R1 kl2;kl2; C:\Windows\system32\DRIVERS\kl2.sys [2011-03-04 11864]
R1 KLIF;Kaspersky Lab Driver; C:\Windows\system32\DRIVERS\klif.sys [2011-12-26 615728]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter; C:\Windows\system32\DRIVERS\klim6.sys [2011-03-10 29488]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R3 Cardex;Cardex; \??\C:\Windows\SysWOW64\drivers\TBPANELX64.SYS [2007-03-16 15648]
R3 klmouflt;Kaspersky Lab KLMOUFLT; C:\Windows\system32\DRIVERS\klmouflt.sys [2009-11-02 22544]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2010-08-24 63568]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2010-08-24 57936]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2010-08-24 41040]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-03-01 187392]
R3 skfiltv;skfiltv; C:\Windows\system32\drivers\skfiltv.sys [2008-08-14 24064]
R3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files\PhenomMsrTweaker\WinRing0x64.sys [2010-06-03 14544]
S3 TBPanel;TBPanel; C:\Windows\system32\drivers\TBPanel.sys []
S3 tizekdrv;tizekdrv; \??\C:\Users\Dada\AppData\Roaming\TZAC\tizek64.sys [2011-12-26 241848]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdvancedSystemCareService5;Advanced SystemCare Service 5; C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2011-12-29 497496]
R2 AVP;Služba Kaspersky Anti-Virus; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe [2011-04-24 202296]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2011-10-15 1640768]
R2 PhenomMsrTweaker;PhenomMsrTweaker service; C:\Program Files\PhenomMsrTweaker\PhenomMsrTweakerService.exe [2010-06-03 188416]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2011-12-27 75136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S4 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2011-08-12 140672]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S4 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-12-26 79360]
S4 CTAudSvcService;Creative Audio Service; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [2010-01-27 286720]
S4 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-10-28 357456]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Dobry den zadam o provereni logu po nejake dobe behu windows
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Dobry den zadam o provereni logu po nejake dobe behu win
Zdravím, až na ten softík od IObitu (Advanced SystemCare), který doporučuji odinstalovat je vše v pořádku.
Re: Dobry den zadam o provereni logu po nejake dobe behu win
Dekuji a co proc iobit dat pric (az na to ze kradou databaze)?A jaky jiny Tuning program za nej?
Re: Dobry den zadam o provereni logu po nejake dobe behu win
IObit dát pryč hlavně proto, že dokáže rozhodit PC více než třeba takový Tune Up
a také proto, že docela čile komunikuje se světem.
Co místo něho ?
Hlavu a CCleaner
Jinak není zač.
a také proto, že docela čile komunikuje se světem.
Co místo něho ?
Hlavu a CCleaner

Jinak není zač.
Re: Dobry den zadam o provereni logu po nejake dobe behu win
Mel bijste nejaky soupis docasnich slozek ktere se daji smazat(jsou nepotrebne) treba zbytky po nainstalovanych aktualizcich logi nebo prebitecne zalohy ovladacu tad(ktere ccleaner treba nemaze ale jsou nepotrebne)??
Re: Dobry den zadam o provereni logu po nejake dobe behu win
Univerzální soupis zbytečností není, protože co PC to originál.
Tak že, používej doporučený CCleaner a v ničem se nevrtej
Jinak, čeština ti asi nic neříká co ?
Když pominu diakritiku tak tolik hrubek v jedné větě to je mazec.
Tak že, používej doporučený CCleaner a v ničem se nevrtej

Jinak, čeština ti asi nic neříká co ?
Když pominu diakritiku tak tolik hrubek v jedné větě to je mazec.