Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
Tibor
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 Pro 2012 22:45

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#16 Příspěvek od Tibor »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-12-06 13:09:23
Systém Microsoft Windows XP Professional Service Pack 3
System drive H: has 196 GB (41%) free of 477 GB
Total RAM: 3326 MB (83% free)

HijackThis download failed

======Scheduled tasks folder======

H:\WINDOWS\tasks\Adobe Flash Player Updater.job
H:\WINDOWS\tasks\avast! Emergency Update.job
H:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
H:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - H:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
ContributeBHO Class - I:\Program\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27 164312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-30 75232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - H:\WINDOWS\WebIE.dll [2011-02-28 491520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - H:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - H:\Program Files\Java\jre6\bin\ssv.dll [2012-08-28 329712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - H:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-08-28 59376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - H:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-08-28 79856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - H:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - H:\WINDOWS\WebIE.dll [2011-02-28 491520]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - H:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - I:\Program\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27 164312]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=H:\WINDOWS\RTHDCPL.EXE [2008-06-27 16875008]
"StartCCC"=H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-07-28 98304]
"Launch LCore"=H:\Program Files\Logitech Gaming Software\LCore.exe [2012-07-24 5115192]
"RTSS"=H:\Program Files\MSI Afterburner\Bundle\OSDServer\RTSS.exe [2012-10-30 166968]
"MSIAfterburner"=H:\Program Files\MSI Afterburner\MSIAfterburner.exe [2012-10-30 408632]
"QuickTime Task"=H:\Program Files\QuickTime Alternative\QTTask.exe [2011-10-24 421888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=H:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"ctfmon.exe"=H:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
H:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
H:\WINDOWS\ALCWZRD.EXE [2008-06-19 2808832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TO2SSM_McciTrayApp]
H:\Program Files\TO2SSM\McciTrayApp.exe [2008-08-15 1473536]

H:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
AutorunsDisabled

H:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
AutorunsDisabled
Logitech . Registrace produktu.lnk - H:\Program Files\Logitech Gaming Software\EReg\eReg.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
H:\WINDOWS\system32\Ati2evxx.dll [2011-07-28 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wgalogon]
H:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - H:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=H:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\nm.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoResolveSearch"=1
"NoPopUpsOnBoot"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"H:\Program Files\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe"="H:\Program Files\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe:*:Enabled:Frontlines Game"
"H:\Program Files\ICQ6.5\ICQ.exe"="H:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"H:\WINDOWS\system32\dpnsvr.exe"="H:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"H:\Program Files\Pando Networks\Media Booster\PMB.exe"="H:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"H:\Program Files\Opera\opera.exe"="H:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"H:\Program Files\Electronic Arts\Need for Speed Carbon\NFSC.exe"="H:\Program Files\Electronic Arts\Need for Speed Carbon\NFSC.exe:*:Enabled:NFSC"
"H:\Program Files\Metin2_CZ\metin2.bin"="H:\Program Files\Metin2_CZ\metin2.bin:*:Enabled:metin2"
"H:\Program Files\Metin2_CZ\metin2client.bin"="H:\Program Files\Metin2_CZ\metin2client.bin:*:Enabled:metin2client"
"H:\Program Files\ICQ7.0\ICQ.exe"="H:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"H:\Program Files\ICQ7.0\aolload.exe"="H:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"H:\Program Files\Google\Google Earth\client\googleearth.exe"="H:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"H:\Program Files\Google\Google Earth\plugin\geplugin.exe"="H:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"H:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe"="H:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe:*:Enabled:Medal of Honor™"
"H:\Program Files\Electronic Arts\Medal of Honor\MP\MoHMPGame.exe"="H:\Program Files\Electronic Arts\Medal of Honor\MP\MoHMPGame.exe:*:Enabled:Medal of Honor: Multiplayer"
"H:\Program Files\GIGABYTE\EnergySaver\run.exe"="H:\Program Files\GIGABYTE\EnergySaver\run.exe:*:Enabled:update"
"I:\Games\Ubi Soft\Hawx\HAWX.exe"="I:\Games\Ubi Soft\Hawx\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"H:\WINDOWS\system32\PnkBstrA.exe"="H:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"H:\WINDOWS\system32\PnkBstrB.exe"="H:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"I:\Games\Crytek\Crysis\Bin32\Crysis.exe"="I:\Games\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"I:\Games\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="I:\Games\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"H:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="H:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"H:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="H:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"I:\Games\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe"="I:\Games\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (CLI)"
"I:\Games\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe"="I:\Games\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (SRV)"
"H:\Program Files\Bohemia Interactive\ArmA 2\arma2.exe"="H:\Program Files\Bohemia Interactive\ArmA 2\arma2.exe:*:Enabled:ArmA 2"
"H:\Program Files\UBISOFT\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="H:\Program Files\UBISOFT\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"H:\Program Files\UBISOFT\Tom Clancy's H.A.W.X. 2\HAWX2.exe"="H:\Program Files\UBISOFT\Tom Clancy's H.A.W.X. 2\HAWX2.exe:*:Enabled:Tom Clancy's H.A.W.X. 2"
"H:\Program Files\UBISOFT\Tom Clancy's H.A.W.X. 2\Data\Browser\UPlayBrowser.exe"="H:\Program Files\UBISOFT\Tom Clancy's H.A.W.X. 2\Data\Browser\UPlayBrowser.exe:*:Enabled:UPlayBrowser Application"
"I:\Games\Crytek\Crysis 2\bin32\Crysis2.exe"="I:\Games\Crytek\Crysis 2\bin32\Crysis2.exe:*:Enabled:Crysis2"
"H:\Program Files\Bohemia Interactive\ArmA 2\arma2OA.exe"="H:\Program Files\Bohemia Interactive\ArmA 2\arma2OA.exe:*:Enabled:ArmA 2 Operation Arrowhead"
"I:\Games\BlackBeanGames\WRC2010\Launcher.exe"="I:\Games\BlackBeanGames\WRC2010\Launcher.exe:*:Enabled:Launcher"
"I:\Games\F1_2010\F1_2010_game.exe"="I:\Games\F1_2010\F1_2010_game.exe:*:Enabled:F1 2010"
"H:\Program Files\uTorrent\utorrent.exe"="H:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"I:\Games\Ubisoft\Assassin's Creed Brotherhood\ACBSP.exe"="I:\Games\Ubisoft\Assassin's Creed Brotherhood\ACBSP.exe:*:Enabled:Assassin's Creed Brotherhood"
"I:\Games\Ubisoft\Assassin's Creed Brotherhood\ACBMP.exe"="I:\Games\Ubisoft\Assassin's Creed Brotherhood\ACBMP.exe:*:Enabled:Assassin's Creed Brotherhood Multiplayer"
"I:\Games\Ubisoft\Assassin's Creed Brotherhood\AssassinsCreedBrotherhood.exe"="I:\Games\Ubisoft\Assassin's Creed Brotherhood\AssassinsCreedBrotherhood.exe:*:Enabled:Assassin's Creed Brotherhood Update"
"I:\Games\Ubisoft\Assassin's Creed Brotherhood\UPlayBrowser.exe"="I:\Games\Ubisoft\Assassin's Creed Brotherhood\UPlayBrowser.exe:*:Enabled:Assassin's Creed Brotherhood Uplay"
"I:\Games\Mass Effect 2\Binaries\MassEffect2.exe"="I:\Games\Mass Effect 2\Binaries\MassEffect2.exe:*:Enabled:Mass Effect 2 Hra"
"I:\Games\Mass Effect 2\MassEffect2Launcher.exe"="I:\Games\Mass Effect 2\MassEffect2Launcher.exe:*:Enabled:Mass Effect 2 Spustit"
"I:\Games\Auran\TS2010\Trainz.exe"="I:\Games\Auran\TS2010\Trainz.exe:*:Disabled:Spustit TS2010"
"I:\Games\Auran\TS2010\bin\TADDaemon.exe"="I:\Games\Auran\TS2010\bin\TADDaemon.exe:*:Disabled:TADDaemon"
"H:\Program Files\Bohemia Interactive\ArmA 2\arma2oaserver.exe"="H:\Program Files\Bohemia Interactive\ArmA 2\arma2oaserver.exe:*:Enabled:ArmA 2 OA"
"I:\Games\Call of Duty 4 - Modern Warfare\iw3mp.exe"="I:\Games\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:iw3mp"
"H:\Program Files\Server\USB server\mysql\bin\mysqld_usbwv8.exe"="H:\Program Files\Server\USB server\mysql\bin\mysqld_usbwv8.exe:*:Enabled:mysqld_usbwv8"
"H:\Program Files\Server\USB server\apache\bin\httpd_usbwv8.exe"="H:\Program Files\Server\USB server\apache\bin\httpd_usbwv8.exe:*:Enabled:Apache HTTP Server"
"H:\Program Files\Metin2_CZ\metin2.exe"="H:\Program Files\Metin2_CZ\metin2.exe:*:Enabled:metin2"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\Unload\HpqPhUnl.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpiscnapp.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"I:\Games\Z8Games\CrossFire\CF_G4box.exe"="I:\Games\Z8Games\CrossFire\CF_G4box.exe:*:Enabled:cf launcher"
"I:\Games\Battlefield 2142\BF2142.exe"="I:\Games\Battlefield 2142\BF2142.exe:*:Enabled:Battlefield 2"
"H:\Program Files\Bohemia Interactive\Take On Helicopters Demo\TakeOnHDemo.exe"="H:\Program Files\Bohemia Interactive\Take On Helicopters Demo\TakeOnHDemo.exe:*:Enabled:Take On Helicopters Demo"
"H:\Program Files\Skype\Phone\Skype.exe"="H:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"I:\Games\Call of Duty - World at War\CoDWaWmp.exe"="I:\Games\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R): World at War Multiplayer"
"I:\Games\FlatOut2\flatout2.exe"="I:\Games\FlatOut2\flatout2.exe:*:Enabled:flatout2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"H:\Program Files\ICQ7.0\ICQ.exe"="H:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"H:\Program Files\ICQ7.0\aolload.exe"="H:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=H:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=H:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.lhacm"=lhacm.acm
"VIDC.FFDS"=ff_vfw.dll
"vidc.XVID"=xvidvfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.RTV1"=rtvcvfw32.dll

======File associations======

.scr - open - H:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-12-06 11:24:02 ----SHD---- H:\RECYCLER
2012-12-06 11:08:27 ----A---- H:\ComboFix.txt
2012-12-06 10:56:05 ----D---- H:\ComboFix
2012-12-05 22:30:30 ----D---- H:\rsit
2012-12-05 22:30:30 ----D---- H:\Program Files\trend micro
2012-12-05 22:00:10 ----D---- H:\Config.Msi
2012-12-05 21:59:54 ----D---- H:\WINDOWS\SxsCaPendDel
2012-11-28 18:56:04 ----D---- H:\Documents and Settings\Administrator\Data aplikací\Apple Computer
2012-11-26 23:14:34 ----D---- H:\Program Files\CamStudio 2.6b
2012-11-26 23:14:34 ----A---- H:\WINDOWS\system32\CamCodec.dll

======List of files/folders modified in the last 1 month======

2012-12-06 13:00:09 ----D---- H:\WINDOWS\Prefetch
2012-12-06 12:43:50 ----D---- H:\WINDOWS
2012-12-06 12:43:49 ----D---- H:\WINDOWS\Temp
2012-12-06 12:42:32 ----D---- H:\WINDOWS\system32\CatRoot2
2012-12-06 12:35:49 ----N---- H:\WINDOWS\SchedLgU.Txt
2012-12-06 12:35:32 ----D---- H:\WINDOWS\system32\drivers\etc
2012-12-06 12:21:04 ----D---- H:\WINDOWS\network diagnostic
2012-12-06 12:17:15 ----D---- H:\WINDOWS\system32\config
2012-12-06 11:52:29 ----D---- H:\WINDOWS\security
2012-12-06 11:08:30 ----D---- H:\Qoobox
2012-12-06 11:08:29 ----D---- H:\WINDOWS\system32\drivers
2012-12-06 11:07:44 ----SD---- H:\WINDOWS\Tasks
2012-12-06 11:07:04 ----D---- H:\Program Files\MSI Afterburner
2012-12-06 11:05:38 ----A---- H:\WINDOWS\system.ini
2012-12-06 11:01:31 ----D---- H:\WINDOWS\ERDNT
2012-12-06 11:01:18 ----D---- H:\Program Files
2012-12-06 10:58:43 ----D---- H:\WINDOWS\system32
2012-12-06 10:58:43 ----D---- H:\WINDOWS\AppPatch
2012-12-06 10:58:40 ----D---- H:\Program Files\Common Files
2012-12-06 00:18:41 ----A---- H:\WINDOWS\NeroDigital.ini
2012-12-05 23:17:34 ----D---- H:\WINDOWS\system32\LogFiles
2012-12-05 23:04:27 ----D---- H:\WINDOWS\Help
2012-12-05 22:00:15 ----SHD---- H:\WINDOWS\Installer
2012-12-05 21:22:17 ----A---- H:\WINDOWS\MAILTRAN.INI
2012-12-05 21:09:48 ----D---- H:\Documents and Settings\Administrator\Data aplikací\uTorrent
2012-12-05 21:09:47 ----D---- H:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite
2012-12-05 21:03:27 ----D---- H:\Documents and Settings\Administrator\Data aplikací\TS3Client
2012-12-05 20:08:16 ----AD---- H:\Documents and Settings\All Users\Data aplikací\TEMP
2012-12-05 20:00:47 ----SHD---- H:\System Volume Information
2012-12-05 20:00:47 ----D---- H:\WINDOWS\system32\Restore
2012-12-05 19:22:02 ----A---- H:\WINDOWS\WTRAN32.INI
2012-12-05 16:17:16 ----RSHDC---- H:\WINDOWS\system32\dllcache
2012-12-05 16:12:44 ----D---- H:\Documents and Settings\All Users\Data aplikací\IObit
2012-12-04 18:00:16 ----D---- H:\Program Files\SpeedFan
2012-12-02 13:24:27 ----D---- H:\Documents and Settings\Administrator\Data aplikací\Skype
2012-11-27 21:22:46 ----D---- H:\Program Files\QuickTime Alternative
2012-11-27 21:22:14 ----D---- H:\WINDOWS\WinSxS
2012-11-26 21:18:25 ----D---- H:\Program Files\Mozilla Firefox
2012-11-22 06:14:45 ----AC---- H:\WINDOWS\system32\PerfStringBackup.INI
2012-11-21 19:28:50 ----D---- H:\Program Files\Opera
2012-11-20 08:24:03 ----D---- H:\Documents and Settings\All Users\Data aplikací\Adobe
2012-11-20 08:20:25 ----A---- H:\WINDOWS\system32\FlashPlayerApp.exe
2012-11-17 22:50:42 ----D---- H:\Documents and Settings\Administrator\Data aplikací\Ancestry
2012-11-08 19:26:00 ----SD---- H:\Documents and Settings\Administrator\Data aplikací\Microsoft
2012-11-08 19:25:59 ----D---- H:\Documents and Settings\All Users\Data aplikací\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; H:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 prohlp02;StarForce Protection Helper Driver v2; H:\WINDOWS\System32\drivers\prohlp02.sys [2004-09-03 115680]
R0 prosync1;StarForce Protection Synchronization Driver v1; H:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 PxHelp20;PxHelp20; H:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); H:\WINDOWS\System32\drivers\sfdrv01.sys [2006-03-26 51200]
R0 sfhlp01;StarForce Protection Helper Driver; H:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); H:\WINDOWS\System32\drivers\sfhlp02.sys [2006-03-13 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); H:\WINDOWS\System32\drivers\sfsync02.sys [2006-02-21 19968]
R0 SmartDefragDriver;SmartDefragDriver; H:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [2011-02-23 13496]
R0 speedfan;speedfan; H:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; H:\WINDOWS\System32\Drivers\sptd.sys [2011-01-24 431672]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; H:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; H:\WINDOWS\system32\drivers\Aavmker4.sys [2012-10-30 25256]
R1 aswSnx;aswSnx; H:\WINDOWS\system32\drivers\aswSnx.sys [2012-10-30 738504]
R1 aswSP;aswSP; H:\WINDOWS\system32\drivers\aswSP.sys [2012-10-30 361032]
R1 aswTdi;avast! Network Shield Support; H:\WINDOWS\system32\drivers\aswTdi.sys [2012-10-30 54232]
R1 AvgMfx86;AVG Free On-access Scanner Minifilter Driver x86; H:\WINDOWS\System32\Drivers\avgmfx86.sys [2009-08-18 27784]
R1 intelppm;Řadič procesoru Intel; H:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; H:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; H:\WINDOWS\System32\drivers\prodrv06.sys [2004-09-03 54368]
R1 SCDEmu;SCDEmu; H:\WINDOWS\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; H:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; H:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 aswFsBlk;aswFsBlk; H:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-10-30 21256]
R2 aswMon2;avast! Standard Shield Support; H:\WINDOWS\system32\drivers\aswMon2.sys [2012-10-30 97608]
R2 atksgt;atksgt; H:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-05-18 281504]
R2 lirsgt;lirsgt; H:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-05-18 25888]
R3 ati2mtag;ati2mtag; H:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-07-28 7084544]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; H:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-11-18 95232]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; H:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; H:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-06-27 4742656]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; H:\WINDOWS\system32\drivers\LGBusEnum.sys [2009-11-24 19720]
R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver; H:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [2012-02-07 42008]
R3 mouhid;Ovladač myši standardu HID; H:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 RTCore32;RTCore32; \??\H:\Program Files\MSI Afterburner\RTCore32.sys []
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; H:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-06-16 109184]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; H:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; H:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; H:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; H:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; H:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; H:\WINDOWS\system32\drivers\WmBEnum.sys [2009-09-11 22792]
R3 WmFilter;Logitech Gaming HID Filter Driver; H:\WINDOWS\system32\drivers\WmFilter.sys [2009-09-11 35592]
R3 WmXlCore;Logitech Translation Layer Driver; H:\WINDOWS\system32\drivers\WmXlCore.sys [2009-09-11 66056]
S1 aswRdr;aswRdr; H:\WINDOWS\system32\drivers\aswRdr.sys [2012-10-30 35928]
S1 cc2209c0;cc2209c0; H:\WINDOWS\System32\drivers\cc2209c0.sys []
S3 a24puijl;a24puijl; H:\WINDOWS\system32\drivers\a24puijl.sys []
S3 ad518ie8;ad518ie8; H:\WINDOWS\system32\drivers\ad518ie8.sys []
S3 catchme;catchme; \??\H:\ComboFix\catchme.sys []
S3 cpuz130;cpuz130; \??\H:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys []
S3 EagleNT;EagleNT; \??\H:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\H:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 gdrv;gdrv; \??\H:\WINDOWS\gdrv.sys []
S3 GMSIPCI;GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; H:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-31 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; H:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-31 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; H:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-31 21568]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; H:\WINDOWS\system32\drivers\LGVirHid.sys [2009-11-24 14856]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 nmwcd;Nokia USB Phone Parent; H:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; H:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nv;nv; H:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-10-07 6133856]
S3 pccsmcfd;PCCS Mode Change Filter Driver; H:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pcouffin;VSO Software pcouffin; H:\WINDOWS\System32\Drivers\pcouffin.sys [2009-05-30 47360]
S3 SMCWPCIG;SMCWPCI-G 54Mbps Wireless PCI adapter Service; H:\WINDOWS\system32\DRIVERS\SMCWPCIG.sys []
S3 upperdev;upperdev; H:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbprint;Třída USB Printer; H:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; H:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; H:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; H:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 wlanndi5;wlanndi5 NDIS Protocol Driver; \??\H:\WINDOWS\system32\wlanndi5.SYS []
S3 WmHidLo;Logitech Gaming USB Filter Driver; H:\WINDOWS\system32\drivers\WmHidLo.sys [2009-09-11 31752]
S3 WmVirHid;Logitech Virtual Hid Device Driver; H:\WINDOWS\system32\drivers\WmVirHid.sys [2009-09-11 14984]
S3 WpdUsb;WpdUsb; H:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; H:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; H:\WINDOWS\system32\Ati2evxx.exe [2011-07-28 643072]
R2 avast! Antivirus;avast! Antivirus; H:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-10-30 44808]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; H:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe [2009-02-28 81920]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; H:\Program Files\Java\jre6\bin\jqs.exe [2012-08-28 153584]
R2 McciCMService;McciCMService; H:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 Net Driver HPZ12;Net Driver HPZ12; H:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; H:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 PnkBstrA;PnkBstrA; H:\WINDOWS\system32\PnkBstrA.exe [2012-10-29 76888]
R2 SQLWriter;SQL Server VSS Writer; H:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; H:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [2009-02-28 2732032]
R3 hpqcxs08;hpqcxs08; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 6to4;Pomocná služba protokolu IPv6; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 MSSQL$SPRINXCRM;SQL Server (SPRINXCRM); H:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-11-25 29263712]
S2 NVSvc;NVIDIA Display Driver Service; H:\WINDOWS\system32\nvsvc32.exe [2008-10-07 163908]
S2 SkypeUpdate;Skype Updater; H:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S2 SQLBrowser;SQL Server Browser; H:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-25 239968]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; H:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-20 250808]
S3 aspnet_state;Stavová služba ASP.NET; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; H:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; H:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; H:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 npggsvc;nProtect GameGuard Service; H:\WINDOWS\system32\GameMon.des [2011-04-12 4400096]
S3 odserv;Microsoft Office Diagnostics Service; H:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; H:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 ServiceLayer;ServiceLayer; H:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 SwitchBoard;SwitchBoard; H:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; H:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 Application Updater;Application Updater; H:\Program Files\Application Updater\ApplicationUpdater.exe [2011-08-17 402328]
S4 FLEXnet Licensing Service;FLEXnet Licensing Service; H:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-10 651720]
S4 GEST Service;GEST Service for program management.; H:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [2008-07-11 80392]
S4 gupdate1ca8be9ec2b3198;Google Update Service (gupdate1ca8be9ec2b3198); H:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-02 133104]
S4 gupdatem;Služba Google Update (gupdatem); H:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-02 133104]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; H:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-25 45408]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#17 Příspěvek od JaRon »

zopakuj akciu s CFScriptom - jeho obsah:

Kód: Vybrat vše

Driver::
cc2209c0
a24puijl
ad518ie8

Folder::
H:\Documents and Settings\All Users\Data aplikací\IObit
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Tibor
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 Pro 2012 22:45

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#18 Příspěvek od Tibor »

ComboFix 12-12-04.01 - Administrator 06.12.2012 13:31:34.7.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3326.2637 [GMT 1:00]
Spuštěný z: h:\documents and settings\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: h:\documents and settings\Administrator\Plocha\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: AVG Anti-Virus Free *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_a24puijl
-------\Service_ad518ie8
-------\Service_cc2209c0
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-11-06 do 2012-12-06 )))))))))))))))))))))))))))))))
.
.
2012-12-05 21:30 . 2012-12-05 21:30 -------- d-----w- H:\rsit
2012-12-05 21:30 . 2012-12-05 21:30 -------- d-----w- h:\program files\trend micro
2012-12-05 20:59 . 2012-12-05 21:22 -------- d-----w- h:\windows\SxsCaPendDel
2012-12-05 18:54 . 2012-12-05 18:54 -------- d-----w- h:\documents and settings\All Users\Oblíbené položky
2012-11-28 17:56 . 2012-11-28 17:56 -------- d-----w- h:\documents and settings\Administrator\Data aplikací\Apple Computer
2012-11-27 20:22 . 2012-11-27 20:22 159744 ----a-w- h:\program files\Internet Explorer\PLUGINS\npqtplugin5.dll
2012-11-27 20:22 . 2012-11-27 20:22 159744 ----a-w- h:\program files\Internet Explorer\PLUGINS\npqtplugin4.dll
2012-11-27 20:22 . 2012-11-27 20:22 159744 ----a-w- h:\program files\Internet Explorer\PLUGINS\npqtplugin3.dll
2012-11-27 20:22 . 2012-11-27 20:22 159744 ----a-w- h:\program files\Internet Explorer\PLUGINS\npqtplugin2.dll
2012-11-27 20:22 . 2012-11-27 20:22 159744 ----a-w- h:\program files\Internet Explorer\PLUGINS\npqtplugin.dll
2012-11-27 20:22 . 2012-11-27 20:22 -------- d-----w- h:\documents and settings\Administrator\Local Settings\Data aplikací\Apple
2012-11-26 22:14 . 2012-11-26 22:26 -------- d-----w- h:\program files\CamStudio 2.6b
2012-11-26 22:14 . 2010-10-23 23:56 49664 ----a-w- h:\windows\system32\CamCodec.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-11-20 07:20 . 2012-04-05 20:43 697272 ----a-w- h:\windows\system32\FlashPlayerApp.exe
2012-11-20 07:20 . 2011-05-27 10:57 73656 ----a-w- h:\windows\system32\FlashPlayerCPLApp.cpl
2012-11-06 15:42 . 2011-01-27 19:05 139096 ----a-w- h:\windows\system32\drivers\PnkBstrK.sys
2012-11-06 15:42 . 2011-01-27 19:05 281312 ----a-w- h:\windows\system32\PnkBstrB.exe
2012-11-06 15:42 . 2009-07-04 23:46 281312 ----a-w- h:\windows\system32\PnkBstrB.xtr
2012-11-05 19:28 . 2011-01-27 19:05 281312 ----a-w- h:\windows\system32\PnkBstrB.ex0
2012-10-30 22:51 . 2011-03-09 18:28 738504 ----a-w- h:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2011-01-15 11:50 361032 ----a-w- h:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2011-01-15 11:50 54232 ----a-w- h:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2011-01-15 11:50 35928 ----a-w- h:\windows\system32\drivers\aswRdr.sys
2012-10-30 22:51 . 2011-01-15 11:50 97608 ----a-w- h:\windows\system32\drivers\aswmon2.sys
2012-10-30 22:51 . 2011-01-15 11:50 89752 ----a-w- h:\windows\system32\drivers\aswmon.sys
2012-10-30 22:51 . 2011-01-15 11:50 21256 ----a-w- h:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2011-01-15 11:50 25256 ----a-w- h:\windows\system32\drivers\aavmker4.sys
2012-10-30 22:51 . 2011-01-15 11:50 41224 ----a-w- h:\windows\avastSS.scr
2012-10-30 22:50 . 2011-01-15 11:50 227648 ----a-w- h:\windows\system32\aswBoot.exe
2012-10-29 07:04 . 2011-01-27 19:05 76888 ----a-w- h:\windows\system32\PnkBstrA.exe
2012-10-26 15:55 . 2012-09-23 07:07 16400 ----a-w- h:\windows\system32\drivers\LNonPnP.sys
2010-02-16 10:46 . 2010-02-16 10:43 63 ----a-w- h:\program files\Namapuj.bat
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- h:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="h:\program files\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2008-06-27 16875008]
"StartCCC"="h:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2011-07-28 98304]
"Launch LCore"="h:\program files\Logitech Gaming Software\LCore.exe" [2012-07-24 5115192]
"RTSS"="h:\program files\MSI Afterburner\Bundle\OSDServer\RTSS.exe" [2012-10-30 166968]
"MSIAfterburner"="h:\program files\MSI Afterburner\MSIAfterburner.exe" [2012-10-30 408632]
"QuickTime Task"="h:\program files\QuickTime Alternative\QTTask.exe" [2011-10-24 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="h:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
h:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\
Logitech . Registrace produktu.lnk - h:\program files\Logitech Gaming Software\EReg\eReg.exe [2012-9-23 517384]
.
h:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - h:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
h:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\
Logitech . Registrace produktu.lnk - h:\program files\Logitech Gaming Software\EReg\eReg.exe [2012-9-23 517384]
.
h:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - h:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
h:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\
Logitech . Registrace produktu.lnk - h:\program files\Logitech Gaming Software\EReg\eReg.exe [2012-9-23 517384]
.
h:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - h:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
h:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
HP Digital Imaging Monitor.lnk - h:\program files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
.
h:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\
Logitech . Registrace produktu.lnk - h:\program files\Logitech Gaming Software\EReg\eReg.exe [2012-9-23 517384]
.
h:\documents and settings\Administrator\Nabídka Start\Programy\Po spuštění\AutorunsDisabled
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - h:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoPopUpsOnBoot"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2008-06-19 08:20 57344 ------r- h:\windows\Alcmtr.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
2008-06-19 08:42 2808832 ------r- h:\windows\alcwzrd.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TO2SSM_McciTrayApp]
2008-08-15 16:33 1473536 ----a-w- h:\program files\TO2SSM\McciTrayApp.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"h:\\Program Files\\THQ\\Frontlines-Fuel of War\\Binaries\\FFOW.exe"=
"h:\\Program Files\\ICQ6.5\\ICQ.exe"=
"h:\\WINDOWS\\system32\\dpnsvr.exe"=
"h:\\Program Files\\Pando Networks\\Media Booster\\PMB.exe"=
"h:\\Program Files\\Opera\\opera.exe"=
"h:\\Program Files\\Electronic Arts\\Need for Speed Carbon\\NFSC.exe"=
"h:\\Program Files\\Metin2_CZ\\metin2.bin"=
"h:\\Program Files\\Metin2_CZ\\metin2client.bin"=
"h:\\Program Files\\ICQ7.0\\ICQ.exe"=
"h:\\Program Files\\ICQ7.0\\aolload.exe"=
"h:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"h:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"h:\\Program Files\\Electronic Arts\\Medal of Honor\\Binaries\\moh.exe"=
"h:\\Program Files\\Electronic Arts\\Medal of Honor\\MP\\MoHMPGame.exe"=
"h:\\Program Files\\GIGABYTE\\EnergySaver\\run.exe"=
"i:\\Games\\Ubi Soft\\Hawx\\HAWX.exe"=
"h:\\WINDOWS\\system32\\PnkBstrA.exe"=
"h:\\WINDOWS\\system32\\PnkBstrB.exe"=
"i:\\Games\\Crytek\\Crysis\\Bin32\\Crysis.exe"=
"i:\\Games\\Crytek\\Crysis\\Bin32\\CrysisDedicatedServer.exe"=
"h:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"h:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"h:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"i:\\Games\\Deep Silver\\S.T.A.L.K.E.R. - Clear Sky\\bin\\xrEngine.exe"=
"i:\\Games\\Deep Silver\\S.T.A.L.K.E.R. - Clear Sky\\bin\\dedicated\\xrEngine.exe"=
"h:\\Program Files\\Bohemia Interactive\\ArmA 2\\arma2.exe"=
"h:\\Program Files\\UBISOFT\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"h:\\Program Files\\UBISOFT\\Tom Clancy's H.A.W.X. 2\\HAWX2.exe"=
"h:\\Program Files\\UBISOFT\\Tom Clancy's H.A.W.X. 2\\Data\\Browser\\UPlayBrowser.exe"=
"i:\\Games\\Crytek\\Crysis 2\\bin32\\Crysis2.exe"=
"h:\\Program Files\\Bohemia Interactive\\ArmA 2\\arma2OA.exe"=
"i:\\Games\\BlackBeanGames\\WRC2010\\Launcher.exe"=
"i:\\Games\\F1_2010\\F1_2010_game.exe"=
"h:\\Program Files\\uTorrent\\utorrent.exe"=
"i:\\Games\\Ubisoft\\Assassin's Creed Brotherhood\\ACBSP.exe"=
"i:\\Games\\Ubisoft\\Assassin's Creed Brotherhood\\ACBMP.exe"=
"i:\\Games\\Ubisoft\\Assassin's Creed Brotherhood\\AssassinsCreedBrotherhood.exe"=
"i:\\Games\\Ubisoft\\Assassin's Creed Brotherhood\\UPlayBrowser.exe"=
"i:\\Games\\Mass Effect 2\\Binaries\\MassEffect2.exe"=
"i:\\Games\\Mass Effect 2\\MassEffect2Launcher.exe"=
"i:\\Games\\Auran\\TS2010\\Trainz.exe"=
"i:\\Games\\Auran\\TS2010\\bin\\TADDaemon.exe"=
"h:\\Program Files\\Bohemia Interactive\\ArmA 2\\arma2oaserver.exe"=
"i:\\Games\\Call of Duty 4 - Modern Warfare\\iw3mp.exe"=
"h:\\Program Files\\Server\\USB server\\mysql\\bin\\mysqld_usbwv8.exe"=
"h:\\Program Files\\Server\\USB server\\apache\\bin\\httpd_usbwv8.exe"=
"h:\\Program Files\\Metin2_CZ\\metin2.exe"=
"h:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqtra08.exe"=
"h:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqste08.exe"=
"h:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hposid01.exe"=
"h:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqscnvw.exe"=
"h:\\Program Files\\Hewlett-Packard\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"h:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpiscnapp.exe"=
"h:\\Program Files\\Hewlett-Packard\\Digital Imaging\\bin\\hpqkygrp.exe"=
"i:\\Games\\Z8Games\\CrossFire\\CF_G4box.exe"=
"i:\\Games\\Battlefield 2142\\BF2142.exe"=
"h:\\Program Files\\Bohemia Interactive\\Take On Helicopters Demo\\TakeOnHDemo.exe"=
"h:\\Program Files\\Skype\\Phone\\Skype.exe"=
"i:\\Games\\Call of Duty - World at War\\CoDWaWmp.exe"=
"i:\\Games\\FlatOut2\\flatout2.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"58888:TCP"= 58888:TCP:Pando Media Booster
"58888:UDP"= 58888:UDP:Pando Media Booster
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
.
R0 SmartDefragDriver;SmartDefragDriver;h:\windows\system32\drivers\SmartDefragDriver.sys [7.8.2011 21:24 13496]
R0 sptd;sptd;\SystemRoot\\SystemRoot\System32\Drivers\sptd.sys --> \SystemRoot\\SystemRoot\System32\Drivers\sptd.sys [?]
R1 aswSnx;aswSnx;h:\windows\system32\drivers\aswSnx.sys [9.3.2011 19:28 738504]
R1 aswSP;aswSP;h:\windows\system32\drivers\aswSP.sys [15.1.2011 12:50 361032]
R2 aswFsBlk;aswFsBlk;h:\windows\system32\drivers\aswFsBlk.sys [15.1.2011 12:50 21256]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;h:\program files\Firebird\Firebird_2_1\bin\fbguard.exe [14.1.2010 18:58 81920]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;h:\program files\Firebird\Firebird_2_1\bin\fbserver.exe [14.1.2010 18:58 2732032]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;h:\windows\system32\drivers\LGBusEnum.sys [23.9.2012 8:07 19720]
R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver;h:\windows\system32\drivers\LGSHidFilt.Sys [23.9.2012 8:07 42008]
R3 RTCore32;RTCore32;h:\program files\MSI Afterburner\RTCore32.sys [6.9.2011 9:24 5632]
S2 MSSQL$SPRINXCRM;SQL Server (SPRINXCRM);h:\program files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [25.11.2008 7:31 29263712]
S2 SkypeUpdate;Skype Updater;h:\program files\Skype\Updater\Updater.exe [13.7.2012 12:28 160944]
S3 cpuz130;cpuz130;\??\h:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> h:\docume~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 EagleXNt;EagleXNt;\??\h:\windows\system32\drivers\EagleXNt.sys --> h:\windows\system32\drivers\EagleXNt.sys [?]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;h:\windows\system32\drivers\LGVirHid.sys [23.9.2012 8:07 14856]
S3 npggsvc;nProtect GameGuard Service;h:\windows\system32\GameMon.des -service --> h:\windows\system32\GameMon.des -service [?]
S3 pcouffin;VSO Software pcouffin;h:\windows\system32\drivers\pcouffin.sys [29.5.2009 18:26 47360]
S3 SMCWPCIG;SMCWPCI-G 54Mbps Wireless PCI adapter Service;h:\windows\system32\DRIVERS\SMCWPCIG.sys --> h:\windows\system32\DRIVERS\SMCWPCIG.sys [?]
S3 SwitchBoard;SwitchBoard;h:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [19.2.2010 13:37 517096]
S3 wlanndi5;wlanndi5 NDIS Protocol Driver;h:\windows\system32\wlanndi5.sys [21.4.2004 17:51 16384]
S4 Application Updater;Application Updater;h:\program files\Application Updater\ApplicationUpdater.exe [17.8.2011 12:00 402328]
S4 GEST Service;GEST Service for program management.;h:\program files\GIGABYTE\EnergySaver\GSvr.exe [21.3.2009 1:30 80392]
S4 gupdate1ca8be9ec2b3198;Google Update Service (gupdate1ca8be9ec2b3198);h:\program files\Google\Update\GoogleUpdate.exe [2.1.2010 21:26 133104]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
.
Obsah adresáře 'Naplánované úlohy'
.
2012-11-20 h:\windows\Tasks\Adobe Flash Player Updater.job
- h:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 07:20]
.
2012-12-06 h:\windows\Tasks\avast! Emergency Update.job
- h:\program files\Alwil Software\Avast5\AvastEmUpdate.exe [2012-07-09 22:50]
.
2012-09-19 h:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- h:\program files\Google\Update\GoogleUpdate.exe [2010-01-02 20:26]
.
2012-09-19 h:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- h:\program files\Google\Update\GoogleUpdate.exe [2010-01-02 20:26]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - h:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - h:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - h:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - h:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - h:\windows\WebIE.dll
TCP: DhcpNameServer = 10.0.0.138
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-12-06 13:44
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\npggsvc]
"ImagePath"="h:\windows\system32\GameMon.des -service"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,a1,e9,ff,fc,57,70,38,45,aa,cf,5d,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,a1,e9,ff,fc,57,70,38,45,aa,cf,5d,\
.
[HKEY_USERS\S-1-5-21-2052111302-1993962763-725345543-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,26,84,ff,0a,1d,d4,8e,4a,9a,19,14,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,9c,4e,96,e1,22,24,49,40,9b,26,72,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,2a,bc,30,8d,29,7c,24,48,a8,dd,b4,\
.
[HKEY_USERS\S-1-5-21-2052111302-1993962763-725345543-500\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:e9,52,98,e2,eb,b9,d2,19,2b,34,0e,42,3a,54,01,9a,6a,47,68,6d,d0,b5,41,
bf,76,71,5f,bb,84,7f,e2,b0,ff,d5,bf,58,0d,fe,90,2b,7e,45,f5,f4,a7,81,16,69,\
"??"=hex:a1,5e,47,db,25,65,bb,27,8b,92,55,34,10,3f,d9,49
.
[HKEY_USERS\S-1-5-21-2052111302-1993962763-725345543-500\Software\SecuROM\License information*]
"datasecu"=hex:f2,9a,58,e0,ba,aa,7b,b1,d0,cb,bd,77,be,e9,6d,6c,cd,b5,4b,36,15,
58,6b,41,d8,cc,a5,05,3a,94,b5,8c,1b,f3,00,41,48,41,e3,f1,71,b9,5f,bd,72,7f,\
"rkeysecu"=hex:cb,a0,c9,05,19,b2,dd,29,cb,84,e9,bd,2d,46,30,81
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(764)
h:\windows\system32\Ati2evxx.dll
h:\windows\system32\atiadlxx.dll
.
- - - - - - - > 'explorer.exe'(3588)
h:\program files\MSI Afterburner\Bundle\OSDServer\RTSSHooks.dll
h:\windows\system32\msi.dll
h:\windows\system32\webcheck.dll
h:\windows\system32\WPDShServiceObj.dll
h:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
h:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
h:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
h:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
h:\windows\system32\PortableDeviceTypes.dll
h:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
h:\windows\system32\Ati2evxx.exe
h:\windows\system32\Ati2evxx.exe
h:\windows\RTHDCPL.EXE
h:\program files\Java\jre6\bin\jqs.exe
h:\program files\Common Files\Motive\McciCMService.exe
h:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
h:\windows\system32\PnkBstrA.exe
h:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
h:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
h:\windows\system32\wbem\wmiapsrv.exe
h:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2012-12-06 13:45:59 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-12-06 12:45
ComboFix2.txt 2012-12-06 10:08
ComboFix3.txt 2012-12-06 09:17
ComboFix4.txt 2012-12-05 20:51
ComboFix5.txt 2012-12-06 12:30
.
Před spuštěním: Volných bajtů: 205 514 199 040
Po spuštění: Volných bajtů: 205 496 627 200
.
- - End Of File - - AF275736D32BA8C300E41C4428A49319
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#19 Příspěvek od JaRon »

pomaly to bude ciste ako horska bystrina, ale kde sa tam berie ten zas*** AVG
pouzi odinstalator z http://www.avg.com/cz-cs/stahnout-nastroje
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Tibor
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 Pro 2012 22:45

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#20 Příspěvek od Tibor »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2012-12-06 15:18:36
Systém Microsoft Windows XP Professional Service Pack 3
System drive H: has 196 GB (41%) free of 477 GB
Total RAM: 3326 MB (84% free)

HijackThis download failed

======Scheduled tasks folder======

H:\WINDOWS\tasks\Adobe Flash Player Updater.job
H:\WINDOWS\tasks\avast! Emergency Update.job
H:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
H:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]
HP Print Enhancer - H:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2007-11-06 322880]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
ContributeBHO Class - I:\Program\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27 164312]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - H:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-07-30 75232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - H:\WINDOWS\WebIE.dll [2011-02-28 491520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - H:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - H:\Program Files\Java\jre6\bin\ssv.dll [2012-08-28 329712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - H:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - H:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-08-28 59376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - H:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2012-08-28 79856]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]
HP Smart BHO Class - H:\Program Files\Hewlett-Packard\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2007-11-06 542016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - H:\WINDOWS\WebIE.dll [2011-02-28 491520]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - H:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2011-01-20 988480]
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - I:\Program\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27 164312]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - H:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=H:\WINDOWS\RTHDCPL.EXE [2008-06-27 16875008]
"StartCCC"=H:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-07-28 98304]
"Launch LCore"=H:\Program Files\Logitech Gaming Software\LCore.exe [2012-07-24 5115192]
"RTSS"=H:\Program Files\MSI Afterburner\Bundle\OSDServer\RTSS.exe [2012-10-30 166968]
"MSIAfterburner"=H:\Program Files\MSI Afterburner\MSIAfterburner.exe [2012-10-30 408632]
"QuickTime Task"=H:\Program Files\QuickTime Alternative\QTTask.exe [2011-10-24 421888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=H:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-20 1305408]
"ctfmon.exe"=H:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
H:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcWzrd]
H:\WINDOWS\ALCWZRD.EXE [2008-06-19 2808832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TO2SSM_McciTrayApp]
H:\Program Files\TO2SSM\McciTrayApp.exe [2008-08-15 1473536]

H:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
AutorunsDisabled

H:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
AutorunsDisabled
Logitech . Registrace produktu.lnk - H:\Program Files\Logitech Gaming Software\EReg\eReg.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
H:\WINDOWS\system32\Ati2evxx.dll [2011-07-28 188416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wgalogon]
H:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - H:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=H:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"NoResolveSearch"=1
"NoPopUpsOnBoot"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"H:\Program Files\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe"="H:\Program Files\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe:*:Enabled:Frontlines Game"
"H:\Program Files\ICQ6.5\ICQ.exe"="H:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"H:\WINDOWS\system32\dpnsvr.exe"="H:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"H:\Program Files\Pando Networks\Media Booster\PMB.exe"="H:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster"
"H:\Program Files\Opera\opera.exe"="H:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"H:\Program Files\Electronic Arts\Need for Speed Carbon\NFSC.exe"="H:\Program Files\Electronic Arts\Need for Speed Carbon\NFSC.exe:*:Enabled:NFSC"
"H:\Program Files\Metin2_CZ\metin2.bin"="H:\Program Files\Metin2_CZ\metin2.bin:*:Enabled:metin2"
"H:\Program Files\Metin2_CZ\metin2client.bin"="H:\Program Files\Metin2_CZ\metin2client.bin:*:Enabled:metin2client"
"H:\Program Files\ICQ7.0\ICQ.exe"="H:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"H:\Program Files\ICQ7.0\aolload.exe"="H:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"
"H:\Program Files\Google\Google Earth\client\googleearth.exe"="H:\Program Files\Google\Google Earth\client\googleearth.exe:*:Enabled:Google Earth"
"H:\Program Files\Google\Google Earth\plugin\geplugin.exe"="H:\Program Files\Google\Google Earth\plugin\geplugin.exe:*:Enabled:Google Earth"
"H:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe"="H:\Program Files\Electronic Arts\Medal of Honor\Binaries\moh.exe:*:Enabled:Medal of Honor™"
"H:\Program Files\Electronic Arts\Medal of Honor\MP\MoHMPGame.exe"="H:\Program Files\Electronic Arts\Medal of Honor\MP\MoHMPGame.exe:*:Enabled:Medal of Honor: Multiplayer"
"H:\Program Files\GIGABYTE\EnergySaver\run.exe"="H:\Program Files\GIGABYTE\EnergySaver\run.exe:*:Enabled:update"
"I:\Games\Ubi Soft\Hawx\HAWX.exe"="I:\Games\Ubi Soft\Hawx\HAWX.exe:*:Enabled:Tom Clancy's H.A.W.X"
"H:\WINDOWS\system32\PnkBstrA.exe"="H:\WINDOWS\system32\PnkBstrA.exe:*:Enabled:PnkBstrA"
"H:\WINDOWS\system32\PnkBstrB.exe"="H:\WINDOWS\system32\PnkBstrB.exe:*:Enabled:PnkBstrB"
"I:\Games\Crytek\Crysis\Bin32\Crysis.exe"="I:\Games\Crytek\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32"
"I:\Games\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe"="I:\Games\Crytek\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32"
"H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="H:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"H:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="H:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"H:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="H:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"I:\Games\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe"="I:\Games\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (CLI)"
"I:\Games\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe"="I:\Games\Deep Silver\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe:*:Enabled:S.T.A.L.K.E.R. - Clear Sky (SRV)"
"H:\Program Files\Bohemia Interactive\ArmA 2\arma2.exe"="H:\Program Files\Bohemia Interactive\ArmA 2\arma2.exe:*:Enabled:ArmA 2"
"H:\Program Files\UBISOFT\Ubisoft Game Launcher\UbisoftGameLauncher.exe"="H:\Program Files\UBISOFT\Ubisoft Game Launcher\UbisoftGameLauncher.exe:*:Enabled:Ubisoft Game Launcher"
"H:\Program Files\UBISOFT\Tom Clancy's H.A.W.X. 2\HAWX2.exe"="H:\Program Files\UBISOFT\Tom Clancy's H.A.W.X. 2\HAWX2.exe:*:Enabled:Tom Clancy's H.A.W.X. 2"
"H:\Program Files\UBISOFT\Tom Clancy's H.A.W.X. 2\Data\Browser\UPlayBrowser.exe"="H:\Program Files\UBISOFT\Tom Clancy's H.A.W.X. 2\Data\Browser\UPlayBrowser.exe:*:Enabled:UPlayBrowser Application"
"I:\Games\Crytek\Crysis 2\bin32\Crysis2.exe"="I:\Games\Crytek\Crysis 2\bin32\Crysis2.exe:*:Enabled:Crysis2"
"H:\Program Files\Bohemia Interactive\ArmA 2\arma2OA.exe"="H:\Program Files\Bohemia Interactive\ArmA 2\arma2OA.exe:*:Enabled:ArmA 2 Operation Arrowhead"
"I:\Games\BlackBeanGames\WRC2010\Launcher.exe"="I:\Games\BlackBeanGames\WRC2010\Launcher.exe:*:Enabled:Launcher"
"I:\Games\F1_2010\F1_2010_game.exe"="I:\Games\F1_2010\F1_2010_game.exe:*:Enabled:F1 2010"
"H:\Program Files\uTorrent\utorrent.exe"="H:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"I:\Games\Ubisoft\Assassin's Creed Brotherhood\ACBSP.exe"="I:\Games\Ubisoft\Assassin's Creed Brotherhood\ACBSP.exe:*:Enabled:Assassin's Creed Brotherhood"
"I:\Games\Ubisoft\Assassin's Creed Brotherhood\ACBMP.exe"="I:\Games\Ubisoft\Assassin's Creed Brotherhood\ACBMP.exe:*:Enabled:Assassin's Creed Brotherhood Multiplayer"
"I:\Games\Ubisoft\Assassin's Creed Brotherhood\AssassinsCreedBrotherhood.exe"="I:\Games\Ubisoft\Assassin's Creed Brotherhood\AssassinsCreedBrotherhood.exe:*:Enabled:Assassin's Creed Brotherhood Update"
"I:\Games\Ubisoft\Assassin's Creed Brotherhood\UPlayBrowser.exe"="I:\Games\Ubisoft\Assassin's Creed Brotherhood\UPlayBrowser.exe:*:Enabled:Assassin's Creed Brotherhood Uplay"
"I:\Games\Mass Effect 2\Binaries\MassEffect2.exe"="I:\Games\Mass Effect 2\Binaries\MassEffect2.exe:*:Enabled:Mass Effect 2 Hra"
"I:\Games\Mass Effect 2\MassEffect2Launcher.exe"="I:\Games\Mass Effect 2\MassEffect2Launcher.exe:*:Enabled:Mass Effect 2 Spustit"
"I:\Games\Auran\TS2010\Trainz.exe"="I:\Games\Auran\TS2010\Trainz.exe:*:Disabled:Spustit TS2010"
"I:\Games\Auran\TS2010\bin\TADDaemon.exe"="I:\Games\Auran\TS2010\bin\TADDaemon.exe:*:Disabled:TADDaemon"
"H:\Program Files\Bohemia Interactive\ArmA 2\arma2oaserver.exe"="H:\Program Files\Bohemia Interactive\ArmA 2\arma2oaserver.exe:*:Enabled:ArmA 2 OA"
"I:\Games\Call of Duty 4 - Modern Warfare\iw3mp.exe"="I:\Games\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:iw3mp"
"H:\Program Files\Server\USB server\mysql\bin\mysqld_usbwv8.exe"="H:\Program Files\Server\USB server\mysql\bin\mysqld_usbwv8.exe:*:Enabled:mysqld_usbwv8"
"H:\Program Files\Server\USB server\apache\bin\httpd_usbwv8.exe"="H:\Program Files\Server\USB server\apache\bin\httpd_usbwv8.exe:*:Enabled:Apache HTTP Server"
"H:\Program Files\Metin2_CZ\metin2.exe"="H:\Program Files\Metin2_CZ\metin2.exe:*:Enabled:metin2"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\Unload\HpqPhUnl.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpiscnapp.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe"
"H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe"="H:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"I:\Games\Z8Games\CrossFire\CF_G4box.exe"="I:\Games\Z8Games\CrossFire\CF_G4box.exe:*:Enabled:cf launcher"
"I:\Games\Battlefield 2142\BF2142.exe"="I:\Games\Battlefield 2142\BF2142.exe:*:Enabled:Battlefield 2"
"H:\Program Files\Bohemia Interactive\Take On Helicopters Demo\TakeOnHDemo.exe"="H:\Program Files\Bohemia Interactive\Take On Helicopters Demo\TakeOnHDemo.exe:*:Enabled:Take On Helicopters Demo"
"H:\Program Files\Skype\Phone\Skype.exe"="H:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"I:\Games\Call of Duty - World at War\CoDWaWmp.exe"="I:\Games\Call of Duty - World at War\CoDWaWmp.exe:*:Enabled:Call of Duty(R): World at War Multiplayer"
"I:\Games\FlatOut2\flatout2.exe"="I:\Games\FlatOut2\flatout2.exe:*:Enabled:flatout2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"H:\Program Files\ICQ7.0\ICQ.exe"="H:\Program Files\ICQ7.0\ICQ.exe:*:Enabled:ICQ7"
"H:\Program Files\ICQ7.0\aolload.exe"="H:\Program Files\ICQ7.0\aolload.exe:*:Enabled:aolload.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=H:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=H:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.lhacm"=lhacm.acm
"VIDC.FFDS"=ff_vfw.dll
"vidc.XVID"=xvidvfw.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"VIDC.RTV1"=rtvcvfw32.dll

======File associations======

.scr - open - H:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-12-06 13:56:02 ----A---- H:\WINDOWS\resetlog.txt
2012-12-06 13:55:36 ----D---- H:\ERDNT
2012-12-06 13:45:59 ----A---- H:\ComboFix.txt
2012-12-05 22:30:30 ----D---- H:\rsit
2012-12-05 22:30:30 ----D---- H:\Program Files\trend micro
2012-12-05 22:00:10 ----D---- H:\Config.Msi
2012-12-05 21:59:54 ----D---- H:\WINDOWS\SxsCaPendDel
2012-11-28 18:56:04 ----D---- H:\Documents and Settings\Administrator\Data aplikací\Apple Computer
2012-11-26 23:14:34 ----D---- H:\Program Files\CamStudio 2.6b
2012-11-26 23:14:34 ----A---- H:\WINDOWS\system32\CamCodec.dll

======List of files/folders modified in the last 1 month======

2012-12-06 15:18:07 ----D---- H:\WINDOWS\Prefetch
2012-12-06 15:16:57 ----D---- H:\WINDOWS\Temp
2012-12-06 15:11:54 ----A---- H:\WINDOWS\SchedLgU.Txt
2012-12-06 15:10:59 ----D---- H:\WINDOWS\system32\drivers
2012-12-06 15:10:59 ----D---- H:\WINDOWS\system32
2012-12-06 15:10:59 ----D---- H:\Documents and Settings\All Users\Data aplikací\avg8
2012-12-06 13:56:02 ----D---- H:\WINDOWS
2012-12-06 13:46:01 ----D---- H:\Qoobox
2012-12-06 13:42:25 ----A---- H:\WINDOWS\system.ini
2012-12-06 13:42:06 ----D---- H:\WINDOWS\system32\drivers\etc
2012-12-06 13:38:54 ----D---- H:\WINDOWS\system32\config
2012-12-06 13:38:46 ----D---- H:\WINDOWS\ERDNT
2012-12-06 13:36:45 ----D---- H:\WINDOWS\AppPatch
2012-12-06 13:36:42 ----D---- H:\Program Files\Common Files
2012-12-06 12:42:32 ----D---- H:\WINDOWS\system32\CatRoot2
2012-12-06 12:21:04 ----D---- H:\WINDOWS\network diagnostic
2012-12-06 11:52:29 ----D---- H:\WINDOWS\security
2012-12-06 11:07:44 ----SD---- H:\WINDOWS\Tasks
2012-12-06 11:07:04 ----D---- H:\Program Files\MSI Afterburner
2012-12-06 11:01:18 ----D---- H:\Program Files
2012-12-06 00:18:41 ----A---- H:\WINDOWS\NeroDigital.ini
2012-12-05 23:17:34 ----D---- H:\WINDOWS\system32\LogFiles
2012-12-05 23:04:27 ----D---- H:\WINDOWS\Help
2012-12-05 22:00:15 ----SHD---- H:\WINDOWS\Installer
2012-12-05 21:22:17 ----A---- H:\WINDOWS\MAILTRAN.INI
2012-12-05 21:09:48 ----D---- H:\Documents and Settings\Administrator\Data aplikací\uTorrent
2012-12-05 21:09:47 ----D---- H:\Documents and Settings\Administrator\Data aplikací\DAEMON Tools Lite
2012-12-05 21:03:27 ----D---- H:\Documents and Settings\Administrator\Data aplikací\TS3Client
2012-12-05 20:08:16 ----AD---- H:\Documents and Settings\All Users\Data aplikací\TEMP
2012-12-05 20:00:47 ----SHD---- H:\System Volume Information
2012-12-05 20:00:47 ----D---- H:\WINDOWS\system32\Restore
2012-12-05 19:22:02 ----A---- H:\WINDOWS\WTRAN32.INI
2012-12-05 16:17:16 ----RSHDC---- H:\WINDOWS\system32\dllcache
2012-12-05 16:12:44 ----D---- H:\Documents and Settings\All Users\Data aplikací\IObit
2012-12-04 18:00:16 ----D---- H:\Program Files\SpeedFan
2012-12-02 13:24:27 ----D---- H:\Documents and Settings\Administrator\Data aplikací\Skype
2012-11-27 21:22:46 ----D---- H:\Program Files\QuickTime Alternative
2012-11-27 21:22:14 ----D---- H:\WINDOWS\WinSxS
2012-11-26 21:18:25 ----D---- H:\Program Files\Mozilla Firefox
2012-11-22 06:14:45 ----AC---- H:\WINDOWS\system32\PerfStringBackup.INI
2012-11-21 19:28:50 ----D---- H:\Program Files\Opera
2012-11-20 08:24:03 ----D---- H:\Documents and Settings\All Users\Data aplikací\Adobe
2012-11-20 08:20:25 ----A---- H:\WINDOWS\system32\FlashPlayerApp.exe
2012-11-17 22:50:42 ----D---- H:\Documents and Settings\Administrator\Data aplikací\Ancestry
2012-11-08 19:26:00 ----SD---- H:\Documents and Settings\Administrator\Data aplikací\Microsoft
2012-11-08 19:25:59 ----D---- H:\Documents and Settings\All Users\Data aplikací\Microsoft Help

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; H:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 prohlp02;StarForce Protection Helper Driver v2; H:\WINDOWS\System32\drivers\prohlp02.sys [2004-09-03 115680]
R0 prosync1;StarForce Protection Synchronization Driver v1; H:\WINDOWS\System32\drivers\prosync1.sys [2004-07-19 7040]
R0 PxHelp20;PxHelp20; H:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); H:\WINDOWS\System32\drivers\sfdrv01.sys [2006-03-26 51200]
R0 sfhlp01;StarForce Protection Helper Driver; H:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); H:\WINDOWS\System32\drivers\sfhlp02.sys [2006-03-13 6656]
R0 sfsync02;StarForce Protection Synchronization Driver (version 2.x); H:\WINDOWS\System32\drivers\sfsync02.sys [2006-02-21 19968]
R0 SmartDefragDriver;SmartDefragDriver; H:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [2011-02-23 13496]
R0 speedfan;speedfan; H:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; H:\WINDOWS\System32\Drivers\sptd.sys [2011-01-24 431672]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; H:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswSnx;aswSnx; H:\WINDOWS\system32\drivers\aswSnx.sys [2012-10-30 738504]
R1 aswSP;aswSP; H:\WINDOWS\system32\drivers\aswSP.sys [2012-10-30 361032]
R1 aswTdi;avast! Network Shield Support; H:\WINDOWS\system32\drivers\aswTdi.sys [2012-10-30 54232]
R1 intelppm;Řadič procesoru Intel; H:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; H:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 prodrv06;StarForce Protection Environment Driver v6; H:\WINDOWS\System32\drivers\prodrv06.sys [2004-09-03 54368]
R1 SCDEmu;SCDEmu; H:\WINDOWS\system32\drivers\SCDEmu.sys [2010-04-12 59388]
R1 Tcpip6;Ovladač protokolu Microsoft IPv6; H:\WINDOWS\system32\DRIVERS\tcpip6.sys [2010-02-11 226880]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; H:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 aswFsBlk;aswFsBlk; H:\WINDOWS\system32\drivers\aswFsBlk.sys [2012-10-30 21256]
R2 aswMon2;avast! Standard Shield Support; H:\WINDOWS\system32\drivers\aswMon2.sys [2012-10-30 97608]
R2 atksgt;atksgt; H:\WINDOWS\system32\DRIVERS\atksgt.sys [2009-05-18 281504]
R2 lirsgt;lirsgt; H:\WINDOWS\system32\DRIVERS\lirsgt.sys [2009-05-18 25888]
R3 ati2mtag;ati2mtag; H:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2011-07-28 7084544]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; H:\WINDOWS\system32\drivers\AtiHdmi.sys [2009-11-18 95232]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; H:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; H:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); H:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-06-27 4742656]
R3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver; H:\WINDOWS\system32\drivers\LGBusEnum.sys [2009-11-24 19720]
R3 LGSHidFilt;Logitech Gaming KMDF HID Filter Driver; H:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [2012-02-07 42008]
R3 mouhid;Ovladač myši standardu HID; H:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 RTCore32;RTCore32; \??\H:\Program Files\MSI Afterburner\RTCore32.sys []
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; H:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-06-16 109184]
R3 tunmp;Microsoft Tun Miniport Adapter Driver; H:\WINDOWS\system32\DRIVERS\tunmp.sys [2008-04-13 12288]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; H:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; H:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; H:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 Wdf01000;Kernel Mode Driver Frameworks service; H:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
R3 WmBEnum;Logitech Virtual Bus Enumerator Driver; H:\WINDOWS\system32\drivers\WmBEnum.sys [2009-09-11 22792]
R3 WmFilter;Logitech Gaming HID Filter Driver; H:\WINDOWS\system32\drivers\WmFilter.sys [2009-09-11 35592]
R3 WmXlCore;Logitech Translation Layer Driver; H:\WINDOWS\system32\drivers\WmXlCore.sys [2009-09-11 66056]
S1 aswRdr;aswRdr; H:\WINDOWS\system32\drivers\aswRdr.sys [2012-10-30 35928]
S3 a64304ya;a64304ya; H:\WINDOWS\system32\drivers\a64304ya.sys []
S3 aaz0p7s7;aaz0p7s7; H:\WINDOWS\system32\drivers\aaz0p7s7.sys []
S3 catchme;catchme; \??\H:\ComboFix\catchme.sys []
S3 cpuz130;cpuz130; \??\H:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys []
S3 EagleNT;EagleNT; \??\H:\WINDOWS\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\H:\WINDOWS\system32\drivers\EagleXNt.sys []
S3 gdrv;gdrv; \??\H:\WINDOWS\gdrv.sys []
S3 GMSIPCI;GMSIPCI; \??\G:\INSTALL\GMSIPCI.SYS []
S3 HPZid412;IEEE-1284.4 Driver HPZid412; H:\WINDOWS\system32\DRIVERS\HPZid412.sys [2007-10-31 49920]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; H:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2007-10-31 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; H:\WINDOWS\system32\DRIVERS\HPZius12.sys [2007-10-31 21568]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver; H:\WINDOWS\system32\drivers\LGVirHid.sys [2009-11-24 14856]
S3 MREMP50;MREMP50 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS []
S3 MREMP50a64;MREMP50a64 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS []
S3 MREMPR5;MREMPR5 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS []
S3 MRENDIS5;MRENDIS5 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS []
S3 MRESP50;MRESP50 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS []
S3 MRESP50a64;MRESP50a64 NDIS Protocol Driver; \??\H:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS []
S3 nmwcd;Nokia USB Phone Parent; H:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; H:\WINDOWS\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 nv;nv; H:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2008-10-07 6133856]
S3 pccsmcfd;PCCS Mode Change Filter Driver; H:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 pcouffin;VSO Software pcouffin; H:\WINDOWS\System32\Drivers\pcouffin.sys [2009-05-30 47360]
S3 SMCWPCIG;SMCWPCI-G 54Mbps Wireless PCI adapter Service; H:\WINDOWS\system32\DRIVERS\SMCWPCIG.sys []
S3 upperdev;upperdev; H:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbprint;Třída USB Printer; H:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; H:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; H:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; H:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 wlanndi5;wlanndi5 NDIS Protocol Driver; \??\H:\WINDOWS\system32\wlanndi5.SYS []
S3 WmHidLo;Logitech Gaming USB Filter Driver; H:\WINDOWS\system32\drivers\WmHidLo.sys [2009-09-11 31752]
S3 WmVirHid;Logitech Virtual Hid Device Driver; H:\WINDOWS\system32\drivers\WmVirHid.sys [2009-09-11 14984]
S3 WpdUsb;WpdUsb; H:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; H:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; H:\WINDOWS\system32\Ati2evxx.exe [2011-07-28 643072]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance; H:\Program Files\Firebird\Firebird_2_1\bin\fbguard.exe [2009-02-28 81920]
R2 hpqddsvc;Služba HP CUE DeviceDiscovery; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 JavaQuickStarterService;Java Quick Starter; H:\Program Files\Java\jre6\bin\jqs.exe [2012-08-28 153584]
R2 McciCMService;McciCMService; H:\Program Files\Common Files\Motive\McciCMService.exe [2007-10-15 303104]
R2 Net Driver HPZ12;Net Driver HPZ12; H:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 Pml Driver HPZ12;Pml Driver HPZ12; H:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 PnkBstrA;PnkBstrA; H:\WINDOWS\system32\PnkBstrA.exe [2012-10-29 76888]
R2 SQLWriter;SQL Server VSS Writer; H:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance; H:\Program Files\Firebird\Firebird_2_1\bin\fbserver.exe [2009-02-28 2732032]
R3 hpqcxs08;hpqcxs08; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 6to4;Pomocná služba protokolu IPv6; H:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 avast! Antivirus;avast! Antivirus; H:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-10-30 44808]
S2 MSSQL$SPRINXCRM;SQL Server (SPRINXCRM); H:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2008-11-25 29263712]
S2 NVSvc;NVIDIA Display Driver Service; H:\WINDOWS\system32\nvsvc32.exe [2008-10-07 163908]
S2 SkypeUpdate;Skype Updater; H:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944]
S2 SQLBrowser;SQL Server Browser; H:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-25 239968]
S3 aspnet_state;Stavová služba ASP.NET; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; H:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; H:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; H:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; H:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 npggsvc;nProtect GameGuard Service; H:\WINDOWS\system32\GameMon.des [2011-04-12 4400096]
S3 odserv;Microsoft Office Diagnostics Service; H:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; H:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 ServiceLayer;ServiceLayer; H:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]
S3 SwitchBoard;SwitchBoard; H:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; H:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 Application Updater;Application Updater; H:\Program Files\Application Updater\ApplicationUpdater.exe [2011-08-17 402328]
S4 FLEXnet Licensing Service;FLEXnet Licensing Service; H:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-11-10 651720]
S4 GEST Service;GEST Service for program management.; H:\Program Files\GIGABYTE\EnergySaver\GSvr.exe [2008-07-11 80392]
S4 gupdate1ca8be9ec2b3198;Google Update Service (gupdate1ca8be9ec2b3198); H:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-02 133104]
S4 gupdatem;Služba Google Update (gupdatem); H:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-02 133104]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; H:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-25 45408]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; H:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------
Nahoru
Tibor
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 Pro 2012 22:45

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#21 Příspěvek od Tibor »

Stále není možné připojení, zkoušel jsem aj vyměnit kabel. Se asi picnu. Bránu fireewal také neotevřu protože není njaky protokol.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#22 Příspěvek od JaRon »

toto vidim na opravnu instalaciu Win :James008:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Tibor
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 Pro 2012 22:45

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#23 Příspěvek od Tibor »

Musel jsem udělat komplet reinstal win, jen přežehlit to nešlo. Jádro systému bylo tak odpálené, že s tím nic nešlo udělat.
Nahoru
Tibor
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 Pro 2012 22:45

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#24 Příspěvek od Tibor »

Jinak moc děkuji za čas a pomoc. Každá rada a pomoc nad zlato. Doufám, že budu mít zas chvilku pokoj))
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15924
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#25 Příspěvek od JaRon »

nemas zac :)
inac doporucujem vyhnut sa zdaleka produktom IObit :!:
a ak nemusis nedavaj tam ani AVG ,,, neuskodi, ale vacsinou ani nepomoze :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Tibor
Návštěvník
Návštěvník
Příspěvky: 15
Registrován: 05 Pro 2012 22:45

Re: Prosím o kontrolu logu, odstraněn PERFLIB_PERFDATA

#26 Příspěvek od Tibor »

JJ, po IObit jsi šel jak slípka po fluse :D, i přes varování jsem to nechal, už se na takové věci vykašlu, AVG jsem měl mít komplet odinstalované - drželose// teď dlouho používám Avast. A ještě jednou děkuji za help :thumbsup:
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“