zpomaleni NTB s win XP

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
petr.vera.
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 10 Led 2014 00:21

zpomaleni NTB s win XP

#1 Příspěvek od petr.vera. »

DD, prosím o kontrolu logu z FRST

činnost NTB se v poslední době neuvěřitelně zpomalila (odezvy v programech a CHROMu).

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-01-2014 01
Ran by Administrator (administrator) on HP8710WS on 10-01-2014 00:34:00
Running from C:\Documents and Settings\Administrator\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(SafeBoot International) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(Microsoft Corporation) C:\Windows\system32\scardsvr.exe
(Software602 a.s.) C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
(ABBYY) C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
(Intel Corporation) C:\Program Files\Intel\AMT\atchksrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(C-Dilla Ltd) C:\Windows\system32\drivers\CDANTSRV.EXE
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerService32.exe
(Hewlett-Packard Ltd) C:\Windows\system32\flcdlock.exe
() C:\Program Files\ICQ6Toolbar\ICQ Service.exe
(Infineon Technologies AG) C:\Windows\system32\IFXSPMGT.exe
(Infineon Technologies AG) C:\Windows\system32\IFXTCS.exe
(InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files\Intel\AMT\LMS.exe
(Motive Communications, Inc.) C:\Program Files\Common Files\Motive\McciCMService.exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
(Infineon Technologies AG) C:\Windows\system32\IfxPsdSv.exe
() C:\Novadigm\ManagementAgent\nvdkit.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
(Intel Corporation) C:\Program Files\Intel\AMT\UNS.exe
(Microsoft Corporation) C:\Windows\system32\mqsvc.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\system32\mqtgsvc.exe
(Gemfor s.r.o.) C:\Program Files\T-Mobile\Web'n'walk Manager\ameisvc.exe
(Cognizance Corporation) C:\Program Files\Hewlett-Packard\IAM\Bin\asghost.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker32.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe
(Intel Corporation) C:\Program Files\Intel\AMT\atchk.exe
(Hewlett-Packard Corporation) C:\Windows\system32\accelerometerST.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Neobyte Solutions) C:\Program Files\Titan Backup\TitanBackup.exe
(Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\wcescomm.exe
(Gemfor s.r.o.) C:\Program Files\T-Mobile\Web'n'walk Manager\Manager.exe
(ABBYY) C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe
(Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\rapimgr.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Nokia) C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(NetWork Scanner) C:\Windows\twain_32\A3PRO18U16K\SrvMod.exe
(Microsoft Corporation) C:\Program Files\Windows Desktop Search\WindowsSearch.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
() C:\Program Files\NAS Backup Master Program\MESListen.exe
() C:\Program Files\SaveSnap\SaveSnap.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
(Nokia) C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [FileOpenBroker] - C:\Program Files\FileOpen\Services\FileOpenBroker32.exe [840624 2012-11-07] (FileOpen Systems Inc.)
HKLM\...\Run: [WatchDog] - C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [192512 2007-05-23] (InterVideo Inc.)
HKLM\...\Run: [SoundMAXPnP] - C:\Program Files\Analog Devices\Core\smax4pnp.exe [872448 2007-01-05] (Analog Devices, Inc.)
HKLM\...\Run: [SoundMAX] - C:\Program Files\Analog Devices\SoundMAX\SMax4.exe [729088 2006-07-13] (Analog Devices, Inc.)
HKLM\...\Run: [PTHOSTTR] - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe [145184 2007-01-09] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [atchk] - C:\Program Files\Intel\AMT\atchk.exe [404248 2007-04-10] (Intel Corporation)
HKLM\...\Run: [AccelerometerSysTrayApplet] - C:\Windows\system32\accelerometerST.exe [124928 2007-01-24] (Hewlett-Packard Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
Winlogon\Notify\DeviceNP: C:\Windows\system32\DeviceNP.dll (Hewlett-Packard Limited)
Winlogon\Notify\OneCard: C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll (Cognizance Corporation)
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [484904 2007-04-19] (Hewlett-Packard Company)
HKCU\...\Run: [AdobeUpdater] - "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe"
HKCU\...\Run: [Titan Backup] - C:\Program Files\Titan Backup\TitanBackup.exe [4240832 2009-06-18] (Neobyte Solutions)
HKCU\...\Run: [H/PC Connection Agent] - C:\Program Files\Microsoft ActiveSync\wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation)
HKCU\...\Run: [X-Lite 4] - "C:\Program Files\CounterPath\X-Lite 4\X-Lite4.exe" -bootload
HKCU\...\Run: [ICQ] - "C:\Program Files\ICQ7.4\ICQ.exe" silent loginmode=4
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-04-09] (Google Inc.)
HKCU\...\Run: [T-Mobile Communication Centre] - C:\Program Files\T-Mobile\Web'n'walk Manager\Manager.exe [1368768 2012-08-22] (Gemfor s.r.o.)
HKCU\...\Run: [ABBYY Screenshot Reader Bonus] - C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe [939272 2012-08-26] (ABBYY)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1090040 2012-12-21] (Nokia)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Hoolapp Android] - "C:\DOCUME~1\ADMINI~1\DATAAP~1\HOOLAP~1\Hoolapp.exe" /Minimized
HKCU\...\RunOnce: [Shockwave Updater] - C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" -"http://hry.1001hry.cz/699bbd6eba34f4b37 ... =1&nobtn=1" [468408 2009-07-31] (Adobe Systems, Inc.)
MountPoints2: {188c0e85-f8b3-11e0-8eb9-002186d7b9f4} - F:\Autorun.exe
MountPoints2: {24f61528-7678-11e0-8dcc-00215c2f12c9} - F:\Autorun.exe
MountPoints2: {24f61530-7678-11e0-8dcc-00215c2f12c9} - H:\Autorun.exe
MountPoints2: {30782a80-88ad-11e2-9985-002186d7b9f4} - F:\Autorun.exe
MountPoints2: {322c82bd-6ad1-11e1-8f59-002186d7b9f4} - F:\fscommand\LS_Start_Launch.cmd
MountPoints2: {405aedc5-3f4a-11e1-8f10-002186d7b9f4} - F:\CrossLink.exe
MountPoints2: {4362d62f-7a03-11e0-8dd2-002186d7b9f4} - G:\Autorun.exe
MountPoints2: {a266bfc9-768b-11e1-8f69-002186d7b9f4} - F:\CrossLink.exe
MountPoints2: {b3d36568-3da5-11df-8c07-002186d7b9f4} - F:\EmDesk.exe
HKU\Default User\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2007-04-19] (Hewlett-Packard Company)
AppInit_DLLs: C:\Windows\system32\APSHook.dll [70144 2007-02-26] (Bioscrypt Inc.)
Lsa: [Notification Packages] SbHpNp scecli ASWLNPkg
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\NAS Backup Master Detector.lnk
ShortcutTarget: NAS Backup Master Detector.lnk -> C:\Program Files\NAS Backup Master Program\MESListen.exe ()
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\SaveSnap.lnk
ShortcutTarget: SaveSnap.lnk -> C:\Program Files\SaveSnap\SaveSnap.exe ()
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\DVD Check.lnk
ShortcutTarget: DVD Check.lnk -> C:\Program Files\InterVideo\DVD Check\DVDCheck.exe (InterVideo Inc.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\SrvMod.lnk
ShortcutTarget: SrvMod.lnk -> C:\Windows\twain_32\A3PRO18U16K\SrvMod.exe (NetWork Scanner)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
ShortcutTarget: Windows Search.lnk -> C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Údržba databáze BUILDpower.lnk
ShortcutTarget: Údržba databáze BUILDpower.lnk -> C:\RTS\BUILDpower\BPStartUp.exe (RTS, a.s.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?rlz=1W4CHBA_csCZ522
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKCU - ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... 2186d7b9f4
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTer ... 2186d7b9f4
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll (ICQ)
Toolbar: HKLM - &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\Program Files\NetWorx\deskband.dll (SoftPerfect Research)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupda ... 7581954453
DPF: {672EE252-D813-4F5E-81BB-5DD163DD4FA5} https://www.mojedatovaschranka.cz/stati ... ?3,16,13,0
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
CHR HomePage: hxxp://search.babylon.com/?affID=112555&tt=020512_mntb_est&babsrc=HP_ss&mntrId=282b5acf000000000000002186d7b9f4
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\32.0.1700.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\32.0.1700.72\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\32.0.1700.72\gcswf32.dll No File
CHR Plugin: (Skype Toolbars) - C:\Documents and Settings\Administrator\Local Settings\Data aplikac\u00ED\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.250.6) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U25) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Software602 Form Filler) - C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Google Drive) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Translate selection) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\goanabmlmgfinmjohhepcpffcnkeobjm\1.4.5_0
CHR Extension: (Skype Click to Call) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_0
CHR Extension: (Google Wallet) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_1
CHR Extension: (Gmail) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

========================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [84520 2011-03-14] (Software602 a.s.)
R2 ABBYY.Licensing.PDFTransformer.Classic.3.0; C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 ameisvc; C:\Program Files\T-Mobile\Web'n'walk Manager\ameisvc.exe [123320 2012-08-22] (Gemfor s.r.o.)
R2 ASBroker; C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [74240 2007-02-07] (Cognizance Corporation)
R2 ASChannel; C:\Program Files\Hewlett-Packard\IAM\Bin\ASChnl.dll [131584 2006-06-22] (Cognizance Corporation)
R2 atchksrv; C:\Program Files\Intel\AMT\atchksrv.exe [183064 2007-04-10] (Intel Corporation)
R2 C-DillaSrv; C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE [32256 2001-09-10] (C-Dilla Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
R2 FileOpenManagerService; c:\Program Files\FileOpen\Services\FileOpenManagerService32.exe [213432 2012-11-07] (FileOpen Systems Inc.)
R2 FLCDLOCK; C:\WINDOWS\system32\flcdlock.exe [172131 2007-04-30] (Hewlett-Packard Ltd)
R2 HpFkCryptService; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [221184 2007-04-27] (SafeBoot International)
R2 ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [247608 2010-11-21] ()
R2 IFXSpMgtSrv; C:\WINDOWS\system32\ifxspmgt.exe [677408 2007-02-15] (Infineon Technologies AG)
R2 IFXTCS; C:\WINDOWS\system32\ifxtcs.exe [849440 2007-01-23] (Infineon Technologies AG)
S3 ImapiService; C:\WINDOWS\system32\imapihp.exe [155136 2008-02-01] (Microsoft Corporation)
R2 MSMQ; C:\WINDOWS\system32\mqsvc.exe [4608 2008-04-14] (Microsoft Corporation)
R2 MSMQTriggers; C:\WINDOWS\system32\mqtgsvc.exe [117248 2008-04-14] (Microsoft Corporation)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [540448 2007-05-08] (PDF Complete Inc)
R2 PersonalSecureDriveService; C:\WINDOWS\system32\IfxPsdSv.exe [140832 2007-02-15] (Infineon Technologies AG)
R2 Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
R2 StarWindService; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [217600 2005-04-02] (Rocket Division Software)
R2 UNS; C:\Program Files\Intel\AMT\UNS.exe [1489688 2007-04-10] (Intel Corporation)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"
S2 PCA; C:\WINDOWS\TEMP\UPDATE\SMINST\PCAngel.exe [x]
R2 rma; C:/Novadigm/ManagementAgent/nvdkit.exe [x]

==================== Drivers (Whitelisted) ====================

S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [327168 2006-11-22] (Aladdin Knowledge Systems Ltd.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [100096 2006-11-22] (Aladdin Knowledge Systems Ltd.)
S2 ALIWEHCD; C:\Windows\System32\Drivers\mfpec.sys [53152 2006-07-24] (None)
R3 ATSWPDRV; C:\Windows\System32\DRIVERS\ATSwpDrv.sys [140808 2007-04-10] (AuthenTec, Inc.)
S3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl5.sys [604928 2007-04-03] (Broadcom Corporation)
R3 btaudio; C:\Windows\System32\drivers\btaudio.sys [530861 2007-02-14] (Broadcom Corporation.)
R3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [30459 2007-02-14] (Broadcom Corporation.)
R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [868298 2007-02-14] (Broadcom Corporation.)
R3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [149123 2007-02-14] (Broadcom Corporation.)
R3 btwhid; C:\Windows\System32\DRIVERS\btwhid.sys [47907 2007-02-14] (Broadcom Corporation.)
R3 btwmodem; C:\Windows\System32\DRIVERS\btwmodem.sys [30285 2007-02-14] (Broadcom Corporation.)
R3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [67960 2007-02-14] (Broadcom Corporation.)
S3 C-Dilla; C:\WINDOWS\system32\drivers\CDANT.SYS [57392 2001-09-10] (Macrovision)
R1 eamon; C:\Windows\System32\DRIVERS\eamon.sys [184664 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R3 Epfwndis; C:\Windows\System32\DRIVERS\Epfwndis.sys [38952 2013-09-17] (ESET)
R1 epfwtdi; C:\Windows\System32\DRIVERS\epfwtdi.sys [61600 2013-09-17] (ESET)
S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [13192 2011-03-24] ()
S3 EuGdiDrv; C:\WINDOWS\system32\EuGdiDrv.sys [8456 2011-03-24] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [693760 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R3 HSFHWAZL; C:\Windows\System32\DRIVERS\HSFHWAZL.sys [210816 2007-04-26] (Conexant Systems, Inc.)
R3 HSF_DPV; C:\Windows\System32\DRIVERS\HSF_DPV.sys [988032 2007-04-26] (Conexant Systems, Inc.)
R3 IFXTPM; C:\Windows\System32\DRIVERS\IFXTPM.SYS [36608 2007-01-23] (Infineon Technologies AG)
R3 MQAC; C:\WINDOWS\system32\drivers\mqac.sys [92544 2008-04-13] (Microsoft Corporation)
S3 MREMP50; C:\Program Files\Common Files\Motive\MREMP50.sys [21248 2008-03-29] (Printing Communications Assoc., Inc. (PCAUSA))
S3 MRESP50; C:\Program Files\Common Files\Motive\MRESP50.sys [20096 2008-03-29] (Printing Communications Assoc., Inc. (PCAUSA))
R3 NETw4x32; C:\Windows\System32\DRIVERS\NETw4x32.sys [2203520 2007-03-01] (Intel Corporation)
S3 NETw5x32; C:\Windows\System32\DRIVERS\NETw5x32.sys [3636864 2008-11-17] (Intel Corporation)
R1 networx; C:\Windows\System32\drivers\networx.sys [51640 2011-04-15] (NetFilterSDK.com)
R1 PersonalSecureDrive; C:\Windows\System32\drivers\psd.sys [39080 2007-01-23] (Infineon Technologies AG)
R1 PSSDK42; C:\WINDOWS\system32\Drivers\pssdk42.sys [38976 2011-03-22] (microOLAP Technologies LTD)
S3 Rasirda; C:\Windows\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
R3 rismc32; C:\Windows\System32\DRIVERS\rismc32.sys [47616 2006-12-20] (RICOH Company, Ltd.)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [5808 2007-04-26] (SafeBoot International)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [100095 2007-04-26] ()
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [44720 2006-10-09] (SafeBoot N.V.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [13696 2007-03-29] (SafeBoot International)
S3 SMCIRDA; C:\Windows\System32\DRIVERS\smcirda.sys [35913 2001-10-24] (SMC)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [639224 2011-08-19] ()
S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation)
R3 WUSBVBus; C:\Windows\System32\DRIVERS\mfpvbus.sys [9472 2006-05-30] (None)
U2 CertPropSvc;
U1 eabfiltr;
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [113280 2009-10-20] (Huawei Technologies Co., Ltd.)
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [x]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [x]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [x]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [x]
U5 NwlnkIpx; C:\Windows\System32\Drivers\NwlnkIpx.sys [88320 2008-04-13] (Microsoft Corporation)
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-10 00:34 - 2014-01-10 00:34 - 00028621 _____ C:\Documents and Settings\Administrator\Plocha\FRST.txt
2014-01-10 00:31 - 2014-01-10 00:31 - 00000000 ___DC C:\FRST
2014-01-10 00:25 - 2014-01-10 00:26 - 01065947 _____ (Farbar) C:\Documents and Settings\Administrator\Plocha\FRST.exe
2014-01-02 22:14 - 2014-01-02 22:14 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2014-01-02 22:14 - 2014-01-02 22:14 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\ESET
2013-12-18 07:19 - 2013-12-18 07:19 - 00009156 _____ C:\Documents and Settings\Administrator\Dokumenty\oosleddni vyuctovani ZB a Nymburk s klempirem.xlsx
2013-12-16 21:03 - 2013-12-16 21:03 - 00000000 __SHD C:\found.004
2013-12-16 01:33 - 2013-12-16 01:33 - 00001915 _____ C:\Documents and Settings\All Users\Plocha\Google Earth.lnk
2013-12-16 01:33 - 2013-12-16 01:33 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Earth
2013-12-15 09:43 - 2013-12-15 09:43 - 00013082 _____ C:\WINDOWS\KB2898785-IE8.log
2013-12-15 09:43 - 2013-12-15 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2013-12-15 09:42 - 2013-12-15 09:43 - 00005051 _____ C:\WINDOWS\KB2904266.log
2013-12-15 09:42 - 2013-12-15 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2904266$
2013-12-12 07:08 - 2013-12-12 07:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2013-12-12 07:07 - 2013-12-12 07:07 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893984$
2013-12-12 03:08 - 2013-12-12 03:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2013-12-11 22:26 - 2013-12-15 09:43 - 00012999 _____ C:\WINDOWS\KB2898715.log
2013-12-11 22:26 - 2013-12-12 07:08 - 00012510 _____ C:\WINDOWS\KB2893984.log
2013-12-11 22:26 - 2013-12-12 07:08 - 00011709 _____ C:\WINDOWS\KB2893294.log
2013-12-11 22:25 - 2013-12-11 22:27 - 00013606 _____ C:\WINDOWS\KB2892075.log
2013-12-11 08:37 - 2013-12-11 08:37 - 09293192 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe

==================== One Month Modified Files and Folders =======

2014-01-10 00:34 - 2014-01-10 00:34 - 00028621 _____ C:\Documents and Settings\Administrator\Plocha\FRST.txt
2014-01-10 00:34 - 2008-02-01 08:45 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha
2014-01-10 00:31 - 2014-01-10 00:31 - 00000000 ___DC C:\FRST
2014-01-10 00:31 - 2009-06-04 21:49 - 00000482 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{8227BCDD-179E-4746-B012-9863487F5C2A}.job
2014-01-10 00:26 - 2014-01-10 00:25 - 01065947 _____ (Farbar) C:\Documents and Settings\Administrator\Plocha\FRST.exe
2014-01-10 00:26 - 2009-03-26 23:04 - 00004388 _____ C:\WINDOWS\WINCMD.INI
2014-01-10 00:22 - 2009-05-05 08:47 - 00000000 ____D C:\Documents and Settings\Administrator\Data aplikací\Skype
2014-01-10 00:01 - 2004-09-08 10:13 - 00032510 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-09 23:42 - 2010-01-28 23:37 - 00000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-09 23:42 - 2010-01-28 23:37 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-09 23:37 - 2013-02-06 07:41 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-09 23:07 - 2009-10-26 20:10 - 00354625 ___HC C:\treeinfo.wc
2014-01-09 21:05 - 2004-09-08 10:13 - 01498175 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-09 18:33 - 2004-09-08 11:50 - 00004232 _____ C:\WINDOWS\wiadebug.log
2014-01-09 18:29 - 2010-03-15 18:46 - 00000000 ____D C:\Documents and Settings\Administrator\Dokumenty\Bluetooth Exchange Folder
2014-01-09 09:20 - 2008-02-01 08:45 - 00000000 ___RD C:\Documents and Settings\Administrator\Dokumenty\Obrázky
2014-01-09 09:17 - 2013-06-24 11:52 - 00000000 ___RD C:\Documents and Settings\Administrator\Dokumenty\Disk Google
2014-01-09 09:15 - 2009-06-18 10:24 - 00000000 ____D C:\Program Files\Titan Backup
2014-01-09 09:13 - 2004-09-08 10:12 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-09 09:12 - 2004-09-08 11:50 - 00000048 _____ C:\WINDOWS\wiaservc.log
2014-01-09 09:11 - 2004-09-08 10:13 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-09 09:10 - 2004-09-08 10:13 - 00000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
2014-01-08 12:51 - 2013-03-14 03:49 - 00662989 _____ C:\WINDOWS\setupapi.log
2014-01-08 01:45 - 2011-08-05 11:18 - 00001813 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2014-01-07 08:29 - 2009-08-13 00:14 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2014-01-06 15:02 - 2008-02-01 08:45 - 00000000 ___RD C:\Documents and Settings\Administrator\Dokumenty
2014-01-06 11:42 - 2012-03-29 21:22 - 00000000 ____D C:\Documents and Settings\Administrator\Data aplikací\vlc
2014-01-03 14:00 - 2009-06-17 22:07 - 00000000 ____D C:\FTP
2014-01-02 22:14 - 2014-01-02 22:14 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2014-01-02 22:14 - 2014-01-02 22:14 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\ESET
2014-01-02 22:14 - 2008-02-01 08:45 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2014-01-02 22:14 - 2008-02-01 08:45 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-01-02 22:11 - 2011-10-22 15:16 - 00000000 ___DC C:\kamar
2013-12-30 10:11 - 2008-02-01 08:45 - 00000000 ____D C:\Documents and Settings\Administrator
2013-12-18 07:19 - 2013-12-18 07:19 - 00009156 _____ C:\Documents and Settings\Administrator\Dokumenty\oosleddni vyuctovani ZB a Nymburk s klempirem.xlsx
2013-12-17 18:45 - 2013-01-19 22:37 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Drive
2013-12-16 21:13 - 2004-09-08 10:09 - 01300856 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-16 21:03 - 2013-12-16 21:03 - 00000000 __SHD C:\found.004
2013-12-16 01:33 - 2013-12-16 01:33 - 00001915 _____ C:\Documents and Settings\All Users\Plocha\Google Earth.lnk
2013-12-16 01:33 - 2013-12-16 01:33 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Earth
2013-12-16 01:33 - 2008-02-01 08:45 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-12-16 01:32 - 2009-04-09 16:34 - 00000000 ____D C:\Program Files\Google
2013-12-15 23:26 - 2004-09-08 10:02 - 00412672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-15 09:44 - 2009-03-23 02:37 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-12-15 09:43 - 2013-12-15 09:43 - 00013082 _____ C:\WINDOWS\KB2898785-IE8.log
2013-12-15 09:43 - 2013-12-15 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2013-12-15 09:43 - 2013-12-15 09:42 - 00005051 _____ C:\WINDOWS\KB2904266.log
2013-12-15 09:43 - 2013-12-11 22:26 - 00012999 _____ C:\WINDOWS\KB2898715.log
2013-12-15 09:43 - 2009-06-25 22:55 - 00000000 ____D C:\WINDOWS\ie8updates
2013-12-15 09:43 - 2008-02-01 00:02 - 00509826 _____ C:\WINDOWS\system32\TZLog.log
2013-12-15 09:43 - 2008-01-31 23:57 - 00377386 _____ C:\WINDOWS\updspapi.log
2013-12-15 09:43 - 2004-09-08 10:11 - 01266165 _____ C:\WINDOWS\tsoc.log
2013-12-15 09:43 - 2004-09-08 10:11 - 00966736 _____ C:\WINDOWS\iis6.log
2013-12-15 09:43 - 2004-09-08 10:02 - 00917611 _____ C:\WINDOWS\comsetup.log
2013-12-15 09:43 - 2004-09-08 10:02 - 00557255 _____ C:\WINDOWS\ntdtcsetup.log
2013-12-15 09:43 - 2004-09-08 10:02 - 00170163 _____ C:\WINDOWS\ocmsn.log
2013-12-15 09:43 - 2004-09-08 10:02 - 00137629 _____ C:\WINDOWS\tabletoc.log
2013-12-15 09:43 - 2004-09-08 10:02 - 00001393 _____ C:\WINDOWS\imsins.log
2013-12-15 09:43 - 2004-09-08 10:02 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-12-15 09:43 - 2004-09-08 09:53 - 02726354 _____ C:\WINDOWS\FaxSetup.log
2013-12-15 09:43 - 2004-09-08 09:53 - 01339221 _____ C:\WINDOWS\ocgen.log
2013-12-15 09:43 - 2004-09-08 09:53 - 00481639 _____ C:\WINDOWS\netfxocm.log
2013-12-15 09:43 - 2004-09-08 09:53 - 00191788 _____ C:\WINDOWS\MedCtrOC.log
2013-12-15 09:43 - 2004-09-08 09:53 - 00137951 _____ C:\WINDOWS\msgsocm.log
2013-12-15 09:43 - 2004-09-08 09:52 - 00772324 _____ C:\WINDOWS\msmqinst.log
2013-12-15 09:42 - 2013-12-15 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2904266$
2013-12-15 09:40 - 2013-07-11 21:52 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-12 07:08 - 2013-12-12 07:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2013-12-12 07:08 - 2013-12-11 22:26 - 00012510 _____ C:\WINDOWS\KB2893984.log
2013-12-12 07:08 - 2013-12-11 22:26 - 00011709 _____ C:\WINDOWS\KB2893294.log
2013-12-12 07:08 - 2009-03-21 09:54 - 88123800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-12 07:07 - 2013-12-12 07:07 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893984$
2013-12-12 03:08 - 2013-12-12 03:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2013-12-11 22:27 - 2013-12-11 22:25 - 00013606 _____ C:\WINDOWS\KB2892075.log
2013-12-11 08:37 - 2013-12-11 08:37 - 09293192 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-12-11 08:37 - 2013-02-06 07:41 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-11 08:37 - 2011-08-16 13:16 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Documents and Settings\Administrator\Local Settings\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\AcDeltree.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\appshat-distribution.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\bassmod.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.6.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.7.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.A.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.C.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\DesignForms_Builder.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\GLF2F21.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\htmlayout.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\install_reader11_cz_mssd_aih.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-6u24-windows-i586-iftw-rv_fe98a549.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u13-windows-i586-iftw.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u17-windows-i586-iftw.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\MoviesToolbarSetup_Somoto29_9_13.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\NEventMessages.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\Nokia_PC_Suite_cze.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\NOSEventMessages.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\ose00000.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\OTIEncrypt.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\sfamcc00001.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\sfextra.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\SkypeSetup.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\SymLCSVC.EXE
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5821125.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5831984.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Update.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\_is17.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\_is21.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-08-18 09:00] - [2008-04-14 04:22] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2004-08-18 09:00] - [2008-04-14 04:22] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2004-08-18 09:00] - [2008-04-14 04:22] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2004-08-18 09:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2004-08-18 09:00] - [2008-04-14 04:22] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2004-08-18 09:00] - [2008-04-14 04:22] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-18 09:00] - [2008-04-14 03:12] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1


==================== End Of Log ============================
Přílohy
Addition.zip
(11.73 KiB) Staženo 50 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: zpomaleni NTB s win XP

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Maly dotaz, jedna se o domaci ntb nebo nejaky pracovni\firemni??

:arrow: Tohle "Free Quick Keylogger (Version: - )" tam je umyslne :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
petr.vera.
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 10 Led 2014 00:21

Re: zpomaleni NTB s win XP

#3 Příspěvek od petr.vera. »

Jedna se o muj soukromy NTB vyuzivany doma pro praci.
Free Quick Keylogger netusim.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: zpomaleni NTB s win XP

#4 Příspěvek od vyosek »

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
petr.vera.
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 10 Led 2014 00:21

Re: zpomaleni NTB s win XP

#5 Příspěvek od petr.vera. »

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.0 (01.07.2014:1)
OS: Microsoft Windows XP x86
Ran by Administrator on p  10.01.2014 at 11:12:40,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] icq service
Successfully deleted: [Service] icq service



~~~ Registry Values




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\icq service.exe
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yourfiledownloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylontoolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\yourfiledownloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\icqtoolbar.iehook
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\icqtoolbar.iehook.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\icqtoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\Administrator\Data aplikacˇ\babylon"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrator\Data aplikacˇ\thinstall"
Successfully deleted: [Folder] "C:\Documents and Settings\Administrator\Data aplikacˇ\yourfiledownloader"
Successfully deleted: [Folder] "C:\Program Files\icq6toolbar"
Successfully deleted: [Folder] "C:\Program Files\yourfiledownloader"





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  10.01.2014 at 11:18:44,01
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nahoru
petr.vera.
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 10 Led 2014 00:21

Re: zpomaleni NTB s win XP

#6 Příspěvek od petr.vera. »

# AdwCleaner v3.016 - Report created 10/01/2014 at 11:27:38
# Updated 23/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Administrator - HP8710WS
# Running from : C:\viry\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\boost_interprocess
Folder Deleted : C:\Documents and Settings\All Users\Data aplikací\ICQ\ICQToolbar
Folder Deleted : C:\Program Files\Common Files\DVDVideoSoft\TB
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Babylon

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [AdobeUpdater]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{5D723752-5899-47E8-99B4-62C824EF9E13}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{855F3B16-6D32-4FE6-8A56-BBB695989046}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\YourFileDownloader\Downloader.exe]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\YourFileDownloader\YourFile.exe]
Key Deleted : HKCU\Software\ICQ\ICQToolbar
Key Deleted : HKCU\Software\UpdateStar
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\OpenCandy
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\FLV Player
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ICQToolbar
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]

-\\ Google Chrome v32.0.1700.72

[ File : C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [4224 octets] - [10/01/2014 11:20:11]
AdwCleaner[S0].txt - [4159 octets] - [10/01/2014 11:27:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4219 octets] ##########
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: zpomaleni NTB s win XP

#7 Příspěvek od vyosek »

Poprosim o log dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
petr.vera.
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 10 Led 2014 00:21

Re: zpomaleni NTB s win XP

#8 Příspěvek od petr.vera. »

doufam, ze jstem to pochopil spravne udelat novy log z FRST

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-01-2014
Ran by Administrator (administrator) on HP8710WS on 10-01-2014 12:17:41
Running from C:\Documents and Settings\Administrator\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(SafeBoot International) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(Microsoft Corporation) C:\Windows\system32\scardsvr.exe
(Software602 a.s.) C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
(ABBYY) C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe
(Intel Corporation) C:\Program Files\Intel\AMT\atchksrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(C-Dilla Ltd) C:\Windows\system32\drivers\CDANTSRV.EXE
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManagerService32.exe
(Hewlett-Packard Ltd) C:\Windows\system32\flcdlock.exe
(Infineon Technologies AG) C:\Windows\system32\IFXSPMGT.exe
(Infineon Technologies AG) C:\Windows\system32\IFXTCS.exe
(InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files\Intel\AMT\LMS.exe
(Motive Communications, Inc.) C:\Program Files\Common Files\Motive\McciCMService.exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
(Infineon Technologies AG) C:\Windows\system32\IfxPsdSv.exe
() C:\Novadigm\ManagementAgent\nvdkit.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
(Intel Corporation) C:\Program Files\Intel\AMT\UNS.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\system32\mqsvc.exe
(Gemfor s.r.o.) C:\Program Files\T-Mobile\Web'n'walk Manager\ameisvc.exe
(Microsoft Corporation) C:\Windows\system32\mqtgsvc.exe
(Cognizance Corporation) C:\Program Files\Hewlett-Packard\IAM\Bin\asghost.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker32.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe
(Intel Corporation) C:\Program Files\Intel\AMT\atchk.exe
(Hewlett-Packard Corporation) C:\Windows\system32\accelerometerST.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Neobyte Solutions) C:\Program Files\Titan Backup\TitanBackup.exe
(Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\wcescomm.exe
(Gemfor s.r.o.) C:\Program Files\T-Mobile\Web'n'walk Manager\Manager.exe
(ABBYY) C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe
(Microsoft Corporation) C:\Program Files\Microsoft ActiveSync\rapimgr.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Nokia) C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(NetWork Scanner) C:\Windows\twain_32\A3PRO18U16K\SrvMod.exe
(Microsoft Corporation) C:\Program Files\Windows Desktop Search\WindowsSearch.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
() C:\Program Files\NAS Backup Master Program\MESListen.exe
() C:\Program Files\SaveSnap\SaveSnap.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Nokia) C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
(Google) C:\Program Files\Google\Drive\googledrivesync.exe
(Nokia) C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
(Nokia) C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [FileOpenBroker] - C:\Program Files\FileOpen\Services\FileOpenBroker32.exe [840624 2012-11-07] (FileOpen Systems Inc.)
HKLM\...\Run: [WatchDog] - C:\Program Files\InterVideo\DVD Check\DVDCheck.exe [192512 2007-05-23] (InterVideo Inc.)
HKLM\...\Run: [SoundMAXPnP] - C:\Program Files\Analog Devices\Core\smax4pnp.exe [872448 2007-01-05] (Analog Devices, Inc.)
HKLM\...\Run: [SoundMAX] - C:\Program Files\Analog Devices\SoundMAX\SMax4.exe [729088 2006-07-13] (Analog Devices, Inc.)
HKLM\...\Run: [PTHOSTTR] - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe [145184 2007-01-09] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [atchk] - C:\Program Files\Intel\AMT\atchk.exe [404248 2007-04-10] (Intel Corporation)
HKLM\...\Run: [AccelerometerSysTrayApplet] - C:\Windows\system32\accelerometerST.exe [124928 2007-01-24] (Hewlett-Packard Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
Winlogon\Notify\DeviceNP: C:\Windows\system32\DeviceNP.dll (Hewlett-Packard Limited)
Winlogon\Notify\OneCard: C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll (Cognizance Corporation)
HKLM\...\Policies\Explorer: [NoCDBurning] 0
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [484904 2007-04-19] (Hewlett-Packard Company)
HKCU\...\Run: [Titan Backup] - C:\Program Files\Titan Backup\TitanBackup.exe [4240832 2009-06-18] (Neobyte Solutions)
HKCU\...\Run: [H/PC Connection Agent] - C:\Program Files\Microsoft ActiveSync\wcescomm.exe [1289000 2006-11-13] (Microsoft Corporation)
HKCU\...\Run: [X-Lite 4] - "C:\Program Files\CounterPath\X-Lite 4\X-Lite4.exe" -bootload
HKCU\...\Run: [ICQ] - "C:\Program Files\ICQ7.4\ICQ.exe" silent loginmode=4
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-04-09] (Google Inc.)
HKCU\...\Run: [T-Mobile Communication Centre] - C:\Program Files\T-Mobile\Web'n'walk Manager\Manager.exe [1368768 2012-08-22] (Gemfor s.r.o.)
HKCU\...\Run: [ABBYY Screenshot Reader Bonus] - C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe [939272 2012-08-26] (ABBYY)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1090040 2012-12-21] (Nokia)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Hoolapp Android] - "C:\DOCUME~1\ADMINI~1\DATAAP~1\HOOLAP~1\Hoolapp.exe" /Minimized
HKCU\...\RunOnce: [Shockwave Updater] - C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" -"http://hry.1001hry.cz/699bbd6eba34f4b37 ... =1&nobtn=1" [468408 2009-07-31] (Adobe Systems, Inc.)
MountPoints2: {188c0e85-f8b3-11e0-8eb9-002186d7b9f4} - F:\Autorun.exe
MountPoints2: {24f61528-7678-11e0-8dcc-00215c2f12c9} - F:\Autorun.exe
MountPoints2: {24f61530-7678-11e0-8dcc-00215c2f12c9} - H:\Autorun.exe
MountPoints2: {30782a80-88ad-11e2-9985-002186d7b9f4} - F:\Autorun.exe
MountPoints2: {322c82bd-6ad1-11e1-8f59-002186d7b9f4} - F:\fscommand\LS_Start_Launch.cmd
MountPoints2: {405aedc5-3f4a-11e1-8f10-002186d7b9f4} - F:\CrossLink.exe
MountPoints2: {4362d62f-7a03-11e0-8dd2-002186d7b9f4} - G:\Autorun.exe
MountPoints2: {a266bfc9-768b-11e1-8f69-002186d7b9f4} - F:\CrossLink.exe
MountPoints2: {b3d36568-3da5-11df-8c07-002186d7b9f4} - F:\EmDesk.exe
HKU\Default User\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2007-04-19] (Hewlett-Packard Company)
AppInit_DLLs: C:\Windows\system32\APSHook.dll [70144 2007-02-26] (Bioscrypt Inc.)
Lsa: [Notification Packages] SbHpNp scecli ASWLNPkg
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\NAS Backup Master Detector.lnk
ShortcutTarget: NAS Backup Master Detector.lnk -> C:\Program Files\NAS Backup Master Program\MESListen.exe ()
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\SaveSnap.lnk
ShortcutTarget: SaveSnap.lnk -> C:\Program Files\SaveSnap\SaveSnap.exe ()
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\DVD Check.lnk
ShortcutTarget: DVD Check.lnk -> C:\Program Files\InterVideo\DVD Check\DVDCheck.exe (InterVideo Inc.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\SrvMod.lnk
ShortcutTarget: SrvMod.lnk -> C:\Windows\twain_32\A3PRO18U16K\SrvMod.exe (NetWork Scanner)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
ShortcutTarget: Windows Search.lnk -> C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Údržba databáze BUILDpower.lnk
ShortcutTarget: Údržba databáze BUILDpower.lnk -> C:\RTS\BUILDpower\BPStartUp.exe (RTS, a.s.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?rlz=1W4CHBA_csCZ522
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
BHO: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - &NetWorx Desk Band - {FEEA54B4-D80F-41C7-87B9-DC08E6D3255F} - C:\Program Files\NetWorx\deskband.dll (SoftPerfect Research)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupda ... 7581954453
DPF: {672EE252-D813-4F5E-81BB-5DD163DD4FA5} https://www.mojedatovaschranka.cz/stati ... ?3,16,13,0
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/fl ... rashim.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome:
=======
CHR Extension: (Google Drive) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1
CHR Extension: (Skype Click to Call) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_1
CHR Extension: (Google Wallet) - C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\DOCUME~1\ADMINI~1\LOCALS~1\DATAAP~1\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx

========================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [84520 2011-03-14] (Software602 a.s.)
R2 ABBYY.Licensing.PDFTransformer.Classic.3.0; C:\Program Files\ABBYY PDF Transformer 3.0\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 ameisvc; C:\Program Files\T-Mobile\Web'n'walk Manager\ameisvc.exe [123320 2012-08-22] (Gemfor s.r.o.)
R2 ASBroker; C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [74240 2007-02-07] (Cognizance Corporation)
R2 ASChannel; C:\Program Files\Hewlett-Packard\IAM\Bin\ASChnl.dll [131584 2006-06-22] (Cognizance Corporation)
R2 atchksrv; C:\Program Files\Intel\AMT\atchksrv.exe [183064 2007-04-10] (Intel Corporation)
R2 C-DillaSrv; C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE [32256 2001-09-10] (C-Dilla Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
R2 FileOpenManagerService; c:\Program Files\FileOpen\Services\FileOpenManagerService32.exe [213432 2012-11-07] (FileOpen Systems Inc.)
R2 FLCDLOCK; C:\WINDOWS\system32\flcdlock.exe [172131 2007-04-30] (Hewlett-Packard Ltd)
R2 HpFkCryptService; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [221184 2007-04-27] (SafeBoot International)
R2 IFXSpMgtSrv; C:\WINDOWS\system32\ifxspmgt.exe [677408 2007-02-15] (Infineon Technologies AG)
R2 IFXTCS; C:\WINDOWS\system32\ifxtcs.exe [849440 2007-01-23] (Infineon Technologies AG)
S3 ImapiService; C:\WINDOWS\system32\imapihp.exe [155136 2008-02-01] (Microsoft Corporation)
R2 MSMQ; C:\WINDOWS\system32\mqsvc.exe [4608 2008-04-14] (Microsoft Corporation)
R2 MSMQTriggers; C:\WINDOWS\system32\mqtgsvc.exe [117248 2008-04-14] (Microsoft Corporation)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [540448 2007-05-08] (PDF Complete Inc)
R2 PersonalSecureDriveService; C:\WINDOWS\system32\IfxPsdSv.exe [140832 2007-02-15] (Infineon Technologies AG)
R2 Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
R2 StarWindService; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [217600 2005-04-02] (Rocket Division Software)
R2 UNS; C:\Program Files\Intel\AMT\UNS.exe [1489688 2007-04-10] (Intel Corporation)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre7\bin\jqs.exe" -service -config "C:\Program Files\Java\jre7\lib\deploy\jqs\jqs.conf"
S2 PCA; C:\WINDOWS\TEMP\UPDATE\SMINST\PCAngel.exe [x]
R2 rma; C:/Novadigm/ManagementAgent/nvdkit.exe [x]

==================== Drivers (Whitelisted) ====================

S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [327168 2006-11-22] (Aladdin Knowledge Systems Ltd.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [100096 2006-11-22] (Aladdin Knowledge Systems Ltd.)
S2 ALIWEHCD; C:\Windows\System32\Drivers\mfpec.sys [53152 2006-07-24] (None)
R3 ATSWPDRV; C:\Windows\System32\DRIVERS\ATSwpDrv.sys [140808 2007-04-10] (AuthenTec, Inc.)
S3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl5.sys [604928 2007-04-03] (Broadcom Corporation)
R3 btaudio; C:\Windows\System32\drivers\btaudio.sys [530861 2007-02-14] (Broadcom Corporation.)
R3 BTDriver; C:\Windows\System32\DRIVERS\btport.sys [30459 2007-02-14] (Broadcom Corporation.)
R3 BTKRNL; C:\Windows\System32\DRIVERS\btkrnl.sys [868298 2007-02-14] (Broadcom Corporation.)
R3 BTWDNDIS; C:\Windows\System32\DRIVERS\btwdndis.sys [149123 2007-02-14] (Broadcom Corporation.)
R3 btwhid; C:\Windows\System32\DRIVERS\btwhid.sys [47907 2007-02-14] (Broadcom Corporation.)
R3 btwmodem; C:\Windows\System32\DRIVERS\btwmodem.sys [30285 2007-02-14] (Broadcom Corporation.)
R3 BTWUSB; C:\Windows\System32\Drivers\btwusb.sys [67960 2007-02-14] (Broadcom Corporation.)
S3 C-Dilla; C:\WINDOWS\system32\drivers\CDANT.SYS [57392 2001-09-10] (Macrovision)
R1 eamon; C:\Windows\System32\DRIVERS\eamon.sys [184664 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R3 Epfwndis; C:\Windows\System32\DRIVERS\Epfwndis.sys [38952 2013-09-17] (ESET)
R1 epfwtdi; C:\Windows\System32\DRIVERS\epfwtdi.sys [61600 2013-09-17] (ESET)
S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [13192 2011-03-24] ()
S3 EuGdiDrv; C:\WINDOWS\system32\EuGdiDrv.sys [8456 2011-03-24] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [693760 2006-11-22] (Aladdin Knowledge Systems Ltd.)
R3 HSFHWAZL; C:\Windows\System32\DRIVERS\HSFHWAZL.sys [210816 2007-04-26] (Conexant Systems, Inc.)
R3 HSF_DPV; C:\Windows\System32\DRIVERS\HSF_DPV.sys [988032 2007-04-26] (Conexant Systems, Inc.)
R3 IFXTPM; C:\Windows\System32\DRIVERS\IFXTPM.SYS [36608 2007-01-23] (Infineon Technologies AG)
R3 MQAC; C:\WINDOWS\system32\drivers\mqac.sys [92544 2008-04-13] (Microsoft Corporation)
S3 MREMP50; C:\Program Files\Common Files\Motive\MREMP50.sys [21248 2008-03-29] (Printing Communications Assoc., Inc. (PCAUSA))
S3 MRESP50; C:\Program Files\Common Files\Motive\MRESP50.sys [20096 2008-03-29] (Printing Communications Assoc., Inc. (PCAUSA))
R3 NETw4x32; C:\Windows\System32\DRIVERS\NETw4x32.sys [2203520 2007-03-01] (Intel Corporation)
S3 NETw5x32; C:\Windows\System32\DRIVERS\NETw5x32.sys [3636864 2008-11-17] (Intel Corporation)
R1 networx; C:\Windows\System32\drivers\networx.sys [51640 2011-04-15] (NetFilterSDK.com)
R1 PersonalSecureDrive; C:\Windows\System32\drivers\psd.sys [39080 2007-01-23] (Infineon Technologies AG)
R1 PSSDK42; C:\WINDOWS\system32\Drivers\pssdk42.sys [38976 2011-03-22] (microOLAP Technologies LTD)
S3 Rasirda; C:\Windows\System32\DRIVERS\rasirda.sys [19584 2001-08-17] (Microsoft Corporation)
R3 rismc32; C:\Windows\System32\DRIVERS\rismc32.sys [47616 2006-12-20] (RICOH Company, Ltd.)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [5808 2007-04-26] (SafeBoot International)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [100095 2007-04-26] ()
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [44720 2006-10-09] (SafeBoot N.V.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [13696 2007-03-29] (SafeBoot International)
S3 SMCIRDA; C:\Windows\System32\DRIVERS\smcirda.sys [35913 2001-10-24] (SMC)
R0 speedfan; C:\Windows\System32\speedfan.sys [25240 2011-03-18] (Almico Software)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [639224 2011-08-19] ()
S3 wceusbsh; C:\Windows\System32\DRIVERS\wceusbsh.sys [28672 2006-11-06] (Microsoft Corporation)
R3 WUSBVBus; C:\Windows\System32\DRIVERS\mfpvbus.sys [9472 2006-05-30] (None)
U2 CertPropSvc;
U1 eabfiltr;
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [113280 2009-10-20] (Huawei Technologies Co., Ltd.)
S3 MREMP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MREMP50a64.SYS [x]
S3 MREMPR5; \??\C:\PROGRA~1\COMMON~1\Motive\MREMPR5.SYS [x]
S3 MRENDIS5; \??\C:\PROGRA~1\COMMON~1\Motive\MRENDIS5.SYS [x]
S3 MRESP50a64; \??\C:\PROGRA~1\COMMON~1\Motive\MRESP50a64.SYS [x]
U5 NwlnkIpx; C:\Windows\System32\Drivers\NwlnkIpx.sys [88320 2008-04-13] (Microsoft Corporation)
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-10 12:17 - 2014-01-10 12:17 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha\FRST-OlderVersion
2014-01-10 11:20 - 2014-01-10 11:39 - 00000000 ___DC C:\AdwCleaner
2014-01-10 11:10 - 2014-01-10 11:10 - 00002572 _____ C:\WINDOWS\setupapi.log
2014-01-10 11:04 - 2014-01-10 11:04 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-10 01:28 - 2014-01-10 01:29 - 00074105 _____ C:\Documents and Settings\Administrator\Plocha\Addition.txt
2014-01-10 00:51 - 2014-01-10 11:19 - 00000000 ___DC C:\viry
2014-01-10 00:34 - 2014-01-10 12:18 - 00023885 _____ C:\Documents and Settings\Administrator\Plocha\FRST.txt
2014-01-10 00:31 - 2014-01-10 12:17 - 00000000 ___DC C:\FRST
2014-01-10 00:25 - 2014-01-10 12:17 - 01066141 ____C (Farbar) C:\Documents and Settings\Administrator\Plocha\FRST.exe
2014-01-02 22:14 - 2014-01-02 22:14 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2014-01-02 22:14 - 2014-01-02 22:14 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\ESET
2013-12-18 07:19 - 2013-12-18 07:19 - 00009156 _____ C:\Documents and Settings\Administrator\Dokumenty\oosleddni vyuctovani ZB a Nymburk s klempirem.xlsx
2013-12-16 21:03 - 2013-12-16 21:03 - 00000000 __SHD C:\found.004
2013-12-16 01:33 - 2013-12-16 01:33 - 00001915 _____ C:\Documents and Settings\All Users\Plocha\Google Earth.lnk
2013-12-16 01:33 - 2013-12-16 01:33 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Earth
2013-12-15 09:43 - 2013-12-15 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2013-12-15 09:42 - 2013-12-15 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2904266$
2013-12-12 07:08 - 2013-12-12 07:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2013-12-12 07:07 - 2013-12-12 07:07 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893984$
2013-12-12 03:08 - 2013-12-12 03:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2013-12-11 08:37 - 2013-12-11 08:37 - 09293192 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe

==================== One Month Modified Files and Folders =======

2014-01-10 12:18 - 2014-01-10 00:34 - 00023885 _____ C:\Documents and Settings\Administrator\Plocha\FRST.txt
2014-01-10 12:17 - 2014-01-10 12:17 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha\FRST-OlderVersion
2014-01-10 12:17 - 2014-01-10 00:31 - 00000000 ___DC C:\FRST
2014-01-10 12:17 - 2014-01-10 00:25 - 01066141 ____C (Farbar) C:\Documents and Settings\Administrator\Plocha\FRST.exe
2014-01-10 12:17 - 2008-02-01 08:45 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha
2014-01-10 12:16 - 2009-06-04 21:49 - 00000482 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{8227BCDD-179E-4746-B012-9863487F5C2A}.job
2014-01-10 12:16 - 2009-03-26 23:04 - 00004327 _____ C:\WINDOWS\WINCMD.INI
2014-01-10 11:58 - 2004-09-08 10:13 - 01522869 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-10 11:56 - 2004-09-08 10:13 - 00032628 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-10 11:42 - 2010-01-28 23:37 - 00000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-10 11:39 - 2014-01-10 11:20 - 00000000 ___DC C:\AdwCleaner
2014-01-10 11:37 - 2013-02-06 07:41 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-10 11:35 - 2013-06-24 11:52 - 00000000 ___RD C:\Documents and Settings\Administrator\Dokumenty\Disk Google
2014-01-10 11:34 - 2009-05-05 08:47 - 00000000 ____D C:\Documents and Settings\Administrator\Data aplikací\Skype
2014-01-10 11:33 - 2009-06-18 10:24 - 00000000 ____D C:\Program Files\Titan Backup
2014-01-10 11:31 - 2010-01-28 23:37 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-10 11:31 - 2004-09-08 10:12 - 00001158 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-10 11:30 - 2004-09-08 11:50 - 00000159 _____ C:\WINDOWS\wiadebug.log
2014-01-10 11:30 - 2004-09-08 11:50 - 00000049 _____ C:\WINDOWS\wiaservc.log
2014-01-10 11:29 - 2004-09-08 10:13 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-10 11:28 - 2004-09-08 10:13 - 00000178 ___SH C:\Documents and Settings\Administrator\ntuser.ini
2014-01-10 11:27 - 2008-02-01 08:45 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2014-01-10 11:27 - 2008-02-01 08:45 - 00000000 ___HD C:\Documents and Settings\Administrator\Local Settings\Data aplikací
2014-01-10 11:19 - 2014-01-10 00:51 - 00000000 ___DC C:\viry
2014-01-10 11:14 - 2008-02-01 08:45 - 00000000 __RHD C:\Documents and Settings\Administrator\Data aplikací
2014-01-10 11:12 - 2009-08-13 00:14 - 00000664 _____ C:\WINDOWS\system32\d3d9caps.dat
2014-01-10 11:10 - 2014-01-10 11:10 - 00002572 _____ C:\WINDOWS\setupapi.log
2014-01-10 11:04 - 2014-01-10 11:04 - 00000000 ____D C:\WINDOWS\ERUNT
2014-01-10 09:42 - 2009-04-13 06:07 - 00000000 ____D C:\WINDOWS\Minidump
2014-01-10 09:39 - 2008-02-01 08:45 - 00000000 ____D C:\Documents and Settings\Administrator
2014-01-10 09:38 - 2009-03-20 21:45 - 00000000 __SHD C:\Documents and Settings\Administrator\UserData
2014-01-10 07:21 - 2009-10-26 20:10 - 00354672 ___HC C:\treeinfo.wc
2014-01-10 01:29 - 2014-01-10 01:28 - 00074105 _____ C:\Documents and Settings\Administrator\Plocha\Addition.txt
2014-01-09 18:29 - 2010-03-15 18:46 - 00000000 ____D C:\Documents and Settings\Administrator\Dokumenty\Bluetooth Exchange Folder
2014-01-09 09:20 - 2008-02-01 08:45 - 00000000 ___RD C:\Documents and Settings\Administrator\Dokumenty\Obrázky
2014-01-08 01:45 - 2011-08-05 11:18 - 00001813 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2014-01-06 15:02 - 2008-02-01 08:45 - 00000000 ___RD C:\Documents and Settings\Administrator\Dokumenty
2014-01-06 11:42 - 2012-03-29 21:22 - 00000000 ____D C:\Documents and Settings\Administrator\Data aplikací\vlc
2014-01-03 14:00 - 2009-06-17 22:07 - 00000000 ____D C:\FTP
2014-01-02 22:14 - 2014-01-02 22:14 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESET
2014-01-02 22:14 - 2014-01-02 22:14 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\ESET
2014-01-02 22:14 - 2008-02-01 08:45 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-01-02 22:11 - 2011-10-22 15:16 - 00000000 ___DC C:\kamar
2013-12-18 07:19 - 2013-12-18 07:19 - 00009156 _____ C:\Documents and Settings\Administrator\Dokumenty\oosleddni vyuctovani ZB a Nymburk s klempirem.xlsx
2013-12-17 18:45 - 2013-01-19 22:37 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Drive
2013-12-16 21:13 - 2004-09-08 10:09 - 01300856 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-12-16 21:03 - 2013-12-16 21:03 - 00000000 __SHD C:\found.004
2013-12-16 01:33 - 2013-12-16 01:33 - 00001915 _____ C:\Documents and Settings\All Users\Plocha\Google Earth.lnk
2013-12-16 01:33 - 2013-12-16 01:33 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Earth
2013-12-16 01:33 - 2008-02-01 08:45 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-12-16 01:32 - 2009-04-09 16:34 - 00000000 ____D C:\Program Files\Google
2013-12-15 23:26 - 2004-09-08 10:02 - 00412672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-12-15 09:44 - 2009-03-23 02:37 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-12-15 09:43 - 2013-12-15 09:43 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2898715$
2013-12-15 09:43 - 2009-06-25 22:55 - 00000000 ____D C:\WINDOWS\ie8updates
2013-12-15 09:43 - 2008-02-01 00:02 - 00509826 _____ C:\WINDOWS\system32\TZLog.log
2013-12-15 09:42 - 2013-12-15 09:42 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2904266$
2013-12-15 09:40 - 2013-07-11 21:52 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-12-12 07:08 - 2013-12-12 07:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893294$
2013-12-12 07:08 - 2009-03-21 09:54 - 88123800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-12-12 07:07 - 2013-12-12 07:07 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2893984$
2013-12-12 03:08 - 2013-12-12 03:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2892075$
2013-12-11 08:37 - 2013-12-11 08:37 - 09293192 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-12-11 08:37 - 2013-02-06 07:41 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-12-11 08:37 - 2011-08-16 13:16 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

Some content of TEMP:
====================
C:\Documents and Settings\Administrator\Local Settings\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\AcDeltree.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\appshat-distribution.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\bassmod.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.6.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.7.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.A.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.C.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\DesignForms_Builder.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\GLF2F21.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\htmlayout.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\install_reader11_cz_mssd_aih.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-6u24-windows-i586-iftw-rv_fe98a549.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u13-windows-i586-iftw.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u17-windows-i586-iftw.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\MoviesToolbarSetup_Somoto29_9_13.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\NEventMessages.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\Nokia_PC_Suite_cze.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\NOSEventMessages.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\ose00000.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\OTIEncrypt.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\sfamcc00001.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\sfextra.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\SkypeSetup.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\SymLCSVC.EXE
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5821125.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5831984.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Update.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\_is17.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\_is21.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-08-18 09:00] - [2008-04-14 04:22] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2004-08-18 09:00] - [2008-04-14 04:22] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2004-08-18 09:00] - [2008-04-14 04:22] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2004-08-18 09:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2004-08-18 09:00] - [2008-04-14 04:22] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2004-08-18 09:00] - [2008-04-14 04:22] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-18 09:00] - [2008-04-14 03:12] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1


==================== End Of Log ============================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: zpomaleni NTB s win XP

#9 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKCU\...\Run: [X-Lite 4] - "C:\Program Files\CounterPath\X-Lite 4\X-Lite4.exe" -bootload
HKCU\...\Run: [ICQ] - "C:\Program Files\ICQ7.4\ICQ.exe" silent loginmode=4
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-04-09] (Google Inc.)
KCU\...\Run: [ABBYY Screenshot Reader Bonus] - C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe [939272 2012-08-26] (ABBYY)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1090040 2012-12-21] (Nokia)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Hoolapp Android] - "C:\DOCUME~1\ADMINI~1\DATAAP~1\HOOLAP~1\Hoolapp.exe" /Minimized
HKCU\...\RunOnce: [Shockwave Updater] - C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" -"http://hry.1001hry.cz/699bbd6eba34f4b3728a65c02cb87c31/game.php?file=687474703a2f2f6872792e313030316872792e637a2f36393962626436656261333466346233373238613635633032636238376333312f313236352e646372&width=100%&height=100%&1001hry=1&cr=1&dpl=1&nobtn=1" [468408 2009-07-31] (Adobe Systems, Inc.)
MountPoints2: {188c0e85-f8b3-11e0-8eb9-002186d7b9f4} - F:\Autorun.exe
MountPoints2: {24f61528-7678-11e0-8dcc-00215c2f12c9} - F:\Autorun.exe
MountPoints2: {24f61530-7678-11e0-8dcc-00215c2f12c9} - H:\Autorun.exe
MountPoints2: {30782a80-88ad-11e2-9985-002186d7b9f4} - F:\Autorun.exe
MountPoints2: {322c82bd-6ad1-11e1-8f59-002186d7b9f4} - F:\fscommand\LS_Start_Launch.cmd
MountPoints2: {405aedc5-3f4a-11e1-8f10-002186d7b9f4} - F:\CrossLink.exe
MountPoints2: {4362d62f-7a03-11e0-8dd2-002186d7b9f4} - G:\Autorun.exe
MountPoints2: {a266bfc9-768b-11e1-8f69-002186d7b9f4} - F:\CrossLink.exe
MountPoints2: {b3d36568-3da5-11df-8c07-002186d7b9f4} - F:\EmDesk.exe
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\NAS Backup Master Detector.lnk
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\SaveSnap.lnk
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\DVD Check.lnk
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\SrvMod.lnk
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?rlz=1W4CHBA_csCZ522
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM - DefaultScope value is missing.

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\DOCUME~1\ADMINI~1\LOCALS~1\DATAAP~1\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx

S2 PCA; C:\WINDOWS\TEMP\UPDATE\SMINST\PCAngel.exe [x]
R2 rma; C:/Novadigm/ManagementAgent/nvdkit.exe [x]

DisableService: JavaQuickStarterService

U2 CertPropSvc;
U1 eabfiltr; 
U1 WS2IFSL; 

2014-01-10 12:17 - 2014-01-10 12:17 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha\FRST-OlderVersion
2014-01-10 01:28 - 2014-01-10 01:29 - 00074105 _____ C:\Documents and Settings\Administrator\Plocha\Addition.txt
2014-01-10 00:34 - 2014-01-10 12:18 - 00023885 _____ C:\Documents and Settings\Administrator\Plocha\FRST.txt
C:\Documents and Settings\Administrator\Local Settings\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\AcDeltree.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\appshat-distribution.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\bassmod.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.6.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.7.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.A.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.C.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\DesignForms_Builder.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\GLF2F21.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\htmlayout.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\install_reader11_cz_mssd_aih.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-6u24-windows-i586-iftw-rv_fe98a549.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u13-windows-i586-iftw.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u17-windows-i586-iftw.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\MoviesToolbarSetup_Somoto29_9_13.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\NEventMessages.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\Nokia_PC_Suite_cze.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\NOSEventMessages.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\ose00000.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\OTIEncrypt.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\sfamcc00001.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\sfextra.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\SkypeSetup.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\SymLCSVC.EXE
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5821125.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5831984.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Update.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\_is17.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\_is21.exe

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{8227BCDD-179E-4746-B012-9863487F5C2A}.job => C:\WINDOWS\system32\msfeedssync.exe

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
petr.vera.
Návštěvník
Návštěvník
Příspěvky: 12
Registrován: 10 Led 2014 00:21

Re: zpomaleni NTB s win XP

#10 Příspěvek od petr.vera. »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 10-01-2014
Ran by Administrator at 2014-01-10 18:19:57 Run:1
Running from C:\Documents and Settings\Administrator\Plocha
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKCU\...\Run: [X-Lite 4] - "C:\Program Files\CounterPath\X-Lite 4\X-Lite4.exe" -bootload
HKCU\...\Run: [ICQ] - "C:\Program Files\ICQ7.4\ICQ.exe" silent loginmode=4
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-04-09] (Google Inc.)
KCU\...\Run: [ABBYY Screenshot Reader Bonus] - C:\Program Files\ABBYY PDF Transformer 3.0\Bonus.ScreenshotReader.exe [939272 2012-08-26] (ABBYY)
HKCU\...\Run: [GoogleDriveSync] - C:\Program Files\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe [1090040 2012-12-21] (Nokia)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKCU\...\Run: [Hoolapp Android] - "C:\DOCUME~1\ADMINI~1\DATAAP~1\HOOLAP~1\Hoolapp.exe" /Minimized
HKCU\...\RunOnce: [Shockwave Updater] - C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB6.6; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.2)" -"http://hry.1001hry.cz/699bbd6eba34f4b37 ... =1&nobtn=1" [468408 2009-07-31] (Adobe Systems, Inc.)
MountPoints2: {188c0e85-f8b3-11e0-8eb9-002186d7b9f4} - F:\Autorun.exe
MountPoints2: {24f61528-7678-11e0-8dcc-00215c2f12c9} - F:\Autorun.exe
MountPoints2: {24f61530-7678-11e0-8dcc-00215c2f12c9} - H:\Autorun.exe
MountPoints2: {30782a80-88ad-11e2-9985-002186d7b9f4} - F:\Autorun.exe
MountPoints2: {322c82bd-6ad1-11e1-8f59-002186d7b9f4} - F:\fscommand\LS_Start_Launch.cmd
MountPoints2: {405aedc5-3f4a-11e1-8f10-002186d7b9f4} - F:\CrossLink.exe
MountPoints2: {4362d62f-7a03-11e0-8dd2-002186d7b9f4} - G:\Autorun.exe
MountPoints2: {a266bfc9-768b-11e1-8f69-002186d7b9f4} - F:\CrossLink.exe
MountPoints2: {b3d36568-3da5-11df-8c07-002186d7b9f4} - F:\EmDesk.exe
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\NAS Backup Master Detector.lnk
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\SaveSnap.lnk
Startup: C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\DVD Check.lnk
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\SrvMod.lnk
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?rlz=1W4CHBA_csCZ522
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
URLSearchHook: HKCU - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM - DefaultScope value is missing.

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\DOCUME~1\ADMINI~1\LOCALS~1\DATAAP~1\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx

S2 PCA; C:\WINDOWS\TEMP\UPDATE\SMINST\PCAngel.exe [x]
R2 rma; C:/Novadigm/ManagementAgent/nvdkit.exe [x]

DisableService: JavaQuickStarterService

U2 CertPropSvc;
U1 eabfiltr;
U1 WS2IFSL;

2014-01-10 12:17 - 2014-01-10 12:17 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha\FRST-OlderVersion
2014-01-10 01:28 - 2014-01-10 01:29 - 00074105 _____ C:\Documents and Settings\Administrator\Plocha\Addition.txt
2014-01-10 00:34 - 2014-01-10 12:18 - 00023885 _____ C:\Documents and Settings\Administrator\Plocha\FRST.txt
C:\Documents and Settings\Administrator\Local Settings\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\AcDeltree.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\appshat-distribution.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\bassmod.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.6.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.7.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.A.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.C.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\DesignForms_Builder.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\GLF2F21.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\htmlayout.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\install_reader11_cz_mssd_aih.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-6u24-windows-i586-iftw-rv_fe98a549.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u13-windows-i586-iftw.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u17-windows-i586-iftw.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\MoviesToolbarSetup_Somoto29_9_13.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\NEventMessages.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\Nokia_PC_Suite_cze.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\NOSEventMessages.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\ose00000.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\OTIEncrypt.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\sfamcc00001.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\sfextra.dll
C:\Documents and Settings\Administrator\Local Settings\Temp\SkypeSetup.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\SymLCSVC.EXE
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5821125.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5831984.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\Update.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\_is17.exe
C:\Documents and Settings\Administrator\Local Settings\Temp\_is21.exe

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\User_Feed_Synchronization-{8227BCDD-179E-4746-B012-9863487F5C2A}.job => C:\WINDOWS\system32\msfeedssync.exe

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\X-Lite 4 => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\swg => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleDriveSync => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\NokiaSuite.exe => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Hoolapp Android => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Shockwave Updater => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{188c0e85-f8b3-11e0-8eb9-002186d7b9f4} => Key deleted successfully.
HKCR\CLSID\{188c0e85-f8b3-11e0-8eb9-002186d7b9f4} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{24f61528-7678-11e0-8dcc-00215c2f12c9} => Key deleted successfully.
HKCR\CLSID\{24f61528-7678-11e0-8dcc-00215c2f12c9} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{24f61530-7678-11e0-8dcc-00215c2f12c9} => Key deleted successfully.
HKCR\CLSID\{24f61530-7678-11e0-8dcc-00215c2f12c9} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{30782a80-88ad-11e2-9985-002186d7b9f4} => Key deleted successfully.
HKCR\CLSID\{30782a80-88ad-11e2-9985-002186d7b9f4} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{322c82bd-6ad1-11e1-8f59-002186d7b9f4} => Key deleted successfully.
HKCR\CLSID\{322c82bd-6ad1-11e1-8f59-002186d7b9f4} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{405aedc5-3f4a-11e1-8f10-002186d7b9f4} => Key deleted successfully.
HKCR\CLSID\{405aedc5-3f4a-11e1-8f10-002186d7b9f4} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4362d62f-7a03-11e0-8dd2-002186d7b9f4} => Key deleted successfully.
HKCR\CLSID\{4362d62f-7a03-11e0-8dd2-002186d7b9f4} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a266bfc9-768b-11e1-8f69-002186d7b9f4} => Key deleted successfully.
HKCR\CLSID\{a266bfc9-768b-11e1-8f69-002186d7b9f4} => Key not found.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b3d36568-3da5-11df-8c07-002186d7b9f4} => Key deleted successfully.
HKCR\CLSID\{b3d36568-3da5-11df-8c07-002186d7b9f4} => Key not found.
C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk => Moved successfully.
"C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\NAS Backup Master Detector.lnk" => Could not move.
C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\SaveSnap.lnk => Moved successfully.
C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk => Moved successfully.
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\DVD Check.lnk => Moved successfully.
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\SrvMod.lnk => Moved successfully.
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
Default URLSearchHook was restored successfully .
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\ => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl => Key deleted successfully.
C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx => Moved successfully.
HKCU\SOFTWARE\Google\Chrome\Extensions\apdfllckaahabafndbhieahigkjlhalf => Key deleted successfully.
C:\DOCUME~1\ADMINI~1\LOCALS~1\DATAAP~1\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx => Moved successfully.
PCA => Service deleted successfully.
rma => Service deleted successfully.
JavaQuickStarterService service was disabled
CertPropSvc => Service deleted successfully.
eabfiltr => Service deleted successfully.
WS2IFSL => Service deleted successfully.
C:\Documents and Settings\Administrator\Plocha\FRST-OlderVersion => Moved successfully.
C:\Documents and Settings\Administrator\Plocha\Addition.txt => Moved successfully.
C:\Documents and Settings\Administrator\Plocha\FRST.txt => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\0a50e25a83046228c11dcaa7eeed09bb.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\AcDeltree.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\appshat-distribution.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\bassmod.dll => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.6.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.7.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.A.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\csp_3.5.C.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\DesignForms_Builder.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\GLF2F21.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\htmlayout.dll => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\install_reader11_cz_mssd_aih.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-6u24-windows-i586-iftw-rv_fe98a549.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u13-windows-i586-iftw.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\jre-7u17-windows-i586-iftw.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\MoviesToolbarSetup_Somoto29_9_13.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\NEventMessages.dll => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\Nokia_PC_Suite_cze.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\NOSEventMessages.dll => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\ose00000.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\OTIEncrypt.dll => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\Quarantine.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\sfamcc00001.dll => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\sfextra.dll => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\SkypeSetup.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\SymLCSVC.EXE => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5821125.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\uninstall5831984.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\Update.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\_is17.exe => Moved successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\_is21.exe => Moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\User_Feed_Synchronization-{8227BCDD-179E-4746-B012-9863487F5C2A}.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needs a manual reboot.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: zpomaleni NTB s win XP

#11 Příspěvek od vyosek »

Jak se chova PC??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“