
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Kontrola logu - změna z Avast na Avira - prevent
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Kontrola logu - změna z Avast na Avira - prevent
Ahoj,
Prosím o kontrolu logu. Vřele děkuji.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Miroslav at 2016-06-19 09:26:22
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 382 GB (95%) free of 400 GB
Total RAM: 2047 MB (31% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:26:24, on 19.6.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\Antivirus\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\Antivirus\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\Antivirus\avguard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\Antivirus\avshadow.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Phone\Skype.exe
D:\Internet\RSIT.exe
C:\Program Files\trend micro\Miroslav.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Stáhnout FDM - file://D:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://D:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://D:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://D:\Program Files\Free Download Manager\dlall.htm
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2155487940
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABE43CF2-E11C-4DDE-A279-3ABC01EEACEC}: NameServer = 212.158.128.3
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE
O23 - Service: GalaxyClientService - GOG.com - D:\Program Files\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 4260 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d0f22a675b0b34.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d197d2bda04f42.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "Seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"fdm_ffext@freedownloadmanager.org"=D:\Program Files\Free Download Manager\Firefox\Extension
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1216156.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\extensions\
cs@dictionaries.addons.mozilla.org
facefont@mc.com
netvideohunter@netvideohunter.com
{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B}
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\searchplugins\
google-peklada.xml
jnpcz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
""= []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2014-05-20 15717664]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"avgnt"=C:\Program Files\Avira\Antivirus\avgnt.exe [2016-04-04 814608]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KeePass 2 PreLoad]
D:\Program Files\KeePass Password Safe 2\KeePass.exe [2013-04-05 1960448]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\WINDOWS\system32\NvMcTray.dll [2014-05-20 377288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2014-05-20 2593056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
D:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2013-06-07 774680]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"xmlprov"=3
"NVSvc"=3
"MozillaMaintenance"=3
"gupdatem"=3
"gupdate"=2
"SkypeUpdate"=2
"ServiceLayer"=3
"idsvc"=3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOWS\syste
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoAutoUpdate"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe"="D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe:*:Enabled:Tidalis"
"D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe"="D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe:*:Enabled:Deus Ex: Human Revolution"
"C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe"="C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe"="D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe"="D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe:*:Enabled:Alien Swarm"
"C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe"="D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2"
"D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe"="D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe:*:Enabled:Portal 2"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Battle.net\Battle.net.exe"="D:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"D:\Program Files\Hearthstone\Hearthstone.exe"="D:\Program Files\Hearthstone\Hearthstone.exe:*:Enabled:Hearthstone"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Origin\Origin.exe"="D:\Origin\Origin.exe:*:Enabled:Origin"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe"="D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe:*:Enabled:PAYDAY: The Heist"
"D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe"="D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe:*:Enabled:Real World Racing"
"D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe"="D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe:*:Enabled:Grand Theft Auto: Vice City"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe"="D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe:*:Enabled:Faerie Solitaire"
"D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe"="D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe:*:Enabled:Bejeweled® 3"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe"="D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut 2"
"D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe"="D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe:*:Enabled:Star Wars: Knights of the Old Republic"
"D:\Program Files\Muve\Muve Downloader\Launcher.exe"="D:\Program Files\Muve\Muve Downloader\Launcher.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe"="D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe"="D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe:*:Enabled:Fallout 3"
"D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe"="D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe:*:Enabled:System Shock 2"
"D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe"="D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe:*:Enabled:Bridge Constructor"
"D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe"="D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe:*:Enabled:Pinball FX2"
"C:\Program Files\Application\vivaldi.exe"="C:\Program Files\Application\vivaldi.exe:*:Enabled:Vivaldi"
"D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe"="D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe:*:Enabled:Quake Live"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe:*:Enabled:POSTAL 2"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe:*:Enabled:POSTAL 2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe"="D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe:*:Enabled:Sniper: Ghost Warrior"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"vidc.XVID"=xvidvfw.dll
======List of files/folders created in the last 1 month======
2016-06-19 09:26:22 ----D---- C:\rsit
2016-06-09 23:12:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\GOG.com
2016-06-07 22:42:18 ----D---- C:\Program Files\Mozilla Firefox
2016-06-04 10:23:37 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Avira
2016-06-04 10:21:57 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2016-06-04 10:21:50 ----D---- C:\Program Files\Avira
2016-06-04 10:12:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2016-05-26 18:55:43 ----D---- C:\Program Files\Common Files\Skype
2016-05-23 13:28:26 ----ASH---- C:\hiberfil.sys
2016-05-23 13:23:51 ----A---- C:\WINDOWS\ntbtlog.txt
======List of files/folders modified in the last 1 month======
2016-06-19 09:26:23 ----D---- C:\Program Files\trend micro
2016-06-19 09:26:22 ----D---- C:\WINDOWS\Temp
2016-06-19 08:47:27 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Skype
2016-06-19 07:47:49 ----SHD---- C:\WINDOWS\Installer
2016-06-19 07:47:49 ----D---- C:\Config.Msi
2016-06-19 07:46:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Package Cache
2016-06-19 07:36:00 ----D---- C:\WINDOWS\system32\Lang
2016-06-19 07:35:51 ----D---- C:\WINDOWS\system32\NtmsData
2016-06-18 22:44:29 ----D---- C:\Program Files
2016-06-14 23:26:03 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Media Player Classic
2016-06-14 16:12:46 ----SHD---- C:\System Volume Information
2016-06-14 16:12:46 ----D---- C:\WINDOWS\system32\Restore
2016-06-13 14:32:53 ----D---- C:\WINDOWS\system32
2016-06-09 23:23:31 ----D---- C:\WINDOWS\system32\CatRoot2
2016-06-09 23:12:17 ----RSD---- C:\WINDOWS\Fonts
2016-06-08 07:45:07 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-06-04 10:21:57 ----D---- C:\WINDOWS\system32\drivers
2016-06-03 16:13:12 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\YouTube Downloader
2016-05-29 06:51:58 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\KeePass
2016-05-29 06:11:00 ----D---- C:\WINDOWS
2016-05-28 20:37:07 ----D---- C:\WINDOWS\WinSxS
2016-05-28 20:36:08 ----D---- C:\WINDOWS\system32\DirectX
2016-05-28 20:36:07 ----HD---- C:\WINDOWS\inf
2016-05-28 20:35:49 ----RSD---- C:\WINDOWS\assembly
2016-05-26 18:55:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2016-05-26 18:55:44 ----RD---- C:\Program Files\Skype
2016-05-23 13:36:24 ----D---- C:\Program Files\Nokia
2016-05-23 13:36:24 ----D---- C:\Program Files\Common Files
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia Suite
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia
2016-05-23 13:25:19 ----ASH---- C:\boot.ini
2016-05-21 22:46:43 ----D---- C:\WINDOWS\system32\CatRoot
2016-05-21 22:44:27 ----SD---- C:\WINDOWS\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iteraid;ITERAID_Service_Install; C:\WINDOWS\system32\DRIVERS\iteraid.sys [2004-10-29 25067]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2016-04-04 137240]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2016-04-04 37896]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2016-04-04 31848]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2016-04-04 109016]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-12-06 126720]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2014-05-20 12692296]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\Antivirus\avguard.exe [2016-04-04 467016]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\Antivirus\sched.exe [2016-04-04 467016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files\Avira\Antivirus\avmailc.exe [2016-04-04 955712]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE [2016-04-04 1238968]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-03-23 327808]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GalaxyClientService;GalaxyClientService; D:\Program Files\GalaxyClient\GalaxyClientService.exe [2016-06-08 245312]
S3 GalaxyCommunication;GalaxyCommunication; C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2016-06-08 6211648]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-07 146888]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2014-05-20 158152]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-11-18 833728]
-----------------EOF-----------------
Prosím o kontrolu logu. Vřele děkuji.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Miroslav at 2016-06-19 09:26:22
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 382 GB (95%) free of 400 GB
Total RAM: 2047 MB (31% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:26:24, on 19.6.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\Antivirus\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\Antivirus\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Avira\Antivirus\avguard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\Antivirus\avshadow.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Phone\Skype.exe
D:\Internet\RSIT.exe
C:\Program Files\trend micro\Miroslav.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Stáhnout FDM - file://D:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://D:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://D:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://D:\Program Files\Free Download Manager\dlall.htm
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2155487940
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABE43CF2-E11C-4DDE-A279-3ABC01EEACEC}: NameServer = 212.158.128.3
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE
O23 - Service: GalaxyClientService - GOG.com - D:\Program Files\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 4260 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d0f22a675b0b34.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d197d2bda04f42.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "Seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"fdm_ffext@freedownloadmanager.org"=D:\Program Files\Free Download Manager\Firefox\Extension
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1216156.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\extensions\
cs@dictionaries.addons.mozilla.org
facefont@mc.com
netvideohunter@netvideohunter.com
{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B}
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\searchplugins\
google-peklada.xml
jnpcz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
""= []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2014-05-20 15717664]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"avgnt"=C:\Program Files\Avira\Antivirus\avgnt.exe [2016-04-04 814608]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KeePass 2 PreLoad]
D:\Program Files\KeePass Password Safe 2\KeePass.exe [2013-04-05 1960448]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\WINDOWS\system32\NvMcTray.dll [2014-05-20 377288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2014-05-20 2593056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
D:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2013-06-07 774680]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"xmlprov"=3
"NVSvc"=3
"MozillaMaintenance"=3
"gupdatem"=3
"gupdate"=2
"SkypeUpdate"=2
"ServiceLayer"=3
"idsvc"=3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOWS\syste
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoAutoUpdate"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe"="D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe:*:Enabled:Tidalis"
"D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe"="D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe:*:Enabled:Deus Ex: Human Revolution"
"C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe"="C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe"="D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe"="D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe:*:Enabled:Alien Swarm"
"C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe"="D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2"
"D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe"="D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe:*:Enabled:Portal 2"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Battle.net\Battle.net.exe"="D:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"D:\Program Files\Hearthstone\Hearthstone.exe"="D:\Program Files\Hearthstone\Hearthstone.exe:*:Enabled:Hearthstone"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Origin\Origin.exe"="D:\Origin\Origin.exe:*:Enabled:Origin"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe"="D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe:*:Enabled:PAYDAY: The Heist"
"D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe"="D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe:*:Enabled:Real World Racing"
"D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe"="D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe:*:Enabled:Grand Theft Auto: Vice City"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe"="D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe:*:Enabled:Faerie Solitaire"
"D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe"="D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe:*:Enabled:Bejeweled® 3"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe"="D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut 2"
"D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe"="D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe:*:Enabled:Star Wars: Knights of the Old Republic"
"D:\Program Files\Muve\Muve Downloader\Launcher.exe"="D:\Program Files\Muve\Muve Downloader\Launcher.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe"="D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe"="D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe:*:Enabled:Fallout 3"
"D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe"="D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe:*:Enabled:System Shock 2"
"D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe"="D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe:*:Enabled:Bridge Constructor"
"D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe"="D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe:*:Enabled:Pinball FX2"
"C:\Program Files\Application\vivaldi.exe"="C:\Program Files\Application\vivaldi.exe:*:Enabled:Vivaldi"
"D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe"="D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe:*:Enabled:Quake Live"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe:*:Enabled:POSTAL 2"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe:*:Enabled:POSTAL 2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe"="D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe:*:Enabled:Sniper: Ghost Warrior"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"vidc.XVID"=xvidvfw.dll
======List of files/folders created in the last 1 month======
2016-06-19 09:26:22 ----D---- C:\rsit
2016-06-09 23:12:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\GOG.com
2016-06-07 22:42:18 ----D---- C:\Program Files\Mozilla Firefox
2016-06-04 10:23:37 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Avira
2016-06-04 10:21:57 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2016-06-04 10:21:50 ----D---- C:\Program Files\Avira
2016-06-04 10:12:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2016-05-26 18:55:43 ----D---- C:\Program Files\Common Files\Skype
2016-05-23 13:28:26 ----ASH---- C:\hiberfil.sys
2016-05-23 13:23:51 ----A---- C:\WINDOWS\ntbtlog.txt
======List of files/folders modified in the last 1 month======
2016-06-19 09:26:23 ----D---- C:\Program Files\trend micro
2016-06-19 09:26:22 ----D---- C:\WINDOWS\Temp
2016-06-19 08:47:27 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Skype
2016-06-19 07:47:49 ----SHD---- C:\WINDOWS\Installer
2016-06-19 07:47:49 ----D---- C:\Config.Msi
2016-06-19 07:46:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Package Cache
2016-06-19 07:36:00 ----D---- C:\WINDOWS\system32\Lang
2016-06-19 07:35:51 ----D---- C:\WINDOWS\system32\NtmsData
2016-06-18 22:44:29 ----D---- C:\Program Files
2016-06-14 23:26:03 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Media Player Classic
2016-06-14 16:12:46 ----SHD---- C:\System Volume Information
2016-06-14 16:12:46 ----D---- C:\WINDOWS\system32\Restore
2016-06-13 14:32:53 ----D---- C:\WINDOWS\system32
2016-06-09 23:23:31 ----D---- C:\WINDOWS\system32\CatRoot2
2016-06-09 23:12:17 ----RSD---- C:\WINDOWS\Fonts
2016-06-08 07:45:07 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-06-04 10:21:57 ----D---- C:\WINDOWS\system32\drivers
2016-06-03 16:13:12 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\YouTube Downloader
2016-05-29 06:51:58 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\KeePass
2016-05-29 06:11:00 ----D---- C:\WINDOWS
2016-05-28 20:37:07 ----D---- C:\WINDOWS\WinSxS
2016-05-28 20:36:08 ----D---- C:\WINDOWS\system32\DirectX
2016-05-28 20:36:07 ----HD---- C:\WINDOWS\inf
2016-05-28 20:35:49 ----RSD---- C:\WINDOWS\assembly
2016-05-26 18:55:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2016-05-26 18:55:44 ----RD---- C:\Program Files\Skype
2016-05-23 13:36:24 ----D---- C:\Program Files\Nokia
2016-05-23 13:36:24 ----D---- C:\Program Files\Common Files
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia Suite
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia
2016-05-23 13:25:19 ----ASH---- C:\boot.ini
2016-05-21 22:46:43 ----D---- C:\WINDOWS\system32\CatRoot
2016-05-21 22:44:27 ----SD---- C:\WINDOWS\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iteraid;ITERAID_Service_Install; C:\WINDOWS\system32\DRIVERS\iteraid.sys [2004-10-29 25067]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2016-04-04 137240]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2016-04-04 37896]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2016-04-04 31848]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2016-04-04 109016]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-12-06 126720]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2014-05-20 12692296]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\Antivirus\avguard.exe [2016-04-04 467016]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\Antivirus\sched.exe [2016-04-04 467016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files\Avira\Antivirus\avmailc.exe [2016-04-04 955712]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE [2016-04-04 1238968]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-03-23 327808]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GalaxyClientService;GalaxyClientService; D:\Program Files\GalaxyClient\GalaxyClientService.exe [2016-06-08 245312]
S3 GalaxyCommunication;GalaxyCommunication; C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2016-06-08 6211648]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-07 146888]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2014-05-20 158152]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-11-18 833728]
-----------------EOF-----------------
- Rudy
- Site Admin

- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - změna z Avast na Avira - prevent
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - změna z Avast na Avira - prevent
# AdwCleaner v5.200 - Log vytvořen 19/06/2016 v 09:43:12
# Aktualizováno 14/06/2016 by ToolsLib
# Databáze : 2016-06-17.1 [Server]
# Operační system : Microsoft Windows XP Service Pack 3 (X86)
# Uživatelské jméno : Miroslav - MIROSLAV-323C15
# Spuštěno z : C:\Documents and Settings\Miroslav\Plocha\adwcleaner_5.200.exe
# Nastavení : Čištění
# Podpora : https://toolslib.net/forum
***** [ Služby ] *****
***** [ Složky ] *****
***** [ Soubory ] *****
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úlohy ] *****
***** [ Registry ] *****
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\pc-mechanic
***** [ Prohlížeče ] *****
*************************
:: "Tracing" klíče smazány
:: Nastavení Winsock vyčištěno
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [866 bytů] - [19/06/2016 09:43:12]
C:\AdwCleaner\AdwCleaner[S1].txt - [906 bytů] - [19/06/2016 09:41:02]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1010 bytů] ##########
# Aktualizováno 14/06/2016 by ToolsLib
# Databáze : 2016-06-17.1 [Server]
# Operační system : Microsoft Windows XP Service Pack 3 (X86)
# Uživatelské jméno : Miroslav - MIROSLAV-323C15
# Spuštěno z : C:\Documents and Settings\Miroslav\Plocha\adwcleaner_5.200.exe
# Nastavení : Čištění
# Podpora : https://toolslib.net/forum
***** [ Služby ] *****
***** [ Složky ] *****
***** [ Soubory ] *****
***** [ DLLs ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úlohy ] *****
***** [ Registry ] *****
[-] Klíč Smazáno : HKLM\SOFTWARE\Classes\pc-mechanic
***** [ Prohlížeče ] *****
*************************
:: "Tracing" klíče smazány
:: Nastavení Winsock vyčištěno
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [866 bytů] - [19/06/2016 09:43:12]
C:\AdwCleaner\AdwCleaner[S1].txt - [906 bytů] - [19/06/2016 09:41:02]
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1010 bytů] ##########
- Rudy
- Site Admin

- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - změna z Avast na Avira - prevent
Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - změna z Avast na Avira - prevent
Logfile of random's system information tool 1.10 (written by random/random)
Run by Miroslav at 2016-06-19 10:58:10
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 382 GB (95%) free of 400 GB
Total RAM: 2047 MB (33% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:58:15, on 19.6.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\Antivirus\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\Antivirus\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Avira\Antivirus\avguard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\Antivirus\avshadow.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Phone\Skype.exe
D:\Internet\RSIT.exe
C:\Program Files\trend micro\Miroslav.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Stáhnout FDM - file://D:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://D:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://D:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://D:\Program Files\Free Download Manager\dlall.htm
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2155487940
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABE43CF2-E11C-4DDE-A279-3ABC01EEACEC}: NameServer = 212.158.128.3
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE
O23 - Service: GalaxyClientService - GOG.com - D:\Program Files\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 4294 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d0f22a675b0b34.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d197d2bda04f42.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "Seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"fdm_ffext@freedownloadmanager.org"=D:\Program Files\Free Download Manager\Firefox\Extension
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1216156.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\extensions\
cs@dictionaries.addons.mozilla.org
facefont@mc.com
netvideohunter@netvideohunter.com
{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B}
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\searchplugins\
google-peklada.xml
jnpcz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
""= []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2014-05-20 15717664]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"avgnt"=C:\Program Files\Avira\Antivirus\avgnt.exe [2016-04-04 814608]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KeePass 2 PreLoad]
D:\Program Files\KeePass Password Safe 2\KeePass.exe [2013-04-05 1960448]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\WINDOWS\system32\NvMcTray.dll [2014-05-20 377288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2014-05-20 2593056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
D:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2013-06-07 774680]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"xmlprov"=3
"NVSvc"=3
"MozillaMaintenance"=3
"gupdatem"=3
"gupdate"=2
"SkypeUpdate"=2
"ServiceLayer"=3
"idsvc"=3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOWS\syste
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoAutoUpdate"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe"="D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe:*:Enabled:Tidalis"
"D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe"="D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe:*:Enabled:Deus Ex: Human Revolution"
"C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe"="C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe"="D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe"="D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe:*:Enabled:Alien Swarm"
"C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe"="D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2"
"D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe"="D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe:*:Enabled:Portal 2"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Battle.net\Battle.net.exe"="D:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"D:\Program Files\Hearthstone\Hearthstone.exe"="D:\Program Files\Hearthstone\Hearthstone.exe:*:Enabled:Hearthstone"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Origin\Origin.exe"="D:\Origin\Origin.exe:*:Enabled:Origin"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe"="D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe:*:Enabled:PAYDAY: The Heist"
"D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe"="D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe:*:Enabled:Real World Racing"
"D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe"="D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe:*:Enabled:Grand Theft Auto: Vice City"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe"="D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe:*:Enabled:Faerie Solitaire"
"D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe"="D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe:*:Enabled:Bejeweled® 3"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe"="D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut 2"
"D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe"="D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe:*:Enabled:Star Wars: Knights of the Old Republic"
"D:\Program Files\Muve\Muve Downloader\Launcher.exe"="D:\Program Files\Muve\Muve Downloader\Launcher.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe"="D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe"="D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe:*:Enabled:Fallout 3"
"D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe"="D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe:*:Enabled:System Shock 2"
"D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe"="D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe:*:Enabled:Bridge Constructor"
"D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe"="D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe:*:Enabled:Pinball FX2"
"C:\Program Files\Application\vivaldi.exe"="C:\Program Files\Application\vivaldi.exe:*:Enabled:Vivaldi"
"D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe"="D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe:*:Enabled:Quake Live"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe:*:Enabled:POSTAL 2"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe:*:Enabled:POSTAL 2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe"="D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe:*:Enabled:Sniper: Ghost Warrior"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"vidc.XVID"=xvidvfw.dll
======List of files/folders created in the last 1 month======
2016-06-19 09:40:39 ----D---- C:\AdwCleaner
2016-06-19 09:26:22 ----D---- C:\rsit
2016-06-09 23:12:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\GOG.com
2016-06-07 22:42:18 ----D---- C:\Program Files\Mozilla Firefox
2016-06-04 10:23:37 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Avira
2016-06-04 10:21:57 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2016-06-04 10:21:50 ----D---- C:\Program Files\Avira
2016-06-04 10:12:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2016-05-26 18:55:43 ----D---- C:\Program Files\Common Files\Skype
2016-05-23 13:28:26 ----ASH---- C:\hiberfil.sys
2016-05-23 13:23:51 ----A---- C:\WINDOWS\ntbtlog.txt
======List of files/folders modified in the last 1 month======
2016-06-19 10:58:15 ----D---- C:\WINDOWS\Temp
2016-06-19 10:58:14 ----D---- C:\Program Files\trend micro
2016-06-19 10:58:11 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Skype
2016-06-19 10:55:19 ----D---- C:\WINDOWS\system32\NtmsData
2016-06-19 10:44:29 ----D---- C:\Program Files
2016-06-19 09:45:43 ----D---- C:\WINDOWS\system32\Lang
2016-06-19 07:47:49 ----SHD---- C:\WINDOWS\Installer
2016-06-19 07:47:49 ----D---- C:\Config.Msi
2016-06-19 07:46:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Package Cache
2016-06-14 23:26:03 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Media Player Classic
2016-06-14 16:12:46 ----SHD---- C:\System Volume Information
2016-06-14 16:12:46 ----D---- C:\WINDOWS\system32\Restore
2016-06-13 14:32:53 ----D---- C:\WINDOWS\system32
2016-06-09 23:23:31 ----D---- C:\WINDOWS\system32\CatRoot2
2016-06-09 23:12:17 ----RSD---- C:\WINDOWS\Fonts
2016-06-08 07:45:07 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-06-04 10:21:57 ----D---- C:\WINDOWS\system32\drivers
2016-06-03 16:13:12 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\YouTube Downloader
2016-05-29 06:51:58 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\KeePass
2016-05-29 06:11:00 ----D---- C:\WINDOWS
2016-05-28 20:37:07 ----D---- C:\WINDOWS\WinSxS
2016-05-28 20:36:08 ----D---- C:\WINDOWS\system32\DirectX
2016-05-28 20:36:07 ----HD---- C:\WINDOWS\inf
2016-05-28 20:35:49 ----RSD---- C:\WINDOWS\assembly
2016-05-26 18:55:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2016-05-26 18:55:44 ----RD---- C:\Program Files\Skype
2016-05-23 13:36:24 ----D---- C:\Program Files\Nokia
2016-05-23 13:36:24 ----D---- C:\Program Files\Common Files
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia Suite
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia
2016-05-23 13:25:19 ----ASH---- C:\boot.ini
2016-05-21 22:46:43 ----D---- C:\WINDOWS\system32\CatRoot
2016-05-21 22:44:27 ----SD---- C:\WINDOWS\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iteraid;ITERAID_Service_Install; C:\WINDOWS\system32\DRIVERS\iteraid.sys [2004-10-29 25067]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2016-04-04 137240]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2016-04-04 37896]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2016-04-04 31848]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2016-04-04 109016]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-12-06 126720]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2014-05-20 12692296]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\Antivirus\avguard.exe [2016-04-04 467016]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\Antivirus\sched.exe [2016-04-04 467016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files\Avira\Antivirus\avmailc.exe [2016-04-04 955712]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE [2016-04-04 1238968]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-03-23 327808]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GalaxyClientService;GalaxyClientService; D:\Program Files\GalaxyClient\GalaxyClientService.exe [2016-06-08 245312]
S3 GalaxyCommunication;GalaxyCommunication; C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2016-06-08 6211648]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-07 146888]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2014-05-20 158152]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-11-18 833728]
-----------------EOF-----------------
Run by Miroslav at 2016-06-19 10:58:10
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 382 GB (95%) free of 400 GB
Total RAM: 2047 MB (33% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:58:15, on 19.6.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\Antivirus\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\Antivirus\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Avira\Antivirus\avguard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\Antivirus\avshadow.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Phone\Skype.exe
D:\Internet\RSIT.exe
C:\Program Files\trend micro\Miroslav.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Stáhnout FDM - file://D:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://D:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://D:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://D:\Program Files\Free Download Manager\dlall.htm
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2155487940
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABE43CF2-E11C-4DDE-A279-3ABC01EEACEC}: NameServer = 212.158.128.3
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE
O23 - Service: GalaxyClientService - GOG.com - D:\Program Files\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 4294 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d0f22a675b0b34.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d197d2bda04f42.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "Seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"fdm_ffext@freedownloadmanager.org"=D:\Program Files\Free Download Manager\Firefox\Extension
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1216156.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\extensions\
cs@dictionaries.addons.mozilla.org
facefont@mc.com
netvideohunter@netvideohunter.com
{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B}
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\searchplugins\
google-peklada.xml
jnpcz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
""= []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2014-05-20 15717664]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"avgnt"=C:\Program Files\Avira\Antivirus\avgnt.exe [2016-04-04 814608]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KeePass 2 PreLoad]
D:\Program Files\KeePass Password Safe 2\KeePass.exe [2013-04-05 1960448]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\WINDOWS\system32\NvMcTray.dll [2014-05-20 377288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2014-05-20 2593056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
D:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2013-06-07 774680]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"xmlprov"=3
"NVSvc"=3
"MozillaMaintenance"=3
"gupdatem"=3
"gupdate"=2
"SkypeUpdate"=2
"ServiceLayer"=3
"idsvc"=3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOWS\syste
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoAutoUpdate"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe"="D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe:*:Enabled:Tidalis"
"D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe"="D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe:*:Enabled:Deus Ex: Human Revolution"
"C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe"="C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe"="D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe"="D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe:*:Enabled:Alien Swarm"
"C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe"="D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2"
"D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe"="D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe:*:Enabled:Portal 2"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Battle.net\Battle.net.exe"="D:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"D:\Program Files\Hearthstone\Hearthstone.exe"="D:\Program Files\Hearthstone\Hearthstone.exe:*:Enabled:Hearthstone"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Origin\Origin.exe"="D:\Origin\Origin.exe:*:Enabled:Origin"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe"="D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe:*:Enabled:PAYDAY: The Heist"
"D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe"="D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe:*:Enabled:Real World Racing"
"D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe"="D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe:*:Enabled:Grand Theft Auto: Vice City"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe"="D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe:*:Enabled:Faerie Solitaire"
"D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe"="D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe:*:Enabled:Bejeweled® 3"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe"="D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut 2"
"D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe"="D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe:*:Enabled:Star Wars: Knights of the Old Republic"
"D:\Program Files\Muve\Muve Downloader\Launcher.exe"="D:\Program Files\Muve\Muve Downloader\Launcher.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe"="D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe"="D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe:*:Enabled:Fallout 3"
"D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe"="D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe:*:Enabled:System Shock 2"
"D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe"="D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe:*:Enabled:Bridge Constructor"
"D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe"="D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe:*:Enabled:Pinball FX2"
"C:\Program Files\Application\vivaldi.exe"="C:\Program Files\Application\vivaldi.exe:*:Enabled:Vivaldi"
"D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe"="D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe:*:Enabled:Quake Live"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe:*:Enabled:POSTAL 2"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe:*:Enabled:POSTAL 2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe"="D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe:*:Enabled:Sniper: Ghost Warrior"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"vidc.XVID"=xvidvfw.dll
======List of files/folders created in the last 1 month======
2016-06-19 09:40:39 ----D---- C:\AdwCleaner
2016-06-19 09:26:22 ----D---- C:\rsit
2016-06-09 23:12:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\GOG.com
2016-06-07 22:42:18 ----D---- C:\Program Files\Mozilla Firefox
2016-06-04 10:23:37 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Avira
2016-06-04 10:21:57 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2016-06-04 10:21:50 ----D---- C:\Program Files\Avira
2016-06-04 10:12:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2016-05-26 18:55:43 ----D---- C:\Program Files\Common Files\Skype
2016-05-23 13:28:26 ----ASH---- C:\hiberfil.sys
2016-05-23 13:23:51 ----A---- C:\WINDOWS\ntbtlog.txt
======List of files/folders modified in the last 1 month======
2016-06-19 10:58:15 ----D---- C:\WINDOWS\Temp
2016-06-19 10:58:14 ----D---- C:\Program Files\trend micro
2016-06-19 10:58:11 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Skype
2016-06-19 10:55:19 ----D---- C:\WINDOWS\system32\NtmsData
2016-06-19 10:44:29 ----D---- C:\Program Files
2016-06-19 09:45:43 ----D---- C:\WINDOWS\system32\Lang
2016-06-19 07:47:49 ----SHD---- C:\WINDOWS\Installer
2016-06-19 07:47:49 ----D---- C:\Config.Msi
2016-06-19 07:46:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Package Cache
2016-06-14 23:26:03 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Media Player Classic
2016-06-14 16:12:46 ----SHD---- C:\System Volume Information
2016-06-14 16:12:46 ----D---- C:\WINDOWS\system32\Restore
2016-06-13 14:32:53 ----D---- C:\WINDOWS\system32
2016-06-09 23:23:31 ----D---- C:\WINDOWS\system32\CatRoot2
2016-06-09 23:12:17 ----RSD---- C:\WINDOWS\Fonts
2016-06-08 07:45:07 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-06-04 10:21:57 ----D---- C:\WINDOWS\system32\drivers
2016-06-03 16:13:12 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\YouTube Downloader
2016-05-29 06:51:58 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\KeePass
2016-05-29 06:11:00 ----D---- C:\WINDOWS
2016-05-28 20:37:07 ----D---- C:\WINDOWS\WinSxS
2016-05-28 20:36:08 ----D---- C:\WINDOWS\system32\DirectX
2016-05-28 20:36:07 ----HD---- C:\WINDOWS\inf
2016-05-28 20:35:49 ----RSD---- C:\WINDOWS\assembly
2016-05-26 18:55:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2016-05-26 18:55:44 ----RD---- C:\Program Files\Skype
2016-05-23 13:36:24 ----D---- C:\Program Files\Nokia
2016-05-23 13:36:24 ----D---- C:\Program Files\Common Files
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia Suite
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia
2016-05-23 13:25:19 ----ASH---- C:\boot.ini
2016-05-21 22:46:43 ----D---- C:\WINDOWS\system32\CatRoot
2016-05-21 22:44:27 ----SD---- C:\WINDOWS\Tasks
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iteraid;ITERAID_Service_Install; C:\WINDOWS\system32\DRIVERS\iteraid.sys [2004-10-29 25067]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2016-04-04 137240]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2016-04-04 37896]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2016-04-04 31848]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2016-04-04 109016]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-12-06 126720]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2014-05-20 12692296]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\Antivirus\avguard.exe [2016-04-04 467016]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\Antivirus\sched.exe [2016-04-04 467016]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files\Avira\Antivirus\avmailc.exe [2016-04-04 955712]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE [2016-04-04 1238968]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-03-23 327808]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GalaxyClientService;GalaxyClientService; D:\Program Files\GalaxyClient\GalaxyClientService.exe [2016-06-08 245312]
S3 GalaxyCommunication;GalaxyCommunication; C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2016-06-08 6211648]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-07 146888]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2014-05-20 158152]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-11-18 833728]
-----------------EOF-----------------
- Rudy
- Site Admin

- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - změna z Avast na Avira - prevent
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
a klikněte na >MoveIt!<. Po skenu restartujte PC a dejte nový log RSIT.:files
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d0f22a675b0b34.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1d197d2bda04f42.job
:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"KernelFaultCheck"=-
:commands
[Purity]
[Emptytemp]
[Emptyflash]
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - změna z Avast na Avira - prevent
Logfile of random's system information tool 1.10 (written by random/random)
Run by Miroslav at 2016-06-19 11:15:43
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 382 GB (96%) free of 400 GB
Total RAM: 2047 MB (45% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:15:48, on 19.6.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\Antivirus\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\Antivirus\avguard.exe
C:\Program Files\Skype\Updater\Updater.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\Antivirus\avshadow.exe
C:\WINDOWS\notepad.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\Antivirus\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Internet\RSIT.exe
C:\Program Files\trend micro\Miroslav.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Stáhnout FDM - file://D:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://D:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://D:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://D:\Program Files\Free Download Manager\dlall.htm
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2155487940
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABE43CF2-E11C-4DDE-A279-3ABC01EEACEC}: NameServer = 212.158.128.3
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE
O23 - Service: GalaxyClientService - GOG.com - D:\Program Files\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 4256 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "Seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"fdm_ffext@freedownloadmanager.org"=D:\Program Files\Free Download Manager\Firefox\Extension
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1216156.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\extensions\
cs@dictionaries.addons.mozilla.org
facefont@mc.com
netvideohunter@netvideohunter.com
{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B}
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\searchplugins\
google-peklada.xml
jnpcz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
""= []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2014-05-20 15717664]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"avgnt"=C:\Program Files\Avira\Antivirus\avgnt.exe [2016-04-04 814608]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KeePass 2 PreLoad]
D:\Program Files\KeePass Password Safe 2\KeePass.exe [2013-04-05 1960448]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\WINDOWS\system32\NvMcTray.dll [2014-05-20 377288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2014-05-20 2593056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
D:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2013-06-07 774680]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"xmlprov"=3
"NVSvc"=3
"MozillaMaintenance"=3
"gupdatem"=3
"gupdate"=2
"SkypeUpdate"=2
"ServiceLayer"=3
"idsvc"=3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOWS\syste
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoAutoUpdate"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe"="D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe:*:Enabled:Tidalis"
"D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe"="D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe:*:Enabled:Deus Ex: Human Revolution"
"C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe"="C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe"="D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe"="D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe:*:Enabled:Alien Swarm"
"C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe"="D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2"
"D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe"="D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe:*:Enabled:Portal 2"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Battle.net\Battle.net.exe"="D:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"D:\Program Files\Hearthstone\Hearthstone.exe"="D:\Program Files\Hearthstone\Hearthstone.exe:*:Enabled:Hearthstone"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Origin\Origin.exe"="D:\Origin\Origin.exe:*:Enabled:Origin"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe"="D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe:*:Enabled:PAYDAY: The Heist"
"D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe"="D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe:*:Enabled:Real World Racing"
"D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe"="D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe:*:Enabled:Grand Theft Auto: Vice City"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe"="D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe:*:Enabled:Faerie Solitaire"
"D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe"="D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe:*:Enabled:Bejeweled® 3"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe"="D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut 2"
"D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe"="D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe:*:Enabled:Star Wars: Knights of the Old Republic"
"D:\Program Files\Muve\Muve Downloader\Launcher.exe"="D:\Program Files\Muve\Muve Downloader\Launcher.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe"="D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe"="D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe:*:Enabled:Fallout 3"
"D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe"="D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe:*:Enabled:System Shock 2"
"D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe"="D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe:*:Enabled:Bridge Constructor"
"D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe"="D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe:*:Enabled:Pinball FX2"
"C:\Program Files\Application\vivaldi.exe"="C:\Program Files\Application\vivaldi.exe:*:Enabled:Vivaldi"
"D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe"="D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe:*:Enabled:Quake Live"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe:*:Enabled:POSTAL 2"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe:*:Enabled:POSTAL 2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe"="D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe:*:Enabled:Sniper: Ghost Warrior"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"vidc.XVID"=xvidvfw.dll
======List of files/folders created in the last 1 month======
2016-06-19 11:11:28 ----D---- C:\_OTM
2016-06-19 09:40:39 ----D---- C:\AdwCleaner
2016-06-19 09:26:22 ----D---- C:\rsit
2016-06-09 23:12:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\GOG.com
2016-06-07 22:42:18 ----D---- C:\Program Files\Mozilla Firefox
2016-06-04 10:23:37 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Avira
2016-06-04 10:21:57 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2016-06-04 10:21:50 ----D---- C:\Program Files\Avira
2016-06-04 10:12:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2016-05-26 18:55:43 ----D---- C:\Program Files\Common Files\Skype
2016-05-23 13:28:26 ----ASH---- C:\hiberfil.sys
2016-05-23 13:23:51 ----A---- C:\WINDOWS\ntbtlog.txt
======List of files/folders modified in the last 1 month======
2016-06-19 11:15:48 ----D---- C:\WINDOWS\Temp
2016-06-19 11:15:46 ----D---- C:\Program Files\trend micro
2016-06-19 11:15:24 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Skype
2016-06-19 11:15:17 ----D---- C:\WINDOWS\system32\Lang
2016-06-19 11:13:59 ----D---- C:\WINDOWS\system32\NtmsData
2016-06-19 11:11:29 ----SD---- C:\WINDOWS\Tasks
2016-06-19 10:44:29 ----D---- C:\Program Files
2016-06-19 09:45:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Package Cache
2016-06-19 07:47:49 ----SHD---- C:\WINDOWS\Installer
2016-06-19 07:47:49 ----D---- C:\Config.Msi
2016-06-14 23:26:03 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Media Player Classic
2016-06-14 16:12:46 ----SHD---- C:\System Volume Information
2016-06-14 16:12:46 ----D---- C:\WINDOWS\system32\Restore
2016-06-13 14:32:53 ----D---- C:\WINDOWS\system32
2016-06-09 23:23:31 ----D---- C:\WINDOWS\system32\CatRoot2
2016-06-09 23:12:17 ----RSD---- C:\WINDOWS\Fonts
2016-06-08 07:45:07 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-06-04 10:21:57 ----D---- C:\WINDOWS\system32\drivers
2016-06-03 16:13:12 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\YouTube Downloader
2016-05-29 06:51:58 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\KeePass
2016-05-29 06:11:00 ----D---- C:\WINDOWS
2016-05-28 20:37:07 ----D---- C:\WINDOWS\WinSxS
2016-05-28 20:36:08 ----D---- C:\WINDOWS\system32\DirectX
2016-05-28 20:36:07 ----HD---- C:\WINDOWS\inf
2016-05-28 20:35:49 ----RSD---- C:\WINDOWS\assembly
2016-05-26 18:55:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2016-05-26 18:55:44 ----RD---- C:\Program Files\Skype
2016-05-23 13:36:24 ----D---- C:\Program Files\Nokia
2016-05-23 13:36:24 ----D---- C:\Program Files\Common Files
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia Suite
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia
2016-05-23 13:25:19 ----ASH---- C:\boot.ini
2016-05-21 22:46:43 ----D---- C:\WINDOWS\system32\CatRoot
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iteraid;ITERAID_Service_Install; C:\WINDOWS\system32\DRIVERS\iteraid.sys [2004-10-29 25067]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2016-04-04 137240]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2016-04-04 37896]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2016-04-04 31848]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2016-04-04 109016]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-12-06 126720]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2014-05-20 12692296]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\Antivirus\avguard.exe [2016-04-04 467016]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\Antivirus\sched.exe [2016-04-04 467016]
R2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-03-23 327808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files\Avira\Antivirus\avmailc.exe [2016-04-04 955712]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE [2016-04-04 1238968]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GalaxyClientService;GalaxyClientService; D:\Program Files\GalaxyClient\GalaxyClientService.exe [2016-06-08 245312]
S3 GalaxyCommunication;GalaxyCommunication; C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2016-06-08 6211648]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-07 146888]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2014-05-20 158152]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-11-18 833728]
-----------------EOF-----------------
Run by Miroslav at 2016-06-19 11:15:43
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 382 GB (96%) free of 400 GB
Total RAM: 2047 MB (45% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:15:48, on 19.6.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\Antivirus\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\Antivirus\avguard.exe
C:\Program Files\Skype\Updater\Updater.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\Antivirus\avshadow.exe
C:\WINDOWS\notepad.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Avira\Antivirus\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
D:\Internet\RSIT.exe
C:\Program Files\trend micro\Miroslav.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\Antivirus\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Stáhnout FDM - file://D:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout video FDM - file://D:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Stáhnout vybrané FDM - file://D:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Stáhnout vše FDM - file://D:\Program Files\Free Download Manager\dlall.htm
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2155487940
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{ABE43CF2-E11C-4DDE-A279-3ABC01EEACEC}: NameServer = 212.158.128.3
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avmailc.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE
O23 - Service: GalaxyClientService - GOG.com - D:\Program Files\GalaxyClient\GalaxyClientService.exe
O23 - Service: GalaxyCommunication - GOG.com - C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
--
End of file - 4256 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "Seznam.cz"
"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"fdm_ffext@freedownloadmanager.org"=D:\Program Files\Free Download Manager\Firefox\Extension
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 21.0.0.242 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_21_0_0_242.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1216156.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\extensions\
cs@dictionaries.addons.mozilla.org
facefont@mc.com
netvideohunter@netvideohunter.com
{394DCBA4-1F92-4f8e-8EC9-8D2CB90CB69B}
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Documents and Settings\Miroslav\Data aplikací\Mozilla\Firefox\Profiles\a7w8f8v7.default\searchplugins\
google-peklada.xml
jnpcz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2005-12-09 15691264]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]
""= []
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2014-05-20 15717664]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"avgnt"=C:\Program Files\Avira\Antivirus\avgnt.exe [2016-04-04 814608]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2013-05-30 96056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KeePass 2 PreLoad]
D:\Program Files\KeePass Password Safe 2\KeePass.exe [2013-04-05 1960448]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
C:\WINDOWS\system32\NvMcTray.dll [2014-05-20 377288]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2014-05-20 2593056]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
D:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTRAY.EXE [2013-06-07 774680]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"xmlprov"=3
"NVSvc"=3
"MozillaMaintenance"=3
"gupdatem"=3
"gupdate"=2
"SkypeUpdate"=2
"ServiceLayer"=3
"idsvc"=3
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=
:\WINDOWS\syste
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
"SoftwareSASGeneration"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoAutoUpdate"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Run a DLL as an App"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\Steam.exe"="D:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe"="D:\Program Files\Steam\SteamApps\common\Tidalis\Tidalis.exe:*:Enabled:Tidalis"
"D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe"="D:\Program Files\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe:*:Enabled:Deus Ex: Human Revolution"
"C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe"="C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe:LocalSubNet:Enabled:Instalace zařízení HP"
"D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe"="D:\Program Files\Steam\SteamApps\common\left 4 dead\left4dead.exe:*:Enabled:Left 4 Dead"
"D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe"="D:\Program Files\Steam\SteamApps\common\Alien Swarm\swarm.exe:*:Enabled:Alien Swarm"
"C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe"="C:\Documents and Settings\Miroslav\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe"="D:\Program Files\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe:*:Enabled:Left 4 Dead 2"
"D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe"="D:\Program Files\Steam\SteamApps\common\Portal 2\portal2.exe:*:Enabled:Portal 2"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2380\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Battle.net\Battle.net.exe"="D:\Program Files\Battle.net\Battle.net.exe:*:Enabled:Battle.net"
"D:\Program Files\Hearthstone\Hearthstone.exe"="D:\Program Files\Hearthstone\Hearthstone.exe:*:Enabled:Hearthstone"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2638\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2680\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2689\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2737\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2717\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.beta.2753\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2787\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2816\Agent.exe:*:Enabled:Battle.net Update Agent"
"C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe"="C:\Documents and Settings\All Users\Data aplikací\Battle.net\Agent\Agent.2880\Agent.exe:*:Enabled:Battle.net Update Agent"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\duke3d.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\build.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Origin\Origin.exe"="D:\Origin\Origin.exe:*:Enabled:Origin"
"D:\Program Files\Steam\bin\steamwebhelper.exe"="D:\Program Files\Steam\bin\steamwebhelper.exe:*:Enabled:Steam Web Helper"
"D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe"="D:\Program Files\Pinnacle\VideoSpin\Programs\RM.exe:*:Enabled:Render Manager"
"D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe"="D:\Program Files\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe:*:Enabled:PAYDAY: The Heist"
"D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe"="D:\Program Files\Steam\SteamApps\common\RWR\RWR.exe:*:Enabled:Real World Racing"
"D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe"="D:\Program Files\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe:*:Enabled:Grand Theft Auto: Vice City"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe"="D:\Program Files\Steam\SteamApps\common\Faerie Solitaire\FaerieSolitaire.exe:*:Enabled:Faerie Solitaire"
"D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe"="D:\Program Files\Origin Games\Bejeweled 3\Bejeweled3.exe:*:Enabled:Bejeweled® 3"
"D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe"="D:\Program Files\Steam\SteamApps\common\Duke Nukem 3D\bin\dosbox\dosbox.exe:*:Enabled:Duke Nukem 3D: Megaton Edition"
"D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe"="D:\Program Files\Steam\SteamApps\common\FlatOut2\FlatOut2.exe:*:Enabled:FlatOut 2"
"D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe"="D:\Program Files\Steam\SteamApps\common\swkotor\swkotor.exe:*:Enabled:Star Wars: Knights of the Old Republic"
"D:\Program Files\Muve\Muve Downloader\Launcher.exe"="D:\Program Files\Muve\Muve Downloader\Launcher.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe"="D:\Program Files\Muve\Muve Downloader\MuveDownloader.exe:*:Enabled:Muve Downloader"
"D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe"="D:\Program Files\Bethesda Softworks\Fallout 3\FalloutLauncher.exe:*:Enabled:Fallout 3"
"D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe"="D:\Program Files\Steam\SteamApps\common\SS2\Shock2.exe:*:Enabled:System Shock 2"
"D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe"="D:\Program Files\Steam\SteamApps\common\BridgeConstructor\BridgeConstructor.exe:*:Enabled:Bridge Constructor"
"D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe"="D:\Program Files\Steam\SteamApps\common\Pinball FX2\Pinball FX2.exe:*:Enabled:Pinball FX2"
"C:\Program Files\Application\vivaldi.exe"="C:\Program Files\Application\vivaldi.exe:*:Enabled:Vivaldi"
"D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe"="D:\Program Files\Steam\SteamApps\common\Quake Live\quakelive_steam.exe:*:Enabled:Quake Live"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe:*:Enabled:POSTAL 2"
"D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe"="D:\Program Files\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe:*:Enabled:POSTAL 2"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe"="D:\Program Files\Steam\SteamApps\common\Sniper Ghost Warrior\Sniper_x86.exe:*:Enabled:Sniper: Ghost Warrior"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"vidc.XVID"=xvidvfw.dll
======List of files/folders created in the last 1 month======
2016-06-19 11:11:28 ----D---- C:\_OTM
2016-06-19 09:40:39 ----D---- C:\AdwCleaner
2016-06-19 09:26:22 ----D---- C:\rsit
2016-06-09 23:12:16 ----D---- C:\Documents and Settings\All Users\Data aplikací\GOG.com
2016-06-07 22:42:18 ----D---- C:\Program Files\Mozilla Firefox
2016-06-04 10:23:37 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Avira
2016-06-04 10:21:57 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2016-06-04 10:21:53 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2016-06-04 10:21:50 ----D---- C:\Program Files\Avira
2016-06-04 10:12:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2016-05-26 18:55:43 ----D---- C:\Program Files\Common Files\Skype
2016-05-23 13:28:26 ----ASH---- C:\hiberfil.sys
2016-05-23 13:23:51 ----A---- C:\WINDOWS\ntbtlog.txt
======List of files/folders modified in the last 1 month======
2016-06-19 11:15:48 ----D---- C:\WINDOWS\Temp
2016-06-19 11:15:46 ----D---- C:\Program Files\trend micro
2016-06-19 11:15:24 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Skype
2016-06-19 11:15:17 ----D---- C:\WINDOWS\system32\Lang
2016-06-19 11:13:59 ----D---- C:\WINDOWS\system32\NtmsData
2016-06-19 11:11:29 ----SD---- C:\WINDOWS\Tasks
2016-06-19 10:44:29 ----D---- C:\Program Files
2016-06-19 09:45:12 ----D---- C:\Documents and Settings\All Users\Data aplikací\Package Cache
2016-06-19 07:47:49 ----SHD---- C:\WINDOWS\Installer
2016-06-19 07:47:49 ----D---- C:\Config.Msi
2016-06-14 23:26:03 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Media Player Classic
2016-06-14 16:12:46 ----SHD---- C:\System Volume Information
2016-06-14 16:12:46 ----D---- C:\WINDOWS\system32\Restore
2016-06-13 14:32:53 ----D---- C:\WINDOWS\system32
2016-06-09 23:23:31 ----D---- C:\WINDOWS\system32\CatRoot2
2016-06-09 23:12:17 ----RSD---- C:\WINDOWS\Fonts
2016-06-08 07:45:07 ----D---- C:\Program Files\Mozilla Maintenance Service
2016-06-04 10:21:57 ----D---- C:\WINDOWS\system32\drivers
2016-06-03 16:13:12 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\YouTube Downloader
2016-05-29 06:51:58 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\KeePass
2016-05-29 06:11:00 ----D---- C:\WINDOWS
2016-05-28 20:37:07 ----D---- C:\WINDOWS\WinSxS
2016-05-28 20:36:08 ----D---- C:\WINDOWS\system32\DirectX
2016-05-28 20:36:07 ----HD---- C:\WINDOWS\inf
2016-05-28 20:35:49 ----RSD---- C:\WINDOWS\assembly
2016-05-26 18:55:48 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2016-05-26 18:55:44 ----RD---- C:\Program Files\Skype
2016-05-23 13:36:24 ----D---- C:\Program Files\Nokia
2016-05-23 13:36:24 ----D---- C:\Program Files\Common Files
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia Suite
2016-05-23 13:36:01 ----D---- C:\Documents and Settings\Miroslav\Data aplikací\Nokia
2016-05-23 13:25:19 ----ASH---- C:\boot.ini
2016-05-21 22:46:43 ----D---- C:\WINDOWS\system32\CatRoot
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 iteraid;ITERAID_Service_Install; C:\WINDOWS\system32\DRIVERS\iteraid.sys [2004-10-29 25067]
R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [2016-04-04 137240]
R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [2016-04-04 37896]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys [2016-04-04 31848]
R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys [2016-04-04 109016]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\system32\DRIVERS\b57xp32.sys [2004-12-06 126720]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-12-09 4123136]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2014-05-20 12692296]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys []
S3 GVCplDrv;GVCplDrv; C:\WINDOWS\system32\drivers\GVCplDrv.sys [2004-05-02 23040]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2013-01-23 18560]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2013-01-23 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-10-17 19072]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2013-01-23 8192]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2013-01-23 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AntiVirService;Avira Real-Time Protection; C:\Program Files\Avira\Antivirus\avguard.exe [2016-04-04 467016]
R2 AntiVirSchedulerService;Avira Scheduler; C:\Program Files\Avira\Antivirus\sched.exe [2016-04-04 467016]
R2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2016-03-23 327808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-14 269504]
S2 AntiVirMailService;Avira Mail Protection; C:\Program Files\Avira\Antivirus\avmailc.exe [2016-04-04 955712]
S2 AntiVirWebService;Avira Web Protection; C:\Program Files\Avira\Antivirus\AVWEBGRD.EXE [2016-04-04 1238968]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 GalaxyClientService;GalaxyClientService; D:\Program Files\GalaxyClient\GalaxyClientService.exe [2016-06-08 245312]
S3 GalaxyCommunication;GalaxyCommunication; C:\Documents and Settings\All Users\Data aplikací\GOG.com\Galaxy\redists\GalaxyCommunication.exe [2016-06-08 6211648]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2015-02-16 107848]
S4 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2016-06-07 146888]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS\system32\nvsvc32.exe [2014-05-20 158152]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S4 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-11-18 833728]
-----------------EOF-----------------
- Rudy
- Site Admin

- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - změna z Avast na Avira - prevent
Smazáno, log je již OK.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Kontrola logu - změna z Avast na Avira - prevent
Byla tam škodná?
Vřele děkuji. Klaním se k zemi
Vřele děkuji. Klaním se k zemi
- Rudy
- Site Admin

- Příspěvky: 119673
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Kontrola logu - změna z Avast na Avira - prevent
Nebyla. Pouze pár zbytečností. 
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Přispějete na provoz fóra?