Dobrý den když na mozille spustím youtube tak se mi strasně seká a nedá se na to koukat. U IE se tak neděje ale chci používat mozillu- jsem na ní zvýklý.
Zde přikládám log z RSIT
Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-10-23 10:36:42
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 17 GB (24%) free of 70 GB
Total RAM: 2038 MB (42% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:36:54, on 23.10.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16584)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\David\Downloads\RSIT.exe
C:\Program Files\trend micro\David.exe
C:\Windows\system32\DllHost.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] c:\program files\synaptics\syntp\syntpenh.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GUDelayStartup] "C:\Program Files\Glary Utilities 5\StartupManager.exe" -delayrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
--
End of file - 4118 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GlaryInitialize 5.job - C:\Program Files\Glary Utilities 5\Initialize.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\vhsisrra.default-1407096469056
prefs.js - "browser.startup.homepage" - "seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-10-31 4702208]
"Skytel"=C:\Windows\Skytel.exe [2007-10-11 1826816]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-22 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-22 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-22 133656]
"SynTPEnh"=c:\program files\synaptics\syntp\syntpenh.exe [2007-12-06 1029416]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"GUDelayStartup"=C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Automatické vypnutí počítače.lnk]
C:\PROGRA~1\AUTOMA~1\avp.exe [2004-12-28 443392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2014-10-23 10:36:42 ----D---- C:\rsit
2014-10-17 13:57:31 ----A---- C:\Windows\system32\mscories.dll
2014-10-17 13:57:31 ----A---- C:\Windows\system32\mscorier.dll
2014-10-17 13:57:31 ----A---- C:\Windows\system32\dfshim.dll
2014-10-17 13:51:39 ----A---- C:\Windows\system32\win32k.sys
2014-10-17 13:50:40 ----D---- C:\ProgramData\Microsoft Help
2014-10-17 13:41:17 ----A---- C:\Windows\system32\drivers\fastfat.sys
2014-10-17 13:36:59 ----A---- C:\Windows\system32\packager.dll
2014-10-16 11:08:46 ----A---- C:\Windows\system32\vbscript.dll
2014-10-16 11:08:46 ----A---- C:\Windows\system32\msfeedssync.exe
2014-10-16 11:08:46 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-10-16 11:08:46 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-16 11:08:46 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-16 11:08:45 ----A---- C:\Windows\system32\urlmon.dll
2014-10-16 11:08:45 ----A---- C:\Windows\system32\mshta.exe
2014-10-16 11:08:45 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-16 11:08:43 ----A---- C:\Windows\system32\url.dll
2014-10-16 11:08:43 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-16 11:08:43 ----A---- C:\Windows\system32\iertutil.dll
2014-10-16 11:08:42 ----A---- C:\Windows\system32\wininet.dll
2014-10-16 11:08:42 ----A---- C:\Windows\system32\ieframe.dll
2014-10-16 11:08:41 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-16 11:08:41 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-16 11:08:40 ----A---- C:\Windows\system32\jscript.dll
2014-10-16 11:08:40 ----A---- C:\Windows\system32\ieui.dll
2014-10-16 11:08:38 ----A---- C:\Windows\system32\mshtml.dll
2014-10-16 11:08:36 ----A---- C:\Windows\system32\jscript9.dll
2014-10-13 17:02:49 ----A---- C:\P4G.INI
2014-10-13 16:44:16 ----D---- C:\ProgramData\Application Data
2014-10-13 16:15:42 ----D---- C:\Games
2014-10-12 20:15:17 ----D---- C:\Users\David\AppData\Roaming\GHISLER
2014-10-12 20:15:17 ----D---- C:\totalcmd
2014-10-10 15:01:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-10-10 15:01:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-10-10 15:01:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-10-10 15:01:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-10-10 15:01:02 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-10-10 15:01:00 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-10-10 15:00:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-10-10 15:00:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-10-10 15:00:57 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-10-10 15:00:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-10-10 15:00:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-10-10 15:00:56 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-10-10 15:00:56 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-10-10 13:17:12 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2014-10-10 13:17:12 ----A---- C:\Windows\system32\drivers\atksgt.sys
2014-10-09 21:43:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-10-09 21:43:13 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-10-09 21:28:13 ----D---- C:\Windows\Minidump
2014-10-02 17:25:20 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-10-02 17:25:20 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-10-02 17:25:19 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-10-02 17:25:18 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-10-02 17:25:18 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-10-02 17:25:17 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-10-02 17:25:17 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-10-02 17:25:17 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-10-02 17:25:17 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-10-02 17:25:14 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-10-02 17:25:14 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-10-02 17:25:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-10-02 17:25:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-10-02 17:25:13 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-10-02 17:25:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-10-02 17:25:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-10-02 17:25:12 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-10-02 17:25:12 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-10-02 17:25:11 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-10-02 17:25:11 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-10-02 17:25:10 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-10-02 17:25:10 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-10-02 17:25:10 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-10-02 17:25:10 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-10-02 17:25:09 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-10-02 17:25:09 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-10-02 17:25:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-10-02 17:25:08 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-10-02 17:25:08 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-10-02 17:25:07 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-10-02 17:25:07 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-10-02 17:25:07 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-10-02 17:25:06 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-10-02 17:25:06 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-10-02 17:25:06 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-10-02 17:25:06 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-10-02 17:25:05 ----A---- C:\Windows\system32\xinput1_3.dll
2014-10-02 17:25:05 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-10-02 17:25:05 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-10-02 17:25:04 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-10-02 17:25:04 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-10-02 17:25:04 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-10-02 17:25:03 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-10-02 17:25:03 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-10-02 17:25:02 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-10-02 17:25:02 ----A---- C:\Windows\system32\d3dx10.dll
2014-10-02 17:25:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-10-02 17:25:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-10-02 17:25:01 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-10-02 17:25:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-10-02 17:24:59 ----A---- C:\Windows\system32\xinput1_2.dll
2014-10-02 17:24:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-10-02 15:34:48 ----A---- C:\Windows\system32\drivers\xkkt.sys
2014-09-25 19:53:10 ----D---- C:\Program Files\Mozilla Firefox
2014-09-25 19:02:22 ----A---- C:\Windows\system32\tzres.dll
======List of files/folders modified in the last 1 month======
2014-10-23 10:36:46 ----D---- C:\Program Files\trend micro
2014-10-23 09:59:06 ----D---- C:\Windows\temp
2014-10-23 09:29:49 ----A---- C:\Windows\system32\acovcnt.exe
2014-10-22 22:06:26 ----D---- C:\Windows\Prefetch
2014-10-22 12:29:47 ----SHD---- C:\System Volume Information
2014-10-17 22:40:54 ----RD---- C:\Program Files
2014-10-17 16:44:23 ----D---- C:\Windows\Microsoft.NET
2014-10-17 16:39:44 ----RSD---- C:\Windows\assembly
2014-10-17 14:05:28 ----D---- C:\Windows
2014-10-17 14:01:01 ----D---- C:\Windows\system32\migration
2014-10-17 14:01:01 ----D---- C:\Windows\System32
2014-10-17 14:01:00 ----D---- C:\Windows\system32\drivers
2014-10-17 14:01:00 ----D---- C:\Program Files\Internet Explorer
2014-10-17 13:58:15 ----D---- C:\Windows\winsxs
2014-10-17 13:58:10 ----D---- C:\Windows\system32\catroot
2014-10-17 13:58:08 ----D---- C:\Windows\system32\catroot2
2014-10-17 13:57:26 ----SHD---- C:\Windows\Installer
2014-10-17 13:50:40 ----D---- C:\ProgramData
2014-10-17 13:48:15 ----D---- C:\Windows\system32\MRT
2014-10-17 13:41:57 ----D---- C:\Windows\Debug
2014-10-17 13:41:49 ----A---- C:\Windows\system32\mrt.exe
2014-10-17 13:31:22 ----D---- C:\Users\David\AppData\Roaming\DiskDefrag
2014-10-14 11:50:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-10-14 11:50:54 ----D---- C:\Windows\inf
2014-10-13 23:24:33 ----A---- C:\Windows\avp.ini
2014-10-13 20:18:37 ----D---- C:\Users\David\AppData\Roaming\uTorrent
2014-10-13 19:41:28 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2014-10-13 19:23:25 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2014-10-13 17:59:32 ----D---- C:\Program Files\Glary Utilities 5
2014-10-13 16:34:12 ----D---- C:\Windows\Logs
2014-10-13 09:03:14 ----D---- C:\Program Files\Common Files
2014-10-09 21:31:17 ----D---- C:\Windows\pss
2014-10-09 21:09:25 ----D---- C:\Users\David\AppData\Roaming\Mozilla
2014-10-09 21:07:21 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-10-02 15:34:48 ----D---- C:\Windows\Panther
2014-09-28 23:21:08 ----D---- C:\Program Files\Microsoft Office
2014-09-25 19:24:44 ----D---- C:\Windows\rescache
2014-09-25 19:03:59 ----D---- C:\Windows\system32\cs-CZ
2014-09-24 19:25:28 ----A---- C:\Windows\system32\FlashPlayerApp.exe
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 BootDefragDriver;BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [2014-07-18 16064]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-09-29 308248]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-20 242240]
R1 GUBootStartup;GUBootStartup; \??\C:\Windows\System32\drivers\GUBootStartup.sys [2014-08-04 17088]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-10-10 281760]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-10-10 25888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-08 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-12-06 761856]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-10 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-11-01 2011224]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-05-12 23256]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-10-23 110296]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-10 148992]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2007-07-13 50688]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2014-05-18 66560]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-05-12 51928]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-18 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-02 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-05-12 860472]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-05-12 1809720]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-25 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
info.txt logfile of random's system information tool 1.10 2014-10-23 10:36:59
======MBR======
0x33C08ED0BC007C8EC08ED8BE007CBF0006B90002FCF3A450681C06CBFBB90400BDBE07807E00007C0B0F85100183C510E2F1CD1888560055C6461105C6461000B441BBAA55CD135D720F81FB55AA7509F7C101007403FE46106660807E1000742666680000000066FF760868000068007C680100681000B4428A56008BF4CD139F83C4109EEB14B80102BB007C8A56008A76018A4E028A6E03CD136661731EFE4E110F850C00807E00800F848A00B280EB825532E48A5600CD135DEB9C813EFE7D55AA756EFF7600E88A000F851500B0D1E664E87F00B0DFE660E87800B0FFE664E87100B800BBCD1A6623C0753B6681FB54435041753281F90201722C666807BB00006668000200006668080000006653665366556668000000006668007C0000666168000007CD1A5A32F6EA007C0000CD18A0B707EB08A0B607EB03A0B50732E40500078BF0AC3C0074FCBB0700B40ECD10EBF22BC9E464EB002402E0F82402C3496E76616C696420706172746974696F6E207461626C65004572726F72206C6F6164696E67206F7065726174696E672073797374656D004D697373696E67206F7065726174696E672073797374656D00000000627A99DA59A58400008020210007FEFFFF0008000000808B0800FEFFFF07FEFFFF00888B08F807160A000000000000000000000000000000000000000000000000000000000000000055AA
======Uninstall list======
Adobe Flash Player 15 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil32_15_0_0_167_ActiveX.exe -maintain activex
Adobe Flash Player 15 Plugin-->C:\Windows\system32\Macromed\Flash\FlashUtil32_15_0_0_152_Plugin.exe -maintain plugin
Adobe Reader X (10.1.0) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AA1000000001}
Aktualizace produktu Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0405-0000-0000000FF1CE} /uninstall {0A1FAC46-B899-421D-B1A2-470896DC45DB}
Aktualizace produktu Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0405-0000-0000000FF1CE} /uninstall {5260BB53-C1F7-4A3B-9AEB-3EC9B37FF194}
Aktualizace produktu Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0405-0000-0000000FF1CE} /uninstall {E68DD413-B834-4923-8181-0A03B7555187}
ASUS Live Update-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E657B243-9AD4-4ECC-BE81-4CCF8D667FD0}\setup.EXE" -l0x9
Atheros Driver Installation Program-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe" -l0x5 -removeonly
Automatické vypnutí počítače 1.0-->"C:\Program Files\Automatické vypnutí počítače\unins000.exe"
CCleaner-->"C:\Program Files\CCleaner\uninst.exe"
Codec Pack - All In 1 6.0.3.0-->C:\Windows\iun6002.exe "C:\Program Files\Codec Pack - All In 1\irunin.ini"
DAEMON Tools Lite-->C:\Program Files\DAEMON Tools Lite\uninst.exe
Defraggler-->"C:\Program Files\Defraggler\uninst.exe"
EAX4 Unified Redist-->MsiExec.exe /X{89661B04-C646-4412-B6D3-5E19F02F1F37}
ESET Online Scanner v3-->C:\Program Files\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
Fraps (remove only)-->"C:\Fraps\uninstall.exe"
FRAPS 3.5.9 CZ FULL 1.00-->C:\Program Files\Company\FRAPS 3.5.9 CZ FULL\Uninstall.exe
Glary Utilities 5.4-->C:\Program Files\Glary Utilities 5\uninst.exe
Google Chrome-->"C:\Program Files\Google\Chrome\Application\35.0.1916.153\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_08875ABF44579E20.exe" /uninstall
Google Toolbar for Internet Explorer-->MsiExec.exe /I{18455581-E099-4BA8-BC6B-F34B2F06600C}
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
GTA San Andreas-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}\setup.exe" -l0x9 -removeonly
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""
Intel(R) Graphics Media Accelerator Driver-->C:\Windows\system32\igxpun.exe -uninstall
Intel(R) TV Wizard-->C:\Windows\system32\TVWizudlg.exe -uninstall
K1 VideoLAN-->C:\Windows\system32\GKSUI18.EXE C:\Program Files\K1 VideoLAN\UninstallF7E2.DAT
Malwarebytes Anti-Malware verze 2.0.2.1012-->"C:\Program Files\Malwarebytes Anti-Malware\unins000.exe"
Microsoft .NET Framework 3.5 Language Pack SP1 - csy-->MsiExec.exe /I{DD73CA82-EA82-38AA-863D-9A24A018DC96}
Microsoft .NET Framework 3.5 SP1 – jazyková sada – CSY-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 Language Pack SP1 - csy\setup.exe
Microsoft .NET Framework 3.5 SP1-->c:\Windows\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft .NET Framework 4.5.1 (CSY)-->MsiExec.exe /X{123F4E9B-80E6-3A84-BDD4-3CB3AC59ABF0}
Microsoft .NET Framework 4.5.1 (čeština)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\CSY\\Setup.exe /repair /x86 /lcid 1029
Microsoft .NET Framework 4.5.1-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\\Setup.exe /repair /x86
Microsoft .NET Framework 4.5.1-->MsiExec.exe /X{4903D172-DCCB-392F-93A3-34CA9D47FE3D}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0015-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0016-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0018-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0019-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001A-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001B-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6E107EB7-8B55-48BF-ACCB-199F86A2CD93}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0044-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-006E-0405-0000-0000000FF1CE} /uninstall {A0AAD4D5-9F9C-49BB-AB64-0FD4695424E8}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00A1-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00BA-0405-0000-0000000FF1CE} /uninstall {3FD35521-B8F1-4CE0-85E0-DC6CA1E01012}
Microsoft Office Access MUI (Czech) 2007-->MsiExec.exe /X{90120000-0015-0405-0000-0000000FF1CE}
Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL
Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2007-->MsiExec.exe /X{90120000-0016-0405-0000-0000000FF1CE}
Microsoft Office File Validation Add-In-->MsiExec.exe /I{90140000-2005-0000-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2007-->MsiExec.exe /X{90120000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2007-->MsiExec.exe /X{90120000-0044-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2007-->MsiExec.exe /X{90120000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2007-->MsiExec.exe /X{90120000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2007-->MsiExec.exe /X{90120000-0018-0405-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2007-->MsiExec.exe /X{90120000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2007-->MsiExec.exe /X{90120000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2007-->MsiExec.exe /X{90120000-002C-0405-0000-0000000FF1CE}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0405-0000-0000000FF1CE} /uninstall {0B7A4B67-2A38-42B1-9857-662FAB361E08}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {928D7B99-2BEA-49F9-83B8-20FA57860643}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {1FF96026-A04A-4C3E-B50A-BB7022654D0F}
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-041B-0000-0000000FF1CE} /uninstall {FDF9A959-241A-4662-A8DE-7DED9C22D160}
Microsoft Office Publisher MUI (Czech) 2007-->MsiExec.exe /X{90120000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2007-->MsiExec.exe /X{90120000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2007-->MsiExec.exe /X{90120000-001B-0405-0000-0000000FF1CE}
Microsoft Security Client-->MsiExec.exe /X{107F27B7-8EE4-4B3A-9CE5-497B120369DC}
Microsoft Security Essentials-->"C:\Program Files\Microsoft Security Client\Setup.exe" /x
Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319-->MsiExec.exe /X{196BB40D-1578-3D01-B289-BEFC77A11A1E}
Mozilla Firefox 32.0.3 (x86 cs)-->"C:\Program Files\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files\Mozilla Maintenance Service\uninstall.exe"
NB Probe-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6324A1EF-CEF4-43E3-8BCD-9EF3F67317FD}\setup.EXE" -l0x9
Need for Speed™ Most Wanted-->C:\Program Files\EA GAMES\Need for Speed Most Wanted\EAUninstall.exe
NFS: Most Wanted CZ-->C:\PROGRA~1\EAGAME~1\NEEDFO~1\odinstalovat_cz.exe
Realtek High Definition Audio Driver-->RtlUpd.exe -r -m
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.52.02-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{59F6A514-9813-47A3-948C-8A155460CC2A}\SETUP.EXE" -l0x9 anything
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {94EFE014-E577-310B-B2D5-6973A21D8A90} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {939AF4BC-EC42-38D1-AE82-91D4A7ED8911} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8433C01-319F-3370-850E-87C35496299A} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {48B0C142-A0F4-3263-90E1-1984CBB8DD18} /qb+ REBOOTPROMPT=""
Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {1531A92E-2552-384F-B942-06A5D18DFA13}
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {8086EDC0-3409-3560-B108-44FC46882443}
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {FED9B2BC-E6D7-3409-B4C9-99AF8AC65725}
Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {054F96E9-E89B-3DDB-AA70-A65194B921B4}
Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {CBD8D84A-257A-3A60-9819-5DF166F9CD25}
Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {4DC3F78D-5CCF-37B9-9A05-EDDC456F4F20}
Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {1863F765-CBE8-3EB3-B434-CA6B6DF2561E}
Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {D33B9EF5-3801-496A-A2D6-B7F4BE972D75}
Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B145DBBB-7778-4A5D-9D2B-DA6569F02391}
Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E34960DB-2A93-45DB-A208-02650F7AB09C}
Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B7727B4D-5EA3-4C11-9D30-15E47616DCAF}
Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {293FB6BE-D3EB-4162-B522-F9108040B9FE}
Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2B3C041A-A7F2-4A24-968D-4BEB6A123D15}
Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {EA575F57-C5D1-4B5A-B9F9-F16EEBC6B58C}
Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3579CE34-B225-4B19-A3AF-DE5F562A212F}
Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {79850906-6D2B-4061-8EAF-EAC84173DEC5}
Security Update for Microsoft Office 2007 suites (KB2760415) 32-Bit Edition -->msiexec /package {90120000-006E-0405-0000-0000000FF1CE} /uninstall {A4A50F66-DD0F-4150-A19F-0F35531D6E21}
Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8907F32C-DF89-4C2F-AEDE-0DB4B65451C0}
Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {319FC809-3841-4739-A25F-FDBADF073697}
Security Update for Microsoft Office 2007 suites (KB2817330) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {32DA925D-8B7D-4298-B893-6291D28CE809}
Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {4CCE0378-386F-4DC2-9CC1-A3710C77057D}
Security Update for Microsoft Office 2007 suites (KB2850022) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6B4A3804-666A-4DD8-84A7-B97701416784}
Security Update for Microsoft Office 2007 suites (KB2878233) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {F7DFD2B8-0CD1-4A51-AC71-A0582FE796C2}
Security Update for Microsoft Office 2007 suites (KB2880507) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {36842896-D83B-4C92-8261-6312B7DEB562}
Security Update for Microsoft Office 2007 suites (KB2880508) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {4C1BE82B-9AC0-4AB9-B76D-5467131955E1}
Security Update for Microsoft Office 2007 suites (KB2881069) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {FC572B0C-6356-46CC-A01E-CCCEC4340BF5}
Security Update for Microsoft Office 2007 suites (KB2883031) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {D7B70F51-6A18-448B-9342-074F15BC42E4}
Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {686630EC-8033-4031-85C5-D8E5CD62A958}
Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8F311D6C-D8DD-4C32-9457-1A129CABD1A5}
Security Update for Microsoft Office OneNote 2007 (KB2596857) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C069DBBB-0547-4405-B9C8-38123FCD9CE0}
Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {AEA16A27-0B97-4670-818F-A98D06EC0A6F}
Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0EF0D4FB-BB23-4515-AAEA-1240AC2DA525}
Security Update for Microsoft Office Publisher 2007 (KB2817565) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {F88656FB-92A1-484E-911E-D259B15CF420}
Security Update for Microsoft Office Word 2007 (KB2883032) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {1C83EC92-7D38-4BDA-ADDC-5429030FDB0C}
Synaptics Pointing Device Driver-->rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Total Commander (Remove or Repair)-->c:\totalcmd\tcuninst.exe
Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D}
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\Windows\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A024FC7B-77DE-45DE-A058-1C049A17BFB3}
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CB68A5B0-3508-4193-AEB9-AF636DAECE0F}
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition-->msiexec /package {90120000-001A-0405-0000-0000000FF1CE} /uninstall {A030537D-0034-46AD-A730-B1119786F607}
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {53DEC068-4690-4F6B-9946-7D21EF02236B}
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2899475) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {23AE87D8-AB2F-4539-935C-442BC976F469}
WinFlash-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DE10AB76-4756-4913-BE25-55D1C1051F9A}\setup.EXE" -l0x9
WinRAR 5.01 (32-bit)-->C:\Program Files\WinRAR\uninstall.exe
YTD Video Downloader 4.8.1-->"C:\Program Files\GreenTree Applications\YTD Video Downloader\uninstall.exe"
======Security center information======
AS: Windows Defender
======System event log======
Computer Name: David-PC
Event Code: 4376
Message: Služba Servicing požádala o restartování za účelem dokončení operace nastavení balíčku KB2862966(Security Update) do stavu Požadována instalace(Install Requested).
Record Number: 42293
Source Name: Microsoft-Windows-Servicing
Time Written: 20140517230030.000000-000
Event Type: Upozornění
User: NT AUTHORITY\SYSTEM
Computer Name: David-PC
Event Code: 4386
Message: Služba Windows Servicing požádala o restartování za účelem dokončení procesu změny aktualizace 2862966-8_neutral_GDR z balíčku KB2862966(Security Update) do stavu Požadována instalace(Install Requested).
Record Number: 42292
Source Name: Microsoft-Windows-Servicing
Time Written: 20140517230030.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: David-PC
Event Code: 4386
Message: Služba Windows Servicing požádala o restartování za účelem dokončení procesu změny aktualizace 2862966-5_neutral_GDR z balíčku KB2862966(Security Update) do stavu Požadována instalace(Install Requested).
Record Number: 42291
Source Name: Microsoft-Windows-Servicing
Time Written: 20140517230030.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: David-PC
Event Code: 4376
Message: Služba Servicing požádala o restartování za účelem dokončení operace nastavení balíčku KB2862966(Security Update) do stavu Požadována instalace(Install Requested).
Record Number: 42290
Source Name: Microsoft-Windows-Servicing
Time Written: 20140517230030.000000-000
Event Type: Upozornění
User: NT AUTHORITY\SYSTEM
Computer Name: David-PC
Event Code: 4386
Message: Služba Windows Servicing požádala o restartování za účelem dokončení procesu změny aktualizace 2862966-3_neutral_GDR z balíčku KB2862966(Security Update) do stavu Požadována instalace(Install Requested).
Record Number: 42289
Source Name: Microsoft-Windows-Servicing
Time Written: 20140517230030.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
=====Application event log=====
Computer Name: 26L2233B1-13
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 5
Source Name: Microsoft-Windows-WMI
Time Written: 20140517111402.000000-000
Event Type: Informace
User:
Computer Name: 26L2233B1-13
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 4
Source Name: Microsoft-Windows-EventSystem
Time Written: 20140517111359.000000-000
Event Type: Informace
User:
Computer Name: WIN-IUV21BTF49G
Event Code: 900
Message: Služba Licencování softwaru se spouští.
Record Number: 3
Source Name: Microsoft-Windows-Security-Licensing-SLC
Time Written: 20140517111359.000000-000
Event Type: Informace
User:
Computer Name: WIN-IUV21BTF49G
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.
Record Number: 2
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20140517111358.000000-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
Computer Name: 26L2233B1-13
Event Code: 2
Message: Klient Certifikační služby byl úspěšně zastaven.
Record Number: 1
Source Name: Microsoft-Windows-CertificateServicesClient
Time Written: 20080121025830.046400-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM
=====Security event log=====
Computer Name: 26L2233B1-13
Event Code: 4648
Message: Došlo k pokusu o přihlášení pomocí explicitního pověření.
Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 26L2233B1-13$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Účet, jehož pověření bylo použito:
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Cílový server:
Název cílového serveru: localhost
Další informace: localhost
Informace o procesu:
ID procesu: 0x21c
Název procesu: C:\Windows\System32\services.exe
Informace o síti:
Síťová adresa: -
Port: -
Tato událost je generována, pokud se proces pokusí přihlásit k účtu explicitním zadáním pověření tohoto účtu. K tomu nejčastěji dochází v dávkových konfiguracích, například naplánovaných úlohách, nebo při použití příkazu RUNAS.
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140517111327.956676-000
Event Type: Úspěch auditu
User:
Computer Name: 26L2233B1-13
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.
Počet prvků: 0
ID zásady: 0x5b010
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140517111322.855443-000
Event Type: Úspěch auditu
User:
Computer Name: 26L2233B1-13
Event Code: 4624
Message: Účet byl úspěšně přihlášen.
Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0
Typ přihlášení: 0
Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}
Informace o procesu:
ID procesu: 0x4
Název procesu:
Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -
Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0
Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.
Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.
Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).
Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.
Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.
Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140517111320.811830-000
Event Type: Úspěch auditu
User:
Computer Name: 26L2233B1-13
Event Code: 4608
Message: Spouští se systém Windows.
Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140517111320.796230-000
Event Type: Úspěch auditu
User:
Computer Name: 26L2233B1-13
Event Code: 4634
Message: Účet byl odhlášen.
Předmět:
ID zabezpečení: S-1-5-7
Název účtu: ANONYMOUS LOGON
Doména účtu: NT AUTHORITY
ID přihlášení: 0x1f2f0
Typ přihlášení: 3
Tato událost je generována, pokud je zničena relace přihlášení. Může být spojena s událostí přihlášení pomocí hodnoty ID přihlášení. Hodnoty ID přihlášení jsou jednoznačné pouze v rámci jednotlivých restartů stejného počítače.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20080121025830.171200-000
Event Type: Úspěch auditu
User:
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=x86
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 15 Stepping 13, GenuineIntel
"PROCESSOR_REVISION"=0f0d
"NUMBER_OF_PROCESSORS"=2
"TRACE_FORMAT_SEARCH_PATH"=\\NTREL202.ntdev.corp.microsoft.com\4F18C3A5-CA09-4DBD-B6FC-219FDD4C6BE0\TraceFormat
"DFSTRACINGON"=FALSE
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
-----------------EOF-----------------
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Mozilla firefox youtube se hodně seká vytížení cpu 100%
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 119547
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
Zdravím!
Spusťte nejprve tuto utilitu:
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
Dobrý den zde je log
# AdwCleaner v4.001 - Report created 24/10/2014 at 22:53:48
# DB v2014-10-23.2
# Updated 20/10/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : David - DAVID-PC
# Running from : C:\Users\David\Downloads\adwcleaner_4.001.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Program Files\GreenTree Applications
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16584
-\\ Mozilla Firefox v32.0.3 (x86 cs)
-\\ Google Chrome v35.0.1916.153
*************************
AdwCleaner[R4].txt - [3974 octets] - [24/10/2014 22:51:38]
AdwCleaner[S4].txt - [3849 octets] - [24/10/2014 22:53:48]
########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [3909 octets] ##########
# AdwCleaner v4.001 - Report created 24/10/2014 at 22:53:48
# DB v2014-10-23.2
# Updated 20/10/2014 by Xplode
# Operating System : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Username : David - DAVID-PC
# Running from : C:\Users\David\Downloads\adwcleaner_4.001.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\Program Files\GreenTree Applications
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
***** [ Browsers ] *****
-\\ Internet Explorer v9.0.8112.16584
-\\ Mozilla Firefox v32.0.3 (x86 cs)
-\\ Google Chrome v35.0.1916.153
*************************
AdwCleaner[R4].txt - [3974 octets] - [24/10/2014 22:51:38]
AdwCleaner[S4].txt - [3849 octets] - [24/10/2014 22:53:48]
########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [3909 octets] ##########
-
Rudy
- Site Admin
- Příspěvky: 119547
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
Zde je log
Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-10-26 11:29:10
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 17 GB (24%) free of 70 GB
Total RAM: 2038 MB (49% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:29:21, on 26.10.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16584)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\David\Downloads\RSIT.exe
C:\Program Files\trend micro\David.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] c:\program files\synaptics\syntp\syntpenh.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GUDelayStartup] "C:\Program Files\Glary Utilities 5\StartupManager.exe" -delayrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
--
End of file - 4043 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GlaryInitialize 5.job - C:\Program Files\Glary Utilities 5\Initialize.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\vhsisrra.default-1407096469056
prefs.js - "browser.startup.homepage" - "seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-10-31 4702208]
"Skytel"=C:\Windows\Skytel.exe [2007-10-11 1826816]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-22 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-22 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-22 133656]
"SynTPEnh"=c:\program files\synaptics\syntp\syntpenh.exe [2007-12-06 1029416]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"GUDelayStartup"=C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Automatické vypnutí počítače.lnk]
C:\PROGRA~1\AUTOMA~1\avp.exe [2004-12-28 443392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2014-10-24 21:51:35 ----D---- C:\AdwCleaner
2014-10-23 09:36:42 ----D---- C:\rsit
2014-10-17 12:57:31 ----A---- C:\Windows\system32\mscories.dll
2014-10-17 12:57:31 ----A---- C:\Windows\system32\mscorier.dll
2014-10-17 12:57:31 ----A---- C:\Windows\system32\dfshim.dll
2014-10-17 12:51:39 ----A---- C:\Windows\system32\win32k.sys
2014-10-17 12:50:40 ----D---- C:\ProgramData\Microsoft Help
2014-10-17 12:41:17 ----A---- C:\Windows\system32\drivers\fastfat.sys
2014-10-17 12:36:59 ----A---- C:\Windows\system32\packager.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\vbscript.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\msfeedssync.exe
2014-10-16 10:08:46 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-16 10:08:45 ----A---- C:\Windows\system32\urlmon.dll
2014-10-16 10:08:45 ----A---- C:\Windows\system32\mshta.exe
2014-10-16 10:08:45 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-16 10:08:43 ----A---- C:\Windows\system32\url.dll
2014-10-16 10:08:43 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-16 10:08:43 ----A---- C:\Windows\system32\iertutil.dll
2014-10-16 10:08:42 ----A---- C:\Windows\system32\wininet.dll
2014-10-16 10:08:42 ----A---- C:\Windows\system32\ieframe.dll
2014-10-16 10:08:41 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-16 10:08:41 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-16 10:08:40 ----A---- C:\Windows\system32\jscript.dll
2014-10-16 10:08:40 ----A---- C:\Windows\system32\ieui.dll
2014-10-16 10:08:38 ----A---- C:\Windows\system32\mshtml.dll
2014-10-16 10:08:36 ----A---- C:\Windows\system32\jscript9.dll
2014-10-13 16:02:49 ----A---- C:\P4G.INI
2014-10-13 15:44:16 ----D---- C:\ProgramData\Application Data
2014-10-13 15:15:42 ----D---- C:\Games
2014-10-12 19:15:17 ----D---- C:\Users\David\AppData\Roaming\GHISLER
2014-10-12 19:15:17 ----D---- C:\totalcmd
2014-10-10 14:01:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-10-10 14:01:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-10-10 14:01:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-10-10 14:01:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-10-10 14:01:02 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-10-10 14:01:00 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-10-10 14:00:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-10-10 14:00:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-10-10 14:00:57 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-10-10 14:00:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-10-10 12:17:12 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2014-10-10 12:17:12 ----A---- C:\Windows\system32\drivers\atksgt.sys
2014-10-09 20:43:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-10-09 20:43:13 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-10-09 20:28:13 ----D---- C:\Windows\Minidump
2014-10-02 16:25:20 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-10-02 16:25:20 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-10-02 16:25:19 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-10-02 16:25:18 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-10-02 16:25:18 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-10-02 16:25:14 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-10-02 16:25:14 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-10-02 16:25:11 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-10-02 16:25:11 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-10-02 16:25:09 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-10-02 16:25:09 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\xinput1_3.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-10-02 16:25:03 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-10-02 16:25:03 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-10-02 16:25:02 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-10-02 16:25:02 ----A---- C:\Windows\system32\d3dx10.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-10-02 16:25:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-10-02 16:24:59 ----A---- C:\Windows\system32\xinput1_2.dll
2014-10-02 16:24:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-10-02 14:34:48 ----A---- C:\Windows\system32\drivers\xkkt.sys
======List of files/folders modified in the last 1 month======
2014-10-26 11:29:21 ----D---- C:\Windows\Prefetch
2014-10-26 11:29:15 ----D---- C:\Program Files\trend micro
2014-10-26 10:37:23 ----D---- C:\Windows\temp
2014-10-26 10:16:38 ----D---- C:\Windows\System32
2014-10-26 10:16:38 ----D---- C:\Windows\inf
2014-10-26 10:16:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-10-26 10:10:29 ----A---- C:\Windows\system32\acovcnt.exe
2014-10-25 14:32:18 ----SHD---- C:\System Volume Information
2014-10-25 13:46:17 ----D---- C:\Users\David\AppData\Roaming\DiskDefrag
2014-10-24 21:53:50 ----RD---- C:\Program Files
2014-10-23 20:15:55 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2014-10-23 09:40:24 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-10-23 09:40:02 ----D---- C:\Windows\system32\drivers
2014-10-17 15:44:23 ----D---- C:\Windows\Microsoft.NET
2014-10-17 15:39:44 ----RSD---- C:\Windows\assembly
2014-10-17 13:05:28 ----D---- C:\Windows
2014-10-17 13:01:01 ----D---- C:\Windows\system32\migration
2014-10-17 13:01:00 ----D---- C:\Program Files\Internet Explorer
2014-10-17 12:58:15 ----D---- C:\Windows\winsxs
2014-10-17 12:58:10 ----D---- C:\Windows\system32\catroot
2014-10-17 12:58:08 ----D---- C:\Windows\system32\catroot2
2014-10-17 12:57:26 ----SHD---- C:\Windows\Installer
2014-10-17 12:50:40 ----D---- C:\ProgramData
2014-10-17 12:48:15 ----D---- C:\Windows\system32\MRT
2014-10-17 12:41:57 ----D---- C:\Windows\Debug
2014-10-17 12:41:49 ----A---- C:\Windows\system32\mrt.exe
2014-10-13 22:24:33 ----A---- C:\Windows\avp.ini
2014-10-13 19:18:37 ----D---- C:\Users\David\AppData\Roaming\uTorrent
2014-10-13 18:23:25 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2014-10-13 16:59:32 ----D---- C:\Program Files\Glary Utilities 5
2014-10-13 15:34:12 ----D---- C:\Windows\Logs
2014-10-13 08:03:14 ----D---- C:\Program Files\Common Files
2014-10-09 20:31:17 ----D---- C:\Windows\pss
2014-10-09 20:09:25 ----D---- C:\Users\David\AppData\Roaming\Mozilla
2014-10-09 20:07:21 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-10-02 14:34:48 ----D---- C:\Windows\Panther
2014-09-28 22:21:08 ----D---- C:\Program Files\Microsoft Office
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 BootDefragDriver;BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [2014-07-18 16064]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-09-29 308248]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-20 242240]
R1 GUBootStartup;GUBootStartup; \??\C:\Windows\System32\drivers\GUBootStartup.sys [2014-08-04 17088]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-10-10 281760]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-10-10 25888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-08 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-12-06 761856]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-10 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-11-01 2011224]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-10-01 23256]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-10-26 114904]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-10 148992]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2007-07-13 50688]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2014-05-17 66560]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-10-01 51928]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-17 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-02 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-07 94208]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-10-01 968504]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-10-01 1871160]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-25 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-10-26 11:29:10
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 17 GB (24%) free of 70 GB
Total RAM: 2038 MB (49% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:29:21, on 26.10.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16584)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\David\Downloads\RSIT.exe
C:\Program Files\trend micro\David.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] c:\program files\synaptics\syntp\syntpenh.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GUDelayStartup] "C:\Program Files\Glary Utilities 5\StartupManager.exe" -delayrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
--
End of file - 4043 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GlaryInitialize 5.job - C:\Program Files\Glary Utilities 5\Initialize.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\vhsisrra.default-1407096469056
prefs.js - "browser.startup.homepage" - "seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-10-31 4702208]
"Skytel"=C:\Windows\Skytel.exe [2007-10-11 1826816]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-22 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-22 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-22 133656]
"SynTPEnh"=c:\program files\synaptics\syntp\syntpenh.exe [2007-12-06 1029416]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"GUDelayStartup"=C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Automatické vypnutí počítače.lnk]
C:\PROGRA~1\AUTOMA~1\avp.exe [2004-12-28 443392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2014-10-24 21:51:35 ----D---- C:\AdwCleaner
2014-10-23 09:36:42 ----D---- C:\rsit
2014-10-17 12:57:31 ----A---- C:\Windows\system32\mscories.dll
2014-10-17 12:57:31 ----A---- C:\Windows\system32\mscorier.dll
2014-10-17 12:57:31 ----A---- C:\Windows\system32\dfshim.dll
2014-10-17 12:51:39 ----A---- C:\Windows\system32\win32k.sys
2014-10-17 12:50:40 ----D---- C:\ProgramData\Microsoft Help
2014-10-17 12:41:17 ----A---- C:\Windows\system32\drivers\fastfat.sys
2014-10-17 12:36:59 ----A---- C:\Windows\system32\packager.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\vbscript.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\msfeedssync.exe
2014-10-16 10:08:46 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-16 10:08:45 ----A---- C:\Windows\system32\urlmon.dll
2014-10-16 10:08:45 ----A---- C:\Windows\system32\mshta.exe
2014-10-16 10:08:45 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-16 10:08:43 ----A---- C:\Windows\system32\url.dll
2014-10-16 10:08:43 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-16 10:08:43 ----A---- C:\Windows\system32\iertutil.dll
2014-10-16 10:08:42 ----A---- C:\Windows\system32\wininet.dll
2014-10-16 10:08:42 ----A---- C:\Windows\system32\ieframe.dll
2014-10-16 10:08:41 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-16 10:08:41 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-16 10:08:40 ----A---- C:\Windows\system32\jscript.dll
2014-10-16 10:08:40 ----A---- C:\Windows\system32\ieui.dll
2014-10-16 10:08:38 ----A---- C:\Windows\system32\mshtml.dll
2014-10-16 10:08:36 ----A---- C:\Windows\system32\jscript9.dll
2014-10-13 16:02:49 ----A---- C:\P4G.INI
2014-10-13 15:44:16 ----D---- C:\ProgramData\Application Data
2014-10-13 15:15:42 ----D---- C:\Games
2014-10-12 19:15:17 ----D---- C:\Users\David\AppData\Roaming\GHISLER
2014-10-12 19:15:17 ----D---- C:\totalcmd
2014-10-10 14:01:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-10-10 14:01:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-10-10 14:01:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-10-10 14:01:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-10-10 14:01:02 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-10-10 14:01:00 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-10-10 14:00:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-10-10 14:00:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-10-10 14:00:57 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-10-10 14:00:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-10-10 12:17:12 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2014-10-10 12:17:12 ----A---- C:\Windows\system32\drivers\atksgt.sys
2014-10-09 20:43:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-10-09 20:43:13 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-10-09 20:28:13 ----D---- C:\Windows\Minidump
2014-10-02 16:25:20 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-10-02 16:25:20 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-10-02 16:25:19 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-10-02 16:25:18 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-10-02 16:25:18 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-10-02 16:25:14 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-10-02 16:25:14 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-10-02 16:25:11 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-10-02 16:25:11 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-10-02 16:25:09 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-10-02 16:25:09 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\xinput1_3.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-10-02 16:25:03 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-10-02 16:25:03 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-10-02 16:25:02 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-10-02 16:25:02 ----A---- C:\Windows\system32\d3dx10.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-10-02 16:25:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-10-02 16:24:59 ----A---- C:\Windows\system32\xinput1_2.dll
2014-10-02 16:24:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-10-02 14:34:48 ----A---- C:\Windows\system32\drivers\xkkt.sys
======List of files/folders modified in the last 1 month======
2014-10-26 11:29:21 ----D---- C:\Windows\Prefetch
2014-10-26 11:29:15 ----D---- C:\Program Files\trend micro
2014-10-26 10:37:23 ----D---- C:\Windows\temp
2014-10-26 10:16:38 ----D---- C:\Windows\System32
2014-10-26 10:16:38 ----D---- C:\Windows\inf
2014-10-26 10:16:38 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-10-26 10:10:29 ----A---- C:\Windows\system32\acovcnt.exe
2014-10-25 14:32:18 ----SHD---- C:\System Volume Information
2014-10-25 13:46:17 ----D---- C:\Users\David\AppData\Roaming\DiskDefrag
2014-10-24 21:53:50 ----RD---- C:\Program Files
2014-10-23 20:15:55 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2014-10-23 09:40:24 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-10-23 09:40:02 ----D---- C:\Windows\system32\drivers
2014-10-17 15:44:23 ----D---- C:\Windows\Microsoft.NET
2014-10-17 15:39:44 ----RSD---- C:\Windows\assembly
2014-10-17 13:05:28 ----D---- C:\Windows
2014-10-17 13:01:01 ----D---- C:\Windows\system32\migration
2014-10-17 13:01:00 ----D---- C:\Program Files\Internet Explorer
2014-10-17 12:58:15 ----D---- C:\Windows\winsxs
2014-10-17 12:58:10 ----D---- C:\Windows\system32\catroot
2014-10-17 12:58:08 ----D---- C:\Windows\system32\catroot2
2014-10-17 12:57:26 ----SHD---- C:\Windows\Installer
2014-10-17 12:50:40 ----D---- C:\ProgramData
2014-10-17 12:48:15 ----D---- C:\Windows\system32\MRT
2014-10-17 12:41:57 ----D---- C:\Windows\Debug
2014-10-17 12:41:49 ----A---- C:\Windows\system32\mrt.exe
2014-10-13 22:24:33 ----A---- C:\Windows\avp.ini
2014-10-13 19:18:37 ----D---- C:\Users\David\AppData\Roaming\uTorrent
2014-10-13 18:23:25 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2014-10-13 16:59:32 ----D---- C:\Program Files\Glary Utilities 5
2014-10-13 15:34:12 ----D---- C:\Windows\Logs
2014-10-13 08:03:14 ----D---- C:\Program Files\Common Files
2014-10-09 20:31:17 ----D---- C:\Windows\pss
2014-10-09 20:09:25 ----D---- C:\Users\David\AppData\Roaming\Mozilla
2014-10-09 20:07:21 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-10-02 14:34:48 ----D---- C:\Windows\Panther
2014-09-28 22:21:08 ----D---- C:\Program Files\Microsoft Office
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 BootDefragDriver;BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [2014-07-18 16064]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-09-29 308248]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-20 242240]
R1 GUBootStartup;GUBootStartup; \??\C:\Windows\System32\drivers\GUBootStartup.sys [2014-08-04 17088]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-10-10 281760]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-10-10 25888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-08 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-12-06 761856]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-10 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-11-01 2011224]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-10-01 23256]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-10-26 114904]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-10 148992]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2007-07-13 50688]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2014-05-17 66560]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-10-01 51928]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-17 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-02 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-07 94208]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-10-01 968504]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-10-01 1871160]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-25 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119547
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.:commands
[Purity]
[Emptytemp]
[Emptyflash]
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
Zde je log
Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-10-26 18:54:24
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 17 GB (24%) free of 70 GB
Total RAM: 2038 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:54:31, on 26.10.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16584)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\David\Downloads\RSIT.exe
C:\Program Files\trend micro\David.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] c:\program files\synaptics\syntp\syntpenh.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GUDelayStartup] "C:\Program Files\Glary Utilities 5\StartupManager.exe" -delayrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
--
End of file - 4032 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GlaryInitialize 5.job - C:\Program Files\Glary Utilities 5\Initialize.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\vhsisrra.default-1407096469056
prefs.js - "browser.startup.homepage" - "seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-10-31 4702208]
"Skytel"=C:\Windows\Skytel.exe [2007-10-11 1826816]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-22 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-22 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-22 133656]
"SynTPEnh"=c:\program files\synaptics\syntp\syntpenh.exe [2007-12-06 1029416]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"GUDelayStartup"=C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Automatické vypnutí počítače.lnk]
C:\PROGRA~1\AUTOMA~1\avp.exe [2004-12-28 443392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2014-10-26 18:38:23 ----D---- C:\_OTM
2014-10-24 21:51:35 ----D---- C:\AdwCleaner
2014-10-23 09:36:42 ----D---- C:\rsit
2014-10-17 12:57:31 ----A---- C:\Windows\system32\mscories.dll
2014-10-17 12:57:31 ----A---- C:\Windows\system32\mscorier.dll
2014-10-17 12:57:31 ----A---- C:\Windows\system32\dfshim.dll
2014-10-17 12:51:39 ----A---- C:\Windows\system32\win32k.sys
2014-10-17 12:50:40 ----D---- C:\ProgramData\Microsoft Help
2014-10-17 12:41:17 ----A---- C:\Windows\system32\drivers\fastfat.sys
2014-10-17 12:36:59 ----A---- C:\Windows\system32\packager.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\vbscript.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\msfeedssync.exe
2014-10-16 10:08:46 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-16 10:08:45 ----A---- C:\Windows\system32\urlmon.dll
2014-10-16 10:08:45 ----A---- C:\Windows\system32\mshta.exe
2014-10-16 10:08:45 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-16 10:08:43 ----A---- C:\Windows\system32\url.dll
2014-10-16 10:08:43 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-16 10:08:43 ----A---- C:\Windows\system32\iertutil.dll
2014-10-16 10:08:42 ----A---- C:\Windows\system32\wininet.dll
2014-10-16 10:08:42 ----A---- C:\Windows\system32\ieframe.dll
2014-10-16 10:08:41 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-16 10:08:41 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-16 10:08:40 ----A---- C:\Windows\system32\jscript.dll
2014-10-16 10:08:40 ----A---- C:\Windows\system32\ieui.dll
2014-10-16 10:08:38 ----A---- C:\Windows\system32\mshtml.dll
2014-10-16 10:08:36 ----A---- C:\Windows\system32\jscript9.dll
2014-10-13 16:02:49 ----A---- C:\P4G.INI
2014-10-13 15:44:16 ----D---- C:\ProgramData\Application Data
2014-10-13 15:15:42 ----D---- C:\Games
2014-10-12 19:15:17 ----D---- C:\Users\David\AppData\Roaming\GHISLER
2014-10-12 19:15:17 ----D---- C:\totalcmd
2014-10-10 14:01:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-10-10 14:01:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-10-10 14:01:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-10-10 14:01:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-10-10 14:01:02 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-10-10 14:01:00 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-10-10 14:00:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-10-10 14:00:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-10-10 14:00:57 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-10-10 14:00:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-10-10 12:17:12 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2014-10-10 12:17:12 ----A---- C:\Windows\system32\drivers\atksgt.sys
2014-10-09 20:43:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-10-09 20:43:13 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-10-09 20:28:13 ----D---- C:\Windows\Minidump
2014-10-02 16:25:20 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-10-02 16:25:20 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-10-02 16:25:19 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-10-02 16:25:18 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-10-02 16:25:18 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-10-02 16:25:14 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-10-02 16:25:14 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-10-02 16:25:11 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-10-02 16:25:11 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-10-02 16:25:09 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-10-02 16:25:09 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\xinput1_3.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-10-02 16:25:03 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-10-02 16:25:03 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-10-02 16:25:02 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-10-02 16:25:02 ----A---- C:\Windows\system32\d3dx10.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-10-02 16:25:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-10-02 16:24:59 ----A---- C:\Windows\system32\xinput1_2.dll
2014-10-02 16:24:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-10-02 14:34:48 ----A---- C:\Windows\system32\drivers\xkkt.sys
======List of files/folders modified in the last 1 month======
2014-10-26 18:54:29 ----D---- C:\Program Files\trend micro
2014-10-26 18:50:35 ----D---- C:\Windows\System32
2014-10-26 18:50:35 ----D---- C:\Windows\inf
2014-10-26 18:50:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-10-26 18:47:20 ----D---- C:\Windows\temp
2014-10-26 18:46:25 ----A---- C:\Windows\system32\acovcnt.exe
2014-10-26 18:43:38 ----D---- C:\Windows\Prefetch
2014-10-26 12:35:57 ----SHD---- C:\System Volume Information
2014-10-25 13:46:17 ----D---- C:\Users\David\AppData\Roaming\DiskDefrag
2014-10-24 21:53:50 ----RD---- C:\Program Files
2014-10-23 20:15:55 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2014-10-23 09:40:24 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-10-23 09:40:02 ----D---- C:\Windows\system32\drivers
2014-10-17 15:44:23 ----D---- C:\Windows\Microsoft.NET
2014-10-17 15:39:44 ----RSD---- C:\Windows\assembly
2014-10-17 13:05:28 ----D---- C:\Windows
2014-10-17 13:01:01 ----D---- C:\Windows\system32\migration
2014-10-17 13:01:00 ----D---- C:\Program Files\Internet Explorer
2014-10-17 12:58:15 ----D---- C:\Windows\winsxs
2014-10-17 12:58:10 ----D---- C:\Windows\system32\catroot
2014-10-17 12:58:08 ----D---- C:\Windows\system32\catroot2
2014-10-17 12:57:26 ----SHD---- C:\Windows\Installer
2014-10-17 12:50:40 ----D---- C:\ProgramData
2014-10-17 12:48:15 ----D---- C:\Windows\system32\MRT
2014-10-17 12:41:57 ----D---- C:\Windows\Debug
2014-10-17 12:41:49 ----A---- C:\Windows\system32\mrt.exe
2014-10-13 22:24:33 ----A---- C:\Windows\avp.ini
2014-10-13 19:18:37 ----D---- C:\Users\David\AppData\Roaming\uTorrent
2014-10-13 18:23:25 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2014-10-13 16:59:32 ----D---- C:\Program Files\Glary Utilities 5
2014-10-13 15:34:12 ----D---- C:\Windows\Logs
2014-10-13 08:03:14 ----D---- C:\Program Files\Common Files
2014-10-09 20:31:17 ----D---- C:\Windows\pss
2014-10-09 20:09:25 ----D---- C:\Users\David\AppData\Roaming\Mozilla
2014-10-09 20:07:21 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-10-02 14:34:48 ----D---- C:\Windows\Panther
2014-09-28 22:21:08 ----D---- C:\Program Files\Microsoft Office
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 BootDefragDriver;BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [2014-07-18 16064]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-09-29 308248]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-20 242240]
R1 GUBootStartup;GUBootStartup; \??\C:\Windows\System32\drivers\GUBootStartup.sys [2014-08-04 17088]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-10-10 281760]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-10-10 25888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-08 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-12-06 761856]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-10 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-11-01 2011224]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-10-01 23256]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-10 148992]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2007-07-13 50688]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2014-05-17 66560]
S1 MpKsl30da62f4;MpKsl30da62f4; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B4240BD8-6F1A-4180-ACEF-3B56D053F957}\MpKsl30da62f4.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-10-26 114904]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-10-01 51928]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-17 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-02 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-07 94208]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-10-01 1871160]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-10-01 968504]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-25 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Logfile of random's system information tool 1.10 (written by random/random)
Run by David at 2014-10-26 18:54:24
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 17 GB (24%) free of 70 GB
Total RAM: 2038 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:54:31, on 26.10.2014
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16584)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\David\Downloads\RSIT.exe
C:\Program Files\trend micro\David.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [SynTPEnh] c:\program files\synaptics\syntp\syntpenh.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GUDelayStartup] "C:\Program Files\Glary Utilities 5\StartupManager.exe" -delayrun
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
--
End of file - 4032 bytes
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GlaryInitialize 5.job - C:\Program Files\Glary Utilities 5\Initialize.exe
=========Mozilla firefox=========
ProfilePath - C:\Users\David\AppData\Roaming\Mozilla\Firefox\Profiles\vhsisrra.default-1407096469056
prefs.js - "browser.startup.homepage" - "seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_152.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-10-31 4702208]
"Skytel"=C:\Windows\Skytel.exe [2007-10-11 1826816]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-08-22 974432]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-22 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-22 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-22 133656]
"SynTPEnh"=c:\program files\synaptics\syntp\syntpenh.exe [2007-12-06 1029416]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-10 1233920]
"GUDelayStartup"=C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GUDelayStartup]
C:\Program Files\Glary Utilities 5\StartupManager.exe [2014-07-21 37152]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^David^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Automatické vypnutí počítače.lnk]
C:\PROGRA~1\AUTOMA~1\avp.exe [2004-12-28 443392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsvid.dll
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
======List of files/folders created in the last 1 month======
2014-10-26 18:38:23 ----D---- C:\_OTM
2014-10-24 21:51:35 ----D---- C:\AdwCleaner
2014-10-23 09:36:42 ----D---- C:\rsit
2014-10-17 12:57:31 ----A---- C:\Windows\system32\mscories.dll
2014-10-17 12:57:31 ----A---- C:\Windows\system32\mscorier.dll
2014-10-17 12:57:31 ----A---- C:\Windows\system32\dfshim.dll
2014-10-17 12:51:39 ----A---- C:\Windows\system32\win32k.sys
2014-10-17 12:50:40 ----D---- C:\ProgramData\Microsoft Help
2014-10-17 12:41:17 ----A---- C:\Windows\system32\drivers\fastfat.sys
2014-10-17 12:36:59 ----A---- C:\Windows\system32\packager.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\vbscript.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\msfeedssync.exe
2014-10-16 10:08:46 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\jsproxy.dll
2014-10-16 10:08:46 ----A---- C:\Windows\system32\dxtmsft.dll
2014-10-16 10:08:45 ----A---- C:\Windows\system32\urlmon.dll
2014-10-16 10:08:45 ----A---- C:\Windows\system32\mshta.exe
2014-10-16 10:08:45 ----A---- C:\Windows\system32\msfeeds.dll
2014-10-16 10:08:43 ----A---- C:\Windows\system32\url.dll
2014-10-16 10:08:43 ----A---- C:\Windows\system32\ieUnatt.exe
2014-10-16 10:08:43 ----A---- C:\Windows\system32\iertutil.dll
2014-10-16 10:08:42 ----A---- C:\Windows\system32\wininet.dll
2014-10-16 10:08:42 ----A---- C:\Windows\system32\ieframe.dll
2014-10-16 10:08:41 ----A---- C:\Windows\system32\mshtmled.dll
2014-10-16 10:08:41 ----A---- C:\Windows\system32\dxtrans.dll
2014-10-16 10:08:40 ----A---- C:\Windows\system32\jscript.dll
2014-10-16 10:08:40 ----A---- C:\Windows\system32\ieui.dll
2014-10-16 10:08:38 ----A---- C:\Windows\system32\mshtml.dll
2014-10-16 10:08:36 ----A---- C:\Windows\system32\jscript9.dll
2014-10-13 16:02:49 ----A---- C:\P4G.INI
2014-10-13 15:44:16 ----D---- C:\ProgramData\Application Data
2014-10-13 15:15:42 ----D---- C:\Games
2014-10-12 19:15:17 ----D---- C:\Users\David\AppData\Roaming\GHISLER
2014-10-12 19:15:17 ----D---- C:\totalcmd
2014-10-10 14:01:04 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-10-10 14:01:04 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-10-10 14:01:03 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-10-10 14:01:03 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-10-10 14:01:02 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-10-10 14:01:00 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-10-10 14:00:58 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-10-10 14:00:58 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-10-10 14:00:57 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-10-10 14:00:57 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-10-10 14:00:56 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-10-10 12:17:12 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2014-10-10 12:17:12 ----A---- C:\Windows\system32\drivers\atksgt.sys
2014-10-09 20:43:14 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-10-09 20:43:13 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-10-09 20:28:13 ----D---- C:\Windows\Minidump
2014-10-02 16:25:20 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-10-02 16:25:20 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-10-02 16:25:19 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-10-02 16:25:18 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-10-02 16:25:18 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-10-02 16:25:17 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-10-02 16:25:14 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-10-02 16:25:14 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\XAudio2_1.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2014-10-02 16:25:13 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\xactengine3_1.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\d3dx10_38.dll
2014-10-02 16:25:12 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2014-10-02 16:25:11 ----A---- C:\Windows\system32\XAudio2_0.dll
2014-10-02 16:25:11 ----A---- C:\Windows\system32\D3DX9_38.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\xactengine3_0.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\d3dx10_37.dll
2014-10-02 16:25:10 ----A---- C:\Windows\system32\D3DCompiler_37.dll
2014-10-02 16:25:09 ----A---- C:\Windows\system32\xactengine2_10.dll
2014-10-02 16:25:09 ----A---- C:\Windows\system32\D3DX9_37.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\d3dx9_36.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\d3dx10_36.dll
2014-10-02 16:25:08 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\xactengine2_9.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\d3dx10_35.dll
2014-10-02 16:25:07 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\xactengine2_8.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\d3dx9_35.dll
2014-10-02 16:25:06 ----A---- C:\Windows\system32\d3dx10_34.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\xinput1_3.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\d3dx9_34.dll
2014-10-02 16:25:05 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\xactengine2_7.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\d3dx10_33.dll
2014-10-02 16:25:04 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2014-10-02 16:25:03 ----A---- C:\Windows\system32\xactengine2_6.dll
2014-10-02 16:25:03 ----A---- C:\Windows\system32\d3dx9_33.dll
2014-10-02 16:25:02 ----A---- C:\Windows\system32\xactengine2_5.dll
2014-10-02 16:25:02 ----A---- C:\Windows\system32\d3dx10.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\xactengine2_4.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\x3daudio1_1.dll
2014-10-02 16:25:01 ----A---- C:\Windows\system32\d3dx9_32.dll
2014-10-02 16:25:00 ----A---- C:\Windows\system32\d3dx9_31.dll
2014-10-02 16:24:59 ----A---- C:\Windows\system32\xinput1_2.dll
2014-10-02 16:24:59 ----A---- C:\Windows\system32\xactengine2_3.dll
2014-10-02 14:34:48 ----A---- C:\Windows\system32\drivers\xkkt.sys
======List of files/folders modified in the last 1 month======
2014-10-26 18:54:29 ----D---- C:\Program Files\trend micro
2014-10-26 18:50:35 ----D---- C:\Windows\System32
2014-10-26 18:50:35 ----D---- C:\Windows\inf
2014-10-26 18:50:35 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-10-26 18:47:20 ----D---- C:\Windows\temp
2014-10-26 18:46:25 ----A---- C:\Windows\system32\acovcnt.exe
2014-10-26 18:43:38 ----D---- C:\Windows\Prefetch
2014-10-26 12:35:57 ----SHD---- C:\System Volume Information
2014-10-25 13:46:17 ----D---- C:\Users\David\AppData\Roaming\DiskDefrag
2014-10-24 21:53:50 ----RD---- C:\Program Files
2014-10-23 20:15:55 ----SD---- C:\Users\David\AppData\Roaming\Microsoft
2014-10-23 09:40:24 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-10-23 09:40:02 ----D---- C:\Windows\system32\drivers
2014-10-17 15:44:23 ----D---- C:\Windows\Microsoft.NET
2014-10-17 15:39:44 ----RSD---- C:\Windows\assembly
2014-10-17 13:05:28 ----D---- C:\Windows
2014-10-17 13:01:01 ----D---- C:\Windows\system32\migration
2014-10-17 13:01:00 ----D---- C:\Program Files\Internet Explorer
2014-10-17 12:58:15 ----D---- C:\Windows\winsxs
2014-10-17 12:58:10 ----D---- C:\Windows\system32\catroot
2014-10-17 12:58:08 ----D---- C:\Windows\system32\catroot2
2014-10-17 12:57:26 ----SHD---- C:\Windows\Installer
2014-10-17 12:50:40 ----D---- C:\ProgramData
2014-10-17 12:48:15 ----D---- C:\Windows\system32\MRT
2014-10-17 12:41:57 ----D---- C:\Windows\Debug
2014-10-17 12:41:49 ----A---- C:\Windows\system32\mrt.exe
2014-10-13 22:24:33 ----A---- C:\Windows\avp.ini
2014-10-13 19:18:37 ----D---- C:\Users\David\AppData\Roaming\uTorrent
2014-10-13 18:23:25 ----D---- C:\Users\David\AppData\Roaming\DAEMON Tools Lite
2014-10-13 16:59:32 ----D---- C:\Program Files\Glary Utilities 5
2014-10-13 15:34:12 ----D---- C:\Windows\Logs
2014-10-13 08:03:14 ----D---- C:\Program Files\Common Files
2014-10-09 20:31:17 ----D---- C:\Windows\pss
2014-10-09 20:09:25 ----D---- C:\Users\David\AppData\Roaming\Mozilla
2014-10-09 20:07:21 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-10-02 14:34:48 ----D---- C:\Windows\Panther
2014-09-28 22:21:08 ----D---- C:\Program Files\Microsoft Office
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 BootDefragDriver;BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [2014-07-18 16064]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2007-09-29 308248]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-07-17 231800]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-05-20 242240]
R1 GUBootStartup;GUBootStartup; \??\C:\Windows\System32\drivers\GUBootStartup.sys [2014-08-04 17088]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2014-10-10 281760]
R2 ghaio;ghaio; \??\C:\Program Files\ASUS\NB Probe\SPM\ghaio.sys [2007-08-03 20936]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2014-10-10 25888]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-07-17 95920]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-08-08 45568]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-07-30 43008]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2007-12-06 761856]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-10 22528]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-21 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-06-17 30208]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-11-01 2011224]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2007-01-24 5632]
R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2014-10-01 23256]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2006-12-14 7680]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-10 148992]
R3 RTL8023xp;Realtek 10/100 NIC Family NDIS x86 Driver; C:\Windows\system32\DRIVERS\Rtnicxp.sys [2007-07-13 50688]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-10 89088]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-12-06 196400]
R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2014-05-17 66560]
S1 MpKsl30da62f4;MpKsl30da62f4; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{B4240BD8-6F1A-4180-ACEF-3B56D053F957}\MpKsl30da62f4.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-21 508416]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-21 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [2014-10-26 114904]
S3 MBAMWebAccessControl;MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [2014-10-01 51928]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-21 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-21 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-21 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-21 6016]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2014-05-17 155136]
S4 ErrDev;Microsoft Hardware Error Device Driver; C:\Windows\system32\drivers\errdev.sys [2008-01-21 6656]
S4 MegaSR;MegaSR; C:\Windows\system32\drivers\megasr.sys [2008-01-21 386616]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 ASLDRService;ASLDR Service; C:\Program Files\ATK Hotkey\ASLDRSrv.exe [2007-10-02 94208]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-07 94208]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-21 21504]
R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-10-01 1871160]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-08-22 22192]
R2 spmgr;spmgr; C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe [2007-08-03 125496]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2014-08-22 288120]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 MBAMService;MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [2014-10-01 968504]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-24 267440]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-25 114288]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
-
Rudy
- Site Admin
- Příspěvky: 119547
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
DObrý den je to lepsi dekuji
-
Rudy
- Site Admin
- Příspěvky: 119547
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Mozilla firefox youtube se hodně seká vytížení cpu 100%
Nemáte zač! 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Přispějete na provoz fóra?