Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

RSIT - kontrola logu

Patříte mezi Vzorné návštěvníky? Pak je tato sekce pro vás.

Moderátor: Moderátoři

Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
Hellfik
Návštěvník
Návštěvník
Příspěvky: 90
Registrován: 28 kvě 2011 12:57

RSIT - kontrola logu

#1 Příspěvek od Hellfik »

Ahoj,můj notebook se vrátil z opravny a byl docela rychlý jako dřív, ale po 2 měsících je strašně pomalý ( dřív byl tak pomalý za 1 rok používání). Nevím čím to je - procesů mám puštěno minimálně, ale stejně se to strašně seká.
Používám Advanced System Care k údržbě počítače a používám funkci Turbo Boost.
Log:

Kód: Vybrat vše

Logfile of random's system information tool 1.09 (written by random/random)
Run by Admin at 2013-01-07 19:32:57
Microsoft® Windows Vista™ Home Premium  Service Pack 2
System drive C: has 188 GB (62%) free of 305 GB
Total RAM: 2046 MB (39% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:34:00, on 7.1.2013
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16457)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\IObit\Advanced SystemCare 6\Monitor.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\TeamViewer\Version7\TeamViewer.exe
C:\Program Files\IObit\Advanced SystemCare 6\Asc.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Admin\Downloads\RSIT.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\Admin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT3220468
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
R3 - URLSearchHook: (no name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SaveByclick - {13022282-6B13-47E8-F00F-FE86C2560C92} - C:\ProgramData\SaveByclick\50d1635b2f0f0.ocx
O2 - BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files\PDF Architect\PDFIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files\PDF Architect\PDFIEPlugin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.5.3.0.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Advanced SystemCare Service 6 (AdvancedSystemCareService6) - IObit - C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PDF Architect Helper Service - pdfforge GbR - C:\Program Files\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GbR - C:\Program Files\PDF Architect\ConversionService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe

--
End of file - 7745 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{13022282-6B13-47E8-F00F-FE86C2560C92}]
SaveByclick Class - C:\ProgramData\SaveByclick\50d1635b2f0f0.ocx [2012-12-19 128000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711}]
PDF Architect Helper - C:\Program Files\PDF Architect\PDFIEHelper.dll [2012-11-22 91784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2012-10-18 449512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-10-18 155384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{25A3A431-30BB-47C8-AD6A-E1063801134F} - PDF Architect Toolbar - C:\Program Files\PDF Architect\PDFIEPlugin.dll [2012-11-22 731784]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-21 1008184]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2008-06-20 1316136]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-21 125952]
"Advanced SystemCare 6"=C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe [2012-09-24 490880]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
c:\program files\daemon tools lite\dtlite.exe [2012-08-28 3671904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor]
c:\program files\software602\print2pdf\print2pdf.exe [2011-10-04 220992]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2008-08-01 202032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2012-11-09 17877168]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
c:\program files\common files\java\java update\jusched.exe [2012-07-03 252848]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"VIDC.FFDS"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"VIDC.FMVC"=fmcodec.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-07 19:32:58 ----D---- C:\Program Files\trend micro
2013-01-07 19:32:57 ----D---- C:\rsit
2013-01-07 19:30:13 ----A---- C:\ProgramData\rebootpending.txt
2013-01-03 22:11:50 ----D---- C:\Windows\system32\RTCOM
2013-01-03 22:09:29 ----A---- C:\Windows\DIFxAPI.dll
2013-01-03 22:09:25 ----A---- C:\Windows\system32\SRSWOW.dll
2013-01-03 22:09:25 ----A---- C:\Windows\system32\SRSTSXT.dll
2013-01-03 22:09:23 ----A---- C:\Windows\system32\RtkPgExt.dll
2013-01-03 22:09:23 ----A---- C:\Windows\system32\RtkCoLDR.dll
2013-01-03 22:09:23 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys
2013-01-03 22:09:22 ----A---- C:\Windows\system32\RtkCoInstII.dll
2013-01-03 22:09:22 ----A---- C:\Windows\system32\RtkApoApi.dll
2013-01-03 22:09:22 ----A---- C:\Windows\system32\RtkAPO.dll
2013-01-03 22:09:19 ----A---- C:\Windows\system32\RTEEP32A.dll
2013-01-03 22:09:19 ----A---- C:\Windows\system32\RTEEL32A.dll
2013-01-03 22:09:19 ----A---- C:\Windows\system32\RTEEG32A.dll
2013-01-03 22:09:19 ----A---- C:\Windows\system32\RTEED32A.dll
2013-01-03 22:09:19 ----A---- C:\Windows\system32\RP3DHT32.dll
2013-01-03 22:09:19 ----A---- C:\Windows\system32\RP3DAA32.dll
2013-01-03 22:09:19 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2013-01-03 22:09:04 ----D---- C:\Program Files\Realtek
2013-01-03 22:09:04 ----A---- C:\Windows\system32\AERTARen.dll
2013-01-03 22:09:04 ----A---- C:\Windows\system32\AERTACap.dll
2013-01-03 22:09:02 ----HD---- C:\Program Files\Temp
2013-01-03 22:09:01 ----A---- C:\Windows\RtlExUpd.dll
2013-01-03 21:29:15 ----D---- C:\ProgramData\Apple Computer
2013-01-03 21:29:15 ----D---- C:\Program Files\QuickTime
2013-01-03 21:26:16 ----D---- C:\Program Files\Common Files\Apple
2013-01-03 21:24:48 ----D---- C:\Program Files\Apple Software Update
2013-01-03 21:24:47 ----D---- C:\ProgramData\Apple
2012-12-27 20:17:54 ----A---- C:\Windows\UIA200.exe
2012-12-27 20:10:09 ----D---- C:\Program Files\All Ten Fingers
2012-12-25 15:53:51 ----D---- C:\Program Files\uTorrent
2012-12-25 15:52:06 ----D---- C:\Users\Admin\AppData\Roaming\uTorrent
2012-12-23 11:38:04 ----D---- C:\temp
2012-12-23 11:33:37 ----A---- C:\Windows\system32\nvwgf2um.dll
2012-12-23 11:33:37 ----A---- C:\Windows\system32\nvopencl.dll
2012-12-23 11:33:37 ----A---- C:\Windows\system32\nvcuvid.dll
2012-12-23 11:33:37 ----A---- C:\Windows\system32\nvcuvenc.dll
2012-12-23 11:33:37 ----A---- C:\Windows\system32\drivers\nvlddmkm.sys
2012-12-23 11:33:36 ----A---- C:\Windows\system32\nvoglv32.dll
2012-12-23 11:33:36 ----A---- C:\Windows\system32\nvdispgenco32.dll
2012-12-23 11:33:31 ----A---- C:\Windows\system32\nvcuda.dll
2012-12-23 11:33:28 ----A---- C:\Windows\system32\nvcompiler.dll
2012-12-23 11:06:52 ----D---- C:\ProgramData\Razer
2012-12-23 11:06:52 ----D---- C:\Program Files\Razer
2012-12-22 22:42:58 ----A---- C:\Windows\system32\SmartDefragBootTime.exe
2012-12-22 22:42:28 ----A---- C:\Windows\system32\drivers\SmartDefragDriver.sys
2012-12-22 22:36:59 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe
2012-12-22 22:01:07 ----D---- C:\ProgramData\IObit
2012-12-22 22:00:53 ----D---- C:\Users\Admin\AppData\Roaming\IObit
2012-12-22 22:00:46 ----D---- C:\Program Files\IObit
2012-12-22 08:17:08 ----A---- C:\Windows\system32\atmfd.dll
2012-12-22 08:17:07 ----A---- C:\Windows\system32\atmlib.dll
2012-12-19 07:37:13 ----D---- C:\Users\Admin\AppData\Roaming\PDF Architect
2012-12-19 07:34:22 ----D---- C:\ProgramData\SaveByclick
2012-12-19 07:33:56 ----D---- C:\Users\Admin\AppData\Roaming\APP_NAME_NON_STRING
2012-12-19 07:33:00 ----D---- C:\Program Files\PDF Architect
2012-12-19 07:31:32 ----D---- C:\Users\Admin\AppData\Roaming\pdfforge
2012-12-19 07:31:21 ----A---- C:\Windows\system32\pdfcmon.dll
2012-12-19 07:31:17 ----D---- C:\Program Files\PDFCreator
2012-12-19 07:31:17 ----A---- C:\Windows\system32\MSMPIDE.DLL
2012-12-14 07:25:35 ----A---- C:\Windows\system32\vbscript.dll
2012-12-14 07:25:35 ----A---- C:\Windows\system32\mshtmled.dll
2012-12-14 07:25:34 ----A---- C:\Windows\system32\ieui.dll
2012-12-14 07:25:33 ----A---- C:\Windows\system32\msfeeds.dll
2012-12-14 07:25:33 ----A---- C:\Windows\system32\jsproxy.dll
2012-12-14 07:25:33 ----A---- C:\Windows\system32\ieUnatt.exe
2012-12-14 07:25:32 ----A---- C:\Windows\system32\wininet.dll
2012-12-14 07:25:32 ----A---- C:\Windows\system32\url.dll
2012-12-14 07:25:32 ----A---- C:\Windows\system32\jscript9.dll
2012-12-14 07:25:32 ----A---- C:\Windows\system32\jscript.dll
2012-12-14 07:25:31 ----A---- C:\Windows\system32\iertutil.dll
2012-12-14 07:25:30 ----A---- C:\Windows\system32\urlmon.dll
2012-12-14 07:25:29 ----A---- C:\Windows\system32\ieframe.dll
2012-12-14 07:25:26 ----A---- C:\Windows\system32\mshtml.dll
2012-12-14 07:19:45 ----A---- C:\Windows\system32\Wdfres.dll
2012-12-14 07:19:41 ----A---- C:\Windows\system32\drivers\WUDFRd.sys
2012-12-14 07:19:41 ----A---- C:\Windows\system32\drivers\WUDFPf.sys
2012-12-14 07:19:38 ----A---- C:\Windows\system32\WUDFSvc.dll
2012-12-14 07:19:38 ----A---- C:\Windows\system32\WUDFPlatform.dll
2012-12-14 07:19:38 ----A---- C:\Windows\system32\winusb.dll
2012-12-14 07:19:36 ----A---- C:\Windows\system32\drivers\WdfLdr.sys
2012-12-14 07:19:36 ----A---- C:\Windows\system32\drivers\Wdf01000.sys
2012-12-14 07:19:33 ----A---- C:\Windows\system32\WUDFCoinstaller.dll
2012-12-14 07:19:32 ----A---- C:\Windows\system32\WUDFx.dll
2012-12-14 07:19:32 ----A---- C:\Windows\system32\WUDFHost.exe
2012-12-12 14:37:40 ----A---- C:\Windows\system32\win32k.sys
2012-12-12 14:37:37 ----A---- C:\Windows\system32\dpnsvr.exe
2012-12-12 14:37:37 ----A---- C:\Windows\system32\dpnet.dll
2012-12-12 14:19:52 ----A---- C:\Windows\system32\drivers\volsnap.sys
2012-12-12 14:19:36 ----A---- C:\Windows\system32\tzres.dll
2012-12-12 14:18:53 ----A---- C:\Windows\system32\kernel32.dll
2012-12-11 14:25:59 ----D---- C:\Users\Admin\AppData\Roaming\VitySoft

======List of files/folders modified in the last 1 month======

2013-01-07 19:33:10 ----D---- C:\Windows\Prefetch
2013-01-07 19:33:04 ----D---- C:\Windows\Temp
2013-01-07 19:32:58 ----RD---- C:\Program Files
2013-01-07 19:30:13 ----HD---- C:\ProgramData
2013-01-07 19:29:39 ----D---- C:\Windows\system32\drivers
2013-01-07 19:25:53 ----D---- C:\ProgramData\PMB Files
2013-01-07 15:07:08 ----D---- C:\Users\Admin\AppData\Roaming\TeamViewer
2013-01-06 22:54:58 ----SHD---- C:\System Volume Information
2013-01-05 06:05:36 ----D---- C:\Windows\System32
2013-01-05 06:05:36 ----D---- C:\Windows\inf
2013-01-05 06:05:36 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-04 06:14:46 ----D---- C:\Windows
2013-01-03 22:11:39 ----D---- C:\Windows\system32\catroot
2013-01-03 22:11:38 ----D---- C:\Windows\system32\catroot2
2013-01-03 22:09:03 ----HD---- C:\Program Files\InstallShield Installation Information
2013-01-03 21:32:20 ----SHD---- C:\Windows\Installer
2013-01-03 21:31:50 ----D---- C:\Program Files\Internet Explorer
2013-01-03 21:26:16 ----D---- C:\Program Files\Common Files
2013-01-03 06:05:54 ----D---- C:\Users\Admin\AppData\Roaming\Skype
2013-01-01 14:20:02 ----A---- C:\Windows\system32\PnkBstrB.exe
2012-12-30 11:30:47 ----D---- C:\Users\Admin\AppData\Roaming\Hamachi
2012-12-25 02:10:43 ----SD---- C:\ProgramData\Microsoft
2012-12-25 01:47:11 ----D---- C:\Windows\system32\config
2012-12-25 01:46:15 ----SHD---- C:\Boot
2012-12-24 12:52:36 ----D---- C:\Windows\Tasks
2012-12-23 11:42:48 ----D---- C:\Program Files\NVIDIA Corporation
2012-12-23 11:40:46 ----D---- C:\ProgramData\NVIDIA
2012-12-23 11:11:07 ----D---- C:\Windows\system32\Tasks
2012-12-22 23:24:42 ----D---- C:\Windows\Debug
2012-12-22 08:47:06 ----D---- C:\Windows\winsxs
2012-12-20 22:05:58 ----D---- C:\Program Files\Wolfenstein - Enemy Territory
2012-12-19 16:52:54 ----D---- C:\Program Files\DsNET Corp
2012-12-15 14:55:17 ----D---- C:\Users\Admin\AppData\Roaming\TS3Client
2012-12-14 07:50:55 ----D---- C:\Windows\rescache
2012-12-14 07:28:52 ----D---- C:\Windows\system32\migration
2012-12-14 07:28:47 ----D---- C:\Windows\system32\wbem
2012-12-14 07:28:47 ----D---- C:\Windows\system32\drivers\cs-CZ
2012-12-14 07:28:47 ----D---- C:\Windows\system32\cs-CZ
2012-12-14 07:24:51 ----D---- C:\ProgramData\Microsoft Help
2012-12-14 07:12:07 ----A---- C:\Windows\system32\mrt.exe
2012-12-12 14:00:37 ----D---- C:\Users\Admin\AppData\Roaming\DAEMON Tools Lite

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 15672]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-10-29 242240]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-14 37376]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2012-12-03 25280]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2007-06-18 16768]
R3 HpqRemHid;HP Remote Control HID Device; C:\Windows\system32\DRIVERS\HpqRemHid.sys [2007-07-11 7168]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 NETwLv32;    Ovladač adaptéru řady Intel(R) Wireless WiFi Link 5000 pro systém Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETwLv32.sys [2010-10-07 6639616]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2012-08-30 10790760]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2008-06-20 200112]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-21 134016]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]
R4 avkmgr;avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2008-01-21 2225664]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-21 35328]
S3 WinRing0_1_2_0;WinRing0_1_2_0; \??\C:\Program Files\Razer\Razer Game Booster\Driver\WinRing0.sys [2012-11-13 14416]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]
S4 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys []
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
S4 RsFx0103;RsFx0103 Driver; C:\Windows\system32\DRIVERS\RsFx0103.sys [2009-03-30 239336]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdvancedSystemCareService6;Advanced SystemCare Service 6; C:\Program Files\IObit\Advanced SystemCare 6\ASCService.exe [2012-10-31 464256]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MSSQL$SQLEXPRESS;SQL Server (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [2009-03-30 43010392]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2012-08-30 645992]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-11-03 76888]
R2 SQLWriter;SQL Server VSS Writer; c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-07-10 98840]
S2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-05 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-08-30 1258856]
S2 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [2012-11-22 1522312]
S2 PDF Architect Service;PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [2012-11-22 905864]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-10-19 160944]
S2 TeamViewer7;TeamViewer 7; C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe [2012-08-31 2754984]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2008-04-03 193840]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-11-04 1044816]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-05 116648]
S3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2008-05-01 165192]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; c:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2009-07-23 47128]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 SQLAgent$SQLEXPRESS;SQL Server Agent (SQLEXPRESS); c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [2009-03-30 366936]
S4 SQLBrowser;SQL Server Browser; c:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2009-03-30 254808]

-----------------EOF-----------------
A zde nějaký další:

Kód: Vybrat vše

info.txt logfile of random's system information tool 1.09 2013-01-07 19:34:13

======Uninstall list======

 Update for Microsoft Office 2007 (KB2508958)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}
-->MsiExec /X{2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}
µTorrent-->"C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
7-Zip 9.20-->"C:\Program Files\7-Zip\Uninstall.exe"
Adobe Flash Player 11 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe -maintain activex
Adobe Flash Player 11 Plugin-->C:\Windows\system32\Macromed\Flash\FlashUtil32_11_4_402_287_Plugin.exe -maintain plugin
Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A80000000002}
Advanced SystemCare 6-->"C:\Program Files\IObit\Advanced SystemCare 6\unins000.exe"
Aktualizace NVIDIA 1.10.8-->"C:\Windows\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.1\NVI2.DLL",UninstallPackage Display.Update
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0405-0000-0000000FF1CE} /uninstall {0A1FAC46-B899-421D-B1A2-470896DC45DB}
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0405-0000-0000000FF1CE} /uninstall {5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0405-0000-0000000FF1CE} /uninstall {E68DD413-B834-4923-8181-0A03B7555187}
Apple Application Support-->MsiExec.exe /I{553255F3-78FD-40F1-A6F8-6882140265FE}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
ATF-->C:\Windows\UIA200.exe "C:\Program Files\All Ten Fingers\DelList1.lst"
aTube Catcher-->C:\Program Files\DsNET Corp\aTube Catcher 2.0\uninstall.exe
BitLord 2.2-->C:\Program Files\BitLord 2\Bitlord-uninst.exe
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch-->C:\Program Files\InstallShield Installation Information\{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch-->C:\Program Files\InstallShield Installation Information\{931C37FC-594D-43A9-B10F-A2F2B1F03498}\setup.exe -runfromtemp -l0x0409
Call of Duty(R) 4 - Modern Warfare(TM)-->C:\Program Files\InstallShield Installation Information\{E48469CC-635E-4FD5-A122-1497C286D217}\setup.exe -runfromtemp -l0x0409
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Combined Community Codec Pack 2010-10-10-->"C:\Program Files\Combined Community Codec Pack\unins000.exe"
Counter-Strike: Source Texture Pack 1.00-->C:\Program Files\Textury2\Uninstall.exe
Counter-Strike: Source-->C:\Program Files\Counter-Strike Source\Uninst.exe
Crystal Reports for Visual Studio-->MsiExec.exe /I{AC41D924-8C68-4BD5-A7A1-0AE4176C31A6}
DAEMON Tools Lite-->C:\Program Files\DAEMON Tools Lite\uninst.exe
Debugging Tools for Windows (x86)-->MsiExec.exe /I{300A2961-B2B5-4889-9CB9-5C2A570D08AD}
Dotfuscator Software Services - Community Edition-->MsiExec.exe /X{41B31ABE-5A6E-498A-8F28-3BA3B8779A41}
GamePark-->"C:\Program Files\GamePark\unins000.exe"
Google Chrome-->"C:\Program Files\Google\Chrome\Application\23.0.1271.97\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Hamachi 1.0.2.5-->C:\Program Files\Hamachi\uninstall.exe
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall  /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Hotfix for Microsoft Visual Studio 2010 Professional - ENU (KB2542054)-->c:\Windows\system32\msiexec.exe /package {D6B15AE6-B052-363E-B6BB-C4714CBA6509} /uninstall {3EE9D984-E7A6-30B9-8FF5-A1FE2242440A} /qb+ REBOOTPROMPT=""
HP Quick Launch Buttons 6.40 H2-->C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\Setup.exe -runfromtemp -l0x0005 -removeonly uninst
InstallShield 2012 Spring Limited Edition-->MsiExec.exe /I{938F57E8-F039-4173-8702-EE8496FB6F36}
Java 7 Update 9-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217009FF}
League of Legends-->"C:\Program Files\InstallShield Installation Information\{92606477-9366-4D3B-8AE3-6BE4B29727AB}\setup.exe" -runfromtemp -l0x0409  -removeonly
Microsoft .NET Framework 3.5 Language Pack SP1 - csy-->MsiExec.exe /I{DD73CA82-EA82-38AA-863D-9A24A018DC96}
Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - csy\setup.exe
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\Setup.exe /repair /x86 /lcid 1029 /parameterfolder ClientLP
Microsoft .NET Framework 4 Client Profile CSY Language Pack-->MsiExec.exe /X{7036A6F4-5DAD-3908-956D-1752CD7F7E5A}
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6}
Microsoft .NET Framework 4 Extended-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /parameterfolder Extended
Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{0A0CADCF-78DA-33C4-A350-CD51849B9702}
Microsoft .NET Framework 4 Multi-Targeting Pack-->MsiExec.exe /I{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}
Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools-->MsiExec.exe /X{40416836-56CC-4C0E-A6AF-5C34BADCE483}
Microsoft ASP.NET MVC 2-->MsiExec.exe /X{1803A630-3C38-4D2B-9B9A-0CB37243539C}
Microsoft Help Viewer 1.0-->C:\Program Files\Microsoft Help Viewer\v1.0\Microsoft Help Viewer 1.0\install.exe
Microsoft Help Viewer 1.0-->MsiExec.exe /X{47C39E4A-28F2-33B1-B9B7-97F24E52D917}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0015-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0016-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0018-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0019-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001A-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001B-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6E107EB7-8B55-48BF-ACCB-199F86A2CD93}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0044-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-006E-0405-0000-0000000FF1CE} /uninstall {A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00A1-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00BA-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office File Validation Add-In-->MsiExec.exe /I{90140000-2005-0000-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0405-0000-0000000FF1CE} /uninstall {0B7A4B67-2A38-42B1-9857-662FAB361E08}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {928D7B99-2BEA-49F9-83B8-20FA57860643}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {1FF96026-A04A-4C3E-B50A-BB7022654D0F}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-041B-0000-0000000FF1CE} /uninstall {FDF9A959-241A-4662-A8DE-7DED9C22D160}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Silverlight 3 SDK-->MsiExec.exe /X{2012098D-EEE9-4769-8DD3-B038050854D4}
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft SQL Server 2008 Browser-->MsiExec.exe /X{C688457E-03FD-4941-923B-A27F4D42A7DD}
Microsoft SQL Server 2008 Common Files-->MsiExec.exe /I{196E77C5-F524-4B50-BD1A-2C21EEE9B8F7}
Microsoft SQL Server 2008 Common Files-->MsiExec.exe /I{4A6F34E2-09E5-4616-B227-4A26A488A6F9}
Microsoft SQL Server 2008 Database Engine Services-->MsiExec.exe /I{58721EC3-8D4E-4B79-BC51-1054E2DDCD10}
Microsoft SQL Server 2008 Database Engine Services-->MsiExec.exe /I{B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2}
Microsoft SQL Server 2008 Database Engine Shared-->MsiExec.exe /I{4815BD99-96A4-49FE-A885-DCF06E9E4E78}
Microsoft SQL Server 2008 Database Engine Shared-->MsiExec.exe /I{F3494AB6-6900-41C6-AF57-823626827ED8}
Microsoft SQL Server 2008 Native Client-->MsiExec.exe /I{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}
Microsoft SQL Server 2008 R2 Data-Tier Application Framework-->MsiExec.exe /I{0DDCEC37-369C-484B-B16D-B4413FD42FB9}
Microsoft SQL Server 2008 R2 Data-Tier Application Project-->MsiExec.exe /I{E5AE9031-79A5-4627-9641-BEFA82819B08}
Microsoft SQL Server 2008 R2 Management Objects-->MsiExec.exe /I{4E968D9C-21A7-4915-B698-F7AEB913541D}
Microsoft SQL Server 2008 R2 Transact-SQL Language Service-->MsiExec.exe /I{78C3657E-742C-40B1-9F53-E5A921D40F17}
Microsoft SQL Server 2008 RsFx Driver-->MsiExec.exe /I{33AE9E89-47C9-4A0D-9E9D-BDD6966A3804}
Microsoft SQL Server 2008 Setup Support Files -->MsiExec.exe /X{D441BD04-E548-4F8E-97A4-1B66135BAAA8}
Microsoft SQL Server 2008-->"c:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Release\x86\SetupARP.exe" /x86 
Microsoft SQL Server 2008-->"c:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Release\x86\SetupARP.exe" /X86 
Microsoft SQL Server Compact 3.5 SP2 ENU-->MsiExec.exe /I{3A9FC03D-C685-4831-94CF-4EDFD3749497}
Microsoft SQL Server Database Publishing Wizard 1.4-->MsiExec.exe /I{ACE28263-76A4-4BF5-B6F4-8BD719595969}
Microsoft SQL Server System CLR Types-->MsiExec.exe /I{2A2F3AE8-246A-4252-BB26-1BEB45627074}
Microsoft SQL Server VSS Writer-->MsiExec.exe /I{B857D868-F8B0-43EE-BC2B-D9E5ED21F237}
Microsoft Sync Framework Runtime v1.0 SP1 (x86)-->MsiExec.exe /I{C6DD625F-4B61-4561-8286-87CA0275CEA1}
Microsoft Sync Framework SDK v1.0 SP1-->MsiExec.exe /I{97CE8B73-AA5A-4987-A1BE-50DD1A187478}
Microsoft Sync Framework Services v1.0 SP1 (x86)-->MsiExec.exe /I{F990B526-8F7C-46E0-B1F1-6C893A8B478F}
Microsoft Sync Services for ADO.NET v2.0 SP1 (x86)-->MsiExec.exe /I{DC3D6AFB-78B4-489F-81D7-30B66E0C2417}
Microsoft Team Foundation Server 2010 Object Model - ENU-->MsiExec.exe /I{6ED37A91-7710-3183-BE50-AB043FF6689E}
Microsoft Team Foundation Server 2010 Object Model - ENU-->MsiExec.exe /X{6ED37A91-7710-3183-BE50-AB043FF6689E}
Microsoft Visual Basic PowerPacks 10.0-->MsiExec.exe /I{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}
Microsoft Visual C++ 2010  x86 Runtime - 10.0.30319-->MsiExec.exe /X{6A86554B-8928-30E4-A53C-D7337689134D}
Microsoft Visual F# 2.0 Runtime-->MsiExec.exe /X{729A3000-BC8A-3B74-BA5D-5068FE12D70C}
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools-->MsiExec.exe /X{14DD7530-CCD2-3798-B37D-3839ED6A441C}
Microsoft Visual Studio 2010 Office Developer Tools (x86)-->MsiExec.exe /X{035400A4-29BD-3723-BEED-E2718A68CDE0}
Microsoft Visual Studio 2010 Professional - ENU-->C:\Program Files\Microsoft Visual Studio 10.0\Microsoft Visual Studio 2010 Professional - ENU\setup.exe
Microsoft Visual Studio 2010 SharePoint Developer Tools-->MsiExec.exe /X{2D9FEBEE-F1B7-344F-BFDF-760E18332D96}
Microsoft Visual Studio 2010 Tools for Office Runtime (x86)-->c:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)\install.exe
Microsoft Visual Studio 2010 Tools for Office Runtime (x86)-->MsiExec.exe /X{97BA2B90-AF72-35CF-BFDC-E06531811B20}
Microsoft Visual Studio Macro Tools-->msiexec.exe /uninstall {6CDEAD7E-F8D8-37F7-AB6F-1E22716E30F3}
Microsoft Visual Studio Macro Tools-->MsiExec.exe /X{6CDEAD7E-F8D8-37F7-AB6F-1E22716E30F3}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 4.0 SP3 Parser (KB2721691)-->MsiExec.exe /I{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}
NVIDIA Ovladače grafiky 306.23-->"C:\Windows\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.1\NVI2.DLL",UninstallPackage Display.Driver
NVIDIA PhysX-->MsiExec.exe /X{2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}
NVIDIA Systémový software PhysX 9.12.0604-->"C:\Windows\system32\RunDll32.EXE" "C:\Program Files\NVIDIA Corporation\Installer2\installer.1\NVI2.DLL",UninstallPackage Display.PhysX
Pando Media Booster-->C:\Program Files\Pando Networks\Media Booster\uninst.exe
PDF Architect-->MsiExec.exe /I{30B41B7A-3C9D-44DE-A7A1-949011F33CC3}
PDFCreator-->C:\Program Files\PDFCreator\unins000.exe
PunkBuster Services-->C:\Windows\system32\pbsvc.exe -u
PVSonyDll-->MsiExec.exe /I{3D3E663D-4E7E-4577-A560-7ECDDD45548A}
QuickTime-->MsiExec.exe /I{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}
Razer Game Booster-->MsiExec.exe /X{88F0F4FF-B514-4E32-9C17-CAF96D60EAFC}
Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe"  -removeonly
SaveByclick-->"C:\ProgramData\SaveByclick\uninstall.exe" /path=C:\ProgramData\SaveByclick
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {94EFE014-E577-310B-B2D5-6973A21D8A90} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {F6F5AC31-9833-3E77-AC8E-8E910CAB39AE} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {728D9A6A-2206-31E8-9F65-C3EABEFCF53E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {2CE2EB39-45C8-32D4-8A99-5529C38F1B99} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7E97AB83-C1FE-38DE-B848-877E0A4BD81E} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DB31DEDD-BF95-31E7-A9B7-5480561CEFF3} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {67A5F99B-5EBA-3812-8D2E-BC251490DD3F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {86BB5A25-8CC3-33CE-A393-CF28901682B2} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {16EEC04A-B924-37E0-97CF-422DCEFC1B63} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C4D978AA-2668-3404-96DE-96E2AFC62FD7} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {CD6D9B8A-BBC4-3FA7-B24D-D74CE90630CF} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {ECBEE23D-AB7E-3DAA-B66B-CD52003198F1} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile CSY Language Pack (KB2478663)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\setup.exe /uninstallpatch {728D9A6A-2206-31E8-9F65-C3EABEFCF53E} /parameterfolder ClientLP
Security Update for Microsoft .NET Framework 4 Client Profile CSY Language Pack (KB2518870)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\ClientLP\setup.exe /uninstallpatch {2CE2EB39-45C8-32D4-8A99-5529C38F1B99} /parameterfolder ClientLP
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {42A3562E-8B4E-39A4-B82D-CC12F82889E3} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Extended
Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C6997D22-CC93-4ED9-AD8A-02C3F3D2F1F9}
Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5DD3FF90-B302-45B2-A188-C5EA7ACD5D46}
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {D33B9EF5-3801-496A-A2D6-B7F4BE972D75}
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B145DBBB-7778-4A5D-9D2B-DA6569F02391}
Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A0D5F849-D9D5-48ED-99D0-C74D7BFA6A09}
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E34960DB-2A93-45DB-A208-02650F7AB09C}
Security Update for Microsoft Office 2007 suites (KB2596856) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2623A96B-78E5-42CC-AB55-6A3969B32E36}
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {293FB6BE-D3EB-4162-B522-F9108040B9FE}
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2B3C041A-A7F2-4A24-968D-4BEB6A123D15}
Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {43171CAD-DC60-4E7B-9703-B2EC18001B9F}
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3579CE34-B225-4B19-A3AF-DE5F562A212F}
Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {EF5B5C7F-20CB-4A3A-AC3D-F5DE2C2BFDC7}
Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CAB47CC0-A98C-47DD-9FA1-C0416EC96ED5}
Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {488F0918-97F9-4CD0-8AD5-8986A46AC962}
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8F311D6C-D8DD-4C32-9457-1A129CABD1A5}
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {AEA16A27-0B97-4670-818F-A98D06EC0A6F}
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0EF0D4FB-BB23-4515-AAEA-1240AC2DA525}
Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5A8732F0-C20F-4A9B-A2A9-66FE7A586C35}
Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {718E87EC-6590-485A-B12D-C01D290EDB12}
Security Update for Microsoft Visual Studio 2010 Professional - ENU (KB2251489)-->c:\Windows\system32\msiexec.exe /package {D6B15AE6-B052-363E-B6BB-C4714CBA6509} /uninstall {F606AC5F-4A30-3D7F-BC43-1200864BD9E5} /qb+ REBOOTPROMPT=""
Security Update for Microsoft Visual Studio 2010 Professional - ENU (KB2644980)-->c:\Windows\system32\msiexec.exe /package {D6B15AE6-B052-363E-B6BB-C4714CBA6509} /uninstall {6C94CAE9-95B3-3A0D-B7E8-BCA0E6A5ACB0} /qb+ REBOOTPROMPT=""
Security Update for Microsoft Visual Studio Macro Tools (KB2669970)-->C:\Windows\system32\msiexec.exe /package {6CDEAD7E-F8D8-37F7-AB6F-1E22716E30F3} /uninstall {CA6C4E8E-CE86-4C78-B4BC-1E083E8E613A} /qb+ REBOOTPROMPT=""
Service Pack 1 for SQL Server 2008 (KB968369)-->"c:\Program Files\Microsoft SQL Server\100\Setup Bootstrap\Update Cache\KB968369\ServicePack\setup.exe" /Action=RemovePatch /AllInstances 
Skype™ 6.0-->MsiExec.exe /X{EA17F4FC-FDBF-4CF8-A529-2D983132D053}
Smart Defrag 2-->"C:\Program Files\IObit\Smart Defrag 2\unins000.exe"
Software602 Form Filler-->MsiExec.exe /X{FA37AF66-D12A-4BC7-B1DE-3D50C05A4EDB}
Software602 Print2PDF-->C:\Program Files\InstallShield Installation Information\{32C74893-0243-4235-A6F3-201F0E5D2C03}\setup.exe -runfromtemp -l0x0005  REMOVE
Sql Server Customer Experience Improvement Program-->MsiExec.exe /I{C965F01C-76EA-4BD7-973E-46236AE312D7}
STORMWARE PDF Printer 8.2.0.1406-->"C:\Program Files\STORMWARE\PDF Printer\unins000.exe"
STORMWARE POHODA CZ Premium-->MsiExec.exe /X{21D41BD6-C642-420E-BCED-D5F8EEE619E3}
STORMWARE POHODA Start CZ -->MsiExec.exe /X{2D0725AC-DA75-439C-A6B9-CB45FD687DA5}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
System Requirements Lab for Intel-->MsiExec.exe /I{EFE3D683-903C-4B58-AB8F-C68C69F33758}
System.Data.SQLite v1.0.81.0-->"C:\Program Files\System.Data.SQLite\2010\uninstall\unins000.exe"
TeamSpeak 3 Client-->"C:\Program Files\TeamSpeak 3 Client\uninstall.exe"
TeamViewer 7-->C:\Program Files\TeamViewer\Version7\uninstall.exe
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {5E9CF3A4-ADB3-3080-A8BF-976A28340758} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {81EBB9D7-173C-32E3-B477-149C8DE075E4} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {5D9961AC-7C99-36A2-9EF0-34678AED5384} /parameterfolder Client
Update for Microsoft .NET Framework 4 Extended (KB2468871)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {5E9CF3A4-ADB3-3080-A8BF-976A28340758} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2533523)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {81EBB9D7-173C-32E3-B477-149C8DE075E4} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2600217)-->c:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {5D9961AC-7C99-36A2-9EF0-34678AED5384} /parameterfolder Extended
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {620E77C0-CDFE-4C14-AAEB-830ABB65864C}
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8153EC80-C988-4336-8DAF-6D99C0D26E0C}
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition-->msiexec /package {90120000-001A-0405-0000-0000000FF1CE} /uninstall {A030537D-0034-46AD-A730-B1119786F607}
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {5DB2894C-2DA4-4DEF-A051-795AE799964A}
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2760573) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2F2E7045-D922-4BF4-8F87-1583B61D1D6E}
VC80CRTRedist - 8.0.50727.6195-->MsiExec.exe /I{933B4015-4618-4716-A828-5289FC03165F}
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU-->MsiExec.exe /X{112C23F2-C036-4D40-BED4-0CB47BF5555C}
Web Deployment Tool-->MsiExec.exe /I{0F37D969-1260-419E-B308-EF7D29ABDE20}
WinRAR 4.11 (32-bit)-->C:\Program Files\WinRAR\uninstall.exe

======Security center information======

AS: Windows Defender

======System event log======

Computer Name: Admin-PC
Event Code: 7040
Message: Režim spuštění služby Instalace modulů systému Windows byl změněn z automatické spouštění na spouštění na vyžádání.
Record Number: 43333
Source Name: Service Control Manager
Time Written: 20120112191442.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: Admin-PC
Event Code: 4372
Message: Služba Windows Servicing nastavuje stav balíčku KB2656362(Security Update) na Fázování(Staging.)
Record Number: 43332
Source Name: Microsoft-Windows-Servicing
Time Written: 20120112191442.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: Admin-PC
Event Code: 4372
Message: Služba Windows Servicing nastavuje stav balíčku KB2656362(Security Update) na Fázování(Staging.)
Record Number: 43331
Source Name: Microsoft-Windows-Servicing
Time Written: 20120112191442.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: Admin-PC
Event Code: 4372
Message: Služba Windows Servicing nastavuje stav balíčku KB2656362(Security Update) na Fázování(Staging.)
Record Number: 43330
Source Name: Microsoft-Windows-Servicing
Time Written: 20120112191442.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: Admin-PC
Event Code: 4372
Message: Služba Windows Servicing nastavuje stav balíčku KB2656362(Security Update) na Fázování(Staging.)
Record Number: 43329
Source Name: Microsoft-Windows-Servicing
Time Written: 20120112191442.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Application event log=====

Computer Name: 26L2233B1-13
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 5
Source Name: Microsoft-Windows-WMI
Time Written: 20120105150311.000000-000
Event Type: Informace
User: 

Computer Name: 26L2233B1-13
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund.  Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 4
Source Name: Microsoft-Windows-EventSystem
Time Written: 20120105150308.000000-000
Event Type: Informace
User: 

Computer Name: WIN-38V3FESYGJQ
Event Code: 900
Message: Služba Licencování softwaru se spouští.

Record Number: 3
Source Name: Microsoft-Windows-Security-Licensing-SLC
Time Written: 20120105150307.000000-000
Event Type: Informace
User: 

Computer Name: 26L2233B1-13
Event Code: 2
Message: Klient Certifikační služby byl úspěšně zastaven.
Record Number: 2
Source Name: Microsoft-Windows-CertificateServicesClient
Time Written: 20080121025830.046400-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: WIN-38V3FESYGJQ
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.  


Record Number: 1
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20120105150306.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Security event log=====

Computer Name: Admin-PC
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
	ID zabezpečení:		S-1-5-21-968559785-4062774837-3349199904-1000
	Název účtu:		Admin
	Doména účtu:		Admin-PC
	ID přihlášení:		0x4db5f

Objekt:
	Server objektu:	Security
	Typ objektu:	File
	Název objektu:	\Device\HarddiskVolume2\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\1bb8fb13-181db9ce-7.0.0.4-
	ID popisovače:	0x334

Informace o procesu:
	ID procesu:	0xa44
	Název procesu:	C:\Windows\System32\dllhost.exe

Nastavení auditu:
	Původní popisovač zabezpečení:	S:AI
	Nový popisovač zabezpečení:		S:ARAI(AU;IDSA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-21-968559785-4062774837-3349199904-1000)
Record Number: 49343
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120106111818.047091-000
Event Type: Úspěch auditu
User: 

Computer Name: Admin-PC
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
	ID zabezpečení:		S-1-5-21-968559785-4062774837-3349199904-1000
	Název účtu:		Admin
	Doména účtu:		Admin-PC
	ID přihlášení:		0x4db5f

Objekt:
	Server objektu:	Security
	Typ objektu:	File
	Název objektu:	\Device\HarddiskVolume2\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18
	ID popisovače:	0x320

Informace o procesu:
	ID procesu:	0xa44
	Název procesu:	C:\Windows\System32\dllhost.exe

Nastavení auditu:
	Původní popisovač zabezpečení:	S:AI
	Nový popisovač zabezpečení:		S:ARAI(AU;OICIIDSA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-21-968559785-4062774837-3349199904-1000)
Record Number: 49342
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120106111818.047091-000
Event Type: Úspěch auditu
User: 

Computer Name: Admin-PC
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
	ID zabezpečení:		S-1-5-21-968559785-4062774837-3349199904-1000
	Název účtu:		Admin
	Doména účtu:		Admin-PC
	ID přihlášení:		0x4db5f

Objekt:
	Server objektu:	Security
	Typ objektu:	File
	Název objektu:	\Device\HarddiskVolume2\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\44029d52-63a9a6b0.idx
	ID popisovače:	0x224

Informace o procesu:
	ID procesu:	0xa44
	Název procesu:	C:\Windows\System32\dllhost.exe

Nastavení auditu:
	Původní popisovač zabezpečení:	S:AI
	Nový popisovač zabezpečení:		S:ARAI(AU;IDSA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-21-968559785-4062774837-3349199904-1000)
Record Number: 49341
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120106111818.047091-000
Event Type: Úspěch auditu
User: 

Computer Name: Admin-PC
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
	ID zabezpečení:		S-1-5-21-968559785-4062774837-3349199904-1000
	Název účtu:		Admin
	Doména účtu:		Admin-PC
	ID přihlášení:		0x4db5f

Objekt:
	Server objektu:	Security
	Typ objektu:	File
	Název objektu:	\Device\HarddiskVolume2\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\9178752-176e865e.idx
	ID popisovače:	0x224

Informace o procesu:
	ID procesu:	0xa44
	Název procesu:	C:\Windows\System32\dllhost.exe

Nastavení auditu:
	Původní popisovač zabezpečení:	S:AI
	Nový popisovač zabezpečení:		S:ARAI(AU;IDSA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-21-968559785-4062774837-3349199904-1000)
Record Number: 49340
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120106111818.047091-000
Event Type: Úspěch auditu
User: 

Computer Name: Admin-PC
Event Code: 4907
Message: Nastavení auditu objektu se změnila.

Předmět:
	ID zabezpečení:		S-1-5-21-968559785-4062774837-3349199904-1000
	Název účtu:		Admin
	Doména účtu:		Admin-PC
	ID přihlášení:		0x4db5f

Objekt:
	Server objektu:	Security
	Typ objektu:	File
	Název objektu:	\Device\HarddiskVolume2\Users\Admin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\44029d52-63a9a6b0
	ID popisovače:	0x2e8

Informace o procesu:
	ID procesu:	0xa44
	Název procesu:	C:\Windows\System32\dllhost.exe

Nastavení auditu:
	Původní popisovač zabezpečení:	S:AI
	Nový popisovač zabezpečení:		S:ARAI(AU;IDSA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;S-1-5-21-968559785-4062774837-3349199904-1000)
Record Number: 49339
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20120106111818.047091-000
Event Type: Úspěch auditu
User: 

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;c:\Program Files\Microsoft SQL Server\100\Tools\Binn\;c:\Program Files\Microsoft SQL Server\100\DTS\Binn\;C:\Program Files\QuickTime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"VS100COMNTOOLS"=c:\Program Files\Microsoft Visual Studio 10.0\Common7\Tools\
"CLASSPATH"=.;C:\Program Files\Java\jre7\lib\ext\QTJava.zip
"QTJAVA"=C:\Program Files\Java\jre7\lib\ext\QTJava.zip

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119398
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: RSIT - kontrola logu

#2 Příspěvek od Rudy »

Zdravím!
Poprosím o log ComboFix:
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Hellfik
Návštěvník
Návštěvník
Příspěvky: 90
Registrován: 28 kvě 2011 12:57

Re: RSIT - kontrola logu

#3 Příspěvek od Hellfik »

ComboFix 13-01-06.01 - Admin 07.01.2013 21:36:02.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2046.992 [GMT 1:00]
Spuštěný z: c:\users\Admin\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\users\Admin\AppData\Roaming\InstallDir
c:\users\Admin\AppData\Roaming\InstallDir\Server.exe
c:\users\Admin\AppData\Roaming\Microsoft\Windows\ox#7cCp.cfg
c:\users\Admin\AppData\Roaming\Microsoft\Windows\ox#7cCp.dat
c:\users\Admin\AppData\Roaming\Microsoft\Windows\ox#7cCp.xtr
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-07 do 2013-01-07 )))))))))))))))))))))))))))))))
.
.
2013-01-07 20:46 . 2013-01-07 20:46 -------- d-----w- c:\users\Admin\AppData\Local\temp
2013-01-07 20:46 . 2013-01-07 20:46 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-01-07 20:46 . 2013-01-07 20:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-07 19:29 . 2012-10-30 22:51 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-01-07 19:29 . 2012-10-30 22:51 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-01-07 19:29 . 2012-10-30 22:51 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2013-01-07 19:29 . 2012-10-30 22:51 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-01-07 19:29 . 2012-10-30 22:51 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-01-07 19:29 . 2012-10-30 22:51 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-01-07 19:27 . 2012-10-30 22:51 41224 ----a-w- c:\windows\avastSS.scr
2013-01-07 19:27 . 2012-10-30 22:50 227648 ----a-w- c:\windows\system32\aswBoot.exe
2013-01-07 18:42 . 2013-01-07 19:27 -------- d-----w- c:\programdata\AVAST Software
2013-01-07 18:42 . 2013-01-07 19:27 -------- d-----w- c:\program files\AVAST Software
2013-01-07 18:32 . 2013-01-07 18:34 -------- d-----w- c:\program files\trend micro
2013-01-07 18:32 . 2013-01-07 18:34 -------- d-----w- C:\rsit
2013-01-04 19:50 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C444F28A-73C3-4B84-99DF-338E0A5703B4}\mpengine.dll
2013-01-03 21:11 . 2013-01-03 21:11 -------- d-----w- c:\windows\system32\RTCOM
2013-01-03 21:08 . 2006-02-07 14:40 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2013-01-03 21:08 . 2006-02-07 14:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2013-01-03 21:08 . 2006-02-07 14:40 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2013-01-03 21:08 . 2005-11-13 22:19 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2013-01-03 21:08 . 2006-02-07 14:45 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2013-01-03 21:08 . 2013-01-03 21:08 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2013-01-03 21:08 . 2013-01-03 21:08 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-01-03 20:29 . 2013-01-03 20:31 -------- d-----w- c:\program files\QuickTime
2013-01-03 20:29 . 2013-01-03 20:29 -------- d-----w- c:\programdata\Apple Computer
2013-01-03 20:26 . 2013-01-03 20:26 -------- d-----w- c:\program files\Common Files\Apple
2013-01-03 20:25 . 2013-01-03 20:25 -------- d-----w- c:\users\Admin\AppData\Local\Apple
2013-01-03 20:24 . 2013-01-03 20:24 -------- d-----w- c:\program files\Apple Software Update
2013-01-03 20:24 . 2013-01-03 20:24 -------- d-----w- c:\programdata\Apple
2012-12-27 19:17 . 2012-12-27 19:19 339456 ----a-w- c:\windows\UIA200.exe
2012-12-27 19:10 . 2012-12-27 19:19 -------- d-----w- c:\program files\All Ten Fingers
2012-12-25 14:53 . 2012-12-25 14:53 -------- d-----w- c:\program files\uTorrent
2012-12-25 14:52 . 2012-12-26 00:19 -------- d-----w- c:\users\Admin\AppData\Roaming\uTorrent
2012-12-23 10:38 . 2012-12-23 10:38 -------- d-----w- C:\temp
2012-12-23 10:33 . 2012-08-30 19:13 6109032 ----a-w- c:\windows\system32\nvopencl.dll
2012-12-23 10:33 . 2012-08-30 19:13 2573672 ----a-w- c:\windows\system32\nvcuvid.dll
2012-12-23 10:33 . 2012-08-30 19:13 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-12-23 10:33 . 2012-08-30 19:13 12465512 ----a-w- c:\windows\system32\nvwgf2um.dll
2012-12-23 10:33 . 2012-08-30 19:13 10790760 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-12-23 10:33 . 2012-08-30 19:13 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-12-23 10:33 . 2012-08-30 19:13 19828584 ----a-w- c:\windows\system32\nvoglv32.dll
2012-12-23 10:33 . 2012-08-30 19:13 7626088 ----a-w- c:\windows\system32\nvcuda.dll
2012-12-23 10:33 . 2012-08-30 19:13 17559912 ----a-w- c:\windows\system32\nvcompiler.dll
2012-12-23 10:08 . 2012-12-23 10:08 -------- d-----w- c:\users\Admin\AppData\Local\Razer
2012-12-23 10:06 . 2012-12-23 10:06 -------- d-----w- c:\programdata\Razer
2012-12-23 10:06 . 2012-12-23 10:06 -------- d-----w- c:\program files\Razer
2012-12-22 21:42 . 2012-05-08 17:35 29528 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2012-12-22 21:42 . 2010-11-26 17:02 15672 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2012-12-22 21:36 . 2012-10-12 18:09 22912 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2012-12-22 21:01 . 2012-12-22 21:01 -------- d-----w- c:\programdata\IObit
2012-12-22 21:00 . 2012-12-22 21:42 -------- d-----w- c:\users\Admin\AppData\Roaming\IObit
2012-12-22 21:00 . 2012-12-22 21:42 -------- d-----w- c:\program files\IObit
2012-12-22 07:17 . 2012-12-16 10:50 293376 ----a-w- c:\windows\system32\atmfd.dll
2012-12-22 07:17 . 2012-12-16 13:12 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-19 06:37 . 2012-12-19 06:37 -------- d-----w- c:\users\Admin\AppData\Roaming\PDF Architect
2012-12-19 06:34 . 2012-12-19 06:34 -------- d-----w- c:\programdata\SaveByclick
2012-12-19 06:33 . 2012-12-19 06:33 -------- d-----w- c:\users\Admin\AppData\Roaming\APP_NAME_NON_STRING
2012-12-19 06:33 . 2012-12-19 06:33 -------- d-----w- c:\program files\PDF Architect
2012-12-19 06:31 . 2012-12-19 06:31 -------- d-----w- c:\users\Admin\AppData\Roaming\pdfforge
2012-12-19 06:31 . 2012-05-05 09:54 137000 ----a-w- c:\windows\system32\MSMAPI32.OCX
2012-12-19 06:31 . 2012-10-28 17:32 88576 ----a-w- c:\windows\system32\pdfcmon.dll
2012-12-19 06:31 . 2012-12-19 06:34 -------- d-----w- c:\program files\PDFCreator
2012-12-19 06:31 . 2012-05-05 09:54 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2012-12-14 06:19 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-12-14 06:19 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-12-14 06:19 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-12-14 06:19 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-12-14 06:19 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-12-14 06:19 . 2009-07-14 12:12 16896 ----a-w- c:\windows\system32\winusb.dll
2012-12-14 06:19 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-12-14 06:19 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-12-14 06:19 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-12-14 06:19 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2012-12-14 06:19 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2012-12-12 13:37 . 2012-11-13 01:36 2048000 ----a-w- c:\windows\system32\win32k.sys
2012-12-12 13:37 . 2012-11-02 10:18 376320 ----a-w- c:\windows\system32\dpnet.dll
2012-12-12 13:37 . 2012-11-02 08:26 23040 ----a-w- c:\windows\system32\dpnsvr.exe
2012-12-12 13:19 . 2012-08-21 11:47 224640 ----a-w- c:\windows\system32\drivers\volsnap.sys
2012-12-12 13:19 . 2012-11-13 01:29 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-11 13:33 . 2012-12-11 13:33 -------- d-----w- c:\users\Admin\.objectdb
2012-12-11 13:25 . 2012-12-11 13:25 -------- d-----w- c:\users\Admin\AppData\Roaming\VitySoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-01 13:20 . 2012-11-03 15:41 268952 ----a-w- c:\windows\system32\PnkBstrB.xtr
2013-01-01 13:20 . 2012-10-29 13:00 268952 ----a-w- c:\windows\system32\PnkBstrB.exe
2013-01-01 13:18 . 2012-10-31 20:24 137176 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2013-01-01 13:17 . 2012-10-29 13:00 268952 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-12-04 19:04 . 2012-10-29 13:00 22328 ----a-w- c:\users\Admin\AppData\Roaming\PnkBstrK.sys
2012-12-04 19:04 . 2012-12-04 19:04 682280 ----a-w- c:\windows\system32\pbsvc.exe
2012-12-03 15:54 . 2012-12-03 15:54 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2012-11-13 20:53 . 2012-11-13 20:53 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2012-11-04 04:27 . 2012-11-02 17:32 2377696 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2012-11-03 15:38 . 2012-10-29 13:00 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-11-02 17:33 . 2012-11-02 17:33 18368 ----a-w- c:\programdata\Microsoft\VSA\9.0\1033\ResourceCache.dll
2012-10-29 12:24 . 2012-10-29 12:24 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-10-18 20:16 . 2012-10-18 20:16 161792 ----a-w- c:\windows\system32\msls31.dll
2012-10-18 20:16 . 2012-10-18 20:16 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-10-18 20:16 . 2012-10-18 20:16 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-10-18 20:16 . 2012-10-18 20:16 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-10-18 20:16 . 2012-10-18 20:16 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-10-18 20:16 . 2012-10-18 20:16 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-10-18 20:16 . 2012-10-18 20:16 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-10-18 20:16 . 2012-10-18 20:16 367104 ----a-w- c:\windows\system32\html.iec
2012-10-18 20:16 . 2012-10-18 20:16 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-10-18 20:15 . 2012-10-18 20:15 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-10-18 20:15 . 2012-10-18 20:15 152064 ----a-w- c:\windows\system32\wextract.exe
2012-10-18 20:15 . 2012-10-18 20:15 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-10-18 20:15 . 2012-10-18 20:15 11776 ----a-w- c:\windows\system32\mshta.exe
2012-10-18 20:15 . 2012-10-18 20:15 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-10-18 20:15 . 2012-10-18 20:15 101888 ----a-w- c:\windows\system32\admparse.dll
2012-10-18 16:41 . 2012-10-18 16:41 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-18 16:41 . 2012-01-06 15:31 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-18 05:45 . 2012-10-18 05:45 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-18 05:45 . 2012-10-18 05:46 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-18 05:45 . 2012-01-06 15:33 746984 ----a-w- c:\windows\system32\deployJava1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{13022282-6B13-47E8-F00F-FE86C2560C92}]
2012-12-19 06:48 128000 ----a-w- c:\programdata\SaveByclick\50d1635b2f0f0.ocx
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711}]
2012-11-22 16:05 91784 ----a-w- c:\program files\PDF Architect\PDFIEHelper.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{25A3A431-30BB-47C8-AD6A-E1063801134F}"= "c:\program files\PDF Architect\PDFIEPlugin.dll" [2012-11-22 731784]
.
[HKEY_CLASSES_ROOT\clsid\{25a3a431-30bb-47c8-ad6a-e1063801134f}]
[HKEY_CLASSES_ROOT\PDFArchitectIEPlugin.PDFIEConverter.1]
[HKEY_CLASSES_ROOT\TypeLib\{78D9250B-1DEB-4469-9B35-591AB7D41CAA}]
[HKEY_CLASSES_ROOT\PDFArchitectIEPlugin.PDFIEConverter]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Advanced SystemCare 6"="c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-09-24 490880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-06-20 1316136]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-22 734872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-08-28 13:52 3671904 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor]
2011-10-04 09:28 220992 ----a-w- c:\program files\Software602\Print2PDF\Print2PDF.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
2008-08-01 15:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2012-11-09 10:27 17877168 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 07:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
S2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-05 16:50]
.
2013-01-07 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-05 16:50]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT3220468
uInternet Settings,ProxyServer = 127.0.0.1:3128
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
URLSearchHooks-{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)
URLSearchHooks-{7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
WebBrowser-{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - (no file)
WebBrowser-{7473B6BD-4691-4744-A82B-7854EB3D70B6} - (no file)
SafeBoot-WudfPf
SafeBoot-WudfRd
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-07 21:46
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2013-01-07 21:49:26
ComboFix-quarantined-files.txt 2013-01-07 20:49
.
Před spuštěním: Volných bajtů: 193 109 893 120
Po spuštění: Volných bajtů: 193 277 112 320
.
- - End Of File - - 173B9512D5E4B78B3FD0FA681AEE5757
Naposledy upravil(a) Mc_Murphy dne 08 led 2013 12:13, celkem upraveno 1 x.
Důvod: Log odstraněn z [Code].
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119398
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: RSIT - kontrola logu

#4 Příspěvek od Rudy »

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:
KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Collect::
c:\programdata\SaveByclick\50d1635b2f0f0.ocx

Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{13022282-6B13-47E8-F00F-FE86C2560C92}]

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

Reboot::
Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Hellfik
Návštěvník
Návštěvník
Příspěvky: 90
Registrován: 28 kvě 2011 12:57

Re: RSIT - kontrola logu

#5 Příspěvek od Hellfik »

ComboFix 13-01-06.01 - Admin 08.01.2013 7:03.4.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2046.1060 [GMT 1:00]
Spuštěný z: c:\users\Admin\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-08 do 2013-01-08 )))))))))))))))))))))))))))))))
.
.
2013-01-08 06:12 . 2013-01-08 06:12 -------- d-----w- c:\users\Admin\AppData\Local\temp
2013-01-08 06:12 . 2013-01-08 06:12 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-01-08 06:12 . 2013-01-08 06:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-07 19:29 . 2012-10-30 22:51 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-01-07 19:29 . 2012-10-30 22:51 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-01-07 19:29 . 2012-10-30 22:51 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2013-01-07 19:29 . 2012-10-30 22:51 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-01-07 19:29 . 2012-10-30 22:51 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-01-07 19:29 . 2012-10-30 22:51 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-01-07 19:27 . 2012-10-30 22:51 41224 ----a-w- c:\windows\avastSS.scr
2013-01-07 19:27 . 2012-10-30 22:50 227648 ----a-w- c:\windows\system32\aswBoot.exe
2013-01-07 18:42 . 2013-01-07 19:27 -------- d-----w- c:\programdata\AVAST Software
2013-01-07 18:42 . 2013-01-07 19:27 -------- d-----w- c:\program files\AVAST Software
2013-01-07 18:32 . 2013-01-07 18:34 -------- d-----w- c:\program files\trend micro
2013-01-07 18:32 . 2013-01-07 18:34 -------- d-----w- C:\rsit
2013-01-04 19:50 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{C444F28A-73C3-4B84-99DF-338E0A5703B4}\mpengine.dll
2013-01-03 21:11 . 2013-01-03 21:11 -------- d-----w- c:\windows\system32\RTCOM
2013-01-03 21:08 . 2006-02-07 14:40 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2013-01-03 21:08 . 2006-02-07 14:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2013-01-03 21:08 . 2006-02-07 14:40 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2013-01-03 21:08 . 2005-11-13 22:19 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2013-01-03 21:08 . 2006-02-07 14:45 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2013-01-03 21:08 . 2013-01-03 21:08 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2013-01-03 21:08 . 2013-01-03 21:08 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-01-03 20:29 . 2013-01-03 20:31 -------- d-----w- c:\program files\QuickTime
2013-01-03 20:29 . 2013-01-03 20:29 -------- d-----w- c:\programdata\Apple Computer
2013-01-03 20:26 . 2013-01-03 20:26 -------- d-----w- c:\program files\Common Files\Apple
2013-01-03 20:25 . 2013-01-03 20:25 -------- d-----w- c:\users\Admin\AppData\Local\Apple
2013-01-03 20:24 . 2013-01-03 20:24 -------- d-----w- c:\program files\Apple Software Update
2013-01-03 20:24 . 2013-01-03 20:24 -------- d-----w- c:\programdata\Apple
2012-12-27 19:17 . 2012-12-27 19:19 339456 ----a-w- c:\windows\UIA200.exe
2012-12-27 19:10 . 2012-12-27 19:19 -------- d-----w- c:\program files\All Ten Fingers
2012-12-25 14:53 . 2012-12-25 14:53 -------- d-----w- c:\program files\uTorrent
2012-12-25 14:52 . 2012-12-26 00:19 -------- d-----w- c:\users\Admin\AppData\Roaming\uTorrent
2012-12-23 10:38 . 2012-12-23 10:38 -------- d-----w- C:\temp
2012-12-23 10:33 . 2012-08-30 19:13 6109032 ----a-w- c:\windows\system32\nvopencl.dll
2012-12-23 10:33 . 2012-08-30 19:13 2573672 ----a-w- c:\windows\system32\nvcuvid.dll
2012-12-23 10:33 . 2012-08-30 19:13 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-12-23 10:33 . 2012-08-30 19:13 12465512 ----a-w- c:\windows\system32\nvwgf2um.dll
2012-12-23 10:33 . 2012-08-30 19:13 10790760 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-12-23 10:33 . 2012-08-30 19:13 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-12-23 10:33 . 2012-08-30 19:13 19828584 ----a-w- c:\windows\system32\nvoglv32.dll
2012-12-23 10:33 . 2012-08-30 19:13 7626088 ----a-w- c:\windows\system32\nvcuda.dll
2012-12-23 10:33 . 2012-08-30 19:13 17559912 ----a-w- c:\windows\system32\nvcompiler.dll
2012-12-23 10:08 . 2012-12-23 10:08 -------- d-----w- c:\users\Admin\AppData\Local\Razer
2012-12-23 10:06 . 2012-12-23 10:06 -------- d-----w- c:\programdata\Razer
2012-12-23 10:06 . 2012-12-23 10:06 -------- d-----w- c:\program files\Razer
2012-12-22 21:42 . 2012-05-08 17:35 29528 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2012-12-22 21:42 . 2010-11-26 17:02 15672 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2012-12-22 21:36 . 2012-10-12 18:09 22912 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2012-12-22 21:01 . 2012-12-22 21:01 -------- d-----w- c:\programdata\IObit
2012-12-22 21:00 . 2012-12-22 21:42 -------- d-----w- c:\users\Admin\AppData\Roaming\IObit
2012-12-22 21:00 . 2012-12-22 21:42 -------- d-----w- c:\program files\IObit
2012-12-22 07:17 . 2012-12-16 10:50 293376 ----a-w- c:\windows\system32\atmfd.dll
2012-12-22 07:17 . 2012-12-16 13:12 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-19 06:37 . 2012-12-19 06:37 -------- d-----w- c:\users\Admin\AppData\Roaming\PDF Architect
2012-12-19 06:34 . 2012-12-19 06:34 -------- d-----w- c:\programdata\SaveByclick
2012-12-19 06:33 . 2012-12-19 06:33 -------- d-----w- c:\users\Admin\AppData\Roaming\APP_NAME_NON_STRING
2012-12-19 06:33 . 2012-12-19 06:33 -------- d-----w- c:\program files\PDF Architect
2012-12-19 06:31 . 2012-12-19 06:31 -------- d-----w- c:\users\Admin\AppData\Roaming\pdfforge
2012-12-19 06:31 . 2012-05-05 09:54 137000 ----a-w- c:\windows\system32\MSMAPI32.OCX
2012-12-19 06:31 . 2012-10-28 17:32 88576 ----a-w- c:\windows\system32\pdfcmon.dll
2012-12-19 06:31 . 2012-12-19 06:34 -------- d-----w- c:\program files\PDFCreator
2012-12-19 06:31 . 2012-05-05 09:54 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2012-12-14 06:19 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-12-14 06:19 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-12-14 06:19 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-12-14 06:19 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-12-14 06:19 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-12-14 06:19 . 2009-07-14 12:12 16896 ----a-w- c:\windows\system32\winusb.dll
2012-12-14 06:19 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-12-14 06:19 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-12-14 06:19 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-12-14 06:19 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2012-12-14 06:19 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2012-12-12 13:37 . 2012-11-13 01:36 2048000 ----a-w- c:\windows\system32\win32k.sys
2012-12-12 13:37 . 2012-11-02 10:18 376320 ----a-w- c:\windows\system32\dpnet.dll
2012-12-12 13:37 . 2012-11-02 08:26 23040 ----a-w- c:\windows\system32\dpnsvr.exe
2012-12-12 13:19 . 2012-08-21 11:47 224640 ----a-w- c:\windows\system32\drivers\volsnap.sys
2012-12-12 13:19 . 2012-11-13 01:29 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-11 13:33 . 2012-12-11 13:33 -------- d-----w- c:\users\Admin\.objectdb
2012-12-11 13:25 . 2012-12-11 13:25 -------- d-----w- c:\users\Admin\AppData\Roaming\VitySoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-01 13:20 . 2012-11-03 15:41 268952 ----a-w- c:\windows\system32\PnkBstrB.xtr
2013-01-01 13:20 . 2012-10-29 13:00 268952 ----a-w- c:\windows\system32\PnkBstrB.exe
2013-01-01 13:18 . 2012-10-31 20:24 137176 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2013-01-01 13:17 . 2012-10-29 13:00 268952 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-12-04 19:04 . 2012-10-29 13:00 22328 ----a-w- c:\users\Admin\AppData\Roaming\PnkBstrK.sys
2012-12-04 19:04 . 2012-12-04 19:04 682280 ----a-w- c:\windows\system32\pbsvc.exe
2012-12-03 15:54 . 2012-12-03 15:54 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2012-11-13 20:53 . 2012-11-13 20:53 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2012-11-04 04:27 . 2012-11-02 17:32 2377696 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2012-11-03 15:38 . 2012-10-29 13:00 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-11-02 17:33 . 2012-11-02 17:33 18368 ----a-w- c:\programdata\Microsoft\VSA\9.0\1033\ResourceCache.dll
2012-10-29 12:24 . 2012-10-29 12:24 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-10-18 20:16 . 2012-10-18 20:16 161792 ----a-w- c:\windows\system32\msls31.dll
2012-10-18 20:16 . 2012-10-18 20:16 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-10-18 20:16 . 2012-10-18 20:16 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-10-18 20:16 . 2012-10-18 20:16 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-10-18 20:16 . 2012-10-18 20:16 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-10-18 20:16 . 2012-10-18 20:16 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-10-18 20:16 . 2012-10-18 20:16 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-10-18 20:16 . 2012-10-18 20:16 367104 ----a-w- c:\windows\system32\html.iec
2012-10-18 20:16 . 2012-10-18 20:16 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-10-18 20:15 . 2012-10-18 20:15 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-10-18 20:15 . 2012-10-18 20:15 152064 ----a-w- c:\windows\system32\wextract.exe
2012-10-18 20:15 . 2012-10-18 20:15 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-10-18 20:15 . 2012-10-18 20:15 11776 ----a-w- c:\windows\system32\mshta.exe
2012-10-18 20:15 . 2012-10-18 20:15 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-10-18 20:15 . 2012-10-18 20:15 101888 ----a-w- c:\windows\system32\admparse.dll
2012-10-18 16:41 . 2012-10-18 16:41 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-18 16:41 . 2012-01-06 15:31 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-18 05:45 . 2012-10-18 05:45 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-18 05:45 . 2012-10-18 05:46 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-18 05:45 . 2012-01-06 15:33 746984 ----a-w- c:\windows\system32\deployJava1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711}]
2012-11-22 16:05 91784 ----a-w- c:\program files\PDF Architect\PDFIEHelper.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{25A3A431-30BB-47C8-AD6A-E1063801134F}"= "c:\program files\PDF Architect\PDFIEPlugin.dll" [2012-11-22 731784]
.
[HKEY_CLASSES_ROOT\clsid\{25a3a431-30bb-47c8-ad6a-e1063801134f}]
[HKEY_CLASSES_ROOT\PDFArchitectIEPlugin.PDFIEConverter.1]
[HKEY_CLASSES_ROOT\TypeLib\{78D9250B-1DEB-4469-9B35-591AB7D41CAA}]
[HKEY_CLASSES_ROOT\PDFArchitectIEPlugin.PDFIEConverter]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Advanced SystemCare 6"="c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-09-24 490880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-06-20 1316136]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-22 734872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-08-28 13:52 3671904 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor]
2011-10-04 09:28 220992 ----a-w- c:\program files\Software602\Print2PDF\Print2PDF.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
2008-08-01 15:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2012-11-09 10:27 17877168 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 07:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
R2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [x]
R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - CFCATCHME
*NewlyCreated* - WS2IFSL
*Deregistered* - CFcatchme
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-05 16:50]
.
2013-01-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-05 16:50]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT3220468
uInternet Settings,ProxyServer = 127.0.0.1:3128
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-08 07:12
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2013-01-08 07:15:22
ComboFix-quarantined-files.txt 2013-01-08 06:15
ComboFix2.txt 2013-01-07 20:49
.
Před spuštěním: Volných bajtů: 193 431 957 504
Po spuštění: Volných bajtů: 193 394 262 016
.
- - End Of File - - 07114FD53FD7C2D6ABE44EE5940E0B54
Nahr nˇ probŘhlo ŁspŘçnŘ
Naposledy upravil(a) Mc_Murphy dne 08 led 2013 12:14, celkem upraveno 1 x.
Důvod: Log opět odstraněn z [Code] - nedávej to do toho ani ani do [Quote]!
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119398
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: RSIT - kontrola logu

#6 Příspěvek od Rudy »

CF jste nespustil pomocí skriptu, není záznam v hlavčce logu. Zkuste znovu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Hellfik
Návštěvník
Návštěvník
Příspěvky: 90
Registrován: 28 kvě 2011 12:57

Re: RSIT - kontrola logu

#7 Příspěvek od Hellfik »

ComboFix 13-01-08.01 - Admin 08.01.2013 21:08:04.5.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.2046.1206 [GMT 1:00]
Spuštěný z: c:\users\Admin\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\Admin\Downloads\CFScript.txt
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
file zipped: c:\programdata\SaveByclick\50d1635b2f0f0.ocx
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-08 do 2013-01-08 )))))))))))))))))))))))))))))))
.
.
2013-01-08 20:18 . 2013-01-08 20:20 -------- d-----w- c:\users\Admin\AppData\Local\temp
2013-01-08 20:18 . 2013-01-08 20:18 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-01-08 20:18 . 2013-01-08 20:18 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-01-08 13:17 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{8B044F92-C976-4750-BCA9-B37FAD757277}\mpengine.dll
2013-01-07 19:29 . 2012-10-30 22:51 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-01-07 19:29 . 2012-10-30 22:51 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-01-07 19:29 . 2012-10-30 22:51 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2013-01-07 19:29 . 2012-10-30 22:51 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-01-07 19:29 . 2012-10-30 22:51 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-01-07 19:29 . 2012-10-30 22:51 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-01-07 19:27 . 2012-10-30 22:51 41224 ----a-w- c:\windows\avastSS.scr
2013-01-07 19:27 . 2012-10-30 22:50 227648 ----a-w- c:\windows\system32\aswBoot.exe
2013-01-07 18:42 . 2013-01-07 19:27 -------- d-----w- c:\programdata\AVAST Software
2013-01-07 18:42 . 2013-01-07 19:27 -------- d-----w- c:\program files\AVAST Software
2013-01-07 18:32 . 2013-01-07 18:34 -------- d-----w- c:\program files\trend micro
2013-01-07 18:32 . 2013-01-07 18:34 -------- d-----w- C:\rsit
2013-01-03 21:11 . 2013-01-03 21:11 -------- d-----w- c:\windows\system32\RTCOM
2013-01-03 21:08 . 2006-02-07 14:40 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2013-01-03 21:08 . 2006-02-07 14:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2013-01-03 21:08 . 2006-02-07 14:40 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2013-01-03 21:08 . 2005-11-13 22:19 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2013-01-03 21:08 . 2006-02-07 14:45 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2013-01-03 21:08 . 2013-01-03 21:08 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
2013-01-03 21:08 . 2013-01-03 21:08 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin7.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin6.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-01-03 20:31 . 2013-01-03 20:31 159744 ----a-w- c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-01-03 20:29 . 2013-01-03 20:31 -------- d-----w- c:\program files\QuickTime
2013-01-03 20:29 . 2013-01-03 20:29 -------- d-----w- c:\programdata\Apple Computer
2013-01-03 20:26 . 2013-01-03 20:26 -------- d-----w- c:\program files\Common Files\Apple
2013-01-03 20:25 . 2013-01-03 20:25 -------- d-----w- c:\users\Admin\AppData\Local\Apple
2013-01-03 20:24 . 2013-01-03 20:24 -------- d-----w- c:\program files\Apple Software Update
2013-01-03 20:24 . 2013-01-03 20:24 -------- d-----w- c:\programdata\Apple
2012-12-27 19:17 . 2012-12-27 19:19 339456 ----a-w- c:\windows\UIA200.exe
2012-12-27 19:10 . 2012-12-27 19:19 -------- d-----w- c:\program files\All Ten Fingers
2012-12-25 14:53 . 2012-12-25 14:53 -------- d-----w- c:\program files\uTorrent
2012-12-25 14:52 . 2012-12-26 00:19 -------- d-----w- c:\users\Admin\AppData\Roaming\uTorrent
2012-12-23 10:38 . 2012-12-23 10:38 -------- d-----w- C:\temp
2012-12-23 10:33 . 2012-08-30 19:13 6109032 ----a-w- c:\windows\system32\nvopencl.dll
2012-12-23 10:33 . 2012-08-30 19:13 2573672 ----a-w- c:\windows\system32\nvcuvid.dll
2012-12-23 10:33 . 2012-08-30 19:13 1866088 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-12-23 10:33 . 2012-08-30 19:13 12465512 ----a-w- c:\windows\system32\nvwgf2um.dll
2012-12-23 10:33 . 2012-08-30 19:13 10790760 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-12-23 10:33 . 2012-08-30 19:13 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-12-23 10:33 . 2012-08-30 19:13 19828584 ----a-w- c:\windows\system32\nvoglv32.dll
2012-12-23 10:33 . 2012-08-30 19:13 7626088 ----a-w- c:\windows\system32\nvcuda.dll
2012-12-23 10:33 . 2012-08-30 19:13 17559912 ----a-w- c:\windows\system32\nvcompiler.dll
2012-12-23 10:08 . 2012-12-23 10:08 -------- d-----w- c:\users\Admin\AppData\Local\Razer
2012-12-23 10:06 . 2012-12-23 10:06 -------- d-----w- c:\programdata\Razer
2012-12-23 10:06 . 2012-12-23 10:06 -------- d-----w- c:\program files\Razer
2012-12-22 21:42 . 2012-05-08 17:35 29528 ----a-w- c:\windows\system32\SmartDefragBootTime.exe
2012-12-22 21:42 . 2010-11-26 17:02 15672 ----a-w- c:\windows\system32\drivers\SmartDefragDriver.sys
2012-12-22 21:36 . 2012-10-12 18:09 22912 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2012-12-22 21:01 . 2012-12-22 21:01 -------- d-----w- c:\programdata\IObit
2012-12-22 21:00 . 2012-12-22 21:42 -------- d-----w- c:\users\Admin\AppData\Roaming\IObit
2012-12-22 21:00 . 2012-12-22 21:42 -------- d-----w- c:\program files\IObit
2012-12-22 07:17 . 2012-12-16 10:50 293376 ----a-w- c:\windows\system32\atmfd.dll
2012-12-22 07:17 . 2012-12-16 13:12 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-19 06:37 . 2012-12-19 06:37 -------- d-----w- c:\users\Admin\AppData\Roaming\PDF Architect
2012-12-19 06:34 . 2012-12-19 06:34 -------- d-----w- c:\programdata\SaveByclick
2012-12-19 06:33 . 2012-12-19 06:33 -------- d-----w- c:\users\Admin\AppData\Roaming\APP_NAME_NON_STRING
2012-12-19 06:33 . 2012-12-19 06:33 -------- d-----w- c:\program files\PDF Architect
2012-12-19 06:31 . 2012-12-19 06:31 -------- d-----w- c:\users\Admin\AppData\Roaming\pdfforge
2012-12-19 06:31 . 2012-05-05 09:54 137000 ----a-w- c:\windows\system32\MSMAPI32.OCX
2012-12-19 06:31 . 2012-10-28 17:32 88576 ----a-w- c:\windows\system32\pdfcmon.dll
2012-12-19 06:31 . 2012-12-19 06:34 -------- d-----w- c:\program files\PDFCreator
2012-12-19 06:31 . 2012-05-05 09:54 23552 ----a-w- c:\windows\system32\MSMPIDE.DLL
2012-12-14 06:19 . 2012-07-26 02:46 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-12-14 06:19 . 2012-07-26 02:33 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-12-14 06:19 . 2012-07-26 02:32 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-12-14 06:19 . 2012-07-26 03:20 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-12-14 06:19 . 2012-07-26 03:20 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-12-14 06:19 . 2009-07-14 12:12 16896 ----a-w- c:\windows\system32\winusb.dll
2012-12-14 06:19 . 2012-07-26 03:39 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-12-14 06:19 . 2012-07-26 03:39 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-12-14 06:19 . 2012-07-26 03:20 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-12-14 06:19 . 2012-07-26 03:21 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2012-12-14 06:19 . 2012-07-26 03:20 613888 ----a-w- c:\windows\system32\WUDFx.dll
2012-12-12 13:37 . 2012-11-13 01:36 2048000 ----a-w- c:\windows\system32\win32k.sys
2012-12-12 13:37 . 2012-11-02 10:18 376320 ----a-w- c:\windows\system32\dpnet.dll
2012-12-12 13:37 . 2012-11-02 08:26 23040 ----a-w- c:\windows\system32\dpnsvr.exe
2012-12-12 13:19 . 2012-08-21 11:47 224640 ----a-w- c:\windows\system32\drivers\volsnap.sys
2012-12-12 13:19 . 2012-11-13 01:29 2048 ----a-w- c:\windows\system32\tzres.dll
2012-12-11 13:33 . 2012-12-11 13:33 -------- d-----w- c:\users\Admin\.objectdb
2012-12-11 13:25 . 2012-12-11 13:25 -------- d-----w- c:\users\Admin\AppData\Roaming\VitySoft
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-01-01 13:20 . 2012-11-03 15:41 268952 ----a-w- c:\windows\system32\PnkBstrB.xtr
2013-01-01 13:20 . 2012-10-29 13:00 268952 ----a-w- c:\windows\system32\PnkBstrB.exe
2013-01-01 13:18 . 2012-10-31 20:24 137176 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2013-01-01 13:17 . 2012-10-29 13:00 268952 ----a-w- c:\windows\system32\PnkBstrB.ex0
2012-12-04 19:04 . 2012-10-29 13:00 22328 ----a-w- c:\users\Admin\AppData\Roaming\PnkBstrK.sys
2012-12-04 19:04 . 2012-12-04 19:04 682280 ----a-w- c:\windows\system32\pbsvc.exe
2012-12-03 15:54 . 2012-12-03 15:54 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2012-11-13 20:53 . 2012-11-13 20:53 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2012-11-13 20:53 . 2012-11-13 20:53 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2012-11-04 04:27 . 2012-11-02 17:32 2377696 ----a-w- c:\programdata\Microsoft\VisualStudio\10.0\1033\ResourceCache.dll
2012-11-03 15:38 . 2012-10-29 13:00 76888 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-11-02 17:33 . 2012-11-02 17:33 18368 ----a-w- c:\programdata\Microsoft\VSA\9.0\1033\ResourceCache.dll
2012-10-29 12:24 . 2012-10-29 12:24 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-10-18 20:16 . 2012-10-18 20:16 161792 ----a-w- c:\windows\system32\msls31.dll
2012-10-18 20:16 . 2012-10-18 20:16 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-10-18 20:16 . 2012-10-18 20:16 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-10-18 20:16 . 2012-10-18 20:16 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-10-18 20:16 . 2012-10-18 20:16 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-10-18 20:16 . 2012-10-18 20:16 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-10-18 20:16 . 2012-10-18 20:16 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-10-18 20:16 . 2012-10-18 20:16 367104 ----a-w- c:\windows\system32\html.iec
2012-10-18 20:16 . 2012-10-18 20:16 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-10-18 20:15 . 2012-10-18 20:15 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-10-18 20:15 . 2012-10-18 20:15 152064 ----a-w- c:\windows\system32\wextract.exe
2012-10-18 20:15 . 2012-10-18 20:15 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-10-18 20:15 . 2012-10-18 20:15 11776 ----a-w- c:\windows\system32\mshta.exe
2012-10-18 20:15 . 2012-10-18 20:15 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-10-18 20:15 . 2012-10-18 20:15 101888 ----a-w- c:\windows\system32\admparse.dll
2012-10-18 16:41 . 2012-10-18 16:41 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-18 16:41 . 2012-01-06 15:31 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-18 05:45 . 2012-10-18 05:45 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-18 05:45 . 2012-10-18 05:46 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-18 05:45 . 2012-01-06 15:33 746984 ----a-w- c:\windows\system32\deployJava1.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711}]
2012-11-22 16:05 91784 ----a-w- c:\program files\PDF Architect\PDFIEHelper.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{25A3A431-30BB-47C8-AD6A-E1063801134F}"= "c:\program files\PDF Architect\PDFIEPlugin.dll" [2012-11-22 731784]
.
[HKEY_CLASSES_ROOT\clsid\{25a3a431-30bb-47c8-ad6a-e1063801134f}]
[HKEY_CLASSES_ROOT\PDFArchitectIEPlugin.PDFIEConverter.1]
[HKEY_CLASSES_ROOT\TypeLib\{78D9250B-1DEB-4469-9B35-591AB7D41CAA}]
[HKEY_CLASSES_ROOT\PDFArchitectIEPlugin.PDFIEConverter]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Advanced SystemCare 6"="c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-09-24 490880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-06-20 1316136]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-03-17 421888]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe [2006-10-23 40048]
Adobe Reader Synchronizer.lnk - c:\program files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe [2006-10-22 734872]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
2012-08-28 13:52 3671904 ----a-w- c:\program files\DAEMON Tools Lite\DTLite.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor]
2011-10-04 09:28 220992 ----a-w- c:\program files\Software602\Print2PDF\Print2PDF.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]
2008-08-01 15:14 202032 ----a-w- c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2012-11-09 10:27 17877168 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2012-07-03 07:04 252848 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe
.
S2 602XML Updater;602Updater;c:\program files\Common Files\soft602\602updsvc\602updsvc.exe [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [x]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-05 16:50]
.
2013-01-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-05 16:50]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT3220468
uInternet Settings,ProxyServer = 127.0.0.1:3128
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
SafeBoot-Wdf01000.sys
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-08 21:22
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
c:\program files\PDF Architect\HelperService.exe
c:\program files\PDF Architect\ConversionService.exe
c:\windows\system32\PnkBstrA.exe
c:\program files\Microsoft SQL Server\90\Shared\sqlwriter.exe
c:\program files\TeamViewer\Version7\TeamViewer_Service.exe
c:\program files\NVIDIA Corporation\Display\nvxdsync.exe
c:\windows\system32\nvvsvc.exe
c:\program files\TeamViewer\Version7\TeamViewer.exe
c:\program files\IObit\Advanced SystemCare 6\Monitor.exe
c:\program files\IObit\Smart Defrag 2\SmartDefrag.exe
c:\program files\TeamViewer\Version7\tv_w32.exe
c:\windows\system32\conime.exe
c:\program files\NVIDIA Corporation\Display\nvtray.exe
c:\program files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\servicing\TrustedInstaller.exe
.
**************************************************************************
.
Celkový čas: 2013-01-08 21:27:02 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-01-08 20:26
ComboFix2.txt 2013-01-08 06:16
ComboFix3.txt 2013-01-07 20:49
.
Před spuštěním: Volných bajtů: 191 247 065 088
Po spuštění: Volných bajtů: 191 317 909 504
.
- - End Of File - - DAE349DDDAB93507578B181B823EE0D1
Nahr nˇ probŘhlo ŁspŘçnŘ
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119398
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: RSIT - kontrola logu

#8 Příspěvek od Rudy »

Log již vypadá čistý.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Hellfik
Návštěvník
Návštěvník
Příspěvky: 90
Registrován: 28 kvě 2011 12:57

Re: RSIT - kontrola logu

#9 Příspěvek od Hellfik »

dobrá. Děkuji
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119398
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: RSIT - kontrola logu

#10 Příspěvek od Rudy »

Nemáte zač!
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Sekce pouze pro Vzorné návštěvníky“