Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Zpomalený PC
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zpomalený PC
Dobrý den,strašně se mi zpomalil PC,pomohl by mi někdo,co s tím?Díky za odpověď.
Re: Zpomalený PC
Zdravim 
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=105895
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Kliknete na Search
- Probehne skenovani a pak se objevi log, pripadne bude ulozen na systemovem disku jako AdwCleaner[R?].txt, ten sem vlozte
Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=105895"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Zpomalený PC
AdwCleaner
# AdwCleaner v2.005 - Logfile created 10/20/2012 at 02:16:24
# Updated 14/10/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : user - USER-BBF928E66E
# Boot Mode : Normal
# Running from : C:\Documents and Settings\user\Dokumenty\Stažené soubory\adwcleaner.exe
# Option [Search]
***** [Services] *****
Found : Application Updater
***** [Files / Folders] *****
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Found : C:\Documents and Settings\user\Data aplikací\OpenCandy
Folder Found : C:\Documents and Settings\user\Data aplikací\Search Settings
Folder Found : C:\Program Files\Application Updater
Folder Found : C:\Program Files\Common Files\spigot
***** [Registry] *****
Key Found : HKCU\Software\AppDataLow\Software\Search Settings
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKCU\Software\Search Settings
Key Found : HKLM\Software\Application Updater
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKLM\Software\Search Settings
Key Found : HKU\S-1-5-21-2000478354-1275210071-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.6001.18702
[OK] Registry is clean.
*************************
AdwCleaner[R1].txt - [2277 octets] - [20/10/2012 02:16:24]
########## EOF - C:\AdwCleaner[R1].txt - [2337 octets] ##########
RSIT
Logfile of random's system information tool 1.09 (written by random/random)
Run by user at 2012-10-20 02:16:58
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 142 GB (46%) free of 305 GB
Total RAM: 3070 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:17:09, on 20.10.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\user\Dokumenty\Stažené soubory\adwcleaner.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\user\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\user.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [P17Helper] Rundll32 SPIRun.dll,RunDLLEntry
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" /S
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [msi system check] %TEMP%\gwbims.exe
O4 - HKCU\..\Run: [driver restore update] %TEMP%\wpinvk.exe
O4 - HKCU\..\Run: [stream system eng] %TEMP%\hznn.exe
O4 - HKCU\..\Run: [avs reload sys] %TEMP%\tvbtpx.exe
O4 - HKCU\..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2000478354-1275210071-725345543-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2000478354-1275210071-725345543-1006\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Startup: ACR Launcher.lnk = C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe
O4 - Startup: PowerReg Scheduler V3.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\user\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} (Creative Software AutoUpdate 2) - http://ccfiles.creative.com/Web/softwar ... TSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe
O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)
--
End of file - 10917 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\prismShakeIcon.job
C:\WINDOWS\tasks\videopadShakeIcon.job
C:\WINDOWS\tasks\WavePadReminder.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\3y6xcf9g.default
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =937811&p="
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml
C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\3y6xcf9g.default\extensions\
{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-03 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-03 157672]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436a-86E4-9690573BEE8A}]
YTD Toolbar - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll [2012-10-16 1229704]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - YTD Toolbar - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll [2012-10-16 1229704]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-10-09 1036288]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2007-10-08 864256]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]
"P17Helper"=Rundll32 SPIRun.dll,RunDLLEntry []
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 153672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2012-09-23 15512424]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2012-09-23 1634112]
"RivaTunerStartupDaemon"=C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe [2009-08-22 2781184]
""= []
"SearchSettings"=C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [2012-10-16 1111432]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-02-13 3481408]
"msi system check"=C:\DOCUME~1\user\LOCALS~1\Temp\gwbims.exe []
"driver restore update"=C:\DOCUME~1\user\LOCALS~1\Temp\wpinvk.exe []
"stream system eng"=C:\DOCUME~1\user\LOCALS~1\Temp\hznn.exe []
"avs reload sys"=C:\DOCUME~1\user\LOCALS~1\Temp\tvbtpx.exe []
"RGSC"=C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []
C:\Documents and Settings\user\Nabídka Start\Programy\Po spuštění
ACR Launcher.lnk - C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe
PowerReg Scheduler V3.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Electronic Arts\SHIFT 2 UNLEASHED\shift2u.exe"="D:\Program Files\Electronic Arts\SHIFT 2 UNLEASHED\shift2u.exe:*:Enabled:SHIFT 2 UNLEASHED™"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\conviction_game.exe"="D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\conviction_game.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction"
"D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\gu.exe"="D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\gu.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction Update"
"D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\UPlayBrowser.exe"="D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\UPlayBrowser.exe:*:Enabled:UPlayBrowser Application"
"C:\Program Files\Tunngle\TnglCtrl.exe"="C:\Program Files\Tunngle\TnglCtrl.exe:*:Enabled:Tunngle Service"
"C:\Program Files\Tunngle\Tunngle.exe"="C:\Program Files\Tunngle\Tunngle.exe:*:Enabled:Tunngle Client"
"D:\Program Files\rFactor\rFactor.exe"="D:\Program Files\rFactor\rFactor.exe:*:Enabled:rFactor"
"D:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe"="D:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited"
"C:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe"="C:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited"
"D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe"="D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe"="D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe"="D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Games\Infogrames\Dirt Track Racing 2\DTR2.exe"="D:\Games\Infogrames\Dirt Track Racing 2\DTR2.exe:*:Enabled:DTR2"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe"="C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe:*:Enabled:ACR Launcher"
"C:\Program Files\ACR\AutoClubRev\bin\acr.exe"="C:\Program Files\ACR\AutoClubRev\bin\acr.exe:*:Enabled:ACR Client"
"D:\Program Files\Codemasters\DiRT 3\dirt3.exe"="D:\Program Files\Codemasters\DiRT 3\dirt3.exe:*:Enabled:DiRT 3"
"D:\Program Files\Painkiller Resurrection\bin\ResurrectionEditor.exe"="D:\Program Files\Painkiller Resurrection\bin\ResurrectionEditor.exe:*:Enabled:ResurrectionEditor"
"D:\Program Files\racer 0.63\racer.exe"="D:\Program Files\racer 0.63\racer.exe:*:Enabled:racer"
"D:\Program Files\SWAT 4\Content\System\Swat4.exe"="D:\Program Files\SWAT 4\Content\System\Swat4.exe:*:Enabled:SWAT 4"
"C:\Program Files\Atari\TDU2\UpLauncher.exe"="C:\Program Files\Atari\TDU2\UpLauncher.exe:*:Enabled:UpLauncher"
"C:\Program Files\Atari\TDU2\_UpLauncher.exe"="C:\Program Files\Atari\TDU2\_UpLauncher.exe:*:Enabled:UpLauncher"
"C:\Program Files\Atari\TDU2\TestDrive2.exe"="C:\Program Files\Atari\TDU2\TestDrive2.exe:*:Enabled:Test Drive Unlimited 2"
"D:\Program Files\Outerra\Anteworld\outerra.exe"="D:\Program Files\Outerra\Anteworld\outerra.exe:*:Enabled:Anteworld"
"D:\Program Files\EA Games\Mirror's Edge\Binaries\MirrorsEdge.exe"="D:\Program Files\EA Games\Mirror's Edge\Binaries\MirrorsEdge.exe:*:Enabled:Mirror's Edge™"
"C:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe"="C:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"F:\Counter.Strike.Global.Offensive-Unlocked\csgo.exe"="F:\Counter.Strike.Global.Offensive-Unlocked\csgo.exe:*:Enabled:csgo"
"D:\Program Files\Counter.Strike.Global.Offensive-Unlocked\csgo.exe"="D:\Program Files\Counter.Strike.Global.Offensive-Unlocked\csgo.exe:*:Enabled:csgo"
"D:\Program Files\MILESTONE\WRC3\WRC3.exe"="D:\Program Files\MILESTONE\WRC3\WRC3.exe:*:Enabled:WRC 3"
"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ACR\AutoClubRev\web\acrLauncher.exe"="C:\Program Files\ACR\AutoClubRev\web\acrLauncher.exe:*:Enabled:ACR Launcher"
"C:\Program Files\ACR\AutoClubRev\bin\ACR.exe"="C:\Program Files\ACR\AutoClubRev\bin\ACR.exe:*:Enabled:ACR Client"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.lameacm"=lameACM.acm
"msacm.ac3acm"=ac3acm.acm
""=
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3filter"=ac3filter.acm
"vidc.x264"=x264vfw.dll
"msacm.avis"=ff_acm.acm
"VIDC.FPS1"=frapsvid.dll
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
======List of files/folders created in the last 1 month======
2012-10-20 02:16:58 ----D---- C:\rsit
2012-10-20 02:16:58 ----D---- C:\Program Files\trend micro
2012-10-20 02:16:24 ----A---- C:\AdwCleaner[R1].txt
2012-10-19 23:28:44 ----D---- C:\Program Files\GoldWave
2012-10-19 23:16:01 ----D---- C:\Documents and Settings\user\Data aplikací\Search Settings
2012-10-19 23:15:56 ----D---- C:\Program Files\Application Updater
2012-10-19 23:15:55 ----D---- C:\Program Files\YTD Toolbar
2012-10-19 23:15:55 ----D---- C:\Program Files\Common Files\Spigot
2012-10-19 23:15:29 ----SHD---- C:\Config.Msi
2012-10-18 21:21:27 ----D---- C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2012-10-14 10:08:38 ----D---- C:\Documents and Settings\user\Data aplikací\Milestone
2012-10-13 16:35:20 ----D---- C:\Program Files\Mozilla Firefox
2012-10-10 22:58:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2724197$
2012-10-10 22:56:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2756822$
2012-10-10 22:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2012-10-10 22:56:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2012-09-30 21:04:21 ----D---- C:\Program Files\MP3Gain
2012-09-23 16:59:00 ----D---- C:\WINDOWS\Sun
======List of files/folders modified in the last 1 month======
2012-10-20 02:16:58 ----RD---- C:\Program Files
2012-10-20 02:16:58 ----D---- C:\WINDOWS\Prefetch
2012-10-20 02:16:29 ----A---- C:\WINDOWS\system32\lpcio.dll
2012-10-20 02:15:01 ----A---- C:\WINDOWS\PhysicsEditor.ini
2012-10-20 01:40:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-10-20 01:07:02 ----D---- C:\WINDOWS\Temp
2012-10-19 23:28:40 ----D---- C:\WINDOWS\system32
2012-10-19 23:16:01 ----SHD---- C:\WINDOWS\Installer
2012-10-19 23:15:57 ----D---- C:\WINDOWS\WinSxS
2012-10-19 23:15:55 ----D---- C:\Program Files\Common Files
2012-10-19 02:03:08 ----D---- C:\WINDOWS\system32\CatRoot2
2012-10-19 01:48:10 ----D---- C:\Documents and Settings\user\Data aplikací\vlc
2012-10-19 01:07:32 ----A---- C:\WINDOWS\NeroDigital.ini
2012-10-18 21:32:01 ----D---- C:\WINDOWS
2012-10-18 21:28:16 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-10-18 21:28:10 ----D---- C:\WINDOWS\system32\drivers
2012-10-18 21:28:07 ----HD---- C:\WINDOWS\inf
2012-10-18 21:26:21 ----D---- C:\Program Files\NVIDIA Corporation
2012-10-18 21:26:11 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-10-18 18:55:16 ----D---- C:\Documents and Settings\user\Data aplikací\foobar2000
2012-10-18 13:35:06 ----D---- C:\Documents and Settings\user\Data aplikací\DVDVideoSoft
2012-10-18 13:34:55 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2012-10-18 13:34:51 ----D---- C:\Program Files\DVDVideoSoft
2012-10-15 21:12:36 ----SD---- C:\WINDOWS\Tasks
2012-10-14 09:54:33 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-10-14 04:21:36 ----D---- C:\Documents and Settings\user\Data aplikací\BitTorrent
2012-10-11 20:17:59 ----RSD---- C:\WINDOWS\assembly
2012-10-10 22:56:36 ----A---- C:\WINDOWS\system32\MRT.exe
2012-10-10 22:56:33 ----A---- C:\WINDOWS\imsins.BAK
2012-10-10 17:23:02 ----HD---- C:\WINDOWS\$hf_mig$
2012-10-09 15:40:47 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-10-06 20:58:51 ----A---- C:\WINDOWS\WORDPAD.INI
2012-10-06 12:27:14 ----HD---- C:\Program Files\InstallShield Installation Information
2012-09-30 21:33:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\NCH Software
2012-09-30 21:33:33 ----D---- C:\Program Files\NCH Software
2012-09-30 21:33:32 ----D---- C:\Documents and Settings\user\Data aplikací\NCH Software
2012-09-30 21:31:39 ----D---- C:\Temp
2012-09-30 21:31:29 ----D---- C:\Program Files\coolpro2
2012-09-30 21:31:14 ----A---- C:\WINDOWS\win.ini
2012-09-30 21:31:14 ----A---- C:\WINDOWS\system.ini
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvopencl.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvdispgenco32.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvcuda.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvapi.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2012-09-23 15:09:20 ----A---- C:\WINDOWS\system32\nvrsth.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrspt.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrsja.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrses.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrsar.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrssv.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrssl.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrssk.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2012-09-23 15:09:17 ----A---- C:\WINDOWS\system32\nvrstr.dll
2012-09-23 15:09:17 ----A---- C:\WINDOWS\system32\nvrspl.dll
2012-09-23 15:09:17 ----A---- C:\WINDOWS\system32\nvrsno.dll
2012-09-23 15:09:17 ----A---- C:\WINDOWS\system32\nvrshe.dll
2012-09-23 15:09:16 ----A---- C:\WINDOWS\system32\nvrsit.dll
2012-09-23 15:09:16 ----A---- C:\WINDOWS\system32\nvrseng.dll
2012-09-23 15:09:16 ----A---- C:\WINDOWS\system32\nvrsel.dll
2012-09-23 15:09:15 ----A---- C:\WINDOWS\system32\nvrsko.dll
2012-09-23 15:09:15 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2012-09-23 15:09:15 ----A---- C:\WINDOWS\system32\nvrscs.dll
2012-09-23 15:09:14 ----A---- C:\WINDOWS\system32\nvrsru.dll
2012-09-23 15:09:14 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrszht.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrshu.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrsde.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrsda.dll
2012-09-23 15:04:24 ----A---- C:\WINDOWS\system32\nvwddi.dll
2012-09-23 15:04:12 ----A---- C:\WINDOWS\system32\nvcpl.dll
2012-09-23 15:04:11 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2012-09-23 15:04:11 ----A---- C:\WINDOWS\system32\nvmctray.dll
2012-09-23 15:04:11 ----A---- C:\WINDOWS\system32\nvcolor.exe
2012-09-22 12:55:36 ----D---- C:\Program Files\Internet Explorer
2012-09-22 12:55:25 ----D---- C:\WINDOWS\ie8updates
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2012-02-23 473656]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-08-21 25256]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2012-08-21 35928]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-08-21 729752]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-08-21 355632]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-08-21 54232]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-03-18 242240]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-08-21 21256]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-08-21 97608]
R2 cpuz135;cpuz135; \??\C:\WINDOWS\system32\drivers\cpuz135_x32.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-10-09 313856]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-06-19 103424]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-12-08 142336]
R3 CTUSFSYN;Creative SoundFont Synthesizer; C:\WINDOWS\system32\drivers\ctusfsyn.sys [2006-08-07 162176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-11-08 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2012-09-23 12557728]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2008-08-01 54784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2012-07-03 124264]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2008-08-01 22016]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2008-08-25 14208]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-12-08 114688]
R3 P17xfi;Sound Blaster X-Fi Xtreme Audio; C:\WINDOWS\system32\drivers\P17xfi.sys [2007-11-21 1174528]
R3 p17xfilt;p17xfilt; C:\WINDOWS\system32\drivers\p17xfilt.sys [2007-10-10 1664384]
R3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys []
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-18 392960]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\WINDOWS\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2010-04-27 22856]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2010-04-27 37704]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2010-04-27 31816]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2010-04-27 15048]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2010-04-27 66632]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-09-19 290432]
S2 cpuz134;cpuz134; \??\C:\WINDOWS\system32\drivers\cpuz134_x32.sys []
S3 adf6sokm;adf6sokm; C:\WINDOWS\system32\drivers\adf6sokm.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2012-10-09 799112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-12-29 307200]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2012-09-03 161768]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2012-09-23 164200]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-09-23 1258856]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 yksvc;Marvell Yukon Service; ykx32mpcoinst,serviceStartProc []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-02-23 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-02-24 79360]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-02-23 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-13 115168]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 TunngleService;TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [2012-02-14 736104]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
# AdwCleaner v2.005 - Logfile created 10/20/2012 at 02:16:24
# Updated 14/10/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : user - USER-BBF928E66E
# Boot Mode : Normal
# Running from : C:\Documents and Settings\user\Dokumenty\Stažené soubory\adwcleaner.exe
# Option [Search]
***** [Services] *****
Found : Application Updater
***** [Files / Folders] *****
Folder Found : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Found : C:\Documents and Settings\user\Data aplikací\OpenCandy
Folder Found : C:\Documents and Settings\user\Data aplikací\Search Settings
Folder Found : C:\Program Files\Application Updater
Folder Found : C:\Program Files\Common Files\spigot
***** [Registry] *****
Key Found : HKCU\Software\AppDataLow\Software\Search Settings
Key Found : HKCU\Software\Conduit
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKCU\Software\Search Settings
Key Found : HKLM\Software\Application Updater
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKLM\Software\Conduit
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Found : HKLM\Software\Search Settings
Key Found : HKU\S-1-5-21-2000478354-1275210071-725345543-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.6001.18702
[OK] Registry is clean.
*************************
AdwCleaner[R1].txt - [2277 octets] - [20/10/2012 02:16:24]
########## EOF - C:\AdwCleaner[R1].txt - [2337 octets] ##########
RSIT
Logfile of random's system information tool 1.09 (written by random/random)
Run by user at 2012-10-20 02:16:58
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 142 GB (46%) free of 305 GB
Total RAM: 3070 MB (60% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 2:17:09, on 20.10.2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\user\Dokumenty\Stažené soubory\adwcleaner.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\user\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\user.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [P17Helper] Rundll32 SPIRun.dll,RunDLLEntry
O4 - HKLM\..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nview\nwiz.exe /installquiet
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" /S
O4 - HKLM\..\Run: [SearchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [msi system check] %TEMP%\gwbims.exe
O4 - HKCU\..\Run: [driver restore update] %TEMP%\wpinvk.exe
O4 - HKCU\..\Run: [stream system eng] %TEMP%\hznn.exe
O4 - HKCU\..\Run: [avs reload sys] %TEMP%\tvbtpx.exe
O4 - HKCU\..\Run: [RGSC] C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2000478354-1275210071-725345543-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2000478354-1275210071-725345543-1006\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'UpdatusUser')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide3] cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Startup: ACR Launcher.lnk = C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe
O4 - Startup: PowerReg Scheduler V3.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Documents and Settings\user\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} (Creative Software AutoUpdate 2) - http://ccfiles.creative.com/Web/softwar ... TSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files\Creative\Shared Files\CTAudSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files\Tunngle\TnglCtrl.exe
O23 - Service: Marvell Yukon Service (yksvc) - Unknown owner - RUNDLL32.EXE (file missing)
--
End of file - 10917 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\prismShakeIcon.job
C:\WINDOWS\tasks\videopadShakeIcon.job
C:\WINDOWS\tasks\WavePadReminder.job
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\3y6xcf9g.default
prefs.js - "keyword.URL" - "http://search.yahoo.com/search?fr=green ... =937811&p="
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.4.402.287 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.7.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.2]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
yahoo.xml
C:\Documents and Settings\user\Data aplikací\Mozilla\Firefox\Profiles\3y6xcf9g.default\extensions\
{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-27 63944]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-09-03 449512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-09-03 157672]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436a-86E4-9690573BEE8A}]
YTD Toolbar - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll [2012-10-16 1229704]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-08-21 1227224]
{F3FEE66E-E034-436a-86E4-9690573BEE8A} - YTD Toolbar - C:\Program Files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll [2012-10-16 1229704]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2007-10-09 1036288]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2007-10-08 864256]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-07-27 919008]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2012-08-21 4282728]
"P17Helper"=Rundll32 SPIRun.dll,RunDLLEntry []
"Start WingMan Profiler"=C:\Program Files\Logitech\Gaming Software\LWEMon.exe [2010-06-14 153672]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2012-09-23 15512424]
"NvMediaCenter"=NvMCTray.dll,NvTaskbarInit -login []
"nwiz"=C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2012-09-23 1634112]
"RivaTunerStartupDaemon"=C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe [2009-08-22 2781184]
""= []
"SearchSettings"=C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe [2012-10-16 1111432]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2012-02-13 3481408]
"msi system check"=C:\DOCUME~1\user\LOCALS~1\Temp\gwbims.exe []
"driver restore update"=C:\DOCUME~1\user\LOCALS~1\Temp\wpinvk.exe []
"stream system eng"=C:\DOCUME~1\user\LOCALS~1\Temp\hznn.exe []
"avs reload sys"=C:\DOCUME~1\user\LOCALS~1\Temp\tvbtpx.exe []
"RGSC"=C:\Program Files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent []
C:\Documents and Settings\user\Nabídka Start\Programy\Po spuštění
ACR Launcher.lnk - C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe
PowerReg Scheduler V3.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\Program Files\Electronic Arts\SHIFT 2 UNLEASHED\shift2u.exe"="D:\Program Files\Electronic Arts\SHIFT 2 UNLEASHED\shift2u.exe:*:Enabled:SHIFT 2 UNLEASHED™"
"C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="C:\Program Files\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\conviction_game.exe"="D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\conviction_game.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction"
"D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\gu.exe"="D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\gu.exe:*:Enabled:Tom Clancy's Splinter Cell Conviction Update"
"D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\UPlayBrowser.exe"="D:\Program Files\Ubisoft\Tom Clancy's Splinter Cell Conviction\src\system\UPlayBrowser.exe:*:Enabled:UPlayBrowser Application"
"C:\Program Files\Tunngle\TnglCtrl.exe"="C:\Program Files\Tunngle\TnglCtrl.exe:*:Enabled:Tunngle Service"
"C:\Program Files\Tunngle\Tunngle.exe"="C:\Program Files\Tunngle\Tunngle.exe:*:Enabled:Tunngle Client"
"D:\Program Files\rFactor\rFactor.exe"="D:\Program Files\rFactor\rFactor.exe:*:Enabled:rFactor"
"D:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe"="D:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited"
"C:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe"="C:\Program Files\Atari\Test Drive Unlimited\TestDriveUnlimited.exe:*:Enabled:Test Drive Unlimited"
"D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe"="D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutLauncher.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe"="D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe"="D:\Program Files\Electronic Arts\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe:*:Enabled:Burnout(TM) Paradise The Ultimate Box"
"D:\Games\Infogrames\Dirt Track Racing 2\DTR2.exe"="D:\Games\Infogrames\Dirt Track Racing 2\DTR2.exe:*:Enabled:DTR2"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe"="C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe:*:Enabled:ACR Launcher"
"C:\Program Files\ACR\AutoClubRev\bin\acr.exe"="C:\Program Files\ACR\AutoClubRev\bin\acr.exe:*:Enabled:ACR Client"
"D:\Program Files\Codemasters\DiRT 3\dirt3.exe"="D:\Program Files\Codemasters\DiRT 3\dirt3.exe:*:Enabled:DiRT 3"
"D:\Program Files\Painkiller Resurrection\bin\ResurrectionEditor.exe"="D:\Program Files\Painkiller Resurrection\bin\ResurrectionEditor.exe:*:Enabled:ResurrectionEditor"
"D:\Program Files\racer 0.63\racer.exe"="D:\Program Files\racer 0.63\racer.exe:*:Enabled:racer"
"D:\Program Files\SWAT 4\Content\System\Swat4.exe"="D:\Program Files\SWAT 4\Content\System\Swat4.exe:*:Enabled:SWAT 4"
"C:\Program Files\Atari\TDU2\UpLauncher.exe"="C:\Program Files\Atari\TDU2\UpLauncher.exe:*:Enabled:UpLauncher"
"C:\Program Files\Atari\TDU2\_UpLauncher.exe"="C:\Program Files\Atari\TDU2\_UpLauncher.exe:*:Enabled:UpLauncher"
"C:\Program Files\Atari\TDU2\TestDrive2.exe"="C:\Program Files\Atari\TDU2\TestDrive2.exe:*:Enabled:Test Drive Unlimited 2"
"D:\Program Files\Outerra\Anteworld\outerra.exe"="D:\Program Files\Outerra\Anteworld\outerra.exe:*:Enabled:Anteworld"
"D:\Program Files\EA Games\Mirror's Edge\Binaries\MirrorsEdge.exe"="D:\Program Files\EA Games\Mirror's Edge\Binaries\MirrorsEdge.exe:*:Enabled:Mirror's Edge™"
"C:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe"="C:\Program Files\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV"
"F:\Counter.Strike.Global.Offensive-Unlocked\csgo.exe"="F:\Counter.Strike.Global.Offensive-Unlocked\csgo.exe:*:Enabled:csgo"
"D:\Program Files\Counter.Strike.Global.Offensive-Unlocked\csgo.exe"="D:\Program Files\Counter.Strike.Global.Offensive-Unlocked\csgo.exe:*:Enabled:csgo"
"D:\Program Files\MILESTONE\WRC3\WRC3.exe"="D:\Program Files\MILESTONE\WRC3\WRC3.exe:*:Enabled:WRC 3"
"C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Enabled:Daemonu.exe"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ACR\AutoClubRev\web\acrLauncher.exe"="C:\Program Files\ACR\AutoClubRev\web\acrLauncher.exe:*:Enabled:ACR Launcher"
"C:\Program Files\ACR\AutoClubRev\bin\ACR.exe"="C:\Program Files\ACR\AutoClubRev\bin\ACR.exe:*:Enabled:ACR Client"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.lameacm"=lameACM.acm
"msacm.ac3acm"=ac3acm.acm
""=
"VIDC.FFDS"=ff_vfw.dll
"msacm.ac3filter"=ac3filter.acm
"vidc.x264"=x264vfw.dll
"msacm.avis"=ff_acm.acm
"VIDC.FPS1"=frapsvid.dll
"VIDC.MPG4"=mpg4c32.dll
"VIDC.MP42"=mpg4c32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
======List of files/folders created in the last 1 month======
2012-10-20 02:16:58 ----D---- C:\rsit
2012-10-20 02:16:58 ----D---- C:\Program Files\trend micro
2012-10-20 02:16:24 ----A---- C:\AdwCleaner[R1].txt
2012-10-19 23:28:44 ----D---- C:\Program Files\GoldWave
2012-10-19 23:16:01 ----D---- C:\Documents and Settings\user\Data aplikací\Search Settings
2012-10-19 23:15:56 ----D---- C:\Program Files\Application Updater
2012-10-19 23:15:55 ----D---- C:\Program Files\YTD Toolbar
2012-10-19 23:15:55 ----D---- C:\Program Files\Common Files\Spigot
2012-10-19 23:15:29 ----SHD---- C:\Config.Msi
2012-10-18 21:21:27 ----D---- C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2012-10-14 10:08:38 ----D---- C:\Documents and Settings\user\Data aplikací\Milestone
2012-10-13 16:35:20 ----D---- C:\Program Files\Mozilla Firefox
2012-10-10 22:58:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2724197$
2012-10-10 22:56:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2756822$
2012-10-10 22:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2012-10-10 22:56:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2012-09-30 21:04:21 ----D---- C:\Program Files\MP3Gain
2012-09-23 16:59:00 ----D---- C:\WINDOWS\Sun
======List of files/folders modified in the last 1 month======
2012-10-20 02:16:58 ----RD---- C:\Program Files
2012-10-20 02:16:58 ----D---- C:\WINDOWS\Prefetch
2012-10-20 02:16:29 ----A---- C:\WINDOWS\system32\lpcio.dll
2012-10-20 02:15:01 ----A---- C:\WINDOWS\PhysicsEditor.ini
2012-10-20 01:40:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2012-10-20 01:07:02 ----D---- C:\WINDOWS\Temp
2012-10-19 23:28:40 ----D---- C:\WINDOWS\system32
2012-10-19 23:16:01 ----SHD---- C:\WINDOWS\Installer
2012-10-19 23:15:57 ----D---- C:\WINDOWS\WinSxS
2012-10-19 23:15:55 ----D---- C:\Program Files\Common Files
2012-10-19 02:03:08 ----D---- C:\WINDOWS\system32\CatRoot2
2012-10-19 01:48:10 ----D---- C:\Documents and Settings\user\Data aplikací\vlc
2012-10-19 01:07:32 ----A---- C:\WINDOWS\NeroDigital.ini
2012-10-18 21:32:01 ----D---- C:\WINDOWS
2012-10-18 21:28:16 ----RSHDC---- C:\WINDOWS\system32\dllcache
2012-10-18 21:28:10 ----D---- C:\WINDOWS\system32\drivers
2012-10-18 21:28:07 ----HD---- C:\WINDOWS\inf
2012-10-18 21:26:21 ----D---- C:\Program Files\NVIDIA Corporation
2012-10-18 21:26:11 ----D---- C:\WINDOWS\system32\ReinstallBackups
2012-10-18 18:55:16 ----D---- C:\Documents and Settings\user\Data aplikací\foobar2000
2012-10-18 13:35:06 ----D---- C:\Documents and Settings\user\Data aplikací\DVDVideoSoft
2012-10-18 13:34:55 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2012-10-18 13:34:51 ----D---- C:\Program Files\DVDVideoSoft
2012-10-15 21:12:36 ----SD---- C:\WINDOWS\Tasks
2012-10-14 09:54:33 ----D---- C:\Program Files\Mozilla Maintenance Service
2012-10-14 04:21:36 ----D---- C:\Documents and Settings\user\Data aplikací\BitTorrent
2012-10-11 20:17:59 ----RSD---- C:\WINDOWS\assembly
2012-10-10 22:56:36 ----A---- C:\WINDOWS\system32\MRT.exe
2012-10-10 22:56:33 ----A---- C:\WINDOWS\imsins.BAK
2012-10-10 17:23:02 ----HD---- C:\WINDOWS\$hf_mig$
2012-10-09 15:40:47 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2012-10-06 20:58:51 ----A---- C:\WINDOWS\WORDPAD.INI
2012-10-06 12:27:14 ----HD---- C:\Program Files\InstallShield Installation Information
2012-09-30 21:33:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\NCH Software
2012-09-30 21:33:33 ----D---- C:\Program Files\NCH Software
2012-09-30 21:33:32 ----D---- C:\Documents and Settings\user\Data aplikací\NCH Software
2012-09-30 21:31:39 ----D---- C:\Temp
2012-09-30 21:31:29 ----D---- C:\Program Files\coolpro2
2012-09-30 21:31:14 ----A---- C:\WINDOWS\win.ini
2012-09-30 21:31:14 ----A---- C:\WINDOWS\system.ini
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvopencl.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvoglnt.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvdispgenco32.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvdispco32.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvcuvid.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvcuvenc.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvcuda.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvcompiler.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nvapi.dll
2012-09-23 16:28:00 ----A---- C:\WINDOWS\system32\nv4_disp.dll
2012-09-23 15:09:20 ----A---- C:\WINDOWS\system32\nvrsth.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrsptb.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrspt.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrsja.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrses.dll
2012-09-23 15:09:19 ----A---- C:\WINDOWS\system32\nvrsar.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrszhc.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrssv.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrssl.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrssk.dll
2012-09-23 15:09:18 ----A---- C:\WINDOWS\system32\nvrsfr.dll
2012-09-23 15:09:17 ----A---- C:\WINDOWS\system32\nvrstr.dll
2012-09-23 15:09:17 ----A---- C:\WINDOWS\system32\nvrspl.dll
2012-09-23 15:09:17 ----A---- C:\WINDOWS\system32\nvrsno.dll
2012-09-23 15:09:17 ----A---- C:\WINDOWS\system32\nvrshe.dll
2012-09-23 15:09:16 ----A---- C:\WINDOWS\system32\nvrsit.dll
2012-09-23 15:09:16 ----A---- C:\WINDOWS\system32\nvrseng.dll
2012-09-23 15:09:16 ----A---- C:\WINDOWS\system32\nvrsel.dll
2012-09-23 15:09:15 ----A---- C:\WINDOWS\system32\nvrsko.dll
2012-09-23 15:09:15 ----A---- C:\WINDOWS\system32\nvrsesm.dll
2012-09-23 15:09:15 ----A---- C:\WINDOWS\system32\nvrscs.dll
2012-09-23 15:09:14 ----A---- C:\WINDOWS\system32\nvrsru.dll
2012-09-23 15:09:14 ----A---- C:\WINDOWS\system32\nvrsfi.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrszht.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrsnl.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrshu.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrsde.dll
2012-09-23 15:09:13 ----A---- C:\WINDOWS\system32\nvrsda.dll
2012-09-23 15:04:24 ----A---- C:\WINDOWS\system32\nvwddi.dll
2012-09-23 15:04:12 ----A---- C:\WINDOWS\system32\nvcpl.dll
2012-09-23 15:04:11 ----A---- C:\WINDOWS\system32\nvsvc32.exe
2012-09-23 15:04:11 ----A---- C:\WINDOWS\system32\nvmctray.dll
2012-09-23 15:04:11 ----A---- C:\WINDOWS\system32\nvcolor.exe
2012-09-22 12:55:36 ----D---- C:\Program Files\Internet Explorer
2012-09-22 12:55:25 ----D---- C:\WINDOWS\ie8updates
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2012-02-23 473656]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2012-08-21 25256]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2012-08-21 35928]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2012-08-21 729752]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2012-08-21 355632]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2012-08-21 54232]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2012-03-18 242240]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\WINDOWS\system32\DRIVERS\wmiacpi.sys [2008-04-14 8832]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-08-21 21256]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2012-08-21 97608]
R2 cpuz135;cpuz135; \??\C:\WINDOWS\system32\drivers\cpuz135_x32.sys []
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2007-10-09 313856]
R3 AEAudio;AE Audio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2007-06-19 103424]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ctsfm2k;Creative SoundFont Management Device Driver; C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys [2005-12-08 142336]
R3 CTUSFSYN;Creative SoundFont Synthesizer; C:\WINDOWS\system32\drivers\ctusfsyn.sys [2006-08-07 162176]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2006-11-08 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2012-09-23 12557728]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2008-08-01 54784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS\system32\drivers\nvhda32.sys [2012-07-03 124264]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2008-08-01 22016]
R3 nvsmu;nvsmu; C:\WINDOWS\system32\DRIVERS\nvsmu.sys [2008-08-25 14208]
R3 ossrv;Creative OS Services Driver; C:\WINDOWS\system32\DRIVERS\ctoss2k.sys [2005-12-08 114688]
R3 P17xfi;Sound Blaster X-Fi Xtreme Audio; C:\WINDOWS\system32\drivers\P17xfi.sys [2007-11-21 1174528]
R3 p17xfilt;p17xfilt; C:\WINDOWS\system32\drivers\p17xfilt.sys [2007-10-10 1664384]
R3 RivaTuner32;RivaTuner32; \??\C:\Program Files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner32.sys []
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2006-03-18 392960]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\WINDOWS\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; C:\WINDOWS\system32\drivers\WmBEnum.sys [2010-04-27 22856]
R3 WmFilter;Logitech Gaming HID Filter Driver; C:\WINDOWS\system32\drivers\WmFilter.sys [2010-04-27 37704]
R3 WmHidLo;Logitech Gaming USB Filter Driver; C:\WINDOWS\system32\drivers\WmHidLo.sys [2010-04-27 31816]
R3 WmVirHid;Logitech Virtual Hid Device Driver; C:\WINDOWS\system32\drivers\WmVirHid.sys [2010-04-27 15048]
R3 WmXlCore;Logitech Translation Layer Driver; C:\WINDOWS\system32\drivers\WmXlCore.sys [2010-04-27 66632]
R3 yukonwxp;NDIS5.1 Miniport Driver for Marvell Yukon Ethernet Controller; C:\WINDOWS\system32\DRIVERS\yk51x86.sys [2008-09-19 290432]
S2 cpuz134;cpuz134; \??\C:\WINDOWS\system32\drivers\cpuz134_x32.sys []
S3 adf6sokm;adf6sokm; C:\WINDOWS\system32\drivers\adf6sokm.sys []
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Application Updater;Application Updater; C:\Program Files\Application Updater\ApplicationUpdater.exe [2012-10-09 799112]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2012-08-21 44808]
R2 CTAudSvcService;Creative Audio Service; C:\Program Files\Creative\Shared Files\CTAudSvc.exe [2008-12-29 307200]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2012-09-03 161768]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2012-09-23 164200]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-09-23 1258856]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 yksvc;Marvell Yukon Service; ykx32mpcoinst,serviceStartProc []
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-02-23 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service; C:\Program Files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2012-02-24 79360]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-02-23 136176]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-10-13 115168]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 TunngleService;TunngleService; C:\Program Files\Tunngle\TnglCtrl.exe [2012-02-14 736104]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
-----------------EOF-----------------
Re: Zpomalený PC
Spustte znovu AdwCleaner
- Pokud pouzivate Win Vista ci W7, kliknete na AdwCleaner pravym a dejte Run As Administrator ci Spustit jako spravce
- Kliknete na Delete
- PC provede opravu, restartuje se a da Vam log (C:\AdwCleaner [S1].txt) , jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Zpomalený PC
# AdwCleaner v2.005 - Logfile created 10/20/2012 at 19:51:02
# Updated 14/10/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : user - USER-BBF928E66E
# Boot Mode : Normal
# Running from : C:\Documents and Settings\user\Dokumenty\Stažené soubory\adwcleaner.exe
# Option [Delete]
***** [Services] *****
Stopped & Deleted : Application Updater
***** [Files / Folders] *****
Deleted on reboot : C:\Program Files\Common Files\spigot
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Deleted : C:\Documents and Settings\user\Data aplikací\OpenCandy
Folder Deleted : C:\Documents and Settings\user\Data aplikací\Search Settings
Folder Deleted : C:\Program Files\Application Updater
***** [Registry] *****
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKCU\Software\Search Settings
Key Deleted : HKLM\Software\Application Updater
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKLM\Software\Search Settings
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.6001.18702
[OK] Registry is clean.
*************************
AdwCleaner[R1].txt - [2406 octets] - [20/10/2012 02:16:24]
AdwCleaner[S1].txt - [2240 octets] - [20/10/2012 19:51:02]
########## EOF - C:\AdwCleaner[S1].txt - [2300 octets] ##########
# Updated 14/10/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : user - USER-BBF928E66E
# Boot Mode : Normal
# Running from : C:\Documents and Settings\user\Dokumenty\Stažené soubory\adwcleaner.exe
# Option [Delete]
***** [Services] *****
Stopped & Deleted : Application Updater
***** [Files / Folders] *****
Deleted on reboot : C:\Program Files\Common Files\spigot
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Trymedia
Folder Deleted : C:\Documents and Settings\user\Data aplikací\OpenCandy
Folder Deleted : C:\Documents and Settings\user\Data aplikací\Search Settings
Folder Deleted : C:\Program Files\Application Updater
***** [Registry] *****
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKCU\Software\Search Settings
Key Deleted : HKLM\Software\Application Updater
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
Key Deleted : HKLM\Software\Search Settings
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{F3FEE66E-E034-436A-86E4-9690573BEE8A}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchSettings]
***** [Internet Browsers] *****
-\\ Internet Explorer v8.0.6001.18702
[OK] Registry is clean.
*************************
AdwCleaner[R1].txt - [2406 octets] - [20/10/2012 02:16:24]
AdwCleaner[S1].txt - [2240 octets] - [20/10/2012 19:51:02]
########## EOF - C:\AdwCleaner[S1].txt - [2300 octets] ##########
Re: Zpomalený PC
Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com
- Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane
Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe
Rkill iExplore.exe:
http://download.bleepingcomputer.com/gr ... xplore.exe
Rkill uSeRiNiT.exe:
http://download.bleepingcomputer.com/gr ... eRiNiT.exe
Rkill WiNlOgOn.exe:
http://download.bleepingcomputer.com/gr ... NlOgOn.exe - Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
- Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
- RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
- Na plose vznikne log Rkill.txt ten mi sem vlozte
- Ted nerestartujte PC - prisli byste o ucinek RKillu
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
- Pokud mate Win XP spustte pod uctem Spravce\Administratora
- Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
- Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
- Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
- Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
- Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
- Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
- Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Zpomalený PC
Rkill:
Rkill 2.4.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 10/22/2012 07:58:56 PM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* No malware processes found to kill.
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* No issues found.
Checking Windows Service Integrity:
* No issues found.
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* HOSTS file entries found:
127.0.0.1 localhost
127.0.0.1 secure.disc-soft.com
Program finished at: 10/22/2012 07:59:17 PM
Execution time: 0 hours(s), 0 minute(s), and 21 seconds(s)
Combofix:
ComboFix 12-10-22.02 - user 22.10.2012 20:11:27.1.4 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2498 [GMT 2:00]
Spuštěný z: c:\documents and settings\user\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\user\Nabídka Start\Programy\Po spuštění\PowerReg Scheduler V3.exe
c:\windows\iun6002.exe
c:\windows\msmqinst.log
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\tmp20.tmp
c:\windows\system32\tmp21.tmp
c:\windows\system32\tmp8B.tmp
c:\windows\system32\tmp8C.tmp
c:\windows\system32\tmpC1.tmp
c:\windows\system32\tmpC2.tmp
c:\windows\system32\tmpEA.tmp
c:\windows\system32\tmpEB.tmp
c:\windows\system32\TZLog.log
D:\install.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NVSVC
-------\Service_NVSvc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-22 do 2012-10-22 )))))))))))))))))))))))))))))))
.
.
2012-10-20 00:16 . 2012-10-20 00:17 -------- d-----w- C:\rsit
2012-10-20 00:16 . 2012-10-20 00:17 -------- d-----w- c:\program files\trend micro
2012-10-19 21:28 . 2012-10-19 21:28 -------- d-----w- c:\program files\GoldWave
2012-10-19 21:15 . 2012-10-19 21:15 -------- d-----w- c:\program files\YTD Toolbar
2012-10-18 19:21 . 2012-10-18 19:21 -------- d-----w- c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2012-10-14 11:08 . 2012-10-14 11:08 -------- d-----w- c:\documents and settings\user\SFX
2012-10-14 08:08 . 2012-10-14 08:08 -------- d-----w- c:\documents and settings\user\Data aplikací\Milestone
2012-09-30 19:04 . 2012-09-30 19:29 -------- d-----w- c:\program files\MP3Gain
2012-09-23 14:59 . 2012-09-23 14:59 -------- d-----w- c:\windows\Sun
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-21 20:29 . 2008-04-14 05:51 6656 ----a-w- c:\windows\system32\lpcio.dll
2012-10-09 13:40 . 2012-03-30 14:01 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-09 13:40 . 2012-02-23 16:51 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-23 14:28 . 2012-09-09 12:10 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-09-23 14:28 . 2012-09-09 12:10 5947392 ----a-w- c:\windows\system32\nvopencl.dll
2012-09-23 14:28 . 2012-02-22 15:32 19103744 ----a-w- c:\windows\system32\nvoglnt.dll
2012-09-23 14:28 . 2012-02-22 15:32 7446528 ----a-w- c:\windows\system32\nvcuda.dll
2012-09-23 14:28 . 2012-02-22 15:32 4494208 ----a-w- c:\windows\system32\nv4_disp.dll
2012-09-23 14:28 . 2012-02-22 15:32 2578792 ----a-w- c:\windows\system32\nvcuvid.dll
2012-09-23 14:28 . 2012-02-22 15:32 2376704 ----a-w- c:\windows\system32\nvapi.dll
2012-09-23 14:28 . 2012-02-22 15:32 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-09-23 14:28 . 2012-02-22 15:32 17551360 ----a-w- c:\windows\system32\nvcompiler.dll
2012-09-23 14:28 . 2012-02-22 15:32 12557728 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-09-23 14:28 . 2012-02-22 15:32 1009512 ----a-w- c:\windows\system32\nvdispco32.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsth.dll
2012-09-23 13:09 . 2012-02-22 15:32 335872 ----a-w- c:\windows\system32\nvrsar.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrses.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrspt.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsja.dll
2012-09-23 13:09 . 2012-02-22 15:32 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2012-09-23 13:09 . 2012-02-22 15:32 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrssl.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrssk.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrssv.dll
2012-09-23 13:09 . 2012-02-22 15:32 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2012-09-23 13:09 . 2012-02-22 15:32 335872 ----a-w- c:\windows\system32\nvrshe.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrstr.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrspl.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsno.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrsit.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrsel.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrseng.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2012-09-23 13:09 . 2012-02-22 15:32 266240 ----a-w- c:\windows\system32\nvrsko.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrscs.dll
2012-09-23 13:09 . 2012-02-22 15:32 270336 ----a-w- c:\windows\system32\nvrsru.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2012-09-23 13:09 . 2012-02-22 15:32 278528 ----a-w- c:\windows\system32\nvrsde.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2012-09-23 13:09 . 2012-02-22 15:32 262144 ----a-w- c:\windows\system32\nvrshu.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsda.dll
2012-09-23 13:09 . 2012-02-22 15:32 126976 ----a-w- c:\windows\system32\nvrszht.dll
2012-09-23 13:04 . 2012-02-22 15:32 54272 ----a-w- c:\windows\system32\nvwddi.dll
2012-09-23 13:04 . 2012-02-22 15:32 15512424 ----a-w- c:\windows\system32\nvcpl.dll
2012-09-23 13:04 . 2012-02-22 15:32 164200 ----a-w- c:\windows\system32\nvsvc32.exe
2012-09-23 13:04 . 2012-02-22 15:32 143720 ----a-w- c:\windows\system32\nvcolor.exe
2012-09-23 13:04 . 2012-02-22 15:32 108392 ----a-w- c:\windows\system32\nvmctray.dll
2012-09-03 20:02 . 2012-09-03 20:02 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-09-03 20:02 . 2012-09-03 20:02 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-09-03 20:01 . 2012-08-26 21:18 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-03 20:01 . 2012-08-26 21:18 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-08-28 15:17 . 2012-01-02 11:33 920064 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:17 . 2012-01-02 11:33 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:17 . 2012-01-02 11:33 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2012-01-02 11:33 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:58 . 2012-06-23 09:56 405152 ----a-w- c:\windows\system32\Newtonsoft.Json.Net20.dll
2012-08-24 13:53 . 2008-04-14 05:52 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27 . 2008-04-14 08:06 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-23 06:27 . 2008-04-14 05:06 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-21 09:13 . 2012-02-22 15:43 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-08-21 09:13 . 2012-02-22 15:43 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-08-21 09:13 . 2012-02-22 15:43 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:13 . 2012-02-22 15:43 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-08-21 09:13 . 2012-02-22 15:43 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-08-21 09:13 . 2012-02-22 15:43 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-08-21 09:13 . 2012-02-22 15:43 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-08-21 09:13 . 2012-02-22 15:43 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-08-21 09:12 . 2012-02-22 15:42 41224 ----a-w- c:\windows\avastSS.scr
2012-08-21 09:12 . 2012-02-22 15:42 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-08-20 11:17 . 2012-02-23 08:59 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2012-10-13 14:35 . 2012-10-13 14:35 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-10-09 1036288]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
"P17Helper"="SPIRun.dll" [2006-07-03 10752]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-09-23 15512424]
"NvMediaCenter"="NvMCTray.dll" [2012-09-23 108392]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-09-23 1634112]
"RivaTunerStartupDaemon"="c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" [2009-08-22 2781184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2012-01-02 128512]
.
c:\documents and settings\user\Nabídka Start\Programy\Po spuštění\
ACR Launcher.lnk - c:\program files\ACR\AutoClubRev\web\acrlauncher.exe [2012-6-7 49664]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\gu.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\UPlayBrowser.exe"=
"c:\\Program Files\\Tunngle\\TnglCtrl.exe"=
"c:\\Program Files\\Tunngle\\Tunngle.exe"=
"d:\\Program Files\\rFactor\\rFactor.exe"=
"c:\\Program Files\\Atari\\Test Drive Unlimited\\TestDriveUnlimited.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"d:\\Games\\Infogrames\\Dirt Track Racing 2\\DTR2.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\ACR\\AutoClubRev\\web\\acrlauncher.exe"=
"c:\\Program Files\\ACR\\AutoClubRev\\bin\\acr.exe"=
"d:\\Program Files\\Painkiller Resurrection\\bin\\ResurrectionEditor.exe"=
"d:\\Program Files\\racer 0.63\\racer.exe"=
"d:\\Program Files\\SWAT 4\\Content\\System\\Swat4.exe"=
"c:\\Program Files\\Atari\\TDU2\\UpLauncher.exe"=
"c:\\Program Files\\Atari\\TDU2\\TestDrive2.exe"=
"d:\\Program Files\\Outerra\\Anteworld\\outerra.exe"=
"d:\\Program Files\\EA Games\\Mirror's Edge\\Binaries\\MirrorsEdge.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"d:\\Program Files\\MILESTONE\\WRC3\\WRC3.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
.
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [22.2.2012 17:43 729752]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [22.2.2012 17:43 355632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [18.3.2012 20:47 242240]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.2.2012 17:43 21256]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [26.2.2012 21:01 20328]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [14.4.2012 12:20 21992]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [23.2.2012 10:31 1258856]
R2 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [22.2.2012 17:13 124264]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\drivers\tap0901t.sys [26.2.2012 14:45 27136]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [23.2.2012 18:58 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [30.3.2012 16:01 250808]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [24.2.2012 0:01 79360]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [23.2.2012 18:58 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [27.4.2012 10:12 115168]
S3 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [26.2.2012 14:45 736104]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-10-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 13:40]
.
2012-10-22 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-07-01 09:12]
.
2012-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-23 16:58]
.
2012-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-23 16:58]
.
2012-09-30 c:\windows\Tasks\prismShakeIcon.job
- c:\program files\NCH Software\Prism\prism.exe [2012-03-11 11:58]
.
2012-06-12 c:\windows\Tasks\videopadShakeIcon.job
- c:\program files\NCH Software\VideoPad\videopad.exe [2012-06-09 19:59]
.
2012-10-15 c:\windows\Tasks\WavePadReminder.job
- c:\program files\NCH Software\WavePad\wavepad.exe [2012-03-31 16:05]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\documents and settings\user\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.2.1
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\3y6xcf9g.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-msi system check - c:\docume~1\user\LOCALS~1\Temp\gwbims.exe
HKCU-Run-driver restore update - c:\docume~1\user\LOCALS~1\Temp\wpinvk.exe
HKCU-Run-stream system eng - c:\docume~1\user\LOCALS~1\Temp\hznn.exe
HKCU-Run-avs reload sys - c:\docume~1\user\LOCALS~1\Temp\tvbtpx.exe
HKCU-Run-RGSC - c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
HKU-Default-RunOnce-nltide3 - rundll32 advpack.dll
HKU-Default-RunOnce-nltide2 - rundll32 advpack.dll
AddRemove-RS Summer Cup 1.00 - c:\documents and settings\user\Plocha\Nová složka (2)\Uninstall.exe
AddRemove-Uninstall_is1 - c:\program files\Common Files\DVDVideoSoft\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-22 20:20
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
P17Helper = Rundll32 SPIRun.dll,RunDLLEntry?
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2000478354-1275210071-725345543-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:59,ea,c3,fe,a2,c1,56,98,7c,de,ba,65,f8,3c,a9,fb,bb,9c,22,df,c0,33,28,
a5,21,b9,a9,69,ae,11,c5,41,c4,73,17,c0,82,4d,eb,11,91,ce,5e,7d,c4,b0,1a,64,\
"??"=hex:d0,98,a8,70,9b,45,b8,41,6b,47,96,31,3b,40,b5,fe
.
[HKEY_USERS\S-1-5-21-2000478354-1275210071-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:4d,6d,93,8c,1c,3a,d8,c1,90,73,64,41,30,92,34,cb,99,14,1c,0f,40,
fa,f1,64,2f,ac,f6,18,2a,17,50,6b,4e,5c,14,95,56,81,5a,d2,88,d3,d2,a6,e3,41,\
"rkeysecu"=hex:12,1c,3b,54,1a,46,39,2c,5b,6b,53,7f,c3,4f,95,37
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(640)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Creative\Shared Files\CTAudSvc.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\Rundll32.exe
c:\windows\system32\RunDLL32.exe
.
**************************************************************************
.
Celkový čas: 2012-10-22 20:23:03 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-10-22 18:23
.
Před spuštěním: Volných bajtů: 139 685 515 264
Po spuštění: Volných bajtů: 150 852 161 536
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - EB0DA310D56EA0BEC9C194DA963A02FE
Zdá se,že tam něco škodlivého je,že?
Rkill 2.4.3 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 10/22/2012 07:58:56 PM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* No malware processes found to kill.
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* No issues found.
Checking Windows Service Integrity:
* No issues found.
Searching for Missing Digital Signatures:
* No issues found.
Checking HOSTS File:
* HOSTS file entries found:
127.0.0.1 localhost
127.0.0.1 secure.disc-soft.com
Program finished at: 10/22/2012 07:59:17 PM
Execution time: 0 hours(s), 0 minute(s), and 21 seconds(s)
Combofix:
ComboFix 12-10-22.02 - user 22.10.2012 20:11:27.1.4 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2498 [GMT 2:00]
Spuštěný z: c:\documents and settings\user\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\user\Nabídka Start\Programy\Po spuštění\PowerReg Scheduler V3.exe
c:\windows\iun6002.exe
c:\windows\msmqinst.log
c:\windows\pkunzip.pif
c:\windows\pkzip.pif
c:\windows\system32\tmp20.tmp
c:\windows\system32\tmp21.tmp
c:\windows\system32\tmp8B.tmp
c:\windows\system32\tmp8C.tmp
c:\windows\system32\tmpC1.tmp
c:\windows\system32\tmpC2.tmp
c:\windows\system32\tmpEA.tmp
c:\windows\system32\tmpEB.tmp
c:\windows\system32\TZLog.log
D:\install.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NVSVC
-------\Service_NVSvc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-22 do 2012-10-22 )))))))))))))))))))))))))))))))
.
.
2012-10-20 00:16 . 2012-10-20 00:17 -------- d-----w- C:\rsit
2012-10-20 00:16 . 2012-10-20 00:17 -------- d-----w- c:\program files\trend micro
2012-10-19 21:28 . 2012-10-19 21:28 -------- d-----w- c:\program files\GoldWave
2012-10-19 21:15 . 2012-10-19 21:15 -------- d-----w- c:\program files\YTD Toolbar
2012-10-18 19:21 . 2012-10-18 19:21 -------- d-----w- c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2012-10-14 11:08 . 2012-10-14 11:08 -------- d-----w- c:\documents and settings\user\SFX
2012-10-14 08:08 . 2012-10-14 08:08 -------- d-----w- c:\documents and settings\user\Data aplikací\Milestone
2012-09-30 19:04 . 2012-09-30 19:29 -------- d-----w- c:\program files\MP3Gain
2012-09-23 14:59 . 2012-09-23 14:59 -------- d-----w- c:\windows\Sun
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-21 20:29 . 2008-04-14 05:51 6656 ----a-w- c:\windows\system32\lpcio.dll
2012-10-09 13:40 . 2012-03-30 14:01 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-09 13:40 . 2012-02-23 16:51 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-09-23 14:28 . 2012-09-09 12:10 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-09-23 14:28 . 2012-09-09 12:10 5947392 ----a-w- c:\windows\system32\nvopencl.dll
2012-09-23 14:28 . 2012-02-22 15:32 19103744 ----a-w- c:\windows\system32\nvoglnt.dll
2012-09-23 14:28 . 2012-02-22 15:32 7446528 ----a-w- c:\windows\system32\nvcuda.dll
2012-09-23 14:28 . 2012-02-22 15:32 4494208 ----a-w- c:\windows\system32\nv4_disp.dll
2012-09-23 14:28 . 2012-02-22 15:32 2578792 ----a-w- c:\windows\system32\nvcuvid.dll
2012-09-23 14:28 . 2012-02-22 15:32 2376704 ----a-w- c:\windows\system32\nvapi.dll
2012-09-23 14:28 . 2012-02-22 15:32 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-09-23 14:28 . 2012-02-22 15:32 17551360 ----a-w- c:\windows\system32\nvcompiler.dll
2012-09-23 14:28 . 2012-02-22 15:32 12557728 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-09-23 14:28 . 2012-02-22 15:32 1009512 ----a-w- c:\windows\system32\nvdispco32.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsth.dll
2012-09-23 13:09 . 2012-02-22 15:32 335872 ----a-w- c:\windows\system32\nvrsar.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrses.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrspt.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsja.dll
2012-09-23 13:09 . 2012-02-22 15:32 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2012-09-23 13:09 . 2012-02-22 15:32 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrssl.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrssk.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrssv.dll
2012-09-23 13:09 . 2012-02-22 15:32 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2012-09-23 13:09 . 2012-02-22 15:32 335872 ----a-w- c:\windows\system32\nvrshe.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrstr.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrspl.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsno.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrsit.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrsel.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrseng.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2012-09-23 13:09 . 2012-02-22 15:32 266240 ----a-w- c:\windows\system32\nvrsko.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrscs.dll
2012-09-23 13:09 . 2012-02-22 15:32 270336 ----a-w- c:\windows\system32\nvrsru.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2012-09-23 13:09 . 2012-02-22 15:32 278528 ----a-w- c:\windows\system32\nvrsde.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2012-09-23 13:09 . 2012-02-22 15:32 262144 ----a-w- c:\windows\system32\nvrshu.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsda.dll
2012-09-23 13:09 . 2012-02-22 15:32 126976 ----a-w- c:\windows\system32\nvrszht.dll
2012-09-23 13:04 . 2012-02-22 15:32 54272 ----a-w- c:\windows\system32\nvwddi.dll
2012-09-23 13:04 . 2012-02-22 15:32 15512424 ----a-w- c:\windows\system32\nvcpl.dll
2012-09-23 13:04 . 2012-02-22 15:32 164200 ----a-w- c:\windows\system32\nvsvc32.exe
2012-09-23 13:04 . 2012-02-22 15:32 143720 ----a-w- c:\windows\system32\nvcolor.exe
2012-09-23 13:04 . 2012-02-22 15:32 108392 ----a-w- c:\windows\system32\nvmctray.dll
2012-09-03 20:02 . 2012-09-03 20:02 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-09-03 20:02 . 2012-09-03 20:02 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-09-03 20:01 . 2012-08-26 21:18 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-03 20:01 . 2012-08-26 21:18 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-08-28 15:17 . 2012-01-02 11:33 920064 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:17 . 2012-01-02 11:33 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:17 . 2012-01-02 11:33 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2012-01-02 11:33 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:58 . 2012-06-23 09:56 405152 ----a-w- c:\windows\system32\Newtonsoft.Json.Net20.dll
2012-08-24 13:53 . 2008-04-14 05:52 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27 . 2008-04-14 08:06 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-23 06:27 . 2008-04-14 05:06 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-21 09:13 . 2012-02-22 15:43 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-08-21 09:13 . 2012-02-22 15:43 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-08-21 09:13 . 2012-02-22 15:43 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:13 . 2012-02-22 15:43 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-08-21 09:13 . 2012-02-22 15:43 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-08-21 09:13 . 2012-02-22 15:43 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-08-21 09:13 . 2012-02-22 15:43 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-08-21 09:13 . 2012-02-22 15:43 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-08-21 09:12 . 2012-02-22 15:42 41224 ----a-w- c:\windows\avastSS.scr
2012-08-21 09:12 . 2012-02-22 15:42 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-08-20 11:17 . 2012-02-23 08:59 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2012-10-13 14:35 . 2012-10-13 14:35 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-10-09 1036288]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
"P17Helper"="SPIRun.dll" [2006-07-03 10752]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-09-23 15512424]
"NvMediaCenter"="NvMCTray.dll" [2012-09-23 108392]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-09-23 1634112]
"RivaTunerStartupDaemon"="c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" [2009-08-22 2781184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2012-01-02 128512]
.
c:\documents and settings\user\Nabídka Start\Programy\Po spuštění\
ACR Launcher.lnk - c:\program files\ACR\AutoClubRev\web\acrlauncher.exe [2012-6-7 49664]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\gu.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\UPlayBrowser.exe"=
"c:\\Program Files\\Tunngle\\TnglCtrl.exe"=
"c:\\Program Files\\Tunngle\\Tunngle.exe"=
"d:\\Program Files\\rFactor\\rFactor.exe"=
"c:\\Program Files\\Atari\\Test Drive Unlimited\\TestDriveUnlimited.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"d:\\Games\\Infogrames\\Dirt Track Racing 2\\DTR2.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\ACR\\AutoClubRev\\web\\acrlauncher.exe"=
"c:\\Program Files\\ACR\\AutoClubRev\\bin\\acr.exe"=
"d:\\Program Files\\Painkiller Resurrection\\bin\\ResurrectionEditor.exe"=
"d:\\Program Files\\racer 0.63\\racer.exe"=
"d:\\Program Files\\SWAT 4\\Content\\System\\Swat4.exe"=
"c:\\Program Files\\Atari\\TDU2\\UpLauncher.exe"=
"c:\\Program Files\\Atari\\TDU2\\TestDrive2.exe"=
"d:\\Program Files\\Outerra\\Anteworld\\outerra.exe"=
"d:\\Program Files\\EA Games\\Mirror's Edge\\Binaries\\MirrorsEdge.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"d:\\Program Files\\MILESTONE\\WRC3\\WRC3.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
.
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [22.2.2012 17:43 729752]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [22.2.2012 17:43 355632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [18.3.2012 20:47 242240]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.2.2012 17:43 21256]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [26.2.2012 21:01 20328]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [14.4.2012 12:20 21992]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [23.2.2012 10:31 1258856]
R2 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [22.2.2012 17:13 124264]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\drivers\tap0901t.sys [26.2.2012 14:45 27136]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [23.2.2012 18:58 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [30.3.2012 16:01 250808]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [24.2.2012 0:01 79360]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [23.2.2012 18:58 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [27.4.2012 10:12 115168]
S3 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [26.2.2012 14:45 736104]
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - WS2IFSL
.
Obsah adresáře 'Naplánované úlohy'
.
2012-10-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 13:40]
.
2012-10-22 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\AVAST Software\Avast\AvastEmUpdate.exe [2012-07-01 09:12]
.
2012-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-23 16:58]
.
2012-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-23 16:58]
.
2012-09-30 c:\windows\Tasks\prismShakeIcon.job
- c:\program files\NCH Software\Prism\prism.exe [2012-03-11 11:58]
.
2012-06-12 c:\windows\Tasks\videopadShakeIcon.job
- c:\program files\NCH Software\VideoPad\videopad.exe [2012-06-09 19:59]
.
2012-10-15 c:\windows\Tasks\WavePadReminder.job
- c:\program files\NCH Software\WavePad\wavepad.exe [2012-03-31 16:05]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.com/
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\documents and settings\user\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
TCP: DhcpNameServer = 192.168.2.1
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\3y6xcf9g.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-msi system check - c:\docume~1\user\LOCALS~1\Temp\gwbims.exe
HKCU-Run-driver restore update - c:\docume~1\user\LOCALS~1\Temp\wpinvk.exe
HKCU-Run-stream system eng - c:\docume~1\user\LOCALS~1\Temp\hznn.exe
HKCU-Run-avs reload sys - c:\docume~1\user\LOCALS~1\Temp\tvbtpx.exe
HKCU-Run-RGSC - c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe
HKU-Default-RunOnce-nltide3 - rundll32 advpack.dll
HKU-Default-RunOnce-nltide2 - rundll32 advpack.dll
AddRemove-RS Summer Cup 1.00 - c:\documents and settings\user\Plocha\Nová složka (2)\Uninstall.exe
AddRemove-Uninstall_is1 - c:\program files\Common Files\DVDVideoSoft\unins000.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-22 20:20
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
P17Helper = Rundll32 SPIRun.dll,RunDLLEntry?
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-2000478354-1275210071-725345543-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:59,ea,c3,fe,a2,c1,56,98,7c,de,ba,65,f8,3c,a9,fb,bb,9c,22,df,c0,33,28,
a5,21,b9,a9,69,ae,11,c5,41,c4,73,17,c0,82,4d,eb,11,91,ce,5e,7d,c4,b0,1a,64,\
"??"=hex:d0,98,a8,70,9b,45,b8,41,6b,47,96,31,3b,40,b5,fe
.
[HKEY_USERS\S-1-5-21-2000478354-1275210071-725345543-1003\Software\SecuROM\License information*]
"datasecu"=hex:4d,6d,93,8c,1c,3a,d8,c1,90,73,64,41,30,92,34,cb,99,14,1c,0f,40,
fa,f1,64,2f,ac,f6,18,2a,17,50,6b,4e,5c,14,95,56,81,5a,d2,88,d3,d2,a6,e3,41,\
"rkeysecu"=hex:12,1c,3b,54,1a,46,39,2c,5b,6b,53,7f,c3,4f,95,37
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(640)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Creative\Shared Files\CTAudSvc.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\Rundll32.exe
c:\windows\system32\RunDLL32.exe
.
**************************************************************************
.
Celkový čas: 2012-10-22 20:23:03 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-10-22 18:23
.
Před spuštěním: Volných bajtů: 139 685 515 264
Po spuštění: Volných bajtů: 150 852 161 536
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - EB0DA310D56EA0BEC9C194DA963A02FE
Zdá se,že tam něco škodlivého je,že?
Re: Zpomalený PC
Ano, neco nam nasel a neco jeste domazeme Poprosim o log z DDS http://forum.viry.cz/viewtopic.php?f=24&t=123680"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Zpomalený PC
Attach:
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-10-19.01)
.
Systém Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 22.2.2012 16:01:08
System Uptime: 23.10.2012 15:17:23 (0 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | CROSSHAIR II FORMULA
Processor: AMD Phenom(tm) II X4 960T Processor | Socket AM2 | 3853/227mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 298 GiB total, 140,251 GiB free.
D: is FIXED (NTFS) - 466 GiB total, 243,146 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP142: 25.7.2012 9:59:44 - Kontrolní bod systému
RP143: 26.7.2012 20:11:50 - Kontrolní bod systému
RP144: 29.7.2012 19:19:20 - Kontrolní bod systému
RP145: 30.7.2012 16:41:47 - Installed Richard Burns Rally
RP146: 30.7.2012 16:50:18 - Installed Windows Media Format 9 Series Runtime Setup
RP147: 30.7.2012 16:55:33 - Installed Richard Burns Rally 1.01 Patch
RP148: 30.7.2012 16:56:36 - Instalováno Richard Burns Rally 1.02 Patch
RP149: 7.8.2012 11:20:17 - Installed Humalamaki
RP150: 8.8.2012 21:19:41 - Kontrolní bod systému
RP151: 8.8.2012 21:54:43 - Installed RP 2009 Shakedown
RP152: 9.8.2012 21:58:03 - Nainstalováno rozhraní DirectX
RP153: 11.8.2012 16:53:26 - Kontrolní bod systému
RP154: 13.8.2012 13:13:18 - Kontrolní bod systému
RP155: 14.8.2012 18:08:56 - Kontrolní bod systému
RP156: 15.8.2012 20:19:39 - Nainstalováno rozhraní DirectX
RP157: 16.8.2012 0:28:58 - Software Distribution Service 3.0
RP158: 20.8.2012 13:17:18 - Nainstalováno rozhraní DirectX
RP159: 20.8.2012 23:27:40 - Installed Windows NLSDownlevelMapping.
RP160: 20.8.2012 23:27:55 - Nainstalováno rozhraní DirectX
RP161: 22.8.2012 23:15:02 - Nainstalováno DiRT 3
RP162: 26.8.2012 20:45:52 - Kontrolní bod systému
RP163: 26.8.2012 23:17:42 - Installed Java 7 Update 6
RP164: 27.8.2012 21:18:58 - Nainstalováno ProductName from default.wxl
RP165: 28.8.2012 20:29:04 - Nainstalováno rozhraní DirectX
RP166: 28.8.2012 22:01:22 - Installed Mirror's Edge Patch
RP167: 30.8.2012 19:58:14 - Kontrolní bod systému
RP168: 1.9.2012 19:18:18 - Kontrolní bod systému
RP169: 3.9.2012 22:01:31 - Removed Java 7 Update 6
RP170: 5.9.2012 14:40:39 - Kontrolní bod systému
RP171: 6.9.2012 15:26:42 - Kontrolní bod systému
RP172: 7.9.2012 21:14:41 - Kontrolní bod systému
RP173: 9.9.2012 11:52:17 - Kontrolní bod systému
RP174: 9.9.2012 13:28:28 - Installed Grand Theft Auto IV
RP175: 9.9.2012 14:10:44 - Aktualizovat na nepodepsaný ovladač
RP176: 9.9.2012 14:19:27 - Installed Grand Theft Auto IV
RP177: 9.9.2012 15:01:31 - Nainstalováno Grand Theft Auto IV
RP178: 9.9.2012 15:10:19 - Removed Microsoft Games for Windows - LIVE Redistributable
RP179: 9.9.2012 15:13:27 - Nainstalováno rozhraní DirectX
RP180: 9.9.2012 15:22:57 - Removed Microsoft Games for Windows Marketplace
RP181: 9.9.2012 15:23:13 - Removed Microsoft Games for Windows - LIVE Redistributable
RP182: 9.9.2012 15:29:37 - Nainstalováno rozhraní DirectX
RP183: 9.9.2012 15:39:52 - Removed Grand Theft Auto IV
RP184: 9.9.2012 15:43:12 - Installed Rockstar Games Social Club
RP185: 9.9.2012 15:43:39 - Installed Grand Theft Auto IV
RP186: 9.9.2012 17:51:39 - Nainstalováno Grand Theft Auto IV
RP187: 10.9.2012 19:04:14 - Kontrolní bod systému
RP188: 11.9.2012 19:14:32 - Kontrolní bod systému
RP189: 12.9.2012 19:50:26 - Kontrolní bod systému
RP190: 12.9.2012 22:31:35 - Software Distribution Service 3.0
RP191: 14.9.2012 20:49:52 - Kontrolní bod systému
RP192: 17.9.2012 15:33:23 - Kontrolní bod systému
RP193: 19.9.2012 16:42:58 - Kontrolní bod systému
RP194: 20.9.2012 18:49:23 - Kontrolní bod systému
RP195: 21.9.2012 19:21:57 - Kontrolní bod systému
RP196: 22.9.2012 12:55:04 - Software Distribution Service 3.0
RP197: 24.9.2012 15:48:51 - Kontrolní bod systému
RP198: 25.9.2012 17:10:26 - Kontrolní bod systému
RP199: 26.9.2012 17:14:09 - Kontrolní bod systému
RP200: 27.9.2012 20:19:33 - Kontrolní bod systému
RP201: 29.9.2012 17:54:13 - Kontrolní bod systému
RP202: 1.10.2012 16:11:43 - Kontrolní bod systému
RP203: 2.10.2012 18:59:59 - Kontrolní bod systému
RP204: 4.10.2012 14:16:47 - Kontrolní bod systému
RP205: 5.10.2012 14:57:36 - Kontrolní bod systému
RP206: 6.10.2012 12:27:01 - Installed Creative Audio Console
RP207: 6.10.2012 12:27:10 - Installed Creative Software AutoUpdate
RP208: 7.10.2012 14:22:22 - Kontrolní bod systému
RP209: 8.10.2012 16:52:08 - Kontrolní bod systému
RP210: 9.10.2012 17:25:34 - Kontrolní bod systému
RP211: 10.10.2012 17:33:48 - Kontrolní bod systému
RP212: 10.10.2012 22:56:07 - Software Distribution Service 3.0
RP213: 13.10.2012 15:02:40 - Kontrolní bod systému
RP214: 14.10.2012 16:53:29 - Kontrolní bod systému
RP215: 15.10.2012 20:39:35 - Kontrolní bod systému
RP216: 16.10.2012 23:02:59 - Kontrolní bod systému
RP217: 18.10.2012 0:05:21 - Kontrolní bod systému
RP218: 19.10.2012 15:38:11 - Kontrolní bod systému
RP219: 20.10.2012 14:56:00 - Software Distribution Service 3.0
RP220: 20.10.2012 20:21:15 - Nainstalováno rozhraní DirectX
RP221: 22.10.2012 16:31:04 - Kontrolní bod systému
RP222: 23.10.2012 15:23:41 - Installed Java 7 Update 9
.
==== Installed Programs ======================
.
7-Zip 9.20
ACR version 0.001
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.4) - Czech
Aktualizace NVIDIA 1.10.8
Aktualizace systému Windows XP (KB2345886)
Aktualizace systému Windows XP (KB2661254-v2)
Aktualizace systému Windows XP (KB2718704)
Aktualizace systému Windows XP (KB2736233)
Aktualizace systému Windows XP (KB2749655)
Aktualizace systému Windows XP (KB898461)
Aktualizace systému Windows XP (KB951978)
Aktualizace systému Windows XP (KB955759)
Aktualizace systému Windows XP (KB968389)
Aktualizace systému Windows XP (KB971029)
Aktualizace systému Windows XP (KB973687)
Aktualizace systému Windows XP (KB973815)
Aktualizace zabezpečení aplikace Windows Media Player (KB2378111)
Aktualizace zabezpečení aplikace Windows Media Player (KB952069)
Aktualizace zabezpečení aplikace Windows Media Player (KB954155)
Aktualizace zabezpečení aplikace Windows Media Player (KB973540)
Aktualizace zabezpečení aplikace Windows Media Player (KB975558)
Aktualizace zabezpečení aplikace Windows Media Player (KB978695)
Aktualizace zabezpečení pro Microsoft Windows (KB2564958)
Aktualizace zabezpečení produktu Windows XP (KB941569)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2510531)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2544521)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2699988)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2722913)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2744842)
Aktualizace zabezpečení systému Windows XP (KB2079403)
Aktualizace zabezpečení systému Windows XP (KB2115168)
Aktualizace zabezpečení systému Windows XP (KB2229593)
Aktualizace zabezpečení systému Windows XP (KB2296011)
Aktualizace zabezpečení systému Windows XP (KB2347290)
Aktualizace zabezpečení systému Windows XP (KB2360937)
Aktualizace zabezpečení systému Windows XP (KB2387149)
Aktualizace zabezpečení systému Windows XP (KB2393802)
Aktualizace zabezpečení systému Windows XP (KB2419632)
Aktualizace zabezpečení systému Windows XP (KB2423089)
Aktualizace zabezpečení systému Windows XP (KB2440591)
Aktualizace zabezpečení systému Windows XP (KB2443105)
Aktualizace zabezpečení systému Windows XP (KB2476490)
Aktualizace zabezpečení systému Windows XP (KB2478960)
Aktualizace zabezpečení systému Windows XP (KB2478971)
Aktualizace zabezpečení systému Windows XP (KB2479943)
Aktualizace zabezpečení systému Windows XP (KB2481109)
Aktualizace zabezpečení systému Windows XP (KB2483185)
Aktualizace zabezpečení systému Windows XP (KB2485663)
Aktualizace zabezpečení systému Windows XP (KB2506212)
Aktualizace zabezpečení systému Windows XP (KB2507618)
Aktualizace zabezpečení systému Windows XP (KB2507938)
Aktualizace zabezpečení systému Windows XP (KB2508429)
Aktualizace zabezpečení systému Windows XP (KB2509553)
Aktualizace zabezpečení systému Windows XP (KB2535512)
Aktualizace zabezpečení systému Windows XP (KB2536276-v2)
Aktualizace zabezpečení systému Windows XP (KB2544893-v2)
Aktualizace zabezpečení systému Windows XP (KB2566454)
Aktualizace zabezpečení systému Windows XP (KB2570947)
Aktualizace zabezpečení systému Windows XP (KB2584146)
Aktualizace zabezpečení systému Windows XP (KB2585542)
Aktualizace zabezpečení systému Windows XP (KB2592799)
Aktualizace zabezpečení systému Windows XP (KB2598479)
Aktualizace zabezpečení systému Windows XP (KB2603381)
Aktualizace zabezpečení systému Windows XP (KB2618451)
Aktualizace zabezpečení systému Windows XP (KB2619339)
Aktualizace zabezpečení systému Windows XP (KB2620712)
Aktualizace zabezpečení systému Windows XP (KB2624667)
Aktualizace zabezpečení systému Windows XP (KB2631813)
Aktualizace zabezpečení systému Windows XP (KB2646524)
Aktualizace zabezpečení systému Windows XP (KB2653956)
Aktualizace zabezpečení systému Windows XP (KB2655992)
Aktualizace zabezpečení systému Windows XP (KB2659262)
Aktualizace zabezpečení systému Windows XP (KB2661637)
Aktualizace zabezpečení systému Windows XP (KB2676562)
Aktualizace zabezpečení systému Windows XP (KB2685939)
Aktualizace zabezpečení systému Windows XP (KB2686509)
Aktualizace zabezpečení systému Windows XP (KB2691442)
Aktualizace zabezpečení systému Windows XP (KB2695962)
Aktualizace zabezpečení systému Windows XP (KB2698365)
Aktualizace zabezpečení systému Windows XP (KB2705219)
Aktualizace zabezpečení systému Windows XP (KB2707511)
Aktualizace zabezpečení systému Windows XP (KB2709162)
Aktualizace zabezpečení systému Windows XP (KB2712808)
Aktualizace zabezpečení systému Windows XP (KB2718523)
Aktualizace zabezpečení systému Windows XP (KB2719985)
Aktualizace zabezpečení systému Windows XP (KB2723135)
Aktualizace zabezpečení systému Windows XP (KB2724197)
Aktualizace zabezpečení systému Windows XP (KB2731847)
Aktualizace zabezpečení systému Windows XP (KB923561)
Aktualizace zabezpečení systému Windows XP (KB946648)
Aktualizace zabezpečení systému Windows XP (KB950762)
Aktualizace zabezpečení systému Windows XP (KB950974)
Aktualizace zabezpečení systému Windows XP (KB951376-v2)
Aktualizace zabezpečení systému Windows XP (KB952004)
Aktualizace zabezpečení systému Windows XP (KB952954)
Aktualizace zabezpečení systému Windows XP (KB954459)
Aktualizace zabezpečení systému Windows XP (KB956572)
Aktualizace zabezpečení systému Windows XP (KB956744)
Aktualizace zabezpečení systému Windows XP (KB956802)
Aktualizace zabezpečení systému Windows XP (KB956844)
Aktualizace zabezpečení systému Windows XP (KB958644)
Aktualizace zabezpečení systému Windows XP (KB959426)
Aktualizace zabezpečení systému Windows XP (KB960803)
Aktualizace zabezpečení systému Windows XP (KB960859)
Aktualizace zabezpečení systému Windows XP (KB961501)
Aktualizace zabezpečení systému Windows XP (KB969059)
Aktualizace zabezpečení systému Windows XP (KB970430)
Aktualizace zabezpečení systému Windows XP (KB971657)
Aktualizace zabezpečení systému Windows XP (KB972270)
Aktualizace zabezpečení systému Windows XP (KB973507)
Aktualizace zabezpečení systému Windows XP (KB973869)
Aktualizace zabezpečení systému Windows XP (KB973904)
Aktualizace zabezpečení systému Windows XP (KB974112)
Aktualizace zabezpečení systému Windows XP (KB974318)
Aktualizace zabezpečení systému Windows XP (KB974392)
Aktualizace zabezpečení systému Windows XP (KB974571)
Aktualizace zabezpečení systému Windows XP (KB975025)
Aktualizace zabezpečení systému Windows XP (KB975467)
Aktualizace zabezpečení systému Windows XP (KB975560)
Aktualizace zabezpečení systému Windows XP (KB975713)
Aktualizace zabezpečení systému Windows XP (KB977816)
Aktualizace zabezpečení systému Windows XP (KB977914)
Aktualizace zabezpečení systému Windows XP (KB978338)
Aktualizace zabezpečení systému Windows XP (KB978542)
Aktualizace zabezpečení systému Windows XP (KB978706)
Aktualizace zabezpečení systému Windows XP (KB979309)
Aktualizace zabezpečení systému Windows XP (KB979482)
Aktualizace zabezpečení systému Windows XP (KB979687)
Aktualizace zabezpečení systému Windows XP (KB981322)
Aktualizace zabezpečení systému Windows XP (KB981997)
Aktualizace zabezpečení systému Windows XP (KB982132)
Aktualizace zabezpečení systému Windows XP (KB982665)
avast! Free Antivirus
BARUM RALLY - Semetín 2009, Semetín 2010 (remove only)
BitTorrent
Bridge Construction Set Demo
Burnout(TM) Paradise The Ultimate Box
CCleaner
Cool Edit Pro 2.1
CPUID CPU-Z 1.60
CPUID HWMonitor Pro 1.10
Crashday
Creative Audio Console
Creative Console Launcher
Creative Software AutoUpdate
DAEMON Tools Lite
DDS Viewer
DiRT 3
DiRT 3 Profile Import version 1.0
Dirt Track Racing 2
foobar2000 v1.1.11
Fraps (remove only)
Free Audio Converter version 5.0.19.1015
Free YouTube to MP3 Converter version 3.11.33.1005
Game Cam
GoldWave v5.58
Google Update Helper
Grand Theft Auto IV
GTA San Andreas
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB976002-v5)
Humalamaki
Java 7 Update 9
Java Auto Updater
K-Lite Codec Pack 5.9.0 (Basic)
Logitech Gaming Software 5.10
Marvell Miniport Driver
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - CSY
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - CSY
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 Language Pack - CSY
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile CSY Language Pack
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Extended CSY Language Pack
Microsoft Games for Windows - LIVE Redistributable
Microsoft Games for Windows Marketplace
Microsoft National Language Support Downlevel APIs
Microsoft Office File Validation Add-In
Microsoft Office Professional Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Mirror's Edge™
Mozilla Firefox 16.0.1 (x86 cs)
Mozilla Maintenance Service
MSVCRT Redists
MSXML 6.0 Parser (KB925673)
Nero 6 Ultra Edition
NVIDIA Drivers
NVIDIA Install Application
NVIDIA nView 136.28
NVIDIA Ovladač HD audia 1.3.18.0
NVIDIA Ovladače grafiky 306.81
NVIDIA PhysX
NVIDIA Systémový software PhysX 9.12.0604
NVIDIA Update Components
OpenAL
Oprava Hotfix systému Windows XP (KB2633952)
Oprava Hotfix systému Windows XP (KB2756822)
Oprava Hotfix systému Windows XP (KB942288-v3)
Oprava Hotfix systému Windows XP (KB952287)
Oprava Hotfix systému Windows XP (KB961118)
Outerra - Anteworld - Outerra Anteworld Demo
Ovládací panel NVIDIA 306.81
Porrasturvat - Stair Dismount
PowerDVD
Prism Video File Converter
Rapture3D 2.4.8 Game
RBR Bergheim (remove only)
RBR Peklo (remove only)
RBR Sieversdorf (remove only)
RBR Sosnova2010 (remove only)
RBR Stage Humalamaki
RBR Stage RP 2009 Shakedown
RBR Sweet Lamb (remove only)
RBR Tournament plugin (remove only)
rFactor (remove only)
rFactor Drift Revolution (remove only)
rFactor2
Richard Burns Rally
RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
RP 2009 Shakedown
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Sniper Ghost Warrior
SoundMAX
Stockcar Sim Series 2012
Switch Sound File Converter
TC2000 v2.1
Test Drive Unlimited
Test Drive Unlimited 2
Tom Clancy's Splinter Cell Conviction
Total Commander (Remove or Repair)
Truck Dismount (remove only)
Tunngle beta
Ubisoft Game Launcher
Unity Web Player
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
VideoPad Video Editor
Vista Codec Package
VLC media player 2.0.2
WavePad Sound Editor
WebFldrs XP
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray
Windows Genuine Advantage Notifications (KB905474)
Windows Live ID Sign-in Assistant
Windows Media Format 11 runtime
Windows Presentation Foundation
WinRAR 4.10 (32-bit)
WRC3 verze 1.0
XML Paper Specification Shared Components Language Pack 1.0
XML Paper Specification Shared Components Pack 1.0
YTD Toolbar v6.5
YTD YouTube Downloader & Converter 3.6
.
==== End Of File ===========================
DDS:
DDS (Ver_2012-10-19.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.9.2
Run by user at 15:38:44 on 2012-10-23
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2208 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k netsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [P17Helper] Rundll32 SPIRun.dll,RunDLLEntry
mRun: [Start WingMan Profiler] c:\program files\logitech\gaming software\LWEMon.exe /noui
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet
mRun: [RivaTunerStartupDaemon] "c:\program files\rivatuner v2.24 msi master overclocking arena 2009 edition\RivaTuner.exe" /S
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\user\nabdka~1\programy\posput~1\acrlau~1.lnk - c:\program files\acr\autoclubrev\web\acrlauncher.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:323
uPolicies-Explorer: NoDriveAutoRun = dword:67108863
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\documents and settings\user\data aplikací\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm
IE: WikiKomentáře Google... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
TCP: NameServer = 192.168.2.1
TCP: Interfaces\{BADF8E12-7647-42D3-920A-2DCDE5C6D53D} : DHCPNameServer = 10.0.0.138
TCP: Interfaces\{EB0E11AF-A3AC-4400-83CD-F32F2AEB503D} : DHCPNameServer = 192.168.2.1
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\user\data aplikací\mozilla\firefox\profiles\3y6xcf9g.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=
FF - plugin: c:\documents and settings\user\local settings\data aplikacă\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_287.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
.
============= SERVICES / DRIVERS ===============
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-2-22 729752]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-2-22 355632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-3-18 242240]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-2-22 21256]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-2-22 44808]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2012-2-26 20328]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2012-4-14 21992]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia update core\daemonu.exe [2012-2-23 1258856]
R2 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [2012-2-22 124264]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\drivers\psched.sys [2008-4-13 69120]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\drivers\tap0901t.sys [2012-2-26 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\google\update\GoogleUpdate.exe [2012-2-23 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-3-30 250808]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\common files\creative labs shared\service\CTAELicensing.exe [2012-2-24 79360]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2012-2-23 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-4-27 115168]
S3 TunngleService;TunngleService;c:\program files\tunngle\TnglCtrl.exe [2012-2-26 736104]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== File Associations ===============
.
ShellExec: switch.exe: open="c:\program files\nch software\switch\switch" "%L"
.
=============== Created Last 30 ================
.
2012-10-23 13:24:10 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-22 18:04:24 -------- d-sha-r- C:\cmdcons
2012-10-22 18:02:34 98816 ----a-w- c:\windows\sed.exe
2012-10-22 18:02:34 256000 ----a-w- c:\windows\PEV.exe
2012-10-22 18:02:34 208896 ----a-w- c:\windows\MBR.exe
2012-10-20 00:16:58 -------- d-----w- c:\program files\trend micro
2012-10-19 21:28:44 -------- d-----w- c:\program files\GoldWave
2012-10-19 21:15:55 -------- d-----w- c:\program files\YTD Toolbar
2012-10-18 19:21:27 -------- d-----w- c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2012-10-14 11:08:00 -------- d-----w- c:\documents and settings\user\SFX
2012-10-14 08:08:38 -------- d-----w- c:\documents and settings\user\data aplikací\Milestone
2012-09-30 19:04:21 -------- d-----w- c:\program files\MP3Gain
.
==================== Find3M ====================
.
2012-10-22 20:27:49 6656 ----a-w- c:\windows\system32\lpcio.dll
2012-10-18 19:26:43 1102536 ----a-w- c:\windows\system32\nvdrsdb1.bin
2012-10-18 19:26:43 1 ----a-w- c:\windows\system32\nvdrssel.bin
2012-10-18 19:26:40 1102536 ----a-w- c:\windows\system32\nvdrsdb0.bin
2012-10-09 13:40:47 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-09 13:40:47 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-23 14:28:00 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-09-23 14:28:00 7446528 ----a-w- c:\windows\system32\nvcuda.dll
2012-09-23 14:28:00 5947392 ----a-w- c:\windows\system32\nvopencl.dll
2012-09-23 14:28:00 4494208 ----a-w- c:\windows\system32\nv4_disp.dll
2012-09-23 14:28:00 2578792 ----a-w- c:\windows\system32\nvcuvid.dll
2012-09-23 14:28:00 2376704 ----a-w- c:\windows\system32\nvapi.dll
2012-09-23 14:28:00 19103744 ----a-w- c:\windows\system32\nvoglnt.dll
2012-09-23 14:28:00 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-09-23 14:28:00 17551360 ----a-w- c:\windows\system32\nvcompiler.dll
2012-09-23 14:28:00 12557728 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-09-23 14:28:00 1009512 ----a-w- c:\windows\system32\nvdispco32.dll
2012-09-23 13:04:24 54272 ----a-w- c:\windows\system32\nvwddi.dll
2012-09-23 13:04:12 15512424 ----a-w- c:\windows\system32\nvcpl.dll
2012-09-23 13:04:11 164200 ----a-w- c:\windows\system32\nvsvc32.exe
2012-09-23 13:04:11 143720 ----a-w- c:\windows\system32\nvcolor.exe
2012-09-23 13:04:11 108392 ----a-w- c:\windows\system32\nvmctray.dll
2012-09-03 20:01:59 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-03 20:01:59 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-08-28 15:17:31 920064 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:17:21 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:17:20 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07:41 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:58:36 405152 ----a-w- c:\windows\system32\Newtonsoft.Json.Net20.dll
2012-08-24 13:53:44 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27:26 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-23 06:27:26 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-21 09:13:15 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:12:33 41224 ----a-w- c:\windows\avastSS.scr
2012-08-20 11:17:54 109080 ----a-w- c:\windows\system32\OpenAL32.dll
.
============= FINISH: 15:39:07,43 ===============
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-10-19.01)
.
Systém Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 22.2.2012 16:01:08
System Uptime: 23.10.2012 15:17:23 (0 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | CROSSHAIR II FORMULA
Processor: AMD Phenom(tm) II X4 960T Processor | Socket AM2 | 3853/227mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 298 GiB total, 140,251 GiB free.
D: is FIXED (NTFS) - 466 GiB total, 243,146 GiB free.
E: is CDROM ()
F: is CDROM ()
G: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP142: 25.7.2012 9:59:44 - Kontrolní bod systému
RP143: 26.7.2012 20:11:50 - Kontrolní bod systému
RP144: 29.7.2012 19:19:20 - Kontrolní bod systému
RP145: 30.7.2012 16:41:47 - Installed Richard Burns Rally
RP146: 30.7.2012 16:50:18 - Installed Windows Media Format 9 Series Runtime Setup
RP147: 30.7.2012 16:55:33 - Installed Richard Burns Rally 1.01 Patch
RP148: 30.7.2012 16:56:36 - Instalováno Richard Burns Rally 1.02 Patch
RP149: 7.8.2012 11:20:17 - Installed Humalamaki
RP150: 8.8.2012 21:19:41 - Kontrolní bod systému
RP151: 8.8.2012 21:54:43 - Installed RP 2009 Shakedown
RP152: 9.8.2012 21:58:03 - Nainstalováno rozhraní DirectX
RP153: 11.8.2012 16:53:26 - Kontrolní bod systému
RP154: 13.8.2012 13:13:18 - Kontrolní bod systému
RP155: 14.8.2012 18:08:56 - Kontrolní bod systému
RP156: 15.8.2012 20:19:39 - Nainstalováno rozhraní DirectX
RP157: 16.8.2012 0:28:58 - Software Distribution Service 3.0
RP158: 20.8.2012 13:17:18 - Nainstalováno rozhraní DirectX
RP159: 20.8.2012 23:27:40 - Installed Windows NLSDownlevelMapping.
RP160: 20.8.2012 23:27:55 - Nainstalováno rozhraní DirectX
RP161: 22.8.2012 23:15:02 - Nainstalováno DiRT 3
RP162: 26.8.2012 20:45:52 - Kontrolní bod systému
RP163: 26.8.2012 23:17:42 - Installed Java 7 Update 6
RP164: 27.8.2012 21:18:58 - Nainstalováno ProductName from default.wxl
RP165: 28.8.2012 20:29:04 - Nainstalováno rozhraní DirectX
RP166: 28.8.2012 22:01:22 - Installed Mirror's Edge Patch
RP167: 30.8.2012 19:58:14 - Kontrolní bod systému
RP168: 1.9.2012 19:18:18 - Kontrolní bod systému
RP169: 3.9.2012 22:01:31 - Removed Java 7 Update 6
RP170: 5.9.2012 14:40:39 - Kontrolní bod systému
RP171: 6.9.2012 15:26:42 - Kontrolní bod systému
RP172: 7.9.2012 21:14:41 - Kontrolní bod systému
RP173: 9.9.2012 11:52:17 - Kontrolní bod systému
RP174: 9.9.2012 13:28:28 - Installed Grand Theft Auto IV
RP175: 9.9.2012 14:10:44 - Aktualizovat na nepodepsaný ovladač
RP176: 9.9.2012 14:19:27 - Installed Grand Theft Auto IV
RP177: 9.9.2012 15:01:31 - Nainstalováno Grand Theft Auto IV
RP178: 9.9.2012 15:10:19 - Removed Microsoft Games for Windows - LIVE Redistributable
RP179: 9.9.2012 15:13:27 - Nainstalováno rozhraní DirectX
RP180: 9.9.2012 15:22:57 - Removed Microsoft Games for Windows Marketplace
RP181: 9.9.2012 15:23:13 - Removed Microsoft Games for Windows - LIVE Redistributable
RP182: 9.9.2012 15:29:37 - Nainstalováno rozhraní DirectX
RP183: 9.9.2012 15:39:52 - Removed Grand Theft Auto IV
RP184: 9.9.2012 15:43:12 - Installed Rockstar Games Social Club
RP185: 9.9.2012 15:43:39 - Installed Grand Theft Auto IV
RP186: 9.9.2012 17:51:39 - Nainstalováno Grand Theft Auto IV
RP187: 10.9.2012 19:04:14 - Kontrolní bod systému
RP188: 11.9.2012 19:14:32 - Kontrolní bod systému
RP189: 12.9.2012 19:50:26 - Kontrolní bod systému
RP190: 12.9.2012 22:31:35 - Software Distribution Service 3.0
RP191: 14.9.2012 20:49:52 - Kontrolní bod systému
RP192: 17.9.2012 15:33:23 - Kontrolní bod systému
RP193: 19.9.2012 16:42:58 - Kontrolní bod systému
RP194: 20.9.2012 18:49:23 - Kontrolní bod systému
RP195: 21.9.2012 19:21:57 - Kontrolní bod systému
RP196: 22.9.2012 12:55:04 - Software Distribution Service 3.0
RP197: 24.9.2012 15:48:51 - Kontrolní bod systému
RP198: 25.9.2012 17:10:26 - Kontrolní bod systému
RP199: 26.9.2012 17:14:09 - Kontrolní bod systému
RP200: 27.9.2012 20:19:33 - Kontrolní bod systému
RP201: 29.9.2012 17:54:13 - Kontrolní bod systému
RP202: 1.10.2012 16:11:43 - Kontrolní bod systému
RP203: 2.10.2012 18:59:59 - Kontrolní bod systému
RP204: 4.10.2012 14:16:47 - Kontrolní bod systému
RP205: 5.10.2012 14:57:36 - Kontrolní bod systému
RP206: 6.10.2012 12:27:01 - Installed Creative Audio Console
RP207: 6.10.2012 12:27:10 - Installed Creative Software AutoUpdate
RP208: 7.10.2012 14:22:22 - Kontrolní bod systému
RP209: 8.10.2012 16:52:08 - Kontrolní bod systému
RP210: 9.10.2012 17:25:34 - Kontrolní bod systému
RP211: 10.10.2012 17:33:48 - Kontrolní bod systému
RP212: 10.10.2012 22:56:07 - Software Distribution Service 3.0
RP213: 13.10.2012 15:02:40 - Kontrolní bod systému
RP214: 14.10.2012 16:53:29 - Kontrolní bod systému
RP215: 15.10.2012 20:39:35 - Kontrolní bod systému
RP216: 16.10.2012 23:02:59 - Kontrolní bod systému
RP217: 18.10.2012 0:05:21 - Kontrolní bod systému
RP218: 19.10.2012 15:38:11 - Kontrolní bod systému
RP219: 20.10.2012 14:56:00 - Software Distribution Service 3.0
RP220: 20.10.2012 20:21:15 - Nainstalováno rozhraní DirectX
RP221: 22.10.2012 16:31:04 - Kontrolní bod systému
RP222: 23.10.2012 15:23:41 - Installed Java 7 Update 9
.
==== Installed Programs ======================
.
7-Zip 9.20
ACR version 0.001
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Reader X (10.1.4) - Czech
Aktualizace NVIDIA 1.10.8
Aktualizace systému Windows XP (KB2345886)
Aktualizace systému Windows XP (KB2661254-v2)
Aktualizace systému Windows XP (KB2718704)
Aktualizace systému Windows XP (KB2736233)
Aktualizace systému Windows XP (KB2749655)
Aktualizace systému Windows XP (KB898461)
Aktualizace systému Windows XP (KB951978)
Aktualizace systému Windows XP (KB955759)
Aktualizace systému Windows XP (KB968389)
Aktualizace systému Windows XP (KB971029)
Aktualizace systému Windows XP (KB973687)
Aktualizace systému Windows XP (KB973815)
Aktualizace zabezpečení aplikace Windows Media Player (KB2378111)
Aktualizace zabezpečení aplikace Windows Media Player (KB952069)
Aktualizace zabezpečení aplikace Windows Media Player (KB954155)
Aktualizace zabezpečení aplikace Windows Media Player (KB973540)
Aktualizace zabezpečení aplikace Windows Media Player (KB975558)
Aktualizace zabezpečení aplikace Windows Media Player (KB978695)
Aktualizace zabezpečení pro Microsoft Windows (KB2564958)
Aktualizace zabezpečení produktu Windows XP (KB941569)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2510531)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2544521)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2699988)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2722913)
Aktualizace zabezpečení systému Windows Internet Explorer 8 (KB2744842)
Aktualizace zabezpečení systému Windows XP (KB2079403)
Aktualizace zabezpečení systému Windows XP (KB2115168)
Aktualizace zabezpečení systému Windows XP (KB2229593)
Aktualizace zabezpečení systému Windows XP (KB2296011)
Aktualizace zabezpečení systému Windows XP (KB2347290)
Aktualizace zabezpečení systému Windows XP (KB2360937)
Aktualizace zabezpečení systému Windows XP (KB2387149)
Aktualizace zabezpečení systému Windows XP (KB2393802)
Aktualizace zabezpečení systému Windows XP (KB2419632)
Aktualizace zabezpečení systému Windows XP (KB2423089)
Aktualizace zabezpečení systému Windows XP (KB2440591)
Aktualizace zabezpečení systému Windows XP (KB2443105)
Aktualizace zabezpečení systému Windows XP (KB2476490)
Aktualizace zabezpečení systému Windows XP (KB2478960)
Aktualizace zabezpečení systému Windows XP (KB2478971)
Aktualizace zabezpečení systému Windows XP (KB2479943)
Aktualizace zabezpečení systému Windows XP (KB2481109)
Aktualizace zabezpečení systému Windows XP (KB2483185)
Aktualizace zabezpečení systému Windows XP (KB2485663)
Aktualizace zabezpečení systému Windows XP (KB2506212)
Aktualizace zabezpečení systému Windows XP (KB2507618)
Aktualizace zabezpečení systému Windows XP (KB2507938)
Aktualizace zabezpečení systému Windows XP (KB2508429)
Aktualizace zabezpečení systému Windows XP (KB2509553)
Aktualizace zabezpečení systému Windows XP (KB2535512)
Aktualizace zabezpečení systému Windows XP (KB2536276-v2)
Aktualizace zabezpečení systému Windows XP (KB2544893-v2)
Aktualizace zabezpečení systému Windows XP (KB2566454)
Aktualizace zabezpečení systému Windows XP (KB2570947)
Aktualizace zabezpečení systému Windows XP (KB2584146)
Aktualizace zabezpečení systému Windows XP (KB2585542)
Aktualizace zabezpečení systému Windows XP (KB2592799)
Aktualizace zabezpečení systému Windows XP (KB2598479)
Aktualizace zabezpečení systému Windows XP (KB2603381)
Aktualizace zabezpečení systému Windows XP (KB2618451)
Aktualizace zabezpečení systému Windows XP (KB2619339)
Aktualizace zabezpečení systému Windows XP (KB2620712)
Aktualizace zabezpečení systému Windows XP (KB2624667)
Aktualizace zabezpečení systému Windows XP (KB2631813)
Aktualizace zabezpečení systému Windows XP (KB2646524)
Aktualizace zabezpečení systému Windows XP (KB2653956)
Aktualizace zabezpečení systému Windows XP (KB2655992)
Aktualizace zabezpečení systému Windows XP (KB2659262)
Aktualizace zabezpečení systému Windows XP (KB2661637)
Aktualizace zabezpečení systému Windows XP (KB2676562)
Aktualizace zabezpečení systému Windows XP (KB2685939)
Aktualizace zabezpečení systému Windows XP (KB2686509)
Aktualizace zabezpečení systému Windows XP (KB2691442)
Aktualizace zabezpečení systému Windows XP (KB2695962)
Aktualizace zabezpečení systému Windows XP (KB2698365)
Aktualizace zabezpečení systému Windows XP (KB2705219)
Aktualizace zabezpečení systému Windows XP (KB2707511)
Aktualizace zabezpečení systému Windows XP (KB2709162)
Aktualizace zabezpečení systému Windows XP (KB2712808)
Aktualizace zabezpečení systému Windows XP (KB2718523)
Aktualizace zabezpečení systému Windows XP (KB2719985)
Aktualizace zabezpečení systému Windows XP (KB2723135)
Aktualizace zabezpečení systému Windows XP (KB2724197)
Aktualizace zabezpečení systému Windows XP (KB2731847)
Aktualizace zabezpečení systému Windows XP (KB923561)
Aktualizace zabezpečení systému Windows XP (KB946648)
Aktualizace zabezpečení systému Windows XP (KB950762)
Aktualizace zabezpečení systému Windows XP (KB950974)
Aktualizace zabezpečení systému Windows XP (KB951376-v2)
Aktualizace zabezpečení systému Windows XP (KB952004)
Aktualizace zabezpečení systému Windows XP (KB952954)
Aktualizace zabezpečení systému Windows XP (KB954459)
Aktualizace zabezpečení systému Windows XP (KB956572)
Aktualizace zabezpečení systému Windows XP (KB956744)
Aktualizace zabezpečení systému Windows XP (KB956802)
Aktualizace zabezpečení systému Windows XP (KB956844)
Aktualizace zabezpečení systému Windows XP (KB958644)
Aktualizace zabezpečení systému Windows XP (KB959426)
Aktualizace zabezpečení systému Windows XP (KB960803)
Aktualizace zabezpečení systému Windows XP (KB960859)
Aktualizace zabezpečení systému Windows XP (KB961501)
Aktualizace zabezpečení systému Windows XP (KB969059)
Aktualizace zabezpečení systému Windows XP (KB970430)
Aktualizace zabezpečení systému Windows XP (KB971657)
Aktualizace zabezpečení systému Windows XP (KB972270)
Aktualizace zabezpečení systému Windows XP (KB973507)
Aktualizace zabezpečení systému Windows XP (KB973869)
Aktualizace zabezpečení systému Windows XP (KB973904)
Aktualizace zabezpečení systému Windows XP (KB974112)
Aktualizace zabezpečení systému Windows XP (KB974318)
Aktualizace zabezpečení systému Windows XP (KB974392)
Aktualizace zabezpečení systému Windows XP (KB974571)
Aktualizace zabezpečení systému Windows XP (KB975025)
Aktualizace zabezpečení systému Windows XP (KB975467)
Aktualizace zabezpečení systému Windows XP (KB975560)
Aktualizace zabezpečení systému Windows XP (KB975713)
Aktualizace zabezpečení systému Windows XP (KB977816)
Aktualizace zabezpečení systému Windows XP (KB977914)
Aktualizace zabezpečení systému Windows XP (KB978338)
Aktualizace zabezpečení systému Windows XP (KB978542)
Aktualizace zabezpečení systému Windows XP (KB978706)
Aktualizace zabezpečení systému Windows XP (KB979309)
Aktualizace zabezpečení systému Windows XP (KB979482)
Aktualizace zabezpečení systému Windows XP (KB979687)
Aktualizace zabezpečení systému Windows XP (KB981322)
Aktualizace zabezpečení systému Windows XP (KB981997)
Aktualizace zabezpečení systému Windows XP (KB982132)
Aktualizace zabezpečení systému Windows XP (KB982665)
avast! Free Antivirus
BARUM RALLY - Semetín 2009, Semetín 2010 (remove only)
BitTorrent
Bridge Construction Set Demo
Burnout(TM) Paradise The Ultimate Box
CCleaner
Cool Edit Pro 2.1
CPUID CPU-Z 1.60
CPUID HWMonitor Pro 1.10
Crashday
Creative Audio Console
Creative Console Launcher
Creative Software AutoUpdate
DAEMON Tools Lite
DDS Viewer
DiRT 3
DiRT 3 Profile Import version 1.0
Dirt Track Racing 2
foobar2000 v1.1.11
Fraps (remove only)
Free Audio Converter version 5.0.19.1015
Free YouTube to MP3 Converter version 3.11.33.1005
Game Cam
GoldWave v5.58
Google Update Helper
Grand Theft Auto IV
GTA San Andreas
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB976002-v5)
Humalamaki
Java 7 Update 9
Java Auto Updater
K-Lite Codec Pack 5.9.0 (Basic)
Logitech Gaming Software 5.10
Marvell Miniport Driver
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - CSY
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - CSY
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 Language Pack - CSY
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile CSY Language Pack
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Extended CSY Language Pack
Microsoft Games for Windows - LIVE Redistributable
Microsoft Games for Windows Marketplace
Microsoft National Language Support Downlevel APIs
Microsoft Office File Validation Add-In
Microsoft Office Professional Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Mirror's Edge™
Mozilla Firefox 16.0.1 (x86 cs)
Mozilla Maintenance Service
MSVCRT Redists
MSXML 6.0 Parser (KB925673)
Nero 6 Ultra Edition
NVIDIA Drivers
NVIDIA Install Application
NVIDIA nView 136.28
NVIDIA Ovladač HD audia 1.3.18.0
NVIDIA Ovladače grafiky 306.81
NVIDIA PhysX
NVIDIA Systémový software PhysX 9.12.0604
NVIDIA Update Components
OpenAL
Oprava Hotfix systému Windows XP (KB2633952)
Oprava Hotfix systému Windows XP (KB2756822)
Oprava Hotfix systému Windows XP (KB942288-v3)
Oprava Hotfix systému Windows XP (KB952287)
Oprava Hotfix systému Windows XP (KB961118)
Outerra - Anteworld - Outerra Anteworld Demo
Ovládací panel NVIDIA 306.81
Porrasturvat - Stair Dismount
PowerDVD
Prism Video File Converter
Rapture3D 2.4.8 Game
RBR Bergheim (remove only)
RBR Peklo (remove only)
RBR Sieversdorf (remove only)
RBR Sosnova2010 (remove only)
RBR Stage Humalamaki
RBR Stage RP 2009 Shakedown
RBR Sweet Lamb (remove only)
RBR Tournament plugin (remove only)
rFactor (remove only)
rFactor Drift Revolution (remove only)
rFactor2
Richard Burns Rally
RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
RP 2009 Shakedown
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Sniper Ghost Warrior
SoundMAX
Stockcar Sim Series 2012
Switch Sound File Converter
TC2000 v2.1
Test Drive Unlimited
Test Drive Unlimited 2
Tom Clancy's Splinter Cell Conviction
Total Commander (Remove or Repair)
Truck Dismount (remove only)
Tunngle beta
Ubisoft Game Launcher
Unity Web Player
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
VideoPad Video Editor
Vista Codec Package
VLC media player 2.0.2
WavePad Sound Editor
WebFldrs XP
Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray
Windows Genuine Advantage Notifications (KB905474)
Windows Live ID Sign-in Assistant
Windows Media Format 11 runtime
Windows Presentation Foundation
WinRAR 4.10 (32-bit)
WRC3 verze 1.0
XML Paper Specification Shared Components Language Pack 1.0
XML Paper Specification Shared Components Pack 1.0
YTD Toolbar v6.5
YTD YouTube Downloader & Converter 3.6
.
==== End Of File ===========================
DDS:
DDS (Ver_2012-10-19.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.9.2
Run by user at 15:38:44 on 2012-10-23
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2208 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\Rundll32.exe
C:\Program Files\Logitech\Gaming Software\LWEMon.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\ACR\AutoClubRev\web\acrlauncher.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k netsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com/
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [P17Helper] Rundll32 SPIRun.dll,RunDLLEntry
mRun: [Start WingMan Profiler] c:\program files\logitech\gaming software\LWEMon.exe /noui
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet
mRun: [RivaTunerStartupDaemon] "c:\program files\rivatuner v2.24 msi master overclocking arena 2009 edition\RivaTuner.exe" /S
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\user\nabdka~1\programy\posput~1\acrlau~1.lnk - c:\program files\acr\autoclubrev\web\acrlauncher.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:323
uPolicies-Explorer: NoDriveAutoRun = dword:67108863
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\documents and settings\user\data aplikací\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm
IE: WikiKomentáře Google... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab
TCP: NameServer = 192.168.2.1
TCP: Interfaces\{BADF8E12-7647-42D3-920A-2DCDE5C6D53D} : DHCPNameServer = 10.0.0.138
TCP: Interfaces\{EB0E11AF-A3AC-4400-83CD-F32F2AEB503D} : DHCPNameServer = 192.168.2.1
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\user\data aplikací\mozilla\firefox\profiles\3y6xcf9g.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=
FF - plugin: c:\documents and settings\user\local settings\data aplikacă\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_287.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
.
============= SERVICES / DRIVERS ===============
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-2-22 729752]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-2-22 355632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-3-18 242240]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-2-22 21256]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-2-22 44808]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2012-2-26 20328]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [2012-4-14 21992]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia update core\daemonu.exe [2012-2-23 1258856]
R2 yksvc;Marvell Yukon Service;RUNDLL32.EXE ykx32mpcoinst,serviceStartProc --> RUNDLL32.EXE ykx32mpcoinst,serviceStartProc [?]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [2012-2-22 124264]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\drivers\psched.sys [2008-4-13 69120]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\drivers\tap0901t.sys [2012-2-26 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Služba Google Update (gupdate);c:\program files\google\update\GoogleUpdate.exe [2012-2-23 136176]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-3-30 250808]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\common files\creative labs shared\service\CTAELicensing.exe [2012-2-24 79360]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2012-2-23 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\mozilla maintenance service\maintenanceservice.exe [2012-4-27 115168]
S3 TunngleService;TunngleService;c:\program files\tunngle\TnglCtrl.exe [2012-2-26 736104]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
.
=============== File Associations ===============
.
ShellExec: switch.exe: open="c:\program files\nch software\switch\switch" "%L"
.
=============== Created Last 30 ================
.
2012-10-23 13:24:10 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-22 18:04:24 -------- d-sha-r- C:\cmdcons
2012-10-22 18:02:34 98816 ----a-w- c:\windows\sed.exe
2012-10-22 18:02:34 256000 ----a-w- c:\windows\PEV.exe
2012-10-22 18:02:34 208896 ----a-w- c:\windows\MBR.exe
2012-10-20 00:16:58 -------- d-----w- c:\program files\trend micro
2012-10-19 21:28:44 -------- d-----w- c:\program files\GoldWave
2012-10-19 21:15:55 -------- d-----w- c:\program files\YTD Toolbar
2012-10-18 19:21:27 -------- d-----w- c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2012-10-14 11:08:00 -------- d-----w- c:\documents and settings\user\SFX
2012-10-14 08:08:38 -------- d-----w- c:\documents and settings\user\data aplikací\Milestone
2012-09-30 19:04:21 -------- d-----w- c:\program files\MP3Gain
.
==================== Find3M ====================
.
2012-10-22 20:27:49 6656 ----a-w- c:\windows\system32\lpcio.dll
2012-10-18 19:26:43 1102536 ----a-w- c:\windows\system32\nvdrsdb1.bin
2012-10-18 19:26:43 1 ----a-w- c:\windows\system32\nvdrssel.bin
2012-10-18 19:26:40 1102536 ----a-w- c:\windows\system32\nvdrsdb0.bin
2012-10-09 13:40:47 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-09 13:40:47 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-09-23 14:28:00 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-09-23 14:28:00 7446528 ----a-w- c:\windows\system32\nvcuda.dll
2012-09-23 14:28:00 5947392 ----a-w- c:\windows\system32\nvopencl.dll
2012-09-23 14:28:00 4494208 ----a-w- c:\windows\system32\nv4_disp.dll
2012-09-23 14:28:00 2578792 ----a-w- c:\windows\system32\nvcuvid.dll
2012-09-23 14:28:00 2376704 ----a-w- c:\windows\system32\nvapi.dll
2012-09-23 14:28:00 19103744 ----a-w- c:\windows\system32\nvoglnt.dll
2012-09-23 14:28:00 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-09-23 14:28:00 17551360 ----a-w- c:\windows\system32\nvcompiler.dll
2012-09-23 14:28:00 12557728 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-09-23 14:28:00 1009512 ----a-w- c:\windows\system32\nvdispco32.dll
2012-09-23 13:04:24 54272 ----a-w- c:\windows\system32\nvwddi.dll
2012-09-23 13:04:12 15512424 ----a-w- c:\windows\system32\nvcpl.dll
2012-09-23 13:04:11 164200 ----a-w- c:\windows\system32\nvsvc32.exe
2012-09-23 13:04:11 143720 ----a-w- c:\windows\system32\nvcolor.exe
2012-09-23 13:04:11 108392 ----a-w- c:\windows\system32\nvmctray.dll
2012-09-03 20:01:59 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-03 20:01:59 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-08-28 15:17:31 920064 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:17:21 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:17:20 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07:41 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:58:36 405152 ----a-w- c:\windows\system32\Newtonsoft.Json.Net20.dll
2012-08-24 13:53:44 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27:26 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-23 06:27:26 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-21 09:13:15 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:12:33 41224 ----a-w- c:\windows\avastSS.scr
2012-08-20 11:17:54 109080 ----a-w- c:\windows\system32\OpenAL32.dll
.
============= FINISH: 15:39:07,43 ===============
Re: Zpomalený PC
Pokud nemate, tak presunte Combofix na plochu
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
KillAll:: DDS: uRun: [DAEMON Tools Lite] mRun: [NeroFilterCheck] mRun: [RemoteControl] mRun: [Adobe ARM] mRun: [SunJavaUpdateSched] dRun: [CTFMON.EXE] Firefox:: FF - ProfilePath - c:\documents and settings\user\data aplikací\mozilla\firefox\profiles\3y6xcf9g.default\ FF - prefs.js: browser.search.selectedEngine - Yahoo FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=green ... =937811&p= Driver:: yksvc gupdate gupdatem Folder:: c:\program files\YTD Toolbar File:: C:\WINDOWS\tasks\Adobe Flash Player Updater.job C:\WINDOWS\tasks\avast! Emergency Update.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job C:\WINDOWS\tasks\prismShakeIcon.job C:\WINDOWS\tasks\videopadShakeIcon.job C:\WINDOWS\tasks\WavePadReminder.job RegNull:: [HKEY_USERS\S-1-5-21-2000478354-1275210071-725345543-1003\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] [HKEY_USERS\S-1-5-21-2000478354-1275210071-725345543-1003\Software\SecuROM\License information*] RegLock:: [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] ClearJavaCache:: Reboot::- Ulozte vytvoreny TXT jako CFScript.txt
- Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
- Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Zpomalený PC
ComboFix 12-10-22.02 - user 24.10.2012 20:30:03.2.4 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2364 [GMT 2:00]
Spuštěný z: c:\documents and settings\user\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\user\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
FILE ::
"c:\windows\tasks\Adobe Flash Player Updater.job"
"c:\windows\tasks\avast! Emergency Update.job"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\tasks\prismShakeIcon.job"
"c:\windows\tasks\videopadShakeIcon.job"
"c:\windows\tasks\WavePadReminder.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\YTD Toolbar
c:\program files\YTD Toolbar\FF\chrome.manifest
c:\program files\YTD Toolbar\FF\chrome\chrome.jar
c:\program files\YTD Toolbar\FF\install.rdf
c:\program files\YTD Toolbar\IE\6.5\config.ini
c:\program files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll
c:\program files\YTD Toolbar\Res\amazon.gif
c:\program files\YTD Toolbar\Res\dailymotion.gif
c:\program files\YTD Toolbar\Res\ebay.gif
c:\program files\YTD Toolbar\Res\facebook.gif
c:\program files\YTD Toolbar\Res\googleplus.gif
c:\program files\YTD Toolbar\Res\hulu.gif
c:\program files\YTD Toolbar\Res\icon_settings.gif
c:\program files\YTD Toolbar\Res\Lang\res1031.ini
c:\program files\YTD Toolbar\Res\Lang\res1033.ini
c:\program files\YTD Toolbar\Res\Lang\res1034.ini
c:\program files\YTD Toolbar\Res\Lang\res1036.ini
c:\program files\YTD Toolbar\Res\Lang\res1040.ini
c:\program files\YTD Toolbar\Res\metacafe.gif
c:\program files\YTD Toolbar\Res\radio-close.gif
c:\program files\YTD Toolbar\Res\radio-minimize.gif
c:\program files\YTD Toolbar\Res\radiobeta.gif
c:\program files\YTD Toolbar\Res\search-button-hover.gif
c:\program files\YTD Toolbar\Res\search-button.gif
c:\program files\YTD Toolbar\Res\search-chevron-hover.gif
c:\program files\YTD Toolbar\Res\search-chevron.gif
c:\program files\YTD Toolbar\Res\search_amazon.gif
c:\program files\YTD Toolbar\Res\search_baidu.gif
c:\program files\YTD Toolbar\Res\search_ebay.gif
c:\program files\YTD Toolbar\Res\search_yahoo.gif
c:\program files\YTD Toolbar\Res\search_yandex.gif
c:\program files\YTD Toolbar\Res\search_youtube.gif
c:\program files\YTD Toolbar\Res\twitter.gif
c:\program files\YTD Toolbar\Res\veoh.gif
c:\program files\YTD Toolbar\Res\widgets.xml
c:\program files\YTD Toolbar\Res\youtube.gif
c:\program files\YTD Toolbar\Res\ytd.gif
c:\program files\YTD Toolbar\Res\ytd_logo.gif
c:\program files\YTD Toolbar\Res\ytd_logo_hover.gif
c:\program files\YTD Toolbar\WidgiHelper.exe
c:\windows\tasks\Adobe Flash Player Updater.job
c:\windows\tasks\avast! Emergency Update.job
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
c:\windows\tasks\prismShakeIcon.job
c:\windows\tasks\videopadShakeIcon.job
c:\windows\tasks\WavePadReminder.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_GUPDATE
-------\Legacy_YKSVC
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_yksvc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-24 do 2012-10-24 )))))))))))))))))))))))))))))))
.
.
2012-10-23 20:58 . 2012-10-23 20:58 -------- d-sh--w- c:\documents and settings\user\IECompatCache
2012-10-23 14:47 . 2012-10-23 14:49 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikací\NFS Underground 2
2012-10-23 13:24 . 2012-09-24 21:16 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-20 00:16 . 2012-10-20 00:17 -------- d-----w- C:\rsit
2012-10-20 00:16 . 2012-10-20 00:17 -------- d-----w- c:\program files\trend micro
2012-10-19 21:28 . 2012-10-19 21:28 -------- d-----w- c:\program files\GoldWave
2012-10-18 19:21 . 2012-10-18 19:21 -------- d-----w- c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2012-10-14 11:08 . 2012-10-14 11:08 -------- d-----w- c:\documents and settings\user\SFX
2012-10-14 08:08 . 2012-10-14 08:08 -------- d-----w- c:\documents and settings\user\Data aplikací\Milestone
2012-09-30 19:04 . 2012-09-30 19:29 -------- d-----w- c:\program files\MP3Gain
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-23 20:44 . 2012-03-30 14:01 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-23 20:44 . 2012-02-23 16:51 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-22 20:27 . 2008-04-14 05:51 6656 ----a-w- c:\windows\system32\lpcio.dll
2012-09-23 14:28 . 2012-09-09 12:10 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-09-23 14:28 . 2012-09-09 12:10 5947392 ----a-w- c:\windows\system32\nvopencl.dll
2012-09-23 14:28 . 2012-02-22 15:32 19103744 ----a-w- c:\windows\system32\nvoglnt.dll
2012-09-23 14:28 . 2012-02-22 15:32 7446528 ----a-w- c:\windows\system32\nvcuda.dll
2012-09-23 14:28 . 2012-02-22 15:32 4494208 ----a-w- c:\windows\system32\nv4_disp.dll
2012-09-23 14:28 . 2012-02-22 15:32 2578792 ----a-w- c:\windows\system32\nvcuvid.dll
2012-09-23 14:28 . 2012-02-22 15:32 2376704 ----a-w- c:\windows\system32\nvapi.dll
2012-09-23 14:28 . 2012-02-22 15:32 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-09-23 14:28 . 2012-02-22 15:32 17551360 ----a-w- c:\windows\system32\nvcompiler.dll
2012-09-23 14:28 . 2012-02-22 15:32 12557728 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-09-23 14:28 . 2012-02-22 15:32 1009512 ----a-w- c:\windows\system32\nvdispco32.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsth.dll
2012-09-23 13:09 . 2012-02-22 15:32 335872 ----a-w- c:\windows\system32\nvrsar.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrses.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrspt.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsja.dll
2012-09-23 13:09 . 2012-02-22 15:32 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2012-09-23 13:09 . 2012-02-22 15:32 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrssl.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrssk.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrssv.dll
2012-09-23 13:09 . 2012-02-22 15:32 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2012-09-23 13:09 . 2012-02-22 15:32 335872 ----a-w- c:\windows\system32\nvrshe.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrstr.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrspl.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsno.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrsit.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrsel.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrseng.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2012-09-23 13:09 . 2012-02-22 15:32 266240 ----a-w- c:\windows\system32\nvrsko.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrscs.dll
2012-09-23 13:09 . 2012-02-22 15:32 270336 ----a-w- c:\windows\system32\nvrsru.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2012-09-23 13:09 . 2012-02-22 15:32 278528 ----a-w- c:\windows\system32\nvrsde.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2012-09-23 13:09 . 2012-02-22 15:32 262144 ----a-w- c:\windows\system32\nvrshu.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsda.dll
2012-09-23 13:09 . 2012-02-22 15:32 126976 ----a-w- c:\windows\system32\nvrszht.dll
2012-09-23 13:04 . 2012-02-22 15:32 54272 ----a-w- c:\windows\system32\nvwddi.dll
2012-09-23 13:04 . 2012-02-22 15:32 15512424 ----a-w- c:\windows\system32\nvcpl.dll
2012-09-23 13:04 . 2012-02-22 15:32 164200 ----a-w- c:\windows\system32\nvsvc32.exe
2012-09-23 13:04 . 2012-02-22 15:32 143720 ----a-w- c:\windows\system32\nvcolor.exe
2012-09-23 13:04 . 2012-02-22 15:32 108392 ----a-w- c:\windows\system32\nvmctray.dll
2012-09-03 20:01 . 2012-08-26 21:18 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-03 20:01 . 2012-08-26 21:18 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-08-28 15:17 . 2012-01-02 11:33 920064 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:17 . 2012-01-02 11:33 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:17 . 2012-01-02 11:33 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2012-01-02 11:33 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:58 . 2012-06-23 09:56 405152 ----a-w- c:\windows\system32\Newtonsoft.Json.Net20.dll
2012-08-24 13:53 . 2008-04-14 05:52 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27 . 2008-04-14 08:06 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-23 06:27 . 2008-04-14 05:06 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-21 09:13 . 2012-02-22 15:43 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-08-21 09:13 . 2012-02-22 15:43 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-08-21 09:13 . 2012-02-22 15:43 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:13 . 2012-02-22 15:43 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-08-21 09:13 . 2012-02-22 15:43 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-08-21 09:13 . 2012-02-22 15:43 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-08-21 09:13 . 2012-02-22 15:43 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-08-21 09:13 . 2012-02-22 15:43 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-08-21 09:12 . 2012-02-22 15:42 41224 ----a-w- c:\windows\avastSS.scr
2012-08-21 09:12 . 2012-02-22 15:42 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-08-20 11:17 . 2012-02-23 08:59 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2012-10-13 14:35 . 2012-10-13 14:35 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-10-09 1036288]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
"P17Helper"="SPIRun.dll" [2006-07-03 10752]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-09-23 15512424]
"NvMediaCenter"="NvMCTray.dll" [2012-09-23 108392]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-09-23 1634112]
"RivaTunerStartupDaemon"="c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" [2009-08-22 2781184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2012-01-02 128512]
.
c:\documents and settings\user\Nabídka Start\Programy\Po spuštění\
ACR Launcher.lnk - c:\program files\ACR\AutoClubRev\web\acrlauncher.exe [2012-6-7 49664]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\gu.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\UPlayBrowser.exe"=
"c:\\Program Files\\Tunngle\\TnglCtrl.exe"=
"c:\\Program Files\\Tunngle\\Tunngle.exe"=
"d:\\Program Files\\rFactor\\rFactor.exe"=
"c:\\Program Files\\Atari\\Test Drive Unlimited\\TestDriveUnlimited.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"d:\\Games\\Infogrames\\Dirt Track Racing 2\\DTR2.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\ACR\\AutoClubRev\\web\\acrlauncher.exe"=
"c:\\Program Files\\ACR\\AutoClubRev\\bin\\acr.exe"=
"d:\\Program Files\\Painkiller Resurrection\\bin\\ResurrectionEditor.exe"=
"d:\\Program Files\\racer 0.63\\racer.exe"=
"d:\\Program Files\\SWAT 4\\Content\\System\\Swat4.exe"=
"c:\\Program Files\\Atari\\TDU2\\UpLauncher.exe"=
"c:\\Program Files\\Atari\\TDU2\\TestDrive2.exe"=
"d:\\Program Files\\Outerra\\Anteworld\\outerra.exe"=
"d:\\Program Files\\EA Games\\Mirror's Edge\\Binaries\\MirrorsEdge.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"d:\\Program Files\\MILESTONE\\WRC3\\WRC3.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
.
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [22.2.2012 17:43 729752]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [22.2.2012 17:43 355632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [18.3.2012 20:47 242240]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.2.2012 17:43 21256]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [26.2.2012 21:01 20328]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [14.4.2012 12:20 21992]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [23.2.2012 10:31 1258856]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [22.2.2012 17:13 124264]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\drivers\tap0901t.sys [26.2.2012 14:45 27136]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [30.3.2012 16:01 250808]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [24.2.2012 0:01 79360]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [27.4.2012 10:12 115168]
S3 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [26.2.2012 14:45 736104]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/?rlz=1W4CHBA_csCZ507
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\documents and settings\user\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
TCP: DhcpNameServer = 10.0.0.138
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\3y6xcf9g.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-24 20:38
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
P17Helper = Rundll32 SPIRun.dll,RunDLLEntry?
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3160)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Creative\Shared Files\CTAudSvc.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\Rundll32.exe
c:\windows\system32\RunDLL32.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Celkový čas: 2012-10-24 20:41:37 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-10-24 18:41
ComboFix2.txt 2012-10-22 18:23
.
Před spuštěním: Volných bajtů: 150 319 968 256
Po spuštění: Volných bajtů: 150 407 282 688
.
- - End Of File - - AA382F2C3CEF823F2930330091F51989
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3070.2364 [GMT 2:00]
Spuštěný z: c:\documents and settings\user\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\user\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
FILE ::
"c:\windows\tasks\Adobe Flash Player Updater.job"
"c:\windows\tasks\avast! Emergency Update.job"
"c:\windows\tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\tasks\GoogleUpdateTaskMachineUA.job"
"c:\windows\tasks\prismShakeIcon.job"
"c:\windows\tasks\videopadShakeIcon.job"
"c:\windows\tasks\WavePadReminder.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\YTD Toolbar
c:\program files\YTD Toolbar\FF\chrome.manifest
c:\program files\YTD Toolbar\FF\chrome\chrome.jar
c:\program files\YTD Toolbar\FF\install.rdf
c:\program files\YTD Toolbar\IE\6.5\config.ini
c:\program files\YTD Toolbar\IE\6.5\ytdToolbarIE.dll
c:\program files\YTD Toolbar\Res\amazon.gif
c:\program files\YTD Toolbar\Res\dailymotion.gif
c:\program files\YTD Toolbar\Res\ebay.gif
c:\program files\YTD Toolbar\Res\facebook.gif
c:\program files\YTD Toolbar\Res\googleplus.gif
c:\program files\YTD Toolbar\Res\hulu.gif
c:\program files\YTD Toolbar\Res\icon_settings.gif
c:\program files\YTD Toolbar\Res\Lang\res1031.ini
c:\program files\YTD Toolbar\Res\Lang\res1033.ini
c:\program files\YTD Toolbar\Res\Lang\res1034.ini
c:\program files\YTD Toolbar\Res\Lang\res1036.ini
c:\program files\YTD Toolbar\Res\Lang\res1040.ini
c:\program files\YTD Toolbar\Res\metacafe.gif
c:\program files\YTD Toolbar\Res\radio-close.gif
c:\program files\YTD Toolbar\Res\radio-minimize.gif
c:\program files\YTD Toolbar\Res\radiobeta.gif
c:\program files\YTD Toolbar\Res\search-button-hover.gif
c:\program files\YTD Toolbar\Res\search-button.gif
c:\program files\YTD Toolbar\Res\search-chevron-hover.gif
c:\program files\YTD Toolbar\Res\search-chevron.gif
c:\program files\YTD Toolbar\Res\search_amazon.gif
c:\program files\YTD Toolbar\Res\search_baidu.gif
c:\program files\YTD Toolbar\Res\search_ebay.gif
c:\program files\YTD Toolbar\Res\search_yahoo.gif
c:\program files\YTD Toolbar\Res\search_yandex.gif
c:\program files\YTD Toolbar\Res\search_youtube.gif
c:\program files\YTD Toolbar\Res\twitter.gif
c:\program files\YTD Toolbar\Res\veoh.gif
c:\program files\YTD Toolbar\Res\widgets.xml
c:\program files\YTD Toolbar\Res\youtube.gif
c:\program files\YTD Toolbar\Res\ytd.gif
c:\program files\YTD Toolbar\Res\ytd_logo.gif
c:\program files\YTD Toolbar\Res\ytd_logo_hover.gif
c:\program files\YTD Toolbar\WidgiHelper.exe
c:\windows\tasks\Adobe Flash Player Updater.job
c:\windows\tasks\avast! Emergency Update.job
c:\windows\tasks\GoogleUpdateTaskMachineCore.job
c:\windows\tasks\GoogleUpdateTaskMachineUA.job
c:\windows\tasks\prismShakeIcon.job
c:\windows\tasks\videopadShakeIcon.job
c:\windows\tasks\WavePadReminder.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_GUPDATE
-------\Legacy_YKSVC
-------\Service_gupdate
-------\Service_gupdatem
-------\Service_yksvc
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-24 do 2012-10-24 )))))))))))))))))))))))))))))))
.
.
2012-10-23 20:58 . 2012-10-23 20:58 -------- d-sh--w- c:\documents and settings\user\IECompatCache
2012-10-23 14:47 . 2012-10-23 14:49 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikací\NFS Underground 2
2012-10-23 13:24 . 2012-09-24 21:16 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-20 00:16 . 2012-10-20 00:17 -------- d-----w- C:\rsit
2012-10-20 00:16 . 2012-10-20 00:17 -------- d-----w- c:\program files\trend micro
2012-10-19 21:28 . 2012-10-19 21:28 -------- d-----w- c:\program files\GoldWave
2012-10-18 19:21 . 2012-10-18 19:21 -------- d-----w- c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition
2012-10-14 11:08 . 2012-10-14 11:08 -------- d-----w- c:\documents and settings\user\SFX
2012-10-14 08:08 . 2012-10-14 08:08 -------- d-----w- c:\documents and settings\user\Data aplikací\Milestone
2012-09-30 19:04 . 2012-09-30 19:29 -------- d-----w- c:\program files\MP3Gain
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-23 20:44 . 2012-03-30 14:01 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-23 20:44 . 2012-02-23 16:51 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-22 20:27 . 2008-04-14 05:51 6656 ----a-w- c:\windows\system32\lpcio.dll
2012-09-23 14:28 . 2012-09-09 12:10 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-09-23 14:28 . 2012-09-09 12:10 5947392 ----a-w- c:\windows\system32\nvopencl.dll
2012-09-23 14:28 . 2012-02-22 15:32 19103744 ----a-w- c:\windows\system32\nvoglnt.dll
2012-09-23 14:28 . 2012-02-22 15:32 7446528 ----a-w- c:\windows\system32\nvcuda.dll
2012-09-23 14:28 . 2012-02-22 15:32 4494208 ----a-w- c:\windows\system32\nv4_disp.dll
2012-09-23 14:28 . 2012-02-22 15:32 2578792 ----a-w- c:\windows\system32\nvcuvid.dll
2012-09-23 14:28 . 2012-02-22 15:32 2376704 ----a-w- c:\windows\system32\nvapi.dll
2012-09-23 14:28 . 2012-02-22 15:32 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-09-23 14:28 . 2012-02-22 15:32 17551360 ----a-w- c:\windows\system32\nvcompiler.dll
2012-09-23 14:28 . 2012-02-22 15:32 12557728 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-09-23 14:28 . 2012-02-22 15:32 1009512 ----a-w- c:\windows\system32\nvdispco32.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsth.dll
2012-09-23 13:09 . 2012-02-22 15:32 335872 ----a-w- c:\windows\system32\nvrsar.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrses.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrspt.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsja.dll
2012-09-23 13:09 . 2012-02-22 15:32 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2012-09-23 13:09 . 2012-02-22 15:32 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrssl.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrssk.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrssv.dll
2012-09-23 13:09 . 2012-02-22 15:32 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2012-09-23 13:09 . 2012-02-22 15:32 335872 ----a-w- c:\windows\system32\nvrshe.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrstr.dll
2012-09-23 13:09 . 2012-02-22 15:32 258048 ----a-w- c:\windows\system32\nvrspl.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsno.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrsit.dll
2012-09-23 13:09 . 2012-02-22 15:32 282624 ----a-w- c:\windows\system32\nvrsel.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrseng.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2012-09-23 13:09 . 2012-02-22 15:32 266240 ----a-w- c:\windows\system32\nvrsko.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrscs.dll
2012-09-23 13:09 . 2012-02-22 15:32 270336 ----a-w- c:\windows\system32\nvrsru.dll
2012-09-23 13:09 . 2012-02-22 15:32 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2012-09-23 13:09 . 2012-02-22 15:32 278528 ----a-w- c:\windows\system32\nvrsde.dll
2012-09-23 13:09 . 2012-02-22 15:32 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2012-09-23 13:09 . 2012-02-22 15:32 262144 ----a-w- c:\windows\system32\nvrshu.dll
2012-09-23 13:09 . 2012-02-22 15:32 253952 ----a-w- c:\windows\system32\nvrsda.dll
2012-09-23 13:09 . 2012-02-22 15:32 126976 ----a-w- c:\windows\system32\nvrszht.dll
2012-09-23 13:04 . 2012-02-22 15:32 54272 ----a-w- c:\windows\system32\nvwddi.dll
2012-09-23 13:04 . 2012-02-22 15:32 15512424 ----a-w- c:\windows\system32\nvcpl.dll
2012-09-23 13:04 . 2012-02-22 15:32 164200 ----a-w- c:\windows\system32\nvsvc32.exe
2012-09-23 13:04 . 2012-02-22 15:32 143720 ----a-w- c:\windows\system32\nvcolor.exe
2012-09-23 13:04 . 2012-02-22 15:32 108392 ----a-w- c:\windows\system32\nvmctray.dll
2012-09-03 20:01 . 2012-08-26 21:18 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-09-03 20:01 . 2012-08-26 21:18 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-08-28 15:17 . 2012-01-02 11:33 920064 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:17 . 2012-01-02 11:33 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:17 . 2012-01-02 11:33 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2012-01-02 11:33 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:58 . 2012-06-23 09:56 405152 ----a-w- c:\windows\system32\Newtonsoft.Json.Net20.dll
2012-08-24 13:53 . 2008-04-14 05:52 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27 . 2008-04-14 08:06 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2012-08-23 06:27 . 2008-04-14 05:06 2150912 ----a-w- c:\windows\system32\ntoskrnl.exe
2012-08-21 09:13 . 2012-02-22 15:43 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-08-21 09:13 . 2012-02-22 15:43 355632 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-08-21 09:13 . 2012-02-22 15:43 729752 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-08-21 09:13 . 2012-02-22 15:43 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-08-21 09:13 . 2012-02-22 15:43 97608 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-08-21 09:13 . 2012-02-22 15:43 89624 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-08-21 09:13 . 2012-02-22 15:43 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-08-21 09:13 . 2012-02-22 15:43 25256 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-08-21 09:12 . 2012-02-22 15:42 41224 ----a-w- c:\windows\avastSS.scr
2012-08-21 09:12 . 2012-02-22 15:42 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-08-20 11:17 . 2012-02-23 08:59 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2012-10-13 14:35 . 2012-10-13 14:35 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-08-21 09:12 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2012-02-13 3481408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2007-10-09 1036288]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728]
"P17Helper"="SPIRun.dll" [2006-07-03 10752]
"Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-09-23 15512424]
"NvMediaCenter"="NvMCTray.dll" [2012-09-23 108392]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2012-09-23 1634112]
"RivaTunerStartupDaemon"="c:\program files\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner.exe" [2009-08-22 2781184]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"_nltide_3"="advpack.dll" [2012-01-02 128512]
.
c:\documents and settings\user\Nabídka Start\Programy\Po spuštění\
ACR Launcher.lnk - c:\program files\ACR\AutoClubRev\web\acrlauncher.exe [2012-6-7 49664]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\conviction_game.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\gu.exe"=
"d:\\Program Files\\Ubisoft\\Tom Clancy's Splinter Cell Conviction\\src\\system\\UPlayBrowser.exe"=
"c:\\Program Files\\Tunngle\\TnglCtrl.exe"=
"c:\\Program Files\\Tunngle\\Tunngle.exe"=
"d:\\Program Files\\rFactor\\rFactor.exe"=
"c:\\Program Files\\Atari\\Test Drive Unlimited\\TestDriveUnlimited.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutLauncher.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutConfigTool.exe"=
"d:\\Program Files\\Electronic Arts\\Burnout(TM) Paradise The Ultimate Box\\BurnoutParadise.exe"=
"d:\\Games\\Infogrames\\Dirt Track Racing 2\\DTR2.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\ACR\\AutoClubRev\\web\\acrlauncher.exe"=
"c:\\Program Files\\ACR\\AutoClubRev\\bin\\acr.exe"=
"d:\\Program Files\\Painkiller Resurrection\\bin\\ResurrectionEditor.exe"=
"d:\\Program Files\\racer 0.63\\racer.exe"=
"d:\\Program Files\\SWAT 4\\Content\\System\\Swat4.exe"=
"c:\\Program Files\\Atari\\TDU2\\UpLauncher.exe"=
"c:\\Program Files\\Atari\\TDU2\\TestDrive2.exe"=
"d:\\Program Files\\Outerra\\Anteworld\\outerra.exe"=
"d:\\Program Files\\EA Games\\Mirror's Edge\\Binaries\\MirrorsEdge.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"d:\\Program Files\\MILESTONE\\WRC3\\WRC3.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
.
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [22.2.2012 17:43 729752]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [22.2.2012 17:43 355632]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [18.3.2012 20:47 242240]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [22.2.2012 17:43 21256]
R2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [26.2.2012 21:01 20328]
R2 cpuz135;cpuz135;c:\windows\system32\drivers\cpuz135_x32.sys [14.4.2012 12:20 21992]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [23.2.2012 10:31 1258856]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32.sys [22.2.2012 17:13 124264]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle);c:\windows\system32\drivers\tap0901t.sys [26.2.2012 14:45 27136]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [30.3.2012 16:01 250808]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [24.2.2012 0:01 79360]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [27.4.2012 10:12 115168]
S3 TunngleService;TunngleService;c:\program files\Tunngle\TnglCtrl.exe [26.2.2012 14:45 736104]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/?rlz=1W4CHBA_csCZ507
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Free YouTube to MP3 Converter - c:\documents and settings\user\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html
TCP: DhcpNameServer = 10.0.0.138
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\documents and settings\user\Data aplikací\Mozilla\Firefox\Profiles\3y6xcf9g.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-24 20:38
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
P17Helper = Rundll32 SPIRun.dll,RunDLLEntry?
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(3160)
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Creative\Shared Files\CTAudSvc.exe
c:\program files\Java\jre7\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\Rundll32.exe
c:\windows\system32\RunDLL32.exe
c:\windows\system32\wbem\wmiapsrv.exe
.
**************************************************************************
.
Celkový čas: 2012-10-24 20:41:37 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-10-24 18:41
ComboFix2.txt 2012-10-22 18:23
.
Před spuštěním: Volných bajtů: 150 319 968 256
Po spuštění: Volných bajtů: 150 407 282 688
.
- - End Of File - - AA382F2C3CEF823F2930330091F51989
Re: Zpomalený PC
Stahnete OTM http://oldtimer.geekstogo.com/OTM.exe
- Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
- Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize
Kód: Vybrat vše
:reg [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "DAEMON Tools Lite"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NeroFilterCheck"=- "RemoteControl"=- "Adobe ARM"="- "SunJavaUpdateSched"=- :files %windir%\system32\*.tmp.dll /s %windir%\system32\SET*.tmp /s %windir%\*.tmp :commands [RESETHOSTS] [EMPTYTEMP] [EMPTYFLASH] [EMPTYJAVA]- Kliknete na cervene tlacitko MoveIt!
- Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Zpomalený PC
All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\NeroFilterCheck deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\RemoteControl deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\"Adobe ARM"|"- /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\E4D153288C89484BB9AAF5BE9EA6D01C.TMP folder moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
User: user
->Temp folder emptied: 87435044 bytes
->Temporary Internet Files folder emptied: 1441818 bytes
->FireFox cache emptied: 1250447415 bytes
->Flash cache emptied: 846 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 483 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 1 277,00 mb
[EMPTYFLASH]
User: All Users
User: Default User
User: LocalService
User: NetworkService
User: UpdatusUser
User: user
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
[EMPTYJAVA]
User: All Users
User: Default User
User: LocalService
User: NetworkService
User: UpdatusUser
User: user
Total Java Files Cleaned = 0,00 mb
OTM by OldTimer - Version 3.1.21.0 log created on 10242012_231038
Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
Registry entries deleted on Reboot...
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\NeroFilterCheck deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\RemoteControl deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\"Adobe ARM"|"- /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
File/Folder C:\WINDOWS\system32\SET*.tmp not found.
C:\WINDOWS\E4D153288C89484BB9AAF5BE9EA6D01C.TMP folder moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
User: user
->Temp folder emptied: 87435044 bytes
->Temporary Internet Files folder emptied: 1441818 bytes
->FireFox cache emptied: 1250447415 bytes
->Flash cache emptied: 846 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 483 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes
Total Files Cleaned = 1 277,00 mb
[EMPTYFLASH]
User: All Users
User: Default User
User: LocalService
User: NetworkService
User: UpdatusUser
User: user
->Flash cache emptied: 0 bytes
Total Flash Files Cleaned = 0,00 mb
[EMPTYJAVA]
User: All Users
User: Default User
User: LocalService
User: NetworkService
User: UpdatusUser
User: user
Total Java Files Cleaned = 0,00 mb
OTM by OldTimer - Version 3.1.21.0 log created on 10242012_231038
Files moved on Reboot...
File move failed. C:\WINDOWS\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
Registry entries deleted on Reboot...
Re: Zpomalený PC
Odinstalujte Combofix
- Prejmenujte ComboFix na Uninstall
- Spustte jej
- Tohle smaze Combofix a jeho slozky
T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
OTC http://oldtimer.geekstogo.com/OTC.exe
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
TFC http://oldtimer.geekstogo.com/TFC.exe
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
Doporucuji provest defragmentaci disku
- Nejjednodussi (ale nejmene ucinny) zpusob je pomoci utility ve windowsech
- Kliknete na Tento pocitac, dale na disk kliknete pravym tlacitkem, vyberte Vlastnosti
- prepnete se do zalozky Nastroje
- Nyni vidite pomucky Defragmentace - spustte ji kliknutim na Defragmentovat
- Toto provedte se vsemi disky
- Dalsi moznosti (a mnou doporucenou) je pres programek Defraggler http://www.stahuj.centrum.cz/utility_a_ ... efraggler/
- Program stahnete, nainstalujte (dejte fajfku pryc u yahoo toolbaru) a spustte
- Kliknete na Analyzovat
- Pokud je ve sloupci Fragmentováno vice jak 5%, doporucuji provest defragmentaci (klik na Defragmentovat)
- Postup provedte se vsemi disky
- Posledni moznost je pres jednoduchy programek JKDefrag http://www.stahuj.centrum.cz/utility_a_ ... /jkdefrag/
- Vyhodou programku je, ze se neinstaluje
- Staci tedy jen stahnout dle verze vaseho OS a rozbalit
- Nasledne spustit pomoci souboru JKDefrag pripadne JKDefrag64
- Probehne analyza disku a nasledne i defragmentace
Napiste co PC"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Zpomalený PC
Tak PC se docela zrychlil,ale myslím,že to ještě budu muset častěj defragmentovávat a co týden pouštět CCleaner.Díky za pomoc!:)
Přispějete na provoz fóra?