Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Problém s NTB

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Bosanova
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 07 črc 2012 12:11

Problém s NTB

#1 Příspěvek od Bosanova »

Zdravím,poslední dobou se mi NTB nějak zbláznil,vše nabíhá o mnoho déle ( Několikanásobně ) , Vše jde hůr....Videa na Youtube a vše prostě jede hůř. Prosím o haléhavou pomoc.
Děkuji s Pozdravem Bosanova

LOG z RSIT :
Logfile of random's system information tool 1.09 (written by random/random)
Run by Fujitsu at 2012-07-07 13:13:39
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 10 GB (18%) free of 53 GB
Total RAM: 1014 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:14:03, on 7.7.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\Explorer.EXE
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
C:\windows\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\windows\system32\ctfmon.exe
C:\Documents and Settings\Fujitsu\Local Settings\Data aplikací\Google\Update\1.3.21.111\GoogleCrashHandler.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
c:\program files\avira\antivir desktop\avcenter.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Opera\opera.exe
C:\windows\system32\taskmgr.exe
C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe
C:\Documents and Settings\Fujitsu\Plocha\RSIT.exe
C:\Program Files\trend micro\Fujitsu.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb128?a=6OyG7qbwoP&i=26
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Web Assistant Helper - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Program Files\Web Assistant\Extension32.dll
O2 - BHO: Incredibar.com Helper Object - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll
O3 - Toolbar: Incredibar Toolbar - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [FileZilla Server Interface] "C:\Program Files\FileZilla Server\FileZilla Server Interface.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [ShowBatteryBar] "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Fujitsu\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [uTorrent] "C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\utorrent (1).exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\windows\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Web Assistant Updater - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe

--
End of file - 8247 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-725345543-1202660629-1801674531-1003Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-725345543-1202660629-1801674531-1003UA.job
C:\windows\tasks\Scheduled Update for Ask Toolbar.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Fujitsu\Data aplikací\Mozilla\Firefox\Profiles\lcyuij2u.default

prefs.js - "browser.startup.homepage" - "http://Mystart.incredibar.com/mb124"
prefs.js - "keyword.URL" - "http://mystart.incredibar.com/mb128/?lo ... 26&search="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\Web Assistant\Firefox


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.5.1]
"Description"=
"Path"=C:\windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Fujitsu\Data aplikací\Mozilla\Firefox\Profiles\lcyuij2u.default\extensions\
ffxtlbr@incredibar.com
OneClickDownload@OneClickDownload.com
plugin@yontoo.com
toolbar@ask.com
{687578b9-7132-4a7a-80e4-30ee31099e03}

C:\Documents and Settings\Fujitsu\Data aplikací\Mozilla\Firefox\Profiles\lcyuij2u.default\searchplugins\
MyStart Search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
Web Assistant - C:\Program Files\Web Assistant\Extension32.dll [2012-06-06 162816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}]
Incredibar.com Helper Object - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll [2012-01-22 261632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo - C:\Program Files\Yontoo\YontooIEClient.dll [2012-05-16 194928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{F9639E4A-801B-4843-AEE3-03D9DA199E77} - Incredibar Toolbar - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll [2012-01-22 270336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\windows\RTHDCPL.EXE [2009-09-11 16861184]
"Alcmtr"=C:\windows\ALCMTR.EXE [2009-09-11 69632]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-06-04 348624]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-09-11 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-09-11 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-09-11 137752]
"FileZilla Server Interface"=C:\Program Files\FileZilla Server\FileZilla Server Interface.exe [2012-02-26 1044992]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]
"ShowBatteryBar"=C:\Program Files\BatteryBar\ShowBatteryBar.exe [2009-05-28 90624]
"Google Update"=C:\Documents and Settings\Fujitsu\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2012-04-03 136176]
"uTorrent"=C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\utorrent (1).exe [2012-06-25 735608]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-06-05 17344176]
"Steam"=C:\Program Files\Steam\steam.exe [2012-07-02 1242448]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe

C:\Documents and Settings\Fujitsu\Nabídka Start\Programy\Po spuštění
hamachi.lnk - C:\Program Files\Hamachi\hamachi.exe
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2009-09-11 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\windows\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\utorrent (1).exe"="C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\utorrent (1).exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Fujitsu\Plocha\CS\CounterStrike2D.exe"="C:\Documents and Settings\Fujitsu\Plocha\CS\CounterStrike2D.exe:*:Enabled:CounterStrike2D"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Condition Zero\hl.exe"="C:\Program Files\Condition Zero\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\Metin2new\MoonMt2.exe"="C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\Metin2new\MoonMt2.exe:*:Enabled:MoonMt2"
"C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\vdvcv\MoonMt2.exe"="C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\vdvcv\MoonMt2.exe:*:Enabled:MoonMt2"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\Fujitsu\Plocha\Metin2new\MoonMt2.exe"="C:\Documents and Settings\Fujitsu\Plocha\Metin2new\MoonMt2.exe:*:Enabled:MoonMt2"
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\metin2client.exe"="C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\metin2client.exe:*:Enabled:metin2client"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\eQauLityMt2\metin2.bin"="C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\eQauLityMt2\metin2.bin:*:Enabled:metin2"
"C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\metin2.bin"="C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\metin2.bin:*:Enabled:metin2"
"C:\Documents and Settings\Fujitsu\Plocha\Funside Client 2012\patchskin\Funside.fun"="C:\Documents and Settings\Fujitsu\Plocha\Funside Client 2012\patchskin\Funside.fun:*:Enabled:Funside"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\SpacialAudio\SAMBC\SAMBC.exe"="C:\Program Files\SpacialAudio\SAMBC\SAMBC.exe:*:Enabled:SAMBC"
"C:\Program Files\SpacialAudio\SAMBC2\SAMBC.exe\SAMBC.exe"="C:\Program Files\SpacialAudio\SAMBC2\SAMBC.exe\SAMBC.exe:*:Enabled:SAMBC"
"C:\Documents and Settings\Fujitsu\Plocha\Arean2\metin2client.bin"="C:\Documents and Settings\Fujitsu\Plocha\Arean2\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Metin2-NOVÝ\metin2client.bin"="C:\Program Files\Metin2-NOVÝ\metin2client.bin:*:Enabled:Metin2Client"
"C:\Program Files\Steam\steamapps\czech_fabio@hotmail.com\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\czech_fabio@hotmail.com\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.ffds"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll

======List of files/folders created in the last 1 month======

2012-07-07 13:13:40 ----D---- C:\Program Files\trend micro
2012-07-07 13:13:39 ----D---- C:\rsit
2012-07-07 09:19:44 ----D---- C:\2873a6af513a619764
2012-07-06 14:25:56 ----D---- C:\Program Files\Metin2-NOVÝ
2012-07-06 00:46:47 ----D---- C:\Program Files\Microsoft.NET
2012-07-05 21:34:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\firebird
2012-07-05 21:28:06 ----A---- C:\windows\system32\GDS32.DLL
2012-07-05 21:27:44 ----D---- C:\Program Files\Firebird
2012-07-05 21:27:22 ----D---- C:\Program Files\SpacialAudio
2012-07-05 17:53:56 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Opera
2012-07-05 17:52:51 ----D---- C:\Program Files\Opera
2012-07-05 16:12:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2012-07-05 11:57:30 ----D---- C:\Program Files\Adobe Media Player
2012-07-05 11:54:12 ----D---- C:\Program Files\Common Files\Adobe AIR
2012-07-05 11:48:14 ----D---- C:\Program Files\Common Files\Macrovision Shared
2012-07-04 17:12:55 ----D---- C:\Program Files\18 WoS Pedal to the Metal
2012-07-03 16:13:22 ----A---- C:\windows\system32\libmysql_c.dll
2012-07-02 17:03:59 ----D---- C:\Program Files\Common Files\Steam
2012-07-02 17:03:55 ----D---- C:\Program Files\Steam
2012-07-01 20:28:44 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\FileZilla
2012-07-01 20:23:13 ----D---- C:\Program Files\FileZilla Server
2012-07-01 17:06:51 ----A---- C:\windows\system32\drivers\hamachi.sys
2012-07-01 17:06:50 ----D---- C:\Program Files\Hamachi
2012-06-30 20:02:14 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\TS3Client
2012-06-30 20:01:09 ----D---- C:\Program Files\TeamSpeak 3 Client
2012-06-30 15:19:47 ----D---- C:\Program Files\Common Files\Skype
2012-06-30 11:53:24 ----D---- C:\windows\Minidump
2012-06-27 15:41:07 ----D---- C:\Program Files\Oracle
2012-06-27 15:40:54 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Oracle
2012-06-27 15:40:51 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\.minecraft
2012-06-27 15:40:48 ----A---- C:\windows\system32\npDeployJava1.dll
2012-06-27 15:40:48 ----A---- C:\windows\system32\javaws.exe
2012-06-27 15:40:48 ----A---- C:\windows\system32\deployJava1.dll
2012-06-27 15:40:28 ----A---- C:\windows\system32\javaw.exe
2012-06-27 15:40:28 ----A---- C:\windows\system32\java.exe
2012-06-27 15:39:50 ----D---- C:\Program Files\Java
2012-06-27 15:37:29 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Sun
2012-06-27 09:12:46 ----A---- C:\windows\d3dx.dat
2012-06-27 09:05:06 ----D---- C:\Program Files\JoWooD
2012-06-26 21:28:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee Security Scan
2012-06-26 21:28:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2012-06-26 21:28:16 ----D---- C:\Program Files\McAfee Security Scan
2012-06-26 21:28:13 ----A---- C:\windows\system32\FlashPlayerApp.exe
2012-06-26 20:34:48 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Incredibar.com
2012-06-26 20:34:44 ----D---- C:\Program Files\Yontoo
2012-06-26 19:07:53 ----D---- C:\Config.Msi
2012-06-26 14:21:19 ----A---- C:\windows\iun6002.exe
2012-06-26 14:20:00 ----D---- C:\Program Files\Perion
2012-06-26 14:19:52 ----A---- C:\user.js
2012-06-26 14:19:50 ----D---- C:\Program Files\Incredibar.com
2012-06-26 14:19:31 ----D---- C:\Program Files\Web Assistant
2012-06-26 14:17:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Tarma Installer
2012-06-26 14:17:16 ----D---- C:\Program Files\1ClickDownload
2012-06-26 14:05:48 ----D---- C:\Program Files\Condition Zero
2012-06-25 16:55:54 ----D---- C:\Program Files\Call of Duty
2012-06-25 16:53:55 ----A---- C:\windows\CoD.INI
2012-06-25 15:14:47 ----A---- C:\windows\system32\drivers\mouhid.sys
2012-06-25 15:14:38 ----A---- C:\windows\system32\drivers\hidusb.sys
2012-06-25 14:10:02 ----D---- C:\Program Files\EA GAMES
2012-06-25 14:06:17 ----A---- C:\windows\system32\d3dx9_26.dll
2012-06-25 14:05:51 ----D---- C:\windows\RegisteredPackages
2012-06-25 14:05:15 ----A---- C:\windows\system32\psisdecd.dll
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\wstcodec.sys
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\streamip.sys
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\slip.sys
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\ndisip.sys
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\nabtsfec.sys
2012-06-25 14:05:14 ----A---- C:\windows\system32\drivers\msdv.sys
2012-06-25 14:05:14 ----A---- C:\windows\system32\drivers\mpe.sys
2012-06-25 14:05:14 ----A---- C:\windows\system32\drivers\ccdecode.sys
2012-06-25 14:05:14 ----A---- C:\windows\system32\drivers\bdasup.sys
2012-06-25 14:05:13 ----A---- C:\windows\system32\drivers\mstee.sys
2012-06-25 14:05:09 ----A---- C:\windows\system32\dxdllreg.exe
2012-06-25 14:02:53 ----A---- C:\windows\system32\drivers\dtsoftbus01.sys
2012-06-25 14:01:08 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\DAEMON Tools Lite
2012-06-25 14:01:07 ----D---- C:\Program Files\DAEMON Tools Lite
2012-06-25 14:00:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2012-06-25 11:20:11 ----D---- C:\Program Files\CommViewWiFi
2012-06-25 10:06:28 ----D---- C:\windows\system32\NtmsData
2012-06-25 09:48:50 ----D---- C:\Program Files\Firefly Studios
2012-06-23 10:32:33 ----D---- C:\Program Files\Metin22
2012-06-23 10:13:20 ----D---- C:\Program Files\7-Zip
2012-06-22 21:23:04 ----D---- C:\Program Files\PremiumSoft
2012-06-22 20:17:33 ----D---- C:\Program Files\Metin2
2012-06-21 15:17:04 ----D---- C:\Program Files\uTorrentControl2
2012-06-21 15:15:43 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\uTorrent
2012-06-20 20:23:56 ----D---- C:\Program Files\Hamachi(2)
2012-06-20 15:55:32 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\TeamViewer
2012-06-20 15:55:23 ----D---- C:\Program Files\TeamViewer
2012-06-19 21:39:04 ----HDC---- C:\windows\$NtUninstallKB2707511$
2012-06-19 21:34:20 ----HDC---- C:\windows\$NtUninstallKB2685939$
2012-06-19 21:31:32 ----HDC---- C:\windows\$NtUninstallKB2709162$
2012-06-19 20:38:30 ----D---- C:\Program Files\WinSCP
2012-06-19 20:34:07 ----D---- C:\Program Files\Valve
2012-06-19 20:32:30 ----D---- C:\Program Files\CPUID
2012-06-19 18:34:14 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\WinRAR
2012-06-19 18:34:10 ----D---- C:\Program Files\WinRAR
2012-06-19 18:26:20 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Hamachi
2012-06-19 18:18:58 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Skype
2012-06-19 18:18:45 ----RD---- C:\Program Files\Skype
2012-06-19 18:18:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2012-06-19 18:17:09 ----D---- C:\Program Files\Ask.com
2012-06-19 18:10:08 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Macromedia

======List of files/folders modified in the last 1 month======

2012-07-07 13:13:50 ----D---- C:\windows\Temp
2012-07-07 13:13:40 ----RD---- C:\Program Files
2012-07-07 12:57:24 ----SHD---- C:\System Volume Information
2012-07-07 12:52:49 ----D---- C:\windows\Microsoft.NET
2012-07-07 12:51:48 ----RSD---- C:\windows\assembly
2012-07-07 12:32:00 ----A---- C:\windows\SchedLgU.Txt
2012-07-07 12:03:58 ----D---- C:\windows\system32\CatRoot2
2012-07-07 12:03:48 ----D---- C:\windows\repair
2012-07-07 12:03:46 ----D---- C:\windows\Registration
2012-07-07 11:36:19 ----D---- C:\windows\system32\drivers
2012-07-07 09:22:44 ----SHD---- C:\windows\Installer
2012-07-07 09:21:26 ----D---- C:\windows\WinSxS
2012-07-07 09:21:19 ----AD---- C:\windows\system32
2012-07-07 09:21:19 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-07-06 20:14:53 ----D---- C:\windows\Prefetch
2012-07-06 01:05:06 ----D---- C:\windows\system32\cs-cz
2012-07-06 00:47:03 ----D---- C:\windows\system32\en-US
2012-07-05 16:19:23 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Adobe
2012-07-05 16:12:07 ----D---- C:\WINDOWS
2012-07-05 12:00:46 ----D---- C:\Program Files\Adobe
2012-07-05 12:00:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-07-05 11:59:00 ----D---- C:\Program Files\Common Files\Adobe
2012-07-05 11:56:38 ----RSD---- C:\windows\Fonts
2012-07-05 11:54:12 ----D---- C:\Program Files\Common Files
2012-07-04 19:00:45 ----D---- C:\Program Files\Mozilla Firefox
2012-07-02 21:14:13 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\BatteryBar
2012-07-02 14:56:41 ----HD---- C:\windows\inf
2012-07-01 11:18:23 ----SD---- C:\Documents and Settings\Fujitsu\Data aplikací\Microsoft
2012-06-29 10:49:14 ----D---- C:\windows\Debug
2012-06-27 14:30:18 ----D---- C:\windows\system32\CatRoot
2012-06-27 09:11:32 ----HD---- C:\Program Files\InstallShield Installation Information
2012-06-26 20:37:02 ----D---- C:\windows\system32\config
2012-06-26 20:36:47 ----D---- C:\windows\system32\wbem
2012-06-26 20:35:16 ----D---- C:\windows\system32\DirectX
2012-06-26 20:33:58 ----D---- C:\Program Files\Common Files\InstallShield
2012-06-26 20:33:47 ----RSHDC---- C:\windows\system32\dllcache
2012-06-26 20:31:59 ----D---- C:\Program Files\Internet Explorer
2012-06-26 20:30:32 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-06-26 20:29:53 ----DC---- C:\windows\system32\DRVSTORE
2012-06-26 20:08:54 ----HDC---- C:\windows\$NtUninstallKB2718704$
2012-06-25 17:38:20 ----A---- C:\windows\system32\MRT.exe
2012-06-25 13:06:05 ----A---- C:\windows\system.ini
2012-06-25 10:22:03 ----D---- C:\windows\system32\Restore
2012-06-23 18:52:46 ----SD---- C:\windows\Tasks
2012-06-19 21:34:32 ----D---- C:\windows\ie8updates
2012-06-19 21:34:26 ----HD---- C:\windows\$hf_mig$
2012-06-19 18:09:33 ----D---- C:\windows\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\windows\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2012-06-04 137928]
R1 avkmgr;avkmgr; C:\windows\system32\DRIVERS\avkmgr.sys [2011-10-19 36000]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-06-25 242240]
R1 intelppm;Řadič procesoru Intel; C:\windows\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R2 adfs;adfs; C:\windows\system32\drivers\adfs.sys [2008-08-14 74720]
R2 avgntflt;avgntflt; C:\windows\system32\DRIVERS\avgntflt.sys [2012-06-04 83392]
R2 irda;Protokol IrDA; C:\windows\system32\DRIVERS\irda.sys [2008-04-14 88192]
R3 Arp1394;Protokol 1394 ARP Client; C:\windows\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\windows\system32\DRIVERS\bcmwl5.sys [2009-09-11 822272]
R3 FUJ02B1;Fujitsu FUJ02B1 Device Driver; C:\windows\system32\DRIVERS\FUJ02B1.sys [2009-09-11 5248]
R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver; C:\windows\system32\DRIVERS\FUJ02E3.sys [2009-09-11 4864]
R3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2012-07-01 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\windows\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 ialm;ialm; C:\windows\system32\DRIVERS\igxpmp32.sys [2009-09-11 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RtkHDAud.sys [2009-09-11 4707328]
R3 NIC1394;1394 Net Driver; C:\windows\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 Rasirda;WAN Miniport (IrDA); C:\windows\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SMCIRDA;SMC IrCC Miniport Device Driver; C:\windows\system32\DRIVERS\smcirda.sys [2001-10-24 35913]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\windows\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\windows\system32\DRIVERS\yk51x86.sys [2009-09-11 296448]
S3 EagleNT;EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\windows\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 mouhid;Ovladač myši standardu HID; C:\windows\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-06-04 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-06-04 86224]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 FileZilla Server;FileZilla Server FTP server; C:\Program Files\FileZilla Server\FileZilla Server.exe [2012-02-26 632320]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [2010-09-17 98304]
R2 Irmon;Sledování infračerveného přenosu; C:\windows\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [2012-05-04 161664]
R2 Web Assistant Updater;Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [2012-06-06 185856]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [2010-09-17 3735552]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-05 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-26 250056]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-07-05 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-03-16 407336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------



a Vyjelo mi nějaký ještě info.txt tak tady je to co v něm je :


info.txt logfile of random's system information tool 1.09 2012-07-07 13:14:07

======Uninstall list======

-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
18 Wheels of Steel Pedal to the Metal-->C:\Program Files\18 WoS Pedal to the Metal\uninst.exe
1ClickDownloader-->C:\Program Files\1ClickDownload\uninst.exe
Adobe AIR-->C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
Adobe Anchor Service CS4-->MsiExec.exe /I{1618734A-3957-4ADD-8199-F973763109A8}
Adobe Bridge CS4-->MsiExec.exe /I{83877DB1-8B77-45BC-AB43-2BAC22E093E0}
Adobe CMaps CS4-->MsiExec.exe /I{94D398EB-D2FD-4FD1-B8C4-592635E8A191}
Adobe Color - Photoshop Specific CS4-->MsiExec.exe /I{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}
Adobe Color EU Recommended Settings CS4-->MsiExec.exe /I{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}
Adobe Color JA Extra Settings CS4-->MsiExec.exe /I{0D6013AB-A0C7-41DC-973C-E93129C9A29F}
Adobe Color NA Extra Settings CS4-->MsiExec.exe /I{098A2A49-7CF3-4F08-A38D-FB879117152A}
Adobe Color Video Profiles CS CS4-->MsiExec.exe /I{63C24A08-70F3-4C8E-B9FB-9F21A903801D}
Adobe CSI CS4-->MsiExec.exe /I{0F723FC1-7606-4867-866C-CE80AD292DAF}
Adobe Default Language CS4-->MsiExec.exe /I{C52E3EC1-048C-45E1-8D53-10B0C6509683}
Adobe Device Central CS4-->MsiExec.exe /I{67F0E67A-8E93-4C2C-B29D-47C48262738A}
Adobe Drive CS4-->MsiExec.exe /I{16E16F01-2E2D-4248-A42F-76261C147B6C}
Adobe ExtendScript Toolkit CS4-->MsiExec.exe /I{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}
Adobe Extension Manager CS4-->MsiExec.exe /I{054EFA56-2AC1-48F4-A883-0AB89874B972}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->C:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_262_Plugin.exe -maintain plugin
Adobe Fonts All-->MsiExec.exe /I{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}
Adobe Linguistics CS4-->MsiExec.exe /I{931AB7EA-3656-4BB7-864D-022B09E3DD67}
Adobe Media Player-->msiexec /qb /x {39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Media Player-->MsiExec.exe /I{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}
Adobe Output Module-->MsiExec.exe /I{BB4E33EC-8181-4685-96F7-8554293DEC6A}
Adobe PDF Library Files CS4-->MsiExec.exe /I{F93C84A6-0DC6-42AF-89FA-776F7C377353}
Adobe Photoshop CS4 Support-->MsiExec.exe /I{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}
Adobe Photoshop CS4-->C:\Program Files\Common Files\Adobe\Installers\faf656ef605427ee2f42989c3ad31b8\Setup.exe --uninstall=1
Adobe Photoshop CS4-->MsiExec.exe /I{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}
Adobe Photoshop CS4-->MsiExec.exe /I{E4848436-0345-47E2-B648-8B522FCDA623}
Adobe Reader 9.2 - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-A92000000001}
Adobe Search for Help-->MsiExec.exe /I{F0E64E2E-3A60-40D8-A55D-92F6831875DA}
Adobe Service Manager Extension-->MsiExec.exe /I{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}
Adobe Setup-->MsiExec.exe /I{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}
Adobe Type Support CS4-->MsiExec.exe /I{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}
Adobe Update Manager CS4-->MsiExec.exe /I{05308C4E-7285-4066-BAE3-6B50DA6ED755}
Adobe WinSoft Linguistics Plugin-->MsiExec.exe /I{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}
Adobe XMP Panels CS4-->MsiExec.exe /I{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}
AdobeColorCommonSetCMYK-->MsiExec.exe /I{68243FF8-83CA-466B-B2B8-9F99DA5479C4}
AdobeColorCommonSetRGB-->MsiExec.exe /I{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}
Aktualizace systému Windows XP (KB2345886)-->"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB2641690)-->"C:\WINDOWS\$NtUninstallKB2641690$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB2718704)-->"C:\windows\$NtUninstallKB2718704$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB898461)-->"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB971029)-->"C:\WINDOWS\$NtUninstallKB971029$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Aktualizace systému Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB2378111)-->"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB975558)-->"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe"
Aktualizace zabezpečení aplikace Windows Media Player (KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Aktualizace zabezpečení pro Microsoft Windows (KB2564958)-->"C:\WINDOWS\$NtUninstallKB2564958$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2510531)-->"C:\WINDOWS\ie8updates\KB2510531-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2544521)-->"C:\WINDOWS\ie8updates\KB2544521-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2647516)-->"C:\WINDOWS\ie8updates\KB2647516-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2675157)-->"C:\windows\ie8updates\KB2675157-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2699988)-->"C:\windows\ie8updates\KB2699988-IE8\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2079403)-->"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2296011)-->"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2347290)-->"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2360937)-->"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2387149)-->"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2393802)-->"C:\WINDOWS\$NtUninstallKB2393802$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2412687)-->"C:\WINDOWS\$NtUninstallKB2412687$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2419632)-->"C:\WINDOWS\$NtUninstallKB2419632$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2423089)-->"C:\WINDOWS\$NtUninstallKB2423089$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2440591)-->"C:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2443105)-->"C:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2476490)-->"C:\WINDOWS\$NtUninstallKB2476490$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2478960)-->"C:\WINDOWS\$NtUninstallKB2478960$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2478971)-->"C:\WINDOWS\$NtUninstallKB2478971$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2479943)-->"C:\WINDOWS\$NtUninstallKB2479943$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2481109)-->"C:\WINDOWS\$NtUninstallKB2481109$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2483185)-->"C:\WINDOWS\$NtUninstallKB2483185$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2485663)-->"C:\WINDOWS\$NtUninstallKB2485663$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2506212)-->"C:\WINDOWS\$NtUninstallKB2506212$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2507618)-->"C:\WINDOWS\$NtUninstallKB2507618$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2507938)-->"C:\WINDOWS\$NtUninstallKB2507938$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2508429)-->"C:\WINDOWS\$NtUninstallKB2508429$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2509553)-->"C:\WINDOWS\$NtUninstallKB2509553$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2535512)-->"C:\WINDOWS\$NtUninstallKB2535512$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2536276-v2)-->"C:\WINDOWS\$NtUninstallKB2536276-v2$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2544893-v2)-->"C:\WINDOWS\$NtUninstallKB2544893-v2$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2566454)-->"C:\WINDOWS\$NtUninstallKB2566454$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2570947)-->"C:\WINDOWS\$NtUninstallKB2570947$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2584146)-->"C:\WINDOWS\$NtUninstallKB2584146$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2585542)-->"C:\WINDOWS\$NtUninstallKB2585542$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2592799)-->"C:\WINDOWS\$NtUninstallKB2592799$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2598479)-->"C:\WINDOWS\$NtUninstallKB2598479$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2603381)-->"C:\WINDOWS\$NtUninstallKB2603381$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2618451)-->"C:\WINDOWS\$NtUninstallKB2618451$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2619339)-->"C:\WINDOWS\$NtUninstallKB2619339$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2620712)-->"C:\WINDOWS\$NtUninstallKB2620712$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2621440)-->"C:\WINDOWS\$NtUninstallKB2621440$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2624667)-->"C:\WINDOWS\$NtUninstallKB2624667$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2631813)-->"C:\WINDOWS\$NtUninstallKB2631813$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2633171)-->"C:\WINDOWS\$NtUninstallKB2633171$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2641653)-->"C:\WINDOWS\$NtUninstallKB2641653$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2646524)-->"C:\WINDOWS\$NtUninstallKB2646524$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2647518)-->"C:\WINDOWS\$NtUninstallKB2647518$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2653956)-->"C:\windows\$NtUninstallKB2653956$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2659262)-->"C:\windows\$NtUninstallKB2659262$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2661637)-->"C:\WINDOWS\$NtUninstallKB2661637$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2676562)-->"C:\windows\$NtUninstallKB2676562$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2685939)-->"C:\windows\$NtUninstallKB2685939$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2686509)-->"C:\windows\$NtUninstallKB2686509$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2695962)-->"C:\windows\$NtUninstallKB2695962$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2707511)-->"C:\windows\$NtUninstallKB2707511$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB2709162)-->"C:\windows\$NtUninstallKB2709162$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB979687)-->"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981322)-->"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982132)-->"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe"
Aktualizace zabezpečení systému Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"
Avira Free Antivirus-->C:\Program Files\Avira\AntiVir Desktop\setup.exe /REMOVE
BatteryBar (remove only)-->"C:\Program Files\BatteryBar\Uninstall.exe"
Call of Duty-->C:\PROGRA~1\CALLOF~1\Uninstall\Unwise.exe /u C:\PROGRA~1\CALLOF~1\Uninstall\Install.log
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Combined Community Codec Pack BETA 2009-09-19-->"C:\Program Files\Combined Community Codec Pack\unins000.exe"
Condition Zero 3-->C:\windows\iun6002.exe "C:\Program Files\Condition Zero\irunin.ini"
Connect-->MsiExec.exe /I{B29AD377-CC12-490A-A480-1452337C618D}
Counter-Strike 1.6-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{13B792AA-C078-43A4-8A3A-8B12D629940D}\Setup.exe" -l0x19
Counter-Strike-->"C:\Program Files\Steam\steam.exe" steam://uninstall/10
DAEMON Tools Lite-->C:\Program Files\DAEMON Tools Lite\uninst.exe
FileZilla Server-->C:\Program Files\FileZilla Server\uninstall.exe
Firebird 2.5.0.26074 (Win32)-->"C:\Program Files\Firebird\Firebird_2_5\unins000.exe"
Hamachi 1.0.2.5-->C:\Program Files\Hamachi\uninstall.exe
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Incredibar Toolbar on IE and Chrome-->"C:\Program Files\Incredibar.com\incredibar\1.5.11.14\uninstall.exe"
Intel(R) Graphics Media Accelerator Driver-->C:\WINDOWS\system32\igxpun.exe -uninstall
Java(TM) 7 Update 5-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217005FF}
JavaFX 2.1.1-->MsiExec.exe /X{1111706F-666A-4037-7777-211328764D10}
kuler-->MsiExec.exe /I{098727E1-775A-4450-B573-3F441F1CA243}
McAfee Security Scan Plus-->"C:\Program Files\McAfee Security Scan\uninstall.exe"
Metin2-->"C:\Program Files\Metin2-NOVÝ\unins000.exe"
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->C:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /lcid 1029 /parameterfolder ClientLP
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->MsiExec.exe /X{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}
Microsoft .NET Framework 4 Client Profile-->C:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6}
Microsoft .NET Framework 4 Extended CSY Language Pack-->C:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ExtendedLP\Setup.exe /repair /x86 /lcid 1029 /parameterfolder ExtendedLP
Microsoft .NET Framework 4 Extended CSY Language Pack-->MsiExec.exe /X{A2DE62D8-EF1B-36CB-B461-B1E221ED8608}
Microsoft .NET Framework 4 Extended-->C:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /parameterfolder Extended
Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{0A0CADCF-78DA-33C4-A350-CD51849B9702}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Mijagi-MJ4 2012-->C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\Uninstall.exe
Mozilla Firefox 5.0.1 (x86 cs)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
MSI to redistribute MS VS2005 CRT libraries-->MsiExec.exe /I{A8D93648-9F7F-407D-915C-62044644C3DA}
Need for Speed Most Wanted-->C:\Program Files\EA GAMES\Need for Speed Most Wanted2\Uninstall.exe
Need for Speed™ Most Wanted-->C:\Program Files\EA GAMES\Need for Speed Most Wanted2\Uninstall.exe
OpenOffice.org 3.2-->MsiExec.exe /I{FAB43061-FEFB-46E8-A159-96710395DB5E}
Opera 12.00-->"C:\Program Files\Opera\Opera.exe" /uninstall
Oprava Hotfix systému Windows XP (KB2633952)-->"C:\WINDOWS\$NtUninstallKB2633952$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Oprava Hotfix systému Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
PDF Settings CS4-->MsiExec.exe /I{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}
Photoshop Camera Raw-->MsiExec.exe /I{CC75AB5C-2110-4A7F-AF52-708680D22FE8}
PowerDVD-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\Setup.exe" -uninstall
PremiumSoft Navicat 8.0 for MySQL-->"C:\Program Files\PremiumSoft\Navicat 8.0 MySQL\unins000.exe"
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m -nrg2709
SAM Broadcaster (remove only)-->"C:\Program Files\SpacialAudio\SAMBC\uninstall.exe"
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)-->C:\windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {94EFE014-E577-310B-B2D5-6973A21D8A90} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)-->C:\windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {F6F5AC31-9833-3E77-AC8E-8E910CAB39AE} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {67A5F99B-5EBA-3812-8D2E-BC251490DD3F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {86BB5A25-8CC3-33CE-A393-CF28901682B2} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {16EEC04A-B924-37E0-97CF-422DCEFC1B63} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {42A3562E-8B4E-39A4-B82D-CC12F82889E3} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)-->c:\windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Extended
Skype™ 5.9-->MsiExec.exe /X{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Suite Shared Configuration CS4-->MsiExec.exe /I{842B4B72-9E8F-4962-B3C1-1C422A5C4434}
TeamSpeak 3 Client-->"C:\Program Files\TeamSpeak 3 Client\uninstall.exe"
TeamViewer 7-->C:\Program Files\TeamViewer\Version7\uninstall.exe
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Web Assistant 2.0.0.455-->"C:\Program Files\Web Assistant\unins000.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinRAR 4.11 (32-bit)-->C:\Program Files\WinRAR\uninstall.exe
WinSCP 5.0.7 beta-->"C:\Program Files\WinSCP\unins000.exe"
Yontoo 1.10.02-->C:\DOCUME~1\ALLUSE~1\DATAAP~1\TARMAI~1\{889DF~1\Setup.exe /remove /q0

======Security center information======

AV: Avira Desktop

======System event log======

Computer Name: FUJITSUS-682803
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Služba brány aplikačního rozhraní úspěšně odeslán.

Record Number: 2025
Source Name: Service Control Manager
Time Written: 20120625093503.000000+120
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: FUJITSUS-682803
Event Code: 7036
Message: Stav služby Správce vzdáleného přístupu byl změněn na: Spuštěno

Record Number: 2024
Source Name: Service Control Manager
Time Written: 20120625093459.000000+120
Event Type: Informace
User:

Computer Name: FUJITSUS-682803
Event Code: 7035
Message: Řídící příkaz Spuštěno byl službě Správce vzdáleného přístupu úspěšně odeslán.

Record Number: 2023
Source Name: Service Control Manager
Time Written: 20120625093453.000000+120
Event Type: Informace
User: FUJITSUS-682803\Fujitsu

Computer Name: FUJITSUS-682803
Event Code: 7036
Message: Stav služby Telefonní subsystém byl změněn na: Spuštěno

Record Number: 2022
Source Name: Service Control Manager
Time Written: 20120625093453.000000+120
Event Type: Informace
User:

Computer Name: FUJITSUS-682803
Event Code: 7036
Message: Stav služby Služba rozpoznávání pomocí protokolu SSDP byl změněn na: Spuštěno

Record Number: 2021
Source Name: Service Control Manager
Time Written: 20120625093453.000000+120
Event Type: Informace
User:

=====Application event log=====

Computer Name: FUJITSUS-682803
Event Code: 100
Message: Service started.

Record Number: 989
Source Name: SkypeUpdate
Time Written: 20120630152007.000000+120
Event Type: Informace
User:

Computer Name: FUJITSUS-682803
Event Code: 11707
Message: Product: Skype™ 5.9 -- Installation completed successfully.

Record Number: 988
Source Name: MsiInstaller
Time Written: 20120630151959.000000+120
Event Type: Informace
User: FUJITSUS-682803\Fujitsu

Computer Name: FUJITSUS-682803
Event Code: 1800
Message: Služba Centrum zabezpečení systému Windows byla spuštěna.

Record Number: 987
Source Name: SecurityCenter
Time Written: 20120630151618.000000+120
Event Type: Informace
User:

Computer Name: FUJITSUS-682803
Event Code: 4096
Message: The AntiVir service has been started successfully!

Record Number: 986
Source Name: Avira Antivirus
Time Written: 20120630151552.000000+120
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: FUJITSUS-682803
Event Code: 4113
Message: AntiVir has detected 'TR/Rogue.KD.520735'
in the file
C:\System Volume Information\_restore{0BE85B52-AA1C-4D6F-B74F-61BB84A3F942}\RP37\A0040873.exe

Record Number: 985
Source Name: Avira Antivirus
Time Written: 20120630142502.000000+120
Event Type: Upozornění
User: NT AUTHORITY\SYSTEM

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 14 Stepping 8, GenuineIntel
"PROCESSOR_REVISION"=0e08
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP

-----------------EOF-----------------



Opravdu děkuji za naléhavou pomoc.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NTB

#2 Příspěvek od Rudy »

Také zdravím!
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files\Web Assistant
C:\Program Files\Yontoo
C:\Program Files\Incredibar.com
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-725345543-1202660629-1801674531-1003Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-725345543-1202660629-1801674531-1003UA.job
C:\windows\tasks\Scheduled Update for Ask Toolbar.job
C:\Program Files\Ask.com

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Po skenu restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Bosanova
Návštěvník
Návštěvník
Příspěvky: 3
Registrován: 07 črc 2012 12:11

Re: Problém s NTB

#3 Příspěvek od Bosanova »

Zdravím , provedl jsem ale jestli pomohlo to si nejsem jist nevypadá to ale....možná jen minimálně.

Nový log z RSIT.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Fujitsu at 2012-07-07 20:42:58
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 11 GB (22%) free of 53 GB
Total RAM: 1014 MB (47% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:44:28, on 7.7.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\Explorer.EXE
C:\windows\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\FileZilla Server\FileZilla Server.exe
C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\windows\RTHDCPL.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\windows\system32\ctfmon.exe
C:\Documents and Settings\Fujitsu\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
C:\Documents and Settings\Fujitsu\Local Settings\Data aplikací\Google\Update\1.3.21.111\GoogleCrashHandler.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\windows\system32\taskmgr.exe
C:\windows\system32\wuauclt.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Documents and Settings\Fujitsu\Plocha\RSIT.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
C:\Program Files\Hide My IP\HideMyIpSrv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\windows\system32\wuauclt.exe
C:\Program Files\trend micro\Fujitsu.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb128?a=6OyG7qbwoP&i=26
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [FileZilla Server Interface] "C:\Program Files\FileZilla Server\FileZilla Server Interface.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [ShowBatteryBar] "C:\Program Files\BatteryBar\ShowBatteryBar.exe" show
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Fujitsu\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [uTorrent] "C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\utorrent (1).exe" /MINIMIZED
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Steam] "C:\Program Files\Steam\steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\hmipcore.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\windows\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\Program Files\FileZilla Server\FileZilla Server.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: HideMyIpSRV - Hide My IP - C:\Program Files\Hide My IP\HideMyIpSrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: Web Assistant Updater - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe (file missing)

--
End of file - 8033 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Fujitsu\Data aplikací\Mozilla\Firefox\Profiles\lcyuij2u.default

prefs.js - "browser.startup.homepage" - "http://Mystart.incredibar.com/mb124"
prefs.js - "keyword.URL" - "http://mystart.incredibar.com/mb128/?lo ... 26&search="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"{336D0C35-8A85-403a-B9D2-65C292C39087}"=C:\Program Files\Web Assistant\Firefox


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.3.300.262 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.5.1]
"Description"=
"Path"=C:\windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Fujitsu\Data aplikací\Mozilla\Firefox\Profiles\lcyuij2u.default\extensions\
ffxtlbr@incredibar.com
OneClickDownload@OneClickDownload.com
plugin@yontoo.com
toolbar@ask.com
{687578b9-7132-4a7a-80e4-30ee31099e03}

C:\Documents and Settings\Fujitsu\Data aplikací\Mozilla\Firefox\Profiles\lcyuij2u.default\searchplugins\
MyStart Search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-05-04 453504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-05-04 157576]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\windows\RTHDCPL.EXE [2009-09-11 16861184]
"Alcmtr"=C:\windows\ALCMTR.EXE [2009-09-11 69632]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-10-03 35696]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2012-06-04 348624]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-09-11 141848]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-09-11 166424]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-09-11 137752]
"FileZilla Server Interface"=C:\Program Files\FileZilla Server\FileZilla Server Interface.exe [2012-02-26 1044992]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\windows\system32\ctfmon.exe [2008-04-14 15360]
"ShowBatteryBar"=C:\Program Files\BatteryBar\ShowBatteryBar.exe [2009-05-28 90624]
"Google Update"=C:\Documents and Settings\Fujitsu\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2012-04-03 136176]
"uTorrent"=C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\utorrent (1).exe [2012-06-25 735608]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2012-06-05 17344176]
"Steam"=C:\Program Files\Steam\steam.exe [2012-07-02 1242448]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe

C:\Documents and Settings\Fujitsu\Nabídka Start\Programy\Po spuštění
hamachi.lnk - C:\Program Files\Hamachi\hamachi.exe
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2009-09-11 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\windows\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\utorrent (1).exe"="C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\utorrent (1).exe:*:Enabled:µTorrent"
"C:\Documents and Settings\Fujitsu\Plocha\CS\CounterStrike2D.exe"="C:\Documents and Settings\Fujitsu\Plocha\CS\CounterStrike2D.exe:*:Enabled:CounterStrike2D"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Condition Zero\hl.exe"="C:\Program Files\Condition Zero\hl.exe:*:Enabled:Half-Life Launcher"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\Metin2new\MoonMt2.exe"="C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\Metin2new\MoonMt2.exe:*:Enabled:MoonMt2"
"C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\vdvcv\MoonMt2.exe"="C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\vdvcv\MoonMt2.exe:*:Enabled:MoonMt2"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Documents and Settings\Fujitsu\Plocha\Metin2new\MoonMt2.exe"="C:\Documents and Settings\Fujitsu\Plocha\Metin2new\MoonMt2.exe:*:Enabled:MoonMt2"
"C:\Program Files\TeamViewer\Version7\TeamViewer.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\metin2client.exe"="C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\metin2client.exe:*:Enabled:metin2client"
"C:\Program Files\Hamachi\hamachi.exe"="C:\Program Files\Hamachi\hamachi.exe:*:Enabled:Hamachi Client"
"C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\eQauLityMt2\metin2.bin"="C:\Documents and Settings\Fujitsu\Dokumenty\Downloads\eQauLityMt2\metin2.bin:*:Enabled:metin2"
"C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\metin2.bin"="C:\Documents and Settings\Fujitsu\Plocha\Mijagi-MJ4\metin2.bin:*:Enabled:metin2"
"C:\Documents and Settings\Fujitsu\Plocha\Funside Client 2012\patchskin\Funside.fun"="C:\Documents and Settings\Fujitsu\Plocha\Funside Client 2012\patchskin\Funside.fun:*:Enabled:Funside"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe"="C:\Program Files\Opera\pluginwrapper\opera_plugin_wrapper.exe:*:Enabled:Opera Internet Browser - Plugin wrapper"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\SpacialAudio\SAMBC\SAMBC.exe"="C:\Program Files\SpacialAudio\SAMBC\SAMBC.exe:*:Enabled:SAMBC"
"C:\Program Files\SpacialAudio\SAMBC2\SAMBC.exe\SAMBC.exe"="C:\Program Files\SpacialAudio\SAMBC2\SAMBC.exe\SAMBC.exe:*:Enabled:SAMBC"
"C:\Documents and Settings\Fujitsu\Plocha\Arean2\metin2client.bin"="C:\Documents and Settings\Fujitsu\Plocha\Arean2\metin2client.bin:*:Enabled:metin2client"
"C:\Program Files\Metin2-NOVÝ\metin2client.bin"="C:\Program Files\Metin2-NOVÝ\metin2client.bin:*:Enabled:Metin2Client"
"C:\Program Files\Steam\steamapps\czech_fabio@hotmail.com\counter-strike\hl.exe"="C:\Program Files\Steam\steamapps\czech_fabio@hotmail.com\counter-strike\hl.exe:*:Enabled:Counter-Strike"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.ffds"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll

======List of files/folders created in the last 1 month======

2012-07-07 20:39:04 ----D---- C:\_OTM
2012-07-07 15:20:20 ----A---- C:\windows\system32\HMIPCore.dll
2012-07-07 15:19:59 ----D---- C:\Program Files\Hide My IP
2012-07-07 13:13:40 ----D---- C:\Program Files\trend micro
2012-07-07 13:13:39 ----D---- C:\rsit
2012-07-07 09:19:44 ----D---- C:\2873a6af513a619764
2012-07-06 14:25:56 ----D---- C:\Program Files\Metin2-NOVÝ
2012-07-06 00:46:47 ----D---- C:\Program Files\Microsoft.NET
2012-07-05 21:34:43 ----D---- C:\Documents and Settings\All Users\Data aplikací\firebird
2012-07-05 21:28:06 ----A---- C:\windows\system32\GDS32.DLL
2012-07-05 21:27:44 ----D---- C:\Program Files\Firebird
2012-07-05 21:27:22 ----D---- C:\Program Files\SpacialAudio
2012-07-05 17:53:56 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Opera
2012-07-05 17:52:51 ----D---- C:\Program Files\Opera
2012-07-05 16:12:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\FLEXnet
2012-07-05 11:57:30 ----D---- C:\Program Files\Adobe Media Player
2012-07-05 11:54:12 ----D---- C:\Program Files\Common Files\Adobe AIR
2012-07-05 11:48:14 ----D---- C:\Program Files\Common Files\Macrovision Shared
2012-07-04 17:12:55 ----D---- C:\Program Files\18 WoS Pedal to the Metal
2012-07-03 16:13:22 ----A---- C:\windows\system32\libmysql_c.dll
2012-07-02 17:03:59 ----D---- C:\Program Files\Common Files\Steam
2012-07-02 17:03:55 ----D---- C:\Program Files\Steam
2012-07-01 20:28:44 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\FileZilla
2012-07-01 20:23:13 ----D---- C:\Program Files\FileZilla Server
2012-07-01 17:06:51 ----A---- C:\windows\system32\drivers\hamachi.sys
2012-07-01 17:06:50 ----D---- C:\Program Files\Hamachi
2012-06-30 20:02:14 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\TS3Client
2012-06-30 20:01:09 ----D---- C:\Program Files\TeamSpeak 3 Client
2012-06-30 15:19:47 ----D---- C:\Program Files\Common Files\Skype
2012-06-30 11:53:24 ----D---- C:\windows\Minidump
2012-06-27 15:41:07 ----D---- C:\Program Files\Oracle
2012-06-27 15:40:54 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Oracle
2012-06-27 15:40:51 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\.minecraft
2012-06-27 15:40:48 ----A---- C:\windows\system32\npDeployJava1.dll
2012-06-27 15:40:48 ----A---- C:\windows\system32\javaws.exe
2012-06-27 15:40:48 ----A---- C:\windows\system32\deployJava1.dll
2012-06-27 15:40:28 ----A---- C:\windows\system32\javaw.exe
2012-06-27 15:40:28 ----A---- C:\windows\system32\java.exe
2012-06-27 15:39:50 ----D---- C:\Program Files\Java
2012-06-27 15:37:29 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Sun
2012-06-27 09:12:46 ----A---- C:\windows\d3dx.dat
2012-06-27 09:05:06 ----D---- C:\Program Files\JoWooD
2012-06-26 21:28:18 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee Security Scan
2012-06-26 21:28:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2012-06-26 21:28:16 ----D---- C:\Program Files\McAfee Security Scan
2012-06-26 21:28:13 ----A---- C:\windows\system32\FlashPlayerApp.exe
2012-06-26 20:34:48 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Incredibar.com
2012-06-26 19:07:53 ----D---- C:\Config.Msi
2012-06-26 14:21:19 ----A---- C:\windows\iun6002.exe
2012-06-26 14:20:00 ----D---- C:\Program Files\Perion
2012-06-26 14:19:52 ----A---- C:\user.js
2012-06-26 14:17:46 ----D---- C:\Documents and Settings\All Users\Data aplikací\Tarma Installer
2012-06-26 14:17:16 ----D---- C:\Program Files\1ClickDownload
2012-06-26 14:05:48 ----D---- C:\Program Files\Condition Zero
2012-06-25 16:55:54 ----D---- C:\Program Files\Call of Duty
2012-06-25 16:53:55 ----A---- C:\windows\CoD.INI
2012-06-25 15:14:47 ----A---- C:\windows\system32\drivers\mouhid.sys
2012-06-25 15:14:38 ----A---- C:\windows\system32\drivers\hidusb.sys
2012-06-25 14:10:02 ----D---- C:\Program Files\EA GAMES
2012-06-25 14:06:17 ----A---- C:\windows\system32\d3dx9_26.dll
2012-06-25 14:05:51 ----D---- C:\windows\RegisteredPackages
2012-06-25 14:05:15 ----A---- C:\windows\system32\psisdecd.dll
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\wstcodec.sys
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\streamip.sys
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\slip.sys
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\ndisip.sys
2012-06-25 14:05:15 ----A---- C:\windows\system32\drivers\nabtsfec.sys
2012-06-25 14:05:14 ----A---- C:\windows\system32\drivers\msdv.sys
2012-06-25 14:05:14 ----A---- C:\windows\system32\drivers\mpe.sys
2012-06-25 14:05:14 ----A---- C:\windows\system32\drivers\ccdecode.sys
2012-06-25 14:05:14 ----A---- C:\windows\system32\drivers\bdasup.sys
2012-06-25 14:05:13 ----A---- C:\windows\system32\drivers\mstee.sys
2012-06-25 14:05:09 ----A---- C:\windows\system32\dxdllreg.exe
2012-06-25 14:02:53 ----A---- C:\windows\system32\drivers\dtsoftbus01.sys
2012-06-25 14:01:08 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\DAEMON Tools Lite
2012-06-25 14:01:07 ----D---- C:\Program Files\DAEMON Tools Lite
2012-06-25 14:00:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\DAEMON Tools Lite
2012-06-25 11:20:11 ----D---- C:\Program Files\CommViewWiFi
2012-06-25 10:06:28 ----D---- C:\windows\system32\NtmsData
2012-06-25 09:48:50 ----D---- C:\Program Files\Firefly Studios
2012-06-23 10:32:33 ----D---- C:\Program Files\Metin22
2012-06-23 10:13:20 ----D---- C:\Program Files\7-Zip
2012-06-22 21:23:04 ----D---- C:\Program Files\PremiumSoft
2012-06-22 20:17:33 ----D---- C:\Program Files\Metin2
2012-06-21 15:17:04 ----D---- C:\Program Files\uTorrentControl2
2012-06-21 15:15:43 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\uTorrent
2012-06-20 20:23:56 ----D---- C:\Program Files\Hamachi(2)
2012-06-20 15:55:32 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\TeamViewer
2012-06-20 15:55:23 ----D---- C:\Program Files\TeamViewer
2012-06-19 21:39:04 ----HDC---- C:\windows\$NtUninstallKB2707511$
2012-06-19 21:34:20 ----HDC---- C:\windows\$NtUninstallKB2685939$
2012-06-19 21:31:32 ----HDC---- C:\windows\$NtUninstallKB2709162$
2012-06-19 20:38:30 ----D---- C:\Program Files\WinSCP
2012-06-19 20:34:07 ----D---- C:\Program Files\Valve
2012-06-19 20:32:30 ----D---- C:\Program Files\CPUID
2012-06-19 18:34:14 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\WinRAR
2012-06-19 18:34:10 ----D---- C:\Program Files\WinRAR
2012-06-19 18:26:20 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Hamachi
2012-06-19 18:18:58 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Skype
2012-06-19 18:18:45 ----RD---- C:\Program Files\Skype
2012-06-19 18:18:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2012-06-19 18:10:08 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Macromedia

======List of files/folders modified in the last 1 month======

2012-07-07 20:43:33 ----D---- C:\windows\Temp
2012-07-07 20:43:03 ----D---- C:\windows\Prefetch
2012-07-07 20:40:53 ----A---- C:\windows\SchedLgU.Txt
2012-07-07 20:40:34 ----D---- C:\WINDOWS
2012-07-07 20:40:34 ----AD---- C:\windows\system32
2012-07-07 20:39:15 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-07-07 20:39:12 ----SD---- C:\windows\Tasks
2012-07-07 20:39:12 ----RD---- C:\Program Files
2012-07-07 17:58:08 ----D---- C:\windows\system32\drivers
2012-07-07 15:25:31 ----D---- C:\windows\system32\CatRoot2
2012-07-07 13:37:59 ----RSD---- C:\windows\assembly
2012-07-07 13:37:59 ----D---- C:\windows\Microsoft.NET
2012-07-07 12:57:24 ----SHD---- C:\System Volume Information
2012-07-07 12:03:48 ----D---- C:\windows\repair
2012-07-07 12:03:46 ----D---- C:\windows\Registration
2012-07-07 09:22:44 ----SHD---- C:\windows\Installer
2012-07-07 09:21:26 ----D---- C:\windows\WinSxS
2012-07-06 01:05:06 ----D---- C:\windows\system32\cs-cz
2012-07-06 00:47:03 ----D---- C:\windows\system32\en-US
2012-07-05 16:19:23 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\Adobe
2012-07-05 12:00:46 ----D---- C:\Program Files\Adobe
2012-07-05 12:00:28 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2012-07-05 11:59:00 ----D---- C:\Program Files\Common Files\Adobe
2012-07-05 11:56:38 ----RSD---- C:\windows\Fonts
2012-07-05 11:54:12 ----D---- C:\Program Files\Common Files
2012-07-04 19:00:45 ----D---- C:\Program Files\Mozilla Firefox
2012-07-02 21:14:13 ----D---- C:\Documents and Settings\Fujitsu\Data aplikací\BatteryBar
2012-07-02 14:56:41 ----HD---- C:\windows\inf
2012-07-01 11:18:23 ----SD---- C:\Documents and Settings\Fujitsu\Data aplikací\Microsoft
2012-06-29 10:49:14 ----D---- C:\windows\Debug
2012-06-27 14:30:18 ----D---- C:\windows\system32\CatRoot
2012-06-27 09:11:32 ----HD---- C:\Program Files\InstallShield Installation Information
2012-06-26 20:37:02 ----D---- C:\windows\system32\config
2012-06-26 20:36:47 ----D---- C:\windows\system32\wbem
2012-06-26 20:35:16 ----D---- C:\windows\system32\DirectX
2012-06-26 20:33:58 ----D---- C:\Program Files\Common Files\InstallShield
2012-06-26 20:33:47 ----RSHDC---- C:\windows\system32\dllcache
2012-06-26 20:31:59 ----D---- C:\Program Files\Internet Explorer
2012-06-26 20:30:32 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2012-06-26 20:29:53 ----DC---- C:\windows\system32\DRVSTORE
2012-06-26 20:08:54 ----HDC---- C:\windows\$NtUninstallKB2718704$
2012-06-25 17:38:20 ----A---- C:\windows\system32\MRT.exe
2012-06-25 13:06:05 ----A---- C:\windows\system.ini
2012-06-25 10:22:03 ----D---- C:\windows\system32\Restore
2012-06-19 21:34:32 ----D---- C:\windows\ie8updates
2012-06-19 21:34:26 ----HD---- C:\windows\$hf_mig$
2012-06-19 18:09:33 ----D---- C:\windows\Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI; C:\windows\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 avipbb;avipbb; C:\windows\system32\DRIVERS\avipbb.sys [2012-06-04 137928]
R1 avkmgr;avkmgr; C:\windows\system32\DRIVERS\avkmgr.sys [2011-10-19 36000]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2012-06-25 242240]
R1 intelppm;Řadič procesoru Intel; C:\windows\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 ssmdrv;ssmdrv; C:\windows\system32\DRIVERS\ssmdrv.sys [2010-06-17 28520]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\windows\System32\drivers\ws2ifsl.sys [2004-08-18 12032]
R2 adfs;adfs; C:\windows\system32\drivers\adfs.sys [2008-08-14 74720]
R2 avgntflt;avgntflt; C:\windows\system32\DRIVERS\avgntflt.sys [2012-06-04 83392]
R2 irda;Protokol IrDA; C:\windows\system32\DRIVERS\irda.sys [2008-04-14 88192]
R3 Arp1394;Protokol 1394 ARP Client; C:\windows\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 BCM43XX;Ovladač síťového adaptéru Broadcom 802.11; C:\windows\system32\DRIVERS\bcmwl5.sys [2009-09-11 822272]
R3 FUJ02B1;Fujitsu FUJ02B1 Device Driver; C:\windows\system32\DRIVERS\FUJ02B1.sys [2009-09-11 5248]
R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver; C:\windows\system32\DRIVERS\FUJ02E3.sys [2009-09-11 4864]
R3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys [2012-07-01 25280]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\windows\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\windows\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\windows\system32\DRIVERS\igxpmp32.sys [2009-09-11 5854752]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RtkHDAud.sys [2009-09-11 4707328]
R3 mouhid;Ovladač myši standardu HID; C:\windows\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 NIC1394;1394 Net Driver; C:\windows\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 Rasirda;WAN Miniport (IrDA); C:\windows\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 SMCIRDA;SMC IrCC Miniport Device Driver; C:\windows\system32\DRIVERS\smcirda.sys [2001-10-24 35913]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\windows\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\windows\system32\DRIVERS\yk51x86.sys [2009-09-11 296448]
S3 EagleNT;EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\windows\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira Realtime Protection; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2012-06-04 110032]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2012-06-04 86224]
R2 FileZilla Server;FileZilla Server FTP server; C:\Program Files\FileZilla Server\FileZilla Server.exe [2012-02-26 632320]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbguard.exe [2010-09-17 98304]
R2 Irmon;Sledování infračerveného přenosu; C:\windows\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe [2012-05-04 161664]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; C:\Program Files\Firebird\Firebird_2_5\bin\fbserver.exe [2010-09-17 3735552]
R3 HideMyIpSRV;HideMyIpSRV; C:\Program Files\Hide My IP\HideMyIpSrv.exe [2012-01-19 3337216]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-05 160944]
S2 Web Assistant Updater;Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe []
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-26 250056]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-07-05 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe [2011-06-17 237008]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-03-16 407336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Problém s NTB

#4 Příspěvek od Rudy »

Dvouklikem na soubor C:\Program Files\trend micro\Fujitsu.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredibar.com/mb128?a=6OyG7qbwoP&i=26
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
Klikněte na >FixChecked<. Dále znovu spusťte OTM a klikněte na Cleanup. OTM po sobě uklidí. Restartujte PC.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“