Prevence - tatkovo stare PC

[roxtidy]

Ahoj,
prosim o kontrolu a pomoc. Zkoušel jsem ledajaka nastaveni, ale stale pomaly start WIN, pomaly start Mozzily, pomale nacitani stranek, youtube videa se sekaji (zvuk plynule, video neplynule).
PC je pouzivano prakticky jen na otcovo serfovani. uz si nevim rady...
diky moc!

RSIT log:

Logfile of random's system information tool 1.06 (written by random/random)
Run by admin at 2013-08-07 18:37:50
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 22 GB (57%) free of 38 GB
Total RAM: 992 MB (54% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-09-16 69632]
"SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]
"SiS Tray"=C:\WINDOWS\system32\sistray.EXE [2003-06-26 303104]
"SiS KHooker"=C:\WINDOWS\system32\khooker.exe []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
""= []
"NokiaSuite.exe"=C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-12-21 1090040]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{559592e5-86ed-11e1-b5fe-000e2e9c3986}]
shell\AutoRun\command - E:\iStudio.exe


======List of files/folders created in the last 1 months======

2013-08-07 18:37:52 ----D---- C:\Program Files\trend micro
2013-08-07 18:37:49 ----D---- C:\rsit
2013-08-07 08:24:23 ----D---- C:\WINDOWS\ie8updates
2013-08-07 08:21:32 ----D---- C:\Program Files\Seznam.cz
2013-08-07 08:21:17 ----HD---- C:\WINDOWS\msdownld.tmp
2013-08-07 08:19:50 ----D---- C:\WINDOWS\WBEM
2013-08-07 08:15:43 ----HDC---- C:\WINDOWS\ie8
2013-08-07 08:15:43 ----D---- C:\WINDOWS\system32\cs-CZ
2013-08-07 07:00:27 ----D---- C:\Program Files\Mozilla Firefox
2013-08-04 20:22:59 ----D---- C:\WINDOWS\system32\MRT

======List of files/folders modified in the last 1 months======

2013-08-07 18:37:52 ----RD---- C:\Program Files
2013-08-07 18:35:48 ----D---- C:\WINDOWS\Prefetch
2013-08-07 18:32:32 ----D---- C:\WINDOWS\Temp
2013-08-07 18:16:37 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-08-07 17:40:42 ----D---- C:\WINDOWS
2013-08-07 13:39:33 ----HD---- C:\WINDOWS\inf
2013-08-07 13:39:31 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-08-07 13:39:30 ----D---- C:\WINDOWS\system32
2013-08-07 13:39:22 ----HD---- C:\WINDOWS\$hf_mig$
2013-08-07 13:39:16 ----A---- C:\WINDOWS\imsins.BAK
2013-08-07 13:38:19 ----D---- C:\WINDOWS\system32\CatRoot2
2013-08-07 09:08:58 ----D---- C:\WINDOWS\Help
2013-08-07 09:08:58 ----D---- C:\Program Files\Internet Explorer
2013-08-07 08:20:07 ----D---- C:\WINDOWS\system32\config
2013-08-07 08:19:25 ----D---- C:\WINDOWS\Media
2013-08-07 07:36:53 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-08-07 07:03:43 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-08-07 06:18:30 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-08-04 20:22:40 ----A---- C:\WINDOWS\system32\MRT.exe
2013-07-20 08:30:21 ----SHD---- C:\WINDOWS\Installer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2013-05-09 49760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2013-07-05 770344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2013-07-05 369584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2013-05-09 56080]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2004-08-17 39936]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\drivers\srvkp.sys [2003-10-02 11264]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-05-09 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-09-21 2278784]
R3 Ptserlp;PCTEL Serial Device Driver for PCI; C:\WINDOWS\system32\DRIVERS\ptserlp.sys [2001-08-17 112574]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2004-01-06 432384]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2004-08-03 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2004-08-03 57600]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2004-08-03 17024]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
S3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2006-06-09 1373120]
S3 FreshIO;FreshIO; \??\C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2012-11-09 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2012-11-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2012-11-09 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2004-08-04 25600]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2012-11-09 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
R2 Pctspk;PCTEL Speaker Phone; C:\WINDOWS\system32\pctspk.exe [2001-10-24 86016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-12-19 732648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-01 136176]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-07 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-01 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-07 117656]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

[cernohous13]

Vítám tě u nás

Proč tam nevidím SP3 - http://windows.microsoft.com/cs-CZ/wind ... pack-3-sp3
doinstaluj + aktualizace a nový RSIT

[roxtidy]

ahoj,
tady je

Logfile of random's system information tool 1.06 (written by random/random)
Run by admin at 2013-08-07 23:39:51
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 22 GB (57%) free of 38 GB
Total RAM: 992 MB (58% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-09-16 69632]
"SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]
"SiS Tray"=C:\WINDOWS\system32\sistray.EXE [2003-06-26 303104]
"SiS KHooker"=C:\WINDOWS\system32\khooker.exe []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
""= []
"NokiaSuite.exe"=C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-12-21 1090040]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{559592e5-86ed-11e1-b5fe-000e2e9c3986}]
shell\AutoRun\command - E:\iStudio.exe


======List of files/folders created in the last 1 months======

2013-08-07 23:22:12 ----D---- C:\WINDOWS\LastGood
2013-08-07 23:12:04 ----D---- C:\WINDOWS\Prefetch
2013-08-07 22:58:21 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2013-08-07 22:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2013-08-07 22:54:12 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2013-08-07 22:52:38 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2013-08-07 22:51:09 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2013-08-07 22:49:25 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2013-08-07 22:47:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2013-08-07 22:46:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2013-08-07 22:44:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2013-08-07 22:43:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2013-08-07 22:41:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2013-08-07 22:40:11 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2013-08-07 22:38:27 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2013-08-07 22:36:28 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2013-08-07 22:33:18 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2013-08-07 22:31:33 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2013-08-07 22:30:10 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2013-08-07 22:28:52 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2013-08-07 22:27:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2013-08-07 22:26:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2013-08-07 22:24:50 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2013-08-07 22:23:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2013-08-07 22:19:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2013-08-07 22:18:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2013-08-07 22:16:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2013-08-07 22:14:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2013-08-07 22:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2013-08-07 22:11:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2013-08-07 22:09:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2013-08-07 22:08:26 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2013-08-07 22:06:53 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2013-08-07 22:05:21 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2013-08-07 22:03:39 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2013-08-07 22:01:33 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2013-08-07 21:59:54 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2013-08-07 21:58:22 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2013-08-07 21:57:01 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2013-08-07 21:55:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2013-08-07 21:54:07 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2013-08-07 21:52:32 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2013-08-07 21:51:00 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2013-08-07 21:49:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2013-08-07 21:47:21 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2013-08-07 21:45:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2013-08-07 21:43:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2013-08-07 21:41:39 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2013-08-07 21:40:12 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2013-08-07 21:38:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2013-08-07 21:37:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2013-08-07 21:35:17 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2013-08-07 21:33:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2013-08-07 21:32:14 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2013-08-07 21:30:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2013-08-07 21:28:55 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2013-08-07 21:27:09 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2013-08-07 21:25:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2013-08-07 21:24:29 ----D---- C:\WINDOWS\LastGood.Tmp
2013-08-07 21:17:05 ----N---- C:\WINDOWS\system32\smtpapi.dll
2013-08-07 21:17:05 ----N---- C:\WINDOWS\system32\rwnh.dll
2013-08-07 21:17:05 ----N---- C:\WINDOWS\system32\comsdupd.exe
2013-08-07 21:16:58 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2013-08-07 21:16:58 ----N---- C:\WINDOWS\system32\aaclient.dll
2013-08-07 21:16:57 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2013-08-07 21:16:57 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2013-08-07 21:16:57 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2013-08-07 21:16:56 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2013-08-07 21:16:56 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2013-08-07 21:16:56 ----N---- C:\WINDOWS\system32\ati3duag.dll
2013-08-07 21:16:55 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2013-08-07 21:16:55 ----N---- C:\WINDOWS\system32\azroles.dll
2013-08-07 21:16:52 ----N---- C:\WINDOWS\system32\credssp.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dot3api.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dimsroam.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2013-08-07 21:16:50 ----N---- C:\WINDOWS\system32\eapolqec.dll
2013-08-07 21:16:50 ----N---- C:\WINDOWS\system32\dot3ui.dll
2013-08-07 21:16:50 ----N---- C:\WINDOWS\system32\dot3svc.dll
2013-08-07 21:16:50 ----N---- C:\WINDOWS\system32\dot3msm.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eapsvc.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eapqec.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eappprxy.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eapphost.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eappgnui.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eappcfg.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2013-08-07 21:16:47 ----N---- C:\WINDOWS\system32\ieencode.dll
2013-08-07 21:16:47 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2013-08-07 21:16:45 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2013-08-07 21:16:44 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2013-08-07 21:16:43 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2013-08-07 21:16:43 ----N---- C:\WINDOWS\system32\kmsvc.dll
2013-08-07 21:16:43 ----N---- C:\WINDOWS\system32\kbdpash.dll
2013-08-07 21:16:43 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2013-08-07 21:16:42 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2013-08-07 21:16:41 ----N---- C:\WINDOWS\system32\mmcperf.exe
2013-08-07 21:16:41 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2013-08-07 21:16:41 ----N---- C:\WINDOWS\system32\mmcex.dll
2013-08-07 21:16:41 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2013-08-07 21:16:40 ----N---- C:\WINDOWS\system32\mssha.dll
2013-08-07 21:16:39 ----N---- C:\WINDOWS\system32\napmontr.dll
2013-08-07 21:16:39 ----N---- C:\WINDOWS\system32\napipsec.dll
2013-08-07 21:16:39 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2013-08-07 21:16:39 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2013-08-07 21:16:38 ----N---- C:\WINDOWS\system32\napstat.exe
2013-08-07 21:16:37 ----N---- C:\WINDOWS\system32\onex.dll
2013-08-07 21:16:37 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2013-08-07 21:16:36 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\rasqec.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\qutil.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\qcliprov.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\qagentrt.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\qagent.dll
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\slgen.dll
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\slextspk.dll
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\slcoinst.dll
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\setupn.exe
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\s3gnb.dll
2013-08-07 21:16:33 ----N---- C:\WINDOWS\system32\slserv.exe
2013-08-07 21:16:33 ----N---- C:\WINDOWS\system32\slrundll.exe
2013-08-07 21:16:31 ----N---- C:\WINDOWS\system32\verclsid.exe
2013-08-07 21:16:31 ----N---- C:\WINDOWS\system32\tspkg.dll
2013-08-07 21:16:31 ----N---- C:\WINDOWS\system32\tsgqec.dll
2013-08-07 21:16:29 ----N---- C:\WINDOWS\system32\wlanapi.dll
2013-08-07 21:16:29 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2013-08-07 21:16:29 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2013-08-07 21:16:28 ----N---- C:\WINDOWS\system32\wmphoto.dll
2013-08-07 21:16:26 ----N---- C:\WINDOWS\slrundll.exe
2013-08-07 21:16:20 ----D---- C:\WINDOWS\l2schemas
2013-08-07 21:16:19 ----D---- C:\WINDOWS\system32\cs
2013-08-07 21:16:19 ----D---- C:\WINDOWS\system32\bits
2013-08-07 21:03:22 ----D---- C:\WINDOWS\network diagnostic
2013-08-07 21:00:04 ----A---- C:\WINDOWS\002674_.tmp
2013-08-07 20:52:03 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2013-08-07 18:37:52 ----D---- C:\Program Files\trend micro
2013-08-07 18:37:49 ----D---- C:\rsit
2013-08-07 08:24:23 ----D---- C:\WINDOWS\ie8updates
2013-08-07 08:21:32 ----D---- C:\Program Files\Seznam.cz
2013-08-07 08:21:17 ----HD---- C:\WINDOWS\msdownld.tmp
2013-08-07 08:19:50 ----D---- C:\WINDOWS\WBEM
2013-08-07 08:15:43 ----HDC---- C:\WINDOWS\ie8
2013-08-07 08:15:43 ----D---- C:\WINDOWS\system32\cs-CZ
2013-08-07 07:00:27 ----D---- C:\Program Files\Mozilla Firefox
2013-08-04 20:22:59 ----D---- C:\WINDOWS\system32\MRT

======List of files/folders modified in the last 1 months======

2013-08-07 23:22:42 ----D---- C:\WINDOWS\SoftwareDistribution
2013-08-07 23:22:37 ----D---- C:\WINDOWS\Temp
2013-08-07 23:22:35 ----HD---- C:\WINDOWS\inf
2013-08-07 23:22:35 ----D---- C:\WINDOWS\system32
2013-08-07 23:22:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-08-07 23:22:28 ----D---- C:\WINDOWS\Help
2013-08-07 23:22:12 ----D---- C:\WINDOWS
2013-08-07 23:15:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-07 23:14:45 ----A---- C:\WINDOWS\OEWABLog.txt
2013-08-07 23:12:40 ----D---- C:\WINDOWS\system32\CatRoot2
2013-08-07 23:12:34 ----A---- C:\WINDOWS\setuplog.txt
2013-08-07 23:11:21 ----D---- C:\WINDOWS\system32\Setup
2013-08-07 23:11:21 ----D---- C:\WINDOWS\AppPatch
2013-08-07 23:11:20 ----D---- C:\WINDOWS\system32\wbem
2013-08-07 23:11:19 ----RSD---- C:\WINDOWS\Fonts
2013-08-07 23:11:10 ----D---- C:\WINDOWS\system32\drivers
2013-08-07 23:10:41 ----D---- C:\WINDOWS\security
2013-08-07 23:10:29 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-08-07 22:59:47 ----D---- C:\WINDOWS\system32\CatRoot
2013-08-07 22:45:29 ----D---- C:\Program Files\Outlook Express
2013-08-07 22:35:20 ----D---- C:\Program Files\Movie Maker
2013-08-07 21:29:55 ----D---- C:\Program Files\Messenger
2013-08-07 21:17:48 ----D---- C:\WINDOWS\WinSxS
2013-08-07 21:17:30 ----D---- C:\Program Files\Windows Media Player
2013-08-07 21:17:09 ----D---- C:\WINDOWS\ehome
2013-08-07 21:17:04 ----D---- C:\WINDOWS\system32\inetsrv
2013-08-07 21:17:03 ----D---- C:\WINDOWS\ime
2013-08-07 21:16:24 ----D---- C:\WINDOWS\system32\usmt
2013-08-07 21:16:22 ----D---- C:\Program Files\Internet Explorer
2013-08-07 21:16:20 ----SHD---- C:\WINDOWS\Installer
2013-08-07 21:16:19 ----D---- C:\WINDOWS\PeerNet
2013-08-07 21:08:58 ----D---- C:\WINDOWS\ServicePackFiles
2013-08-07 21:08:29 ----D---- C:\WINDOWS\system32\Restore
2013-08-07 21:08:29 ----D---- C:\WINDOWS\system32\npp
2013-08-07 21:08:25 ----D---- C:\WINDOWS\msagent
2013-08-07 21:08:21 ----D---- C:\WINDOWS\srchasst
2013-08-07 21:08:19 ----D---- C:\Program Files\NetMeeting
2013-08-07 21:08:16 ----D---- C:\WINDOWS\system32\Com
2013-08-07 21:08:09 ----D---- C:\Program Files\Windows NT
2013-08-07 21:08:01 ----D---- C:\Program Files\Common Files\System
2013-08-07 21:07:16 ----D---- C:\WINDOWS\system32\oobe
2013-08-07 21:07:12 ----D---- C:\WINDOWS\system
2013-08-07 20:59:53 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-08-07 18:37:52 ----RD---- C:\Program Files
2013-08-07 13:39:22 ----HD---- C:\WINDOWS\$hf_mig$
2013-08-07 08:20:07 ----D---- C:\WINDOWS\system32\config
2013-08-07 08:19:25 ----D---- C:\WINDOWS\Media
2013-08-07 07:36:53 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-08-07 07:03:43 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-08-07 06:18:30 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-08-04 20:22:40 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2013-05-09 49760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2013-07-05 770344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2013-07-05 369584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2013-05-09 56080]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\drivers\srvkp.sys [2003-10-02 11264]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-05-09 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-09-21 2278784]
R3 Ptserlp;PCTEL Serial Device Driver for PCI; C:\WINDOWS\system32\DRIVERS\ptserlp.sys [2001-08-17 112574]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2004-01-06 432384]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2006-06-09 1373120]
S3 FreshIO;FreshIO; \??\C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2012-11-09 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2012-11-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2012-11-09 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2012-11-09 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
R2 Pctspk;PCTEL Speaker Phone; C:\WINDOWS\system32\pctspk.exe [2001-10-24 86016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-12-19 732648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-01 136176]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-07 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-01 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-07 117656]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

[cernohous13]

Výborně ale nesedí mi tam systémové datum a čas - oprav

Stáhni a nainstaluj MBAM zde http://www.malwarebytes.org/products/malwarebytes_free/
Spustit > na 3.záložce "Aktualizace" > Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Úplná kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení a program nech zatím spuštěný

[roxtidy]

MBAM spusteny - cekam na vysledek a hodim ho sem
Ten sys cas jsem ted opravil pres ikonu vpravo dole - byvaly s tim problemy - vzdy kdyz jsem to takhle opravil tak se to po vypnuti/apnuti PC zase rozhodilo a ukazovalo to nesmyslny cas

[roxtidy]

tak vysledek mam, akorat se mi nezobrazil zadny notepad. pouze naskocilo toto - viz priloha

[roxtidy]

tak uz asi ok, dal jsem "ulozit protokol" a naskocilo to. Jen ten cas jsem opravoval az v prubehu testu, takze to zrejme ukazuje spatne hodnoty.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.08.26.04

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
admin :: DOMA-7B99B74591 [administrátor]

Ochrana: Povolena

8.8.2013 8:40:53
MBAM-log-2013-08-26 (20-44-47).txt

Typ: Kompletní kontrola (C:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 246252
Uplynulý čas: 1 hodin, 43 minut, 41 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 6
C:\Documents and Settings\admin\Local Settings\Temp\KMP_3.5.0.77.exe (PUP.Optional.Softonic) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\admin\Local Settings\Temp\KMP_3.6.0.87.exe (PUP.Optional.Softonic) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\admin\Local Settings\Temp\ibtmpc810619\component_600 (Trojan.PUP.Optional.FileScout.A) -> Nebyla provedena žádná instrukce.
C:\Documents and Settings\admin\Local Settings\Temp\ibtmpc810619\component_613 (Trojan.PUP.Optional.SpeedAnalysis.A) -> Nebyla provedena žádná instrukce.
C:\RECYCLER\S-1-5-21-2000478354-1078081533-682003330-1003\Dc82.exe (PUP.Optional.InstallBrain) -> Nebyla provedena žádná instrukce.
C:\RECYCLER\S-1-5-21-2000478354-1078081533-682003330-1003\Dc83.exe (PUP.Optional.InstallBrain) -> Nebyla provedena žádná instrukce.

(konec)

[roxtidy]

jinak PC musim vypnout.nemuzu ho nechat zapnute do posouzeni.
zatim nic mazat nebudu dle instrukce. Zitra pripadne spustim test znovu, predpokladam, ze vysledek bude stejny a do te doby bude posouzeni, tak pak budu nasledovat instrukce
diky

[cernohous13]

V pohodě

v MBAM nech vše odstranit - pak odinstaluj

pokud se po startu mění čas, je zřejmě vybitá baterie CMOS
malá čočková baterie na základové desce - vyměnit

jak se chová PC - ještě něco k řešení?

[roxtidy]

bohuzel je to snad jeste horsi. Pomale otvirani obycejnych slozek atd.
Ted se to asi po 15minutach trochu rozebehlo.
Napada me snad jen maly vykon HW (Celeron 2,2GHz, 1GB RAM, integrovana grafika)...na druhou stranu je to opravdu jen na ten internet.

Jeste pridam aktualni RSIT log, kdyby byl potreba

Logfile of random's system information tool 1.06 (written by random/random)
Run by admin at 2013-08-27 18:57:48
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 21 GB (56%) free of 38 GB
Total RAM: 992 MB (68% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-05-11 49152]
"Cmaudio"=RunDll32 cmicnfg.cpl,CMICtrlWnd []
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2004-09-16 69632]
"SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]
"SiS Tray"=C:\WINDOWS\system32\sistray.EXE [2003-06-26 303104]
"SiS KHooker"=C:\WINDOWS\system32\khooker.exe []
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
""= []
"NokiaSuite.exe"=C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [2012-12-21 1090040]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="C:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="C:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{559592e5-86ed-11e1-b5fe-000e2e9c3986}]
shell\AutoRun\command - E:\iStudio.exe


======List of files/folders created in the last 1 months======

2013-08-27 18:54:08 ----D---- C:\WINDOWS\LastGood
2013-08-27 18:31:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-08-27 18:30:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2013-08-27 18:29:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2013-08-27 18:25:38 ----N---- C:\WINDOWS\system32\iacenc.dll
2013-08-08 08:21:53 ----D---- C:\Documents and Settings\admin\Data aplikací\Malwarebytes
2013-08-08 08:21:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2013-08-07 23:22:19 ----A---- C:\WINDOWS\system32\wuapi.dll.mui
2013-08-07 23:12:04 ----D---- C:\WINDOWS\Prefetch
2013-08-07 22:58:21 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2013-08-07 22:56:27 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2013-08-07 22:54:12 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2013-08-07 22:52:38 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2013-08-07 22:51:09 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2013-08-07 22:49:25 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2013-08-07 22:47:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2013-08-07 22:46:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2013-08-07 22:44:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2013-08-07 22:43:20 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2013-08-07 22:41:53 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2013-08-07 22:40:11 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2013-08-07 22:38:27 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2013-08-07 22:36:28 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2013-08-07 22:33:18 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2013-08-07 22:31:33 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2013-08-07 22:30:10 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2013-08-07 22:28:52 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2013-08-07 22:27:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2013-08-07 22:26:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2013-08-07 22:24:50 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2013-08-07 22:23:03 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2013-08-07 22:19:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2013-08-07 22:18:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2013-08-07 22:16:24 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2013-08-07 22:14:55 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2013-08-07 22:13:20 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2013-08-07 22:11:42 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2013-08-07 22:09:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2013-08-07 22:08:26 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2013-08-07 22:06:53 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2013-08-07 22:05:21 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2013-08-07 22:03:39 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2013-08-07 22:01:33 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2013-08-07 21:59:54 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2013-08-07 21:58:22 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2013-08-07 21:57:01 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2013-08-07 21:55:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2013-08-07 21:54:07 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2013-08-07 21:52:32 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2013-08-07 21:51:00 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2013-08-07 21:49:22 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2013-08-07 21:47:21 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2013-08-07 21:45:16 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2013-08-07 21:43:04 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2013-08-07 21:41:39 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2013-08-07 21:40:12 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2013-08-07 21:38:37 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2013-08-07 21:37:00 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2013-08-07 21:35:17 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2013-08-07 21:33:50 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2013-08-07 21:32:14 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2013-08-07 21:30:48 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2013-08-07 21:28:55 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2013-08-07 21:27:09 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2013-08-07 21:25:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2013-08-07 21:17:05 ----N---- C:\WINDOWS\system32\smtpapi.dll
2013-08-07 21:17:05 ----N---- C:\WINDOWS\system32\rwnh.dll
2013-08-07 21:17:05 ----N---- C:\WINDOWS\system32\comsdupd.exe
2013-08-07 21:16:58 ----N---- C:\WINDOWS\system32\ati2cqag.dll
2013-08-07 21:16:58 ----N---- C:\WINDOWS\system32\aaclient.dll
2013-08-07 21:16:57 ----N---- C:\WINDOWS\system32\ati3d1ag.dll
2013-08-07 21:16:57 ----N---- C:\WINDOWS\system32\ati2dvag.dll
2013-08-07 21:16:57 ----N---- C:\WINDOWS\system32\ati2dvaa.dll
2013-08-07 21:16:56 ----N---- C:\WINDOWS\system32\ativvaxx.dll
2013-08-07 21:16:56 ----N---- C:\WINDOWS\system32\ativtmxx.dll
2013-08-07 21:16:56 ----N---- C:\WINDOWS\system32\ati3duag.dll
2013-08-07 21:16:55 ----N---- C:\WINDOWS\system32\bitsprx4.dll
2013-08-07 21:16:55 ----N---- C:\WINDOWS\system32\azroles.dll
2013-08-07 21:16:52 ----N---- C:\WINDOWS\system32\credssp.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dot3gpclnt.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dot3dlg.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dot3cfg.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dot3api.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dimsroam.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dimsntfy.dll
2013-08-07 21:16:51 ----N---- C:\WINDOWS\system32\dhcpqec.dll
2013-08-07 21:16:50 ----N---- C:\WINDOWS\system32\eapolqec.dll
2013-08-07 21:16:50 ----N---- C:\WINDOWS\system32\dot3ui.dll
2013-08-07 21:16:50 ----N---- C:\WINDOWS\system32\dot3svc.dll
2013-08-07 21:16:50 ----N---- C:\WINDOWS\system32\dot3msm.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eapsvc.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eapqec.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eappprxy.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eapphost.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eappgnui.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eappcfg.dll
2013-08-07 21:16:49 ----N---- C:\WINDOWS\system32\eapp3hst.dll
2013-08-07 21:16:47 ----N---- C:\WINDOWS\system32\ieencode.dll
2013-08-07 21:16:47 ----N---- C:\WINDOWS\system32\hsfcisp2.dll
2013-08-07 21:16:45 ----N---- C:\WINDOWS\system32\kbdbhc.dll
2013-08-07 21:16:44 ----N---- C:\WINDOWS\system32\kbdiultn.dll
2013-08-07 21:16:43 ----N---- C:\WINDOWS\system32\l2gpstore.dll
2013-08-07 21:16:43 ----N---- C:\WINDOWS\system32\kmsvc.dll
2013-08-07 21:16:43 ----N---- C:\WINDOWS\system32\kbdpash.dll
2013-08-07 21:16:43 ----N---- C:\WINDOWS\system32\kbdnepr.dll
2013-08-07 21:16:42 ----N---- C:\WINDOWS\system32\mdmxsdk.dll
2013-08-07 21:16:41 ----N---- C:\WINDOWS\system32\mmcperf.exe
2013-08-07 21:16:41 ----N---- C:\WINDOWS\system32\mmcfxcommon.dll
2013-08-07 21:16:41 ----N---- C:\WINDOWS\system32\mmcex.dll
2013-08-07 21:16:41 ----N---- C:\WINDOWS\system32\microsoft.managementconsole.dll
2013-08-07 21:16:40 ----N---- C:\WINDOWS\system32\mssha.dll
2013-08-07 21:16:39 ----N---- C:\WINDOWS\system32\napmontr.dll
2013-08-07 21:16:39 ----N---- C:\WINDOWS\system32\napipsec.dll
2013-08-07 21:16:39 ----N---- C:\WINDOWS\system32\mtxparhd.dll
2013-08-07 21:16:39 ----N---- C:\WINDOWS\system32\msshavmsg.dll
2013-08-07 21:16:38 ----N---- C:\WINDOWS\system32\napstat.exe
2013-08-07 21:16:37 ----N---- C:\WINDOWS\system32\onex.dll
2013-08-07 21:16:37 ----N---- C:\WINDOWS\system32\nv4_disp.dll
2013-08-07 21:16:36 ----N---- C:\WINDOWS\system32\photometadatahandler.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\rhttpaa.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\rasqec.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\qutil.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\qcliprov.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\qagentrt.dll
2013-08-07 21:16:35 ----N---- C:\WINDOWS\system32\qagent.dll
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\slgen.dll
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\slextspk.dll
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\slcoinst.dll
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\setupn.exe
2013-08-07 21:16:34 ----N---- C:\WINDOWS\system32\s3gnb.dll
2013-08-07 21:16:33 ----N---- C:\WINDOWS\system32\slserv.exe
2013-08-07 21:16:33 ----N---- C:\WINDOWS\system32\slrundll.exe
2013-08-07 21:16:31 ----N---- C:\WINDOWS\system32\verclsid.exe
2013-08-07 21:16:31 ----N---- C:\WINDOWS\system32\tspkg.dll
2013-08-07 21:16:31 ----N---- C:\WINDOWS\system32\tsgqec.dll
2013-08-07 21:16:29 ----N---- C:\WINDOWS\system32\wlanapi.dll
2013-08-07 21:16:29 ----N---- C:\WINDOWS\system32\windowscodecsext.dll
2013-08-07 21:16:29 ----N---- C:\WINDOWS\system32\windowscodecs.dll
2013-08-07 21:16:28 ----N---- C:\WINDOWS\system32\wmphoto.dll
2013-08-07 21:16:26 ----N---- C:\WINDOWS\slrundll.exe
2013-08-07 21:16:20 ----D---- C:\WINDOWS\l2schemas
2013-08-07 21:16:19 ----D---- C:\WINDOWS\system32\cs
2013-08-07 21:16:19 ----D---- C:\WINDOWS\system32\bits
2013-08-07 21:03:22 ----D---- C:\WINDOWS\network diagnostic
2013-08-07 21:00:04 ----A---- C:\WINDOWS\002674_.tmp
2013-08-07 20:52:03 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2013-08-07 18:37:52 ----D---- C:\Program Files\trend micro
2013-08-07 18:37:49 ----D---- C:\rsit
2013-08-07 08:24:23 ----D---- C:\WINDOWS\ie8updates
2013-08-07 08:21:32 ----D---- C:\Program Files\Seznam.cz
2013-08-07 08:21:17 ----HD---- C:\WINDOWS\msdownld.tmp
2013-08-07 08:19:50 ----D---- C:\WINDOWS\WBEM
2013-08-07 08:15:43 ----HDC---- C:\WINDOWS\ie8
2013-08-07 08:15:43 ----D---- C:\WINDOWS\system32\cs-CZ
2013-08-07 07:00:27 ----D---- C:\Program Files\Mozilla Firefox
2013-08-04 20:22:59 ----D---- C:\WINDOWS\system32\MRT

======List of files/folders modified in the last 1 months======

2013-08-27 18:59:34 ----D---- C:\WINDOWS
2013-08-27 18:57:45 ----HD---- C:\WINDOWS\inf
2013-08-27 18:54:55 ----HD---- C:\WINDOWS\$hf_mig$
2013-08-27 18:54:32 ----D---- C:\WINDOWS\Temp
2013-08-27 18:54:31 ----RD---- C:\Program Files
2013-08-27 18:54:30 ----D---- C:\WINDOWS\system32\drivers
2013-08-27 18:54:02 ----D---- C:\WINDOWS\system32\CatRoot2
2013-08-27 18:31:41 ----A---- C:\WINDOWS\SchedLgU.Txt
2013-08-27 18:31:19 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-08-27 18:30:49 ----A---- C:\WINDOWS\imsins.BAK
2013-08-27 18:30:40 ----D---- C:\WINDOWS\system32
2013-08-27 18:29:39 ----D---- C:\Program Files\Outlook Express
2013-08-27 18:07:08 ----D---- C:\WINDOWS\Help
2013-08-07 23:22:42 ----D---- C:\WINDOWS\SoftwareDistribution
2013-08-07 23:15:55 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-08-07 23:14:45 ----A---- C:\WINDOWS\OEWABLog.txt
2013-08-07 23:12:34 ----A---- C:\WINDOWS\setuplog.txt
2013-08-07 23:11:21 ----D---- C:\WINDOWS\system32\Setup
2013-08-07 23:11:21 ----D---- C:\WINDOWS\AppPatch
2013-08-07 23:11:20 ----D---- C:\WINDOWS\system32\wbem
2013-08-07 23:11:19 ----RSD---- C:\WINDOWS\Fonts
2013-08-07 23:10:41 ----D---- C:\WINDOWS\security
2013-08-07 22:59:47 ----D---- C:\WINDOWS\system32\CatRoot
2013-08-07 22:35:20 ----D---- C:\Program Files\Movie Maker
2013-08-07 21:29:55 ----D---- C:\Program Files\Messenger
2013-08-07 21:17:48 ----D---- C:\WINDOWS\WinSxS
2013-08-07 21:17:30 ----D---- C:\Program Files\Windows Media Player
2013-08-07 21:17:09 ----D---- C:\WINDOWS\ehome
2013-08-07 21:17:04 ----D---- C:\WINDOWS\system32\inetsrv
2013-08-07 21:17:03 ----D---- C:\WINDOWS\ime
2013-08-07 21:16:24 ----D---- C:\WINDOWS\system32\usmt
2013-08-07 21:16:22 ----D---- C:\Program Files\Internet Explorer
2013-08-07 21:16:20 ----SHD---- C:\WINDOWS\Installer
2013-08-07 21:16:19 ----D---- C:\WINDOWS\PeerNet
2013-08-07 21:08:58 ----D---- C:\WINDOWS\ServicePackFiles
2013-08-07 21:08:29 ----D---- C:\WINDOWS\system32\Restore
2013-08-07 21:08:29 ----D---- C:\WINDOWS\system32\npp
2013-08-07 21:08:25 ----D---- C:\WINDOWS\msagent
2013-08-07 21:08:21 ----D---- C:\WINDOWS\srchasst
2013-08-07 21:08:19 ----D---- C:\Program Files\NetMeeting
2013-08-07 21:08:16 ----D---- C:\WINDOWS\system32\Com
2013-08-07 21:08:09 ----D---- C:\Program Files\Windows NT
2013-08-07 21:08:01 ----D---- C:\Program Files\Common Files\System
2013-08-07 21:07:16 ----D---- C:\WINDOWS\system32\oobe
2013-08-07 21:07:12 ----D---- C:\WINDOWS\system
2013-08-07 20:59:53 ----D---- C:\WINDOWS\system32\ReinstallBackups
2013-08-07 08:20:07 ----D---- C:\WINDOWS\system32\config
2013-08-07 08:19:25 ----D---- C:\WINDOWS\Media
2013-08-07 07:36:53 ----SD---- C:\WINDOWS\Downloaded Program Files
2013-08-07 07:03:43 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-08-07 06:18:30 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2013-08-04 20:22:40 ----A---- C:\WINDOWS\system32\MRT.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AswRdr;aswRdr; C:\WINDOWS\system32\drivers\AswRdr.sys [2013-05-09 49760]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2013-07-05 770344]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2013-07-05 369584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2013-05-09 56080]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\drivers\srvkp.sys [2003-10-02 11264]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2013-05-09 29816]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2004-09-21 2278784]
R3 Ptserlp;PCTEL Serial Device Driver for PCI; C:\WINDOWS\system32\DRIVERS\ptserlp.sys [2001-08-17 112574]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2004-01-06 432384]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-14 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-14 17152]
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
S3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2006-06-09 1373120]
S3 FreshIO;FreshIO; \??\C:\Program Files\FreshDevices\FreshDiagnose\FreshIO.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-03-08 51120]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-03-08 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-03-08 21744]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2012-11-09 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2012-11-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2012-11-09 8192]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2012-11-09 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]
R2 Pctspk;PCTEL Speaker Phone; C:\WINDOWS\system32\pctspk.exe [2001-10-24 86016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-12-19 732648]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-01 136176]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-07 257416]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-09-01 136176]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-08-07 117656]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

-----------------EOF-----------------

[cernohous13]

Začínáme čistit

stáhni a spusť http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
některé Antiviry jej mohou blokovat, proto je budeš muset na tu chvíli odstavit
- Zvol možnost Prohledat a poté Smazat a následně Zpráva - otevře se log, ten sem vlož

Stáhni Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Ulož jej na plochu a spusť - zobrazí se licenční podminky -> start libovolnou klávesou.
Bude vytvořena záloha a proběhne skenování.
Vyskočí log (nebo je uložen zde c:\JRT jako JRT.txt) - zkopíruj jej sem

Stáhni AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Ulož nejlépe na plochu -> ukonči všechny programy -> spusť AdwCleaner -> klikni na Search po dokončení na Clean
bude provedena oprava, restartuje se - (případně restartuj) a vypadne log C:\AdwCleaner\AdwCleaner[S?].txt , jeho obsah vložíš sem

[roxtidy]

RogueKiller V8.6.7 [Aug 28 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.adlice.com/forum/
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : admin [Práva správce]
Mód : Odebrat -- Datum : 08/28/2013 18:17:01
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 1 ¤¤¤
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 1 ¤¤¤
[All Users][SUSP UNIC] HP Digital Imaging Monitor.lnk : C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk @C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [-][-] -> VYMAZÁNO

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts


127.0.0.1 localhost


¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: WDC WD400BB-75DEA0 +++++
--- User ---
[MBR] 98fe6cafeec5d517372d669d8105b635
[BSP] 0f38a7114687febbf5370d40cd2d21be : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 38138 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[0]_D_08282013_181701.txt >>
RKreport[0]_S_08282013_181631.txt

[roxtidy]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.4 (08.22.2013:1)
OS: Microsoft Windows XP x86
Ran by admin on st 28.08.2013 at 18:20:37,48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440}



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 28.08.2013 at 18:37:31,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[roxtidy]

# AdwCleaner v3.001 - Report created 28/08/2013 at 18:43:42
# Updated 24/08/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : admin - DOMA-7B99B74591
# Running from : C:\Documents and Settings\admin\Plocha\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\DOCUME~1\admin\LOCALS~1\Temp\AskSearch

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v23.0.1 (cs)

[ File : C:\Documents and Settings\admin\Data aplikací\Mozilla\Firefox\Profiles\j79k5sk8.default-1375851295640\prefs.js ]


-\\ Google Chrome v29.0.1547.57

[ File : C:\Documents and Settings\admin\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1310 octets] - [28/08/2013 18:40:50]
AdwCleaner[S0].txt - [1241 octets] - [28/08/2013 18:43:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1301 octets] ##########

[roxtidy]

Rogue Killer mi vytvoril na plose slozku "RK_Quarantine", ktera obsahuje 3 soubory >>> prosim o info, co s touto slozkou delat

diky moc