Problém s PC po načítaní web stránky

[Minmi]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.60.1.1000
www.malwarebytes.org

Verze databáze: v2012.03.17.08

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 7.0.5730.11
Milan :: MINMI [administrátor]

Ochrana: Zakázána

18. 3. 2012 16:07:17
mbam-log-2012-03-18 (16-07-17).txt

Typ: Úplná kontrola
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 311592
Uplynulý čas: 57 minut,

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 0
(Žádné škodlivé položky nebyly zjištěny)

(konec)



Logfile of random's system information tool 1.09 (written by random/random)
Run by Milan at 2012-03-18 17:05:47
Microsoft Windows XP Professional Service Pack 3
System drive C: has 238 GB (39%) free of 610 GB
Total RAM: 3326 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:05:52, on 18. 3. 2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20583)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
C:\Program Files\Spyware Terminator\st_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Sunbelt Software\Personal Firewall\SbPFCl.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\internet explorer\iexplore.exe
C:\WINDOWS\notepad.exe
C:\Downloads\RSIT.exe
C:\Program Files\trend micro\Milan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
O1 - Hosts: ÿþ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [SpywareTerminatorShield] C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
O4 - HKLM\..\Run: [SpywareTerminatorUpdater] C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (file missing)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: GEST Service for program management. (GEST Service) - Unknown owner - C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: SbPF.Launcher - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software, Inc. - C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files\Spyware Terminator\st_rsser.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 7521 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Milan\Application Data\Mozilla\Firefox\Profiles\hjz52wgd.default

prefs.js - "browser.startup.homepage" - "http://www.google.sk/"
prefs.js - "extensions.enabledItems" - "{800b5000-a755-47e1-992b-48a1c1357f07}:1.1.6, {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}:6.0.11, {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}:6.0.13, {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}:6.0.15, {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}:6.0.17, jqs@sun.com:1.0, {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}:6.0.19, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.16"
prefs.js - "keyword.URL" - "http://search.sweetim.com/search.asp?src=2&q="

"{4B3803EA-5230-4DC3-A7FC-33638F3D3542}"=C:\Program Files\Crawler\Toolbar\firefox\
"bkmrksync@nokia.com"=C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{800b5000-a755-47e1-992b-48a1c1357f07}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
crawlersrch.xml
dunaj-sk.xml
eBay.xml
google.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Documents and Settings\Milan\Application Data\Mozilla\Firefox\Profiles\hjz52wgd.default\searchplugins\
icqplugin-1.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-14.xml
icqplugin-15.xml
icqplugin-16.xml
icqplugin-17.xml
icqplugin-18.xml
icqplugin-19.xml
icqplugin-2.xml
icqplugin-20.xml
icqplugin-21.xml
icqplugin-22.xml
icqplugin-23.xml
icqplugin-24.xml
icqplugin-25.xml
icqplugin-26.xml
icqplugin-27.xml
icqplugin-3.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml
icqplugin.xml
sweetim.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-06-27 16875008]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2008-06-18 77824]
"AlcWzrd"=C:\WINDOWS\ALCWZRD.EXE [2008-06-19 2808832]
"Kernel and Hardware Abstraction Layer"=C:\WINDOWS\KHALMNPR.EXE [2007-09-21 55824]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2009-01-04 949376]
"hpqSRMon"=C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [2007-08-22 80896]
"SpywareTerminatorShield"=C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2012-02-20 2786480]
"SpywareTerminatorUpdater"=C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [2012-02-20 3669680]
"Malwarebytes' Anti-Malware"=C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2012-01-13 460872]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\daemon.exe [2009-04-23 691656]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-03-20 1312256]
"Steam"=C:\Program Files\Steam\steam.exe [2011-08-16 1242448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^fortePivot.lnk]
C:\PROGRA~1\LGSOFT~1\FORTEP~1\bin\FORTEP~1.EXE [2009-12-17 77824]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2008-06-03 139264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2007-11-15 72208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll [2007-09-20 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WdfLoadGroup]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
"DisableTaskMgr"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0
"NoDesktop"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Hry\World of Warcraft\Repair.exe"="C:\Hry\World of Warcraft\Repair.exe:*:Enabled:Blizzard Repair Utility"
"C:\Hry\World of Warcraft\WoW-3.0.8.9464-to-3.0.8.9506-enGB-downloader.exe"="C:\Hry\World of Warcraft\WoW-3.0.8.9464-to-3.0.8.9506-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Hry\World of Warcraft\BackgroundDownloader.exe"="C:\Hry\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Hry\World of Warcraft\Launcher.exe"="C:\Hry\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Hry\LOTR\game.dat"="C:\Hry\LOTR\game.dat:*:Enabled:The Battle for Middle-earth(tm) II"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"C:\Hry\World of Warcraft\WoW-3.1.0.9767-to-3.1.1.9806-enGB-downloader.exe"="C:\Hry\World of Warcraft\WoW-3.1.0.9767-to-3.1.1.9806-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Hry\World of Warcraft\WoW-3.1.1.9806-to-3.1.1.9835-enGB-downloader.exe"="C:\Hry\World of Warcraft\WoW-3.1.1.9806-to-3.1.1.9835-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Hry\Counter-Strike Source\hl2.exe"="C:\Hry\Counter-Strike Source\hl2.exe:*:Enabled:hl2"
"C:\Hry\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enGB-downloader.exe"="C:\Hry\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\WINDOWS\system32\dplaysvr.exe"="C:\WINDOWS\system32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper"
"C:\Hry\KnightsAndMerchants\KaM_1024.exe"="C:\Hry\KnightsAndMerchants\KaM_1024.exe:*:Enabled:KaM_1024"
"C:\Hry\KaM - The Peasants Rebellion\KM_TPR.exe"="C:\Hry\KaM - The Peasants Rebellion\KM_TPR.exe:*:Enabled:KM_TPR"
"C:\Hry\Warcraft III\Warcraft III.exe"="C:\Hry\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III"
"C:\Hry\Warcraft III\euroloader.exe"="C:\Hry\Warcraft III\euroloader.exe:*:Enabled:w3l"
"C:\Hry\Garena\Garena.exe"="C:\Hry\Garena\Garena.exe:*:Enabled:Garena"
"C:\Hry\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe"="C:\Hry\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Hry\World of Warcraft\WoW-3.2.0-enGB-downloader.exe"="C:\Hry\World of Warcraft\WoW-3.2.0-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Teamspeak2_RC2server\server_windows.exe"="C:\Program Files\Teamspeak2_RC2server\server_windows.exe:*:Enabled:Server"
"C:\Program Files\Ventrilo\Ventrilo.exe"="C:\Program Files\Ventrilo\Ventrilo.exe:*:Enabled:Ventrilo.exe"
"C:\Hry\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enGB-downloader.exe"="C:\Hry\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Hry\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enGB-downloader.exe"="C:\Hry\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\Java\jre6\bin\java.exe"="C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Downloads\SweetImSetup.exe"="C:\Downloads\SweetImSetup.exe:*:Enabled:SweetIM Installer"
"C:\Hry\Warcraft III\war3.exe"="C:\Hry\Warcraft III\war3.exe:*:Enabled:war3"
"C:\Hry\Warcraft III\Frozen Throne.exe"="C:\Hry\Warcraft III\Frozen Throne.exe:*:Enabled:Warcraft III - Ledový trùn"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Hry\OpenTTD\openttd.exe"="C:\Hry\OpenTTD\openttd.exe:*:Enabled:OpenTTD"
"C:\Hry\Counter Strike\hl.exe"="C:\Hry\Counter Strike\hl.exe:*:Enabled:hl"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"%windir%\explorer.exe"="%windir%\explorer.exe"
"C:\Program Files\Steam\steamapps\common\dota 2 beta\dota.exe"="C:\Program Files\Steam\steamapps\common\dota 2 beta\dota.exe:*:Enabled:Dota 2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"%windir%\explorer.exe"="%windir%\explorer.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.lhacm"=lhacm.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll

======List of files/folders created in the last 1 month======

2012-03-18 15:41:42 ----A---- C:\TDSSKiller.2.7.20.0_18.03.2012_15.41.42_log.txt
2012-03-18 00:01:22 ----HD---- C:\WINDOWS\PIF
2012-03-17 23:20:55 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2012-03-17 19:15:17 ----SHD---- C:\WINDOWS\CSC
2012-03-17 19:15:11 ----A---- C:\WINDOWS\ntbtlog.txt
2012-03-17 18:03:04 ----D---- C:\_OTM
2012-03-17 16:21:55 ----D---- C:\Documents and Settings\Milan\Application Data\Malwarebytes
2012-03-17 16:21:44 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2012-03-17 16:21:43 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-03-17 16:21:43 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2012-03-17 15:46:40 ----D---- C:\rsit
2012-03-17 15:46:40 ----D---- C:\Program Files\trend micro
2012-03-11 16:46:46 ----D---- C:\Documents and Settings\Milan\Application Data\Piydmu
2012-03-11 16:46:46 ----D---- C:\Documents and Settings\Milan\Application Data\Pem

======List of files/folders modified in the last 1 month======

2012-03-18 17:05:51 ----HD---- C:\WINDOWS\Prefetch
2012-03-18 17:05:40 ----D---- C:\Downloads
2012-03-18 17:04:44 ----HD---- C:\WINDOWS\system32\drivers
2012-03-18 16:53:14 ----HD---- C:\WINDOWS\Temp
2012-03-18 15:38:53 ----HD---- C:\WINDOWS\system32\CatRoot2
2012-03-18 15:38:33 ----HD---- C:\Program Files\Steam
2012-03-18 14:17:18 ----AH---- C:\WINDOWS\SchedLgU.Txt
2012-03-18 00:41:20 ----D---- C:\Serialy
2012-03-18 00:40:02 ----D---- C:\Filmy
2012-03-18 00:07:35 ----HD---- C:\WINDOWS\system32
2012-03-18 00:01:22 ----HD---- C:\WINDOWS
2012-03-17 23:52:29 ----D---- C:\GMC
2012-03-17 23:49:30 ----D---- C:\eko_elearn
2012-03-17 19:19:24 ----SHD---- C:\RECYCLER
2012-03-17 19:18:11 ----HD---- C:\WINDOWS\system32\drivers\etc
2012-03-17 19:15:36 ----D---- C:\Documents and Settings
2012-03-17 19:11:58 ----D---- C:\Documents and Settings\Milan\Application Data\HPAppData
2012-03-17 17:40:49 ----HDC---- C:\WINDOWS\$NtUninstallKB888111WXPSP2$
2012-03-17 16:21:43 ----RD---- C:\Program Files
2012-03-17 13:56:34 ----HD---- C:\Program Files\Mozilla Firefox
2012-03-16 12:21:34 ----HD---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2012-03-09 01:43:35 ----D---- C:\skola
2012-03-04 22:39:54 ----D---- C:\Documents and Settings\Milan\Application Data\Skype
2012-03-04 18:43:23 ----D---- C:\Documents and Settings\All Users\Application Data\Easybits GO
2012-03-04 18:43:18 ----D---- C:\Documents and Settings\Milan\Application Data\skypePM
2012-02-29 19:50:00 ----HD---- C:\Program Files\Spyware Terminator

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-05-11 721904]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-15 76544]
R1 intelppm;Intel Processor Driver; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-13 36352]
R1 nod32drv;nod32drv; C:\WINDOWS\system32\drivers\nod32drv.sys [2009-01-04 15424]
R1 SbFw;SbFw; C:\WINDOWS\system32\drivers\SbFw.sys [2008-10-31 270888]
R1 sbhips;Sunbelt HIPS Driver; C:\WINDOWS\system32\drivers\sbhips.sys [2008-06-21 66600]
R1 sp_rsdrv2;Spyware Terminator 2012 Realtime Shield Driver; \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys []
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-23 12032]
R2 AMON;AMON; C:\WINDOWS\system32\drivers\amon.sys [2009-01-04 512096]
R2 rspndr;Link-Layer Topology Discovery Responder; C:\WINDOWS\system32\DRIVERS\rspndr.sys [2007-09-20 62336]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2008-06-03 3100160]
R3 AtiHdmiService;ATI Function Driver for HDMI Service; C:\WINDOWS\system32\drivers\AtiHdmi.sys [2008-05-21 93696]
R3 gdrv;gdrv; \??\C:\WINDOWS\gdrv.sys []
R3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-04-23 25280]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-06-27 4742656]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\WINDOWS\system32\DRIVERS\L8042Kbd.sys [2007-09-21 20240]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2007-09-21 35088]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2007-09-21 36240]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2007-09-21 28432]
R3 MBAMProtector;MBAMProtector; \??\C:\WINDOWS\system32\drivers\mbam.sys []
R3 mouhid;Mouse HID Driver; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-17 12160]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-08-23 5888]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-10-30 117888]
R3 SBFWIMCL;Sunbelt Software Firewall NDIS IM Filter Miniport; C:\WINDOWS\system32\DRIVERS\sbfwim.sys [2008-06-21 65576]
R3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 usbvideo;USB Video Device (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-13 121984]
R3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 a9yr4qod;a9yr4qod; C:\WINDOWS\system32\drivers\a9yr4qod.sys []
S3 aswMBR;aswMBR; \??\C:\DOCUME~1\Milan\LOCALS~1\Temp\aswMBR.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-07-09 16384]
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\Milan\LOCALS~1\Temp\EOU3C76.tmp []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Hry\Garena\safedrv.sys []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-11-01 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-11-01 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-11-01 21568]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2002-12-11 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-07-09 83968]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-07-09 10112]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-07-09 10880]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-07-09 14976]
S3 usb2vcom;Nokia CA-42 USB; C:\WINDOWS\system32\DRIVERS\usb2vcom.sys [2006-04-03 30272]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-07-09 18688]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2008-06-03 552960]
R2 GEST Service;GEST Service for program management.; C:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [2008-07-11 80392]
R2 hpqddsvc;HP CUE DeviceDiscovery Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2009-01-04 552064]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 SbPF.Launcher;SbPF.Launcher; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFLnch.exe [2008-10-31 95528]
R2 SPF4;Sunbelt Personal Firewall 4; C:\Program Files\Sunbelt Software\Personal Firewall\SbPFSvc.exe [2008-10-31 1365288]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service; C:\Program Files\Spyware Terminator\st_rsser.exe [2011-11-22 482992]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2008-06-02 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2007-11-15 121360]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-03-04 621056]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-03-16 407336]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-10-18 913408]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]

-----------------EOF-----------------



PC vyzerá byť v pohode, nespozoroval som žiadne nezvyčajné správanie na ploche, v C: a dokumentoch mám len tie veci, ktoré som si v núdzovom režime poodškrtával z hidden, takže si tam poodškrtám aj zvyšok. veľká vďaka za pomoc!!
btw čo s tými všetkými programami? pomazať?

[Márty84]

Podle tohoto navodu vymazte body obnovy
http://forum.viry.cz/viewtopic.php?f=46&t=47040

MBAM odinstalujte, nebo aspon vypnete jeho rezidentni ochranu a spousteni po startu. Pral by se s Nodem

Aktualizujte Internet Explorer



Pak udelejte toto

Stahnete si OTC http://oldtimer.geekstogo.com/OTC.exe , ulozte a spustte.
Kliknete na napis CleanUp a pote OK - Po uklidu dojde k restartu pc.

Stahnete TFC http://oldtimer.geekstogo.com/TFC.exe , ulozte a spustte
Kliknete na START a pote OK - Po uklidu dojde k restartu pc.
Po pouziti muzete programek smazat

Stahnete Ccleaner http://www.stahuj.centrum.cz/utility_a_ ... /ccleaner/ a spustte.
Pri instalaci pozor na toolbar, jestli vam nabidne jeho instalaci, tak zruste zatrzitko.
Po spusteni se ocitnete ve funkci Cistic. Vlevo je spousta zatrzitek. Pozor dejte hlavne na kos, pokud nechate zatrzene, vzdy ho vysype.
Dale, podle toho jak je nastaven, smaze vsechna hesla ulozena na netu!!! Takze jestli mate nastavene, at si pocitac hesla pamatuje (coz neni pro bezpecnost dobre), budete je muset pak napsat znova rucne (napr mail, facebook, ruzna fora atd.)
Kliknete na Analyzovat a az dokonci analyzu, kliknete na Spustit Cleaner.
Potom kliknete vlevo na funkci Registry
Kliknete na Hledej problemy, kdyz najde, kliknete na Opravit problemy. Nabidne Vam zalohu, tu udelejte a ulozte ji tak, at ji v pripade potreby najdete
Funkce Nastroje umoznuje odinstalovani programu. Je dukladnejsi nez samotny windows, takze muzete pouzit take

Muzete defragmentovat disk
Stahnete napriklad program Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
Pri instalaci opet pozor na toolbar
Po nainstalovani program spustte a kliknete na Analyzovat, po analyze kliknete na Defragmentovat a programek odvede svou praci


Co tam pak jeste zbyde, smazte. No a samozrejme, kdyby se objevil problem, ozvete se.


Hlavni zasluhu ma na tom Naughty, ale verim, ze bude souhlasit, kdyz napisu - nemate zac

[Minmi]

teraz som už v škole, takže vo štvrtok keď sa vrátim sa do toho pustím
a ešte raz ďakujem vám obom, ste machri!

[Márty84]

OK, jen az smazete ty body obnovy, nezapomente tu funkci po restartu zase zapnout!!!

Nemate zac a dekujem za pochvalu Mejte se

[Minmi]

ešte mám otázočku - aj keď som v núdzovom režime poodškrtával hidden pri všetkom čo sa dalo, stále mi na ploche chýbajú dáke ikony (ako pozerám asi len .exe - napr. HP Solution Center, pri hrách atď. nie je problém, tam viem z čoho mám vytvoriť zástupcu na ploche, ale pri niektorých ako to HP neviem) + v štarte v programoch mám veľa prázdnych položiek (napr. Sunbelt Software -> Personal Firewall -> Empty), aj čo je v postupe Start - Programy - Prislusenstvi - Systemove nastroje - Obnoveni systemu , tak v systémových nástrojoch mám len Internet Explorer (No Add-ons) aj v príslušenstve chýbajú niektoré veci ako kalkulačka, skicár,..

+ teraz pri pravidelnej rýchlej kontrole mi Spyware Terminator vyhodil:
Spyware Terminator.exe - Unable to locate component
This application has failed to start because mozglue.dll was not found. Re-installing this application may fix this problem.

[Márty84]

Terminatora preinstalujte.

A ten Sunbelt normalne funguje? V Program Files jeho soubory jsou?


Kliknete na start - spustit - napiste notepad - dejte Enter
Kliknete na start - spustit - napiste calc.exe - dejte Enter
Spustil se poznamkovy blok a kalkulacka?

Stahnete SystemLook http://jpshortstuff.247fixes.com/SystemLook.exe
Ulozte ho na plochu a spustte
Do okna zkopirujte tento skript

Kód: Vybrat vše

:dir
%userprofile%\Plocha

kliknete na Look a chvili pockejte
Mel by na vas vyskocit log s nazvem Systemlook
Ten mi sem zkopirujte

[Minmi]

všetko funguje, aj kalkulačka aj notepad, aj tie veci, ktoré majú v štarte prázdne priečinky - z Program Files nezmizlo nič, len som myslel že mi to všetko po odkrytí normálne naskáče naspäť aj do štartu

SystemLook 30.07.11 by jpshortstuff
Log created at 19:38 on 23/03/2012 by Milan
Administrator - Elevation successful

========== dir ==========

C:\Documents and Settings\Milan\Plocha - Unable to find folder.

-= EOF =-

[Minmi]

teraz pozerám, mám AJ verziu, tak nemalo tam byť Desktop?

[Minmi]

ešte raz s Desktop

SystemLook 30.07.11 by jpshortstuff
Log created at 20:00 on 23/03/2012 by Milan
Administrator - Elevation successful

========== dir ==========

C:\Documents and Settings\Milan\Desktop - Parameters: "(none)"

---Files---
01112010.mp4 --a---- 61065047 bytes [21:51 06/02/2011] [22:10 06/02/2011]
3. Fatimské tajomstvo.doc --a---- 45056 bytes [16:49 28/03/2011] [16:49 28/03/2011]
5 hier u SP.doc --a---- 64000 bytes [13:05 26/04/2009] [14:01 26/04/2009]
a.txt --a---- 15999 bytes [14:14 04/06/2010] [12:36 02/03/2012]
asd.txt --a---- 12853 bytes [21:35 29/03/2009] [21:53 29/03/2009]
aswMBR.exe --a---- 4731392 bytes [19:57 17/03/2012] [19:57 17/03/2012]
aswMBR.txt --a---- 1787 bytes [14:24 18/03/2012] [14:24 18/03/2012]
BF.jpg --a---- 31400 bytes [16:27 28/07/2010] [16:27 28/07/2010]
bolesov1.txt --a---- 2900 bytes [19:49 10/05/2011] [19:49 10/05/2011]
bolesov2.txt --a---- 2462 bytes [20:05 10/05/2011] [20:05 10/05/2011]
bolesov3.txt --a---- 812 bytes [20:13 10/05/2011] [20:13 10/05/2011]
bolešov 1(1).txt --a---- 1808 bytes [07:12 30/05/2011] [07:11 30/05/2011]
brigady.txt --a---- 5798 bytes [20:20 30/05/2011] [15:00 26/06/2011]
CCleaner.lnk --a---- 1548 bytes [13:54 28/01/2010] [13:54 28/01/2010]
clanok.txt --a---- 48598 bytes [10:00 08/05/2011] [00:40 26/02/2012]
Counter Strike.lnk --a---- 1510 bytes [19:43 30/05/2010] [19:43 30/05/2010]
Counter-Strike 1.6 NS.lnk --a---- 1500 bytes [19:00 30/05/2010] [19:00 30/05/2010]
CPU-Z.lnk --a---- 473 bytes [11:05 08/11/2009] [11:05 08/11/2009]
Desktop.rar --a---- 127310293 bytes [23:32 17/03/2012] [23:34 17/03/2012]
Diagnostika.doc --a---- 42496 bytes [16:08 24/04/2009] [12:45 26/04/2009]
dochadzka_0411.xlsx --a---- 16082 bytes [18:35 28/04/2011] [18:35 28/04/2011]
Dota 2.url --a---- 213 bytes [21:48 08/03/2012] [21:48 08/03/2012]
dotaznik.doc --a---- 53760 bytes [22:00 26/03/2010] [22:00 26/03/2010]
DxDiag.txt --a---- 45768 bytes [08:35 05/03/2009] [08:35 05/03/2009]
EKO.txt --a---- 5854 bytes [21:02 20/09/2009] [23:52 29/01/2010]
ekoooo.txt --a---- 5384 bytes [22:02 14/02/2010] [14:08 18/12/2011]
Euroloader.lnk --a---- 1520 bytes [14:18 14/07/2011] [14:18 14/07/2011]
filo.txt --a---- 2689 bytes [22:44 17/11/2010] [11:52 07/10/2011]
Frozen Throne.lnk --a---- 1507 bytes [07:27 11/08/2009] [07:27 11/08/2009]
goldy.txt --a---- 14149 bytes [13:26 28/09/2009] [13:26 28/09/2009]
gproxy.lnk --a---- 1456 bytes [14:18 14/07/2011] [14:18 14/07/2011]
GPU-Z.0.5.1.exe --a---- 908128 bytes [08:16 04/03/2011] [08:16 04/03/2011]
Grafomotorika.doc --a---- 100352 bytes [18:20 24/04/2009] [15:35 09/05/2009]
harry benjamin.txt --a---- 719 bytes [12:56 27/03/2011] [12:57 27/03/2011]
HDP.txt --a---- 4550 bytes [20:16 17/11/2011] [20:17 17/11/2011]
hesla_dlink.txt --a---- 1146 bytes [12:21 04/02/2012] [12:21 04/02/2012]
info.txt --a---- 5076 bytes [16:08 20/09/2009] [18:50 19/01/2012]
IVM.txt --a---- 7786 bytes [19:31 06/05/2009] [23:33 17/03/2011]
KaM - The Peasants Rebellion.lnk --a---- 690 bytes [17:56 09/08/2009] [17:56 09/08/2009]
Kompenzačné pomôcky.doc --a---- 57344 bytes [13:06 26/04/2009] [14:19 26/04/2009]
KOMPENZAČNÉ PRÍSPEVKY.doc --a---- 81920 bytes [13:31 29/03/2009] [13:31 29/03/2009]
KOMPENZAČNÉ PRÍSPEVKY.docx --a---- 25904 bytes [10:55 29/03/2009] [11:05 29/03/2009]
kompenzp.htm --a---- 10984 bytes [10:33 29/03/2009] [10:33 29/03/2009]
košecké_podhradie.txt --a---- 2048 bytes [14:10 09/05/2010] [14:11 09/05/2010]
lol.txt --a---- 28450 bytes [15:41 22/07/2010] [21:37 25/12/2011]
Mafia II.lnk --a---- 608 bytes [12:40 01/09/2010] [12:40 01/09/2010]
mar.txt --a---- 13550 bytes [23:38 18/02/2010] [23:38 18/02/2010]
MBR.dat --a---- 512 bytes [14:24 18/03/2012] [14:24 18/03/2012]
monitory.txt --a---- 196 bytes [10:49 13/08/2011] [16:01 13/08/2011]
msinfo.txt --a---- 474926 bytes [08:37 05/03/2009] [08:37 05/03/2009]
My Computer.lnk --a---- 104 bytes [15:25 02/01/2009] [15:25 02/01/2009]
My Documents.lnk --a---- 339 bytes [15:25 02/01/2009] [15:25 02/01/2009]
nastavenie_udajov_dlink.pdf --a---- 114469 bytes [12:21 04/02/2012] [12:21 04/02/2012]
NB.txt --a---- 423 bytes [10:59 06/09/2011] [12:57 06/09/2011]
ObyvEuropy.doc --a---- 38400 bytes [19:53 08/03/2009] [19:53 08/03/2009]
oci.docx --a---- 52043 bytes [17:09 05/09/2010] [17:09 05/09/2010]
OTLPEStd.exe --a---- 98077435 bytes [12:54 18/03/2012] [12:54 18/03/2012]
OTM.exe --a---- 523264 bytes [17:02 17/03/2012] [17:02 17/03/2012]
Paint.lnk --a---- 1515 bytes [12:35 16/05/2009] [12:35 16/05/2009]
Pohár_mlieka.pps --a---- 244736 bytes [17:28 08/03/2009] [17:28 08/03/2009]
prezentacia.txt --a---- 358 bytes [22:45 08/10/2011] [15:20 17/10/2011]
psychodiagnostika.docx --a---- 25457 bytes [14:03 12/04/2009] [14:52 12/04/2009]
Psychodiagnostika1.docx --a---- 13670 bytes [16:22 12/04/2009] [16:52 12/04/2009]
Rigo- hry na dramaticku vychovu.doc --a---- 38400 bytes [16:08 24/04/2009] [10:05 26/04/2009]
RKreport[1].txt --a---- 2937 bytes [18:37 17/03/2012] [18:37 17/03/2012]
RKreport[2].txt --a---- 2955 bytes [18:56 17/03/2012] [18:56 17/03/2012]
RKreport[3].txt --a---- 3125 bytes [18:57 17/03/2012] [18:57 17/03/2012]
RogueKiller.exe --a---- 1219072 bytes [18:35 17/03/2012] [18:35 17/03/2012]
Rozhovor.doc --a---- 66048 bytes [13:05 26/04/2009] [16:33 27/04/2009]
s.txt --a---- 11992 bytes [21:10 17/01/2010] [14:06 06/06/2011]
scitanieoby.txt --a---- 7578 bytes [18:24 17/05/2011] [10:26 23/10/2011]
Shortcut to WowMatrix.lnk --a---- 867 bytes [14:26 15/04/2009] [14:26 15/04/2009]
skola.txt --a---- 3604 bytes [15:47 31/05/2010] [00:22 21/03/2011]
skripta.txt --a---- 8777 bytes [19:43 21/02/2010] [02:50 22/02/2010]
sp-2.doc --a---- 359936 bytes [19:06 24/04/2010] [19:06 24/04/2010]
SpeedFan.lnk --a---- 682 bytes [18:00 23/05/2009] [18:00 23/05/2009]
sykorova.txt --a---- 3197 bytes [23:08 03/11/2009] [13:29 04/01/2011]
Sylaby.docx --a---- 42612 bytes [14:29 14/02/2009] [15:03 14/02/2009]
systema.txt --a---- 526 bytes [22:34 20/04/2010] [16:53 13/05/2010]
SystemLook.exe --a---- 139264 bytes [18:38 23/03/2012] [18:38 23/03/2012]
SystemLook.txt --a---- 0 bytes [18:38 23/03/2012] [19:00 23/03/2012]
Sára so Samom.doc --a---- 58368 bytes [15:26 17/01/2009] [20:03 04/02/2009]
tatnice-teoria.htm --a---- 94241 bytes [20:23 25/01/2009] [20:23 25/01/2009]
tdsskiller.exe --a---- 2063920 bytes [19:04 17/03/2012] [19:04 17/03/2012]
Teamspeak 2 RC2.lnk --a---- 665 bytes [13:21 05/01/2009] [13:21 05/01/2009]
USDownloader.lnk --a---- 678 bytes [01:19 05/01/2009] [01:19 05/01/2009]
vselico.txt --a---- 5231 bytes [13:27 05/09/2011] [14:40 19/12/2011]
vtipy.txt --a---- 1520 bytes [14:38 07/11/2011] [00:40 09/03/2012]
Warcraft III.lnk --a---- 1500 bytes [06:54 11/08/2009] [06:54 11/08/2009]
zliechov upravene.txt --a---- 1682 bytes [10:18 01/06/2010] [10:42 01/06/2010]
znizenie pingu.txt --a---- 2209 bytes [10:27 28/06/2009] [10:31 28/06/2009]
Zákony na individ. vzdelav. programy.doc --a---- 388096 bytes [14:12 13/03/2009] [14:12 13/03/2009]
Úvahy- Slepé lásky.doc --a---- 32768 bytes [14:20 11/03/2012] [14:20 11/03/2012]
Životopis-Mony.doc --a---- 33280 bytes [09:56 13/12/2010] [09:18 14/12/2010]
Životopis.docx --a---- 11499 bytes [18:42 20/02/2010] [18:42 20/02/2010]

---Folders---
fotky d------ [22:06 09/01/2011]
mamine recepty d------ [19:25 15/03/2011]
MINO d------ [13:05 26/04/2009]
RK_Quarantine d------ [18:35 17/03/2012]
statnice d------ [18:13 24/04/2010]
tatnice-teoria_subory d------ [20:23 25/01/2009]

-= EOF =-

[Márty84]

Dobra prace s tim plocha/desktop

SystemLook umi zobrazit i skryte soubory. Toto vsechno mate na plose, zadna skryta ikona tam neni.

Zkuste zadat do systemlooku cestu do te slozky s prislusenstvi (jak ma byt ta kalkulacka)

U me by to bylo

:dir
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories

Na xp to mozna bude jinak. Ale to najdete, ne? Schvalne, jestli tam neco bude.

[Minmi]

SystemLook 30.07.11 by jpshortstuff
Log created at 21:49 on 23/03/2012 by Milan
Administrator - Elevation successful

========== dir ==========

C:\Documents and Settings\Milan\Start Menu\Programs\Accessories - Parameters: "(none)"

---Files---
Address Book.lnk --a---- 774 bytes [14:35 02/01/2009] [11:03 04/04/2009]
Command Prompt.lnk --a---- 1555 bytes [14:34 02/01/2009] [14:30 02/01/2009]
desktop.ini --ahs-- 542 bytes [14:34 02/01/2009] [11:03 04/04/2009]
Notepad.lnk --a---- 1519 bytes [14:34 02/01/2009] [18:29 12/06/2009]
Program Compatibility Wizard.lnk --a---- 528 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Synchronize.lnk --a---- 1519 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Tour Windows XP.lnk --a---- 1527 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Windows Explorer.lnk --a---- 1487 bytes [14:34 02/01/2009] [14:29 02/01/2009]

---Folders---
Accessibility dr----- [14:34 02/01/2009]
Entertainment dr----- [14:34 02/01/2009]
System Tools d------ [14:35 02/01/2009]

-= EOF =-

[Márty84]

Jeste jednou, tentokrat s timto skriptem

Kód: Vybrat vše

:dir
C:\Documents and Settings\Milan\Start Menu\Programs\Accessories /s

[Minmi]

SystemLook 30.07.11 by jpshortstuff
Log created at 22:01 on 23/03/2012 by Milan
Administrator - Elevation successful

========== dir ==========

C:\Documents and Settings\Milan\Start Menu\Programs\Accessories - Parameters: "/s"

---Files---
Address Book.lnk --a---- 774 bytes [14:35 02/01/2009] [11:03 04/04/2009]
Command Prompt.lnk --a---- 1555 bytes [14:34 02/01/2009] [14:30 02/01/2009]
desktop.ini --ahs-- 542 bytes [14:34 02/01/2009] [11:03 04/04/2009]
Notepad.lnk --a---- 1519 bytes [14:34 02/01/2009] [18:29 12/06/2009]
Program Compatibility Wizard.lnk --a---- 528 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Synchronize.lnk --a---- 1519 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Tour Windows XP.lnk --a---- 1527 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Windows Explorer.lnk --a---- 1487 bytes [14:34 02/01/2009] [14:29 02/01/2009]

C:\Documents and Settings\Milan\Start Menu\Programs\Accessories\Accessibility dr----- [14:34 02/01/2009]
desktop.ini --ahs-- 348 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Magnifier.lnk --a---- 1525 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Narrator.lnk --a---- 1532 bytes [14:34 02/01/2009] [14:30 02/01/2009]
On-Screen Keyboard.lnk --a---- 1501 bytes [14:34 02/01/2009] [14:30 02/01/2009]
Utility Manager.lnk --a---- 1539 bytes [14:34 02/01/2009] [14:30 02/01/2009]

C:\Documents and Settings\Milan\Start Menu\Programs\Accessories\Entertainment dr----- [14:34 02/01/2009]
desktop.ini --ahs-- 84 bytes [14:34 02/01/2009] [14:30 02/01/2009]

C:\Documents and Settings\Milan\Start Menu\Programs\Accessories\System Tools d------ [14:35 02/01/2009]
Internet Explorer (No Add-ons).lnk --a---- 833 bytes [14:35 02/01/2009] [14:35 02/01/2009]

-= EOF =-

[Márty84]

No, ty ikony nejsou skryte, ony tam proste fakt nejsou. Takze muzete odkryvat jak chcete, stejne tam nebudou

Zkuste pohledat v napovede windows (kliknete mysi nekam na plochu - do prazdna, ne zadnou ikonu, a zmacknete klavesu F1), jak dat nabidku START do puvodniho nastaveni

Toto mi pise napoveda u me visty.

Obnovení výchozího nastavení nabídky Start
U nabídky Start lze obnovit její původní, výchozí nastavení.
Klepnutím otevřete okno Vlastnosti Hlavního panelu a nabídky Start.
Klepněte na kartu Nabídka Start a potom na tlačítko Vlastní.
V dialogovém okně Upravit nabídku Start klepněte na tlačítko Použít výchozí nastavení a pak klepněte na tlačítko OK.

Nevim, jestli to vrati i ty ikony, ale zkusit se to muze

[Minmi]

v Taskbar and Start Menu Properties nikde nie je žiadna možnosť na obnovenie, v nápovede som nenašiel o tom žiadnu zmienku a čo googlim tiež nič