Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu, zpomelaní PC, neznámý důvod

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
freeco
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 07 dub 2010 16:07

Prosím o kontrolu, zpomelaní PC, neznámý důvod

#1 Příspěvek od freeco »

Když mrknu do procesů tak součet jednotlivých procesů zdaleka nedává ten, který se vypisuje jako celkový :/
PC je razantně zpomalené a už mě to začíná štvát. Tady je log z RSIT

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:10:18, on 7.4.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\C&E\OSD\osd.exe
C:\Windows\System32\rundll32.exe
D:\Programy\PowerISO\PWRISOVM.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICFE.EXE
D:\Programy\DAEMON Tools Lite\daemon.exe
D:\Programy\Skype\Phone\Skype.exe
D:\Programy\Easy ShutDown\EasyShutDown.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
D:\Programy\Skype\Plugin Manager\skypePM.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Windows\explorer.exe
D:\Programy\QIP Infium JadrisPack\infium.exe
D:\Programy\Mozilla Firefox\firefox.exe
C:\Users\freeco\Desktop\Viry\RSIT.exe
C:\Program Files\trend micro\freeco.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: QIPBHO Class - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\freeco\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: QIPBHO - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} - C:\Users\freeco\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [OSD] C:\Program Files\C&E\OSD\osd.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PWRISOVM.EXE] D:\Programy\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Programy\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programy\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\RunOnce: [CleanSetup] cmd /C rmdir /S /Q "C:\Users\freeco\AppData\Local\Temp\nro.tmp\"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [EPSON Stylus DX9400F Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICFE.EXE /FU "C:\Windows\TEMP\E_SC044.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Programy\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Skype] "D:\Programy\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MNS] D:\Programy\Mobile Net Switch\MNS.exe
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Easy ShutDown] D:\Programy\Easy ShutDown\EasyShutDown.exe :silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: StrongDC – zástupce.lnk = C:\Users\freeco\Desktop\StrongDC\StrongDC.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {A93B47FD-9BF6-4DA8-97FC-9270B9D64A6C} (VaPgCtrl Class) - http://213.235.170.187/plugin/h263ctrl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Autodesk Data Management Job Dispatch - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
O23 - Service: Autodesk EDM Server - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Webserver\Connectivity.EDMWS.Server.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - D:\Hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: OsdService - Unknown owner - C:\Program Files\C&E\OSD\OsdService\OsdService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 10581 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{0646269E-C965-489C-A058-ED6A0459DB61}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}]
QIPBHO Class - C:\Users\freeco\AppData\Roaming\Microsoft\Internet Explorer\qipsearchbar.dll [2009-07-24 150768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2C688203-7EB3-4327-9995-1CB417BA23F9} - BS.Player ControlBar - C:\Program Files\BS.Player ControlBar\BSToolbar.dll [2008-10-08 859592]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"OSD"=C:\Program Files\C&E\OSD\osd.exe [2007-09-20 561152]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2007-07-19 86016]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-07-19 8466432]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-07-19 81920]
"PWRISOVM.EXE"=D:\Programy\PowerISO\PWRISOVM.EXE [2008-03-15 233472]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2008-12-11 6703648]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2008-12-11 1833504]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2007-12-21 1443072]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"NokiaMusic FastStart"=C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe [2010-03-04 2192672]
"Adobe Reader Speed Launcher"=D:\Programy\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"QuickTime Task"=D:\Programy\QuickTime\QTTask.exe [2009-11-11 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-02-15 141608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"CleanSetup"=cmd /C rmdir /S /Q C:\Users\freeco\AppData\Local\Temp\nro.tmp\ []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"EPSON Stylus DX9400F Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICFE.EXE [2007-03-23 182272]
"DAEMON Tools Lite"=D:\Programy\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
"Skype"=D:\Programy\Skype\Phone\Skype.exe [2010-03-09 26100520]
"MNS"=D:\Programy\Mobile Net Switch\MNS.exe []
"NokiaOviSuite2"=C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2010-02-24 385928]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
"Easy ShutDown"=D:\Programy\Easy ShutDown\EasyShutDown.exe [2010-02-22 574464]
""= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nokia FastStart]
C:\Program Files\Nokia\Nokia Music\NokiaMusic.exe /command:faststart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\Steam.exe [2010-02-25 1217872]

C:\Users\freeco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
StrongDC – zástupce.lnk - C:\Users\freeco\Desktop\StrongDC\StrongDC.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\G]
shell\AutoRun\command - G:\Install.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2305fdfa-a5f3-11de-8ebd-00030d905d58}]
shell\AutoRun\command - I:\AKON\BYONC\AKON.exe
shell\open\command - I:\AKON\BYONC\AKON.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ab8fa276-ed53-11dd-8ffa-00030d905d58}]
shell\AutoRun\command - H:\m.exe


======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-04-07 17:06:26 ----D---- C:\Program Files\trend micro
2010-04-07 17:06:24 ----D---- C:\rsit
2010-04-07 16:21:49 ----SHD---- C:\Config.Msi
2010-03-31 08:44:08 ----A---- C:\Windows\system32\mshtml.dll
2010-03-31 08:44:04 ----A---- C:\Windows\system32\ieframe.dll
2010-03-31 08:44:02 ----A---- C:\Windows\system32\urlmon.dll
2010-03-31 08:44:02 ----A---- C:\Windows\system32\iertutil.dll
2010-03-31 08:44:01 ----A---- C:\Windows\system32\wininet.dll
2010-03-31 08:44:00 ----A---- C:\Windows\system32\occache.dll
2010-03-31 08:44:00 ----A---- C:\Windows\system32\msfeeds.dll
2010-03-31 08:43:59 ----A---- C:\Windows\system32\mstime.dll
2010-03-31 08:43:59 ----A---- C:\Windows\system32\iedkcs32.dll
2010-03-31 08:43:56 ----A---- C:\Windows\system32\ieui.dll
2010-03-31 08:43:55 ----A---- C:\Windows\system32\iepeers.dll
2010-03-31 08:43:54 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-03-31 08:43:54 ----A---- C:\Windows\system32\ieUnatt.exe
2010-03-31 08:43:53 ----A---- C:\Windows\system32\jsproxy.dll
2010-03-31 08:43:53 ----A---- C:\Windows\system32\iesysprep.dll
2010-03-31 08:43:52 ----A---- C:\Windows\system32\msfeedssync.exe
2010-03-31 08:43:52 ----A---- C:\Windows\system32\ie4uinit.exe
2010-03-31 08:43:51 ----A---- C:\Windows\system32\iesetup.dll
2010-03-31 08:43:51 ----A---- C:\Windows\system32\iernonce.dll
2010-03-30 22:11:56 ----D---- C:\ProgramData\Sun
2010-03-30 22:11:54 ----D---- C:\Program Files\Common Files\Java
2010-03-30 22:11:39 ----A---- C:\Windows\system32\javaws.exe
2010-03-30 22:11:39 ----A---- C:\Windows\system32\javaw.exe
2010-03-30 22:11:39 ----A---- C:\Windows\system32\java.exe
2010-03-28 19:31:20 ----D---- C:\Users\freeco\AppData\Roaming\ICQ
2010-03-27 12:02:07 ----D---- C:\Program Files\Common Files\Skype
2010-03-26 20:08:26 ----D---- C:\Program Files\PC Connectivity Solution
2010-03-25 17:04:06 ----D---- C:\Program Files\iPod
2010-03-25 17:04:04 ----D---- C:\Program Files\iTunes
2010-03-22 13:07:40 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-03-22 13:07:40 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-03-22 13:07:40 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-03-22 13:07:40 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-03-22 13:07:39 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-03-22 13:07:38 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-03-22 13:07:38 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-03-22 13:07:37 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-03-22 13:07:37 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-03-22 13:07:37 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-03-22 13:07:36 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-03-22 13:07:36 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-03-22 13:07:35 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-03-22 13:07:35 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-03-22 13:07:33 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-03-22 13:07:33 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-03-22 13:07:33 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-03-22 13:07:32 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-03-22 13:07:32 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-03-22 13:07:31 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-03-22 13:07:31 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-03-22 13:07:30 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-03-22 13:07:30 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-03-22 13:07:29 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-03-22 13:07:29 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-03-22 13:07:29 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-03-22 13:07:29 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-03-22 13:07:28 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-03-22 13:07:27 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-03-22 13:07:27 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-03-22 13:07:26 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-03-22 13:07:26 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-03-22 13:07:25 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-03-22 13:07:25 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-03-22 13:07:24 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-03-22 13:07:24 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-03-22 13:07:24 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-03-22 13:07:23 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-03-22 13:07:23 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-03-22 13:07:22 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-03-22 13:07:20 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-03-22 13:07:20 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-03-22 13:07:18 ----A---- C:\Windows\system32\d3dx10.dll
2010-03-22 13:05:51 ----D---- C:\Program Files\Ubisoft
2010-03-19 20:59:09 ----D---- C:\Program Files\Common Files\PCSuite
2010-03-11 09:01:17 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-11 09:01:11 ----A---- C:\Windows\system32\httpapi.dll

======List of files/folders modified in the last 1 months======

2010-04-07 17:10:13 ----D---- C:\Windows\Temp
2010-04-07 17:06:26 ----RD---- C:\Program Files
2010-04-07 16:31:43 ----D---- C:\Program Files\Common Files\Nero
2010-04-07 16:28:27 ----D---- C:\Users\freeco\AppData\Roaming\Skype
2010-04-07 16:27:28 ----D---- C:\Program Files\Common Files\Akamai
2010-04-07 16:23:04 ----SHD---- C:\Windows\Installer
2010-04-07 16:22:14 ----D---- C:\ProgramData\Nero
2010-04-07 16:08:21 ----D---- C:\Users\freeco\AppData\Roaming\skypePM
2010-04-07 15:17:55 ----A---- C:\Windows\Irremote.ini
2010-04-06 17:33:04 ----D---- C:\Windows\System32
2010-04-06 17:33:03 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-06 17:33:02 ----D---- C:\Windows\inf
2010-04-06 11:08:23 ----D---- C:\Windows\Prefetch
2010-04-06 07:05:22 ----SHD---- C:\System Volume Information
2010-04-05 20:24:12 ----D---- C:\Windows
2010-04-05 20:18:19 ----D---- C:\Program Files\Steam
2010-04-01 20:39:32 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-04-01 06:11:07 ----D---- C:\Windows\system32\migration
2010-04-01 06:11:07 ----D---- C:\Program Files\Internet Explorer
2010-03-31 23:09:18 ----D---- C:\Windows\system32\catroot
2010-03-31 23:09:00 ----D---- C:\Windows\winsxs
2010-03-31 08:41:23 ----D---- C:\Windows\system32\catroot2
2010-03-30 22:11:56 ----HD---- C:\ProgramData
2010-03-30 22:11:54 ----D---- C:\Program Files\Common Files
2010-03-30 22:11:34 ----D---- C:\Program Files\Java
2010-03-29 08:50:36 ----D---- C:\Windows\Minidump
2010-03-28 19:31:26 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-27 12:02:08 ----D---- C:\Windows\system32\Tasks
2010-03-26 20:09:19 ----D---- C:\Windows\system32\drivers
2010-03-26 20:09:18 ----DC---- C:\Windows\system32\DRVSTORE
2010-03-26 20:06:45 ----D---- C:\ProgramData\OviInstallerCache
2010-03-25 17:04:06 ----D---- C:\Program Files\Common Files\Apple
2010-03-25 17:04:04 ----D---- C:\ProgramData\Apple Computer
2010-03-22 13:07:16 ----RSD---- C:\Windows\assembly
2010-03-21 20:49:32 ----D---- C:\Program Files\Common Files\Steam
2010-03-19 21:17:06 ----D---- C:\Windows\Globalization
2010-03-19 21:08:16 ----D---- C:\Users\freeco\AppData\Roaming\Nokia
2010-03-19 20:59:02 ----D---- C:\Program Files\Common Files\Nokia
2010-03-19 20:59:01 ----D---- C:\Program Files\Nokia
2010-03-19 20:58:04 ----D---- C:\ProgramData\Installations
2010-03-11 09:44:17 ----D---- C:\Program Files\Windows Mail
2010-03-11 09:44:17 ----D---- C:\Program Files\Movie Maker
2010-03-11 09:11:08 ----D---- C:\ProgramData\Microsoft Help
2010-03-09 04:28:20 ----A---- C:\Windows\system32\deploytk.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:\Windows\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdir;epfwtdir; C:\Windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2008-03-14 46652]
R2 eamon;EAMON; C:\Windows\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R3 CEBFilter;CEBFilter; \??\C:\Program Files\C&E\OSD\OsdService\cebuffer.sys [2007-09-04 5120]
R3 CEIO;CEIO; \??\C:\Program Files\C&E\OSD\OsdService\ceio.sys [2007-08-31 4608]
R3 cKBFilter;cKBFilter; \??\C:\Program Files\C&E\OSD\OsdService\kbfiltr.sys [2007-08-31 7168]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-18 14208]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-12-11 2250272]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-01-08 46592]
R3 NETw4v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-26 2251776]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-07-19 7599776]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-04-30 81408]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-18 11264]
S3 av5a4fdj;av5a4fdj; C:\Windows\system32\drivers\av5a4fdj.sys []
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-18 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 Cam5603D;WebCam; C:\Windows\System32\Drivers\BisonCam.sys [2007-06-01 753456]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 dtscsi;dtscsi; C:\Windows\System32\Drivers\dtscsi.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-02-06 55280]
S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2007-03-08 8320]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\Windows\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\Windows\system32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\Windows\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\Windows\system32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-01-21 18048]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-12-30 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-12-30 7936]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-12-30 7936]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 Autodesk Data Management Job Dispatch;Autodesk Data Management Job Dispatch; C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe [2007-02-13 32768]
R2 Autodesk EDM Server;Autodesk EDM Server; C:\Program Files\Autodesk\Data Management Server 2008\Server\Webserver\Connectivity.EDMWS.Server.exe [2007-02-13 49152]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 ekrn;Eset Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2007-12-21 468224]
R2 MSSQL$AUTODESKVAULT;SQL Server (AUTODESKVAULT); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2009-05-27 29262680]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-09-25 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2010-04-01 215160]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-24 239968]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-02-15 545576]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-01-26 652800]
S2 OsdService;OsdService; C:\Program Files\C&E\OSD\OsdService\OsdService.exe [2007-09-03 53248]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-04-26 72704]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2008-12-22 79360]
S3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; D:\Hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2007-12-21 19200]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-09-25 651720]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2009-03-26 68096]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-03-09 332720]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-24 45408]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#2 Příspěvek od Caroprd111 »

Zdravím :)


Obrázek Doporučuji odinstalovat (pokud nepoužíváte) toolbary (lišty) v Přidat nebo odebrat programy.


Obrázek Doporučuji odinstalovat:
C:\Users\freeco\Desktop\StrongDC\StrongDC.exe

P2P sítě a jejich klienti jsou potenciálním bezpečnostním rizikem, prakticky neustále jsou zdrojem virů, zbytečně se vystavujete riziku.


Obrázek Stáhněte a uložte, nejlépe na plochu http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypněte všechny rezidentní bezpečnostní programy - firewally, antiviry, antispywary
  • Spusťte aplikaci pod účtem s oprávněním Administrátora (Správce), ihned po startu se zobrazí stránka s licenčními podmínkami, pokračujte stisknutím tlačítka "Ano"
  • Dále postupujte dle pokynů, během scanu nespouštějte jiné aplikace a neklikejte do zobrazujícího se okna :!:
  • Scan by měl trvat okolo 5 - 10 minut, po dokončení Combofix zobrazí log C:\ComboFix.txt , který sem vložte.
  • Během skenování může být počítač restartován.
Obrázek
Nahoru
freeco
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 07 dub 2010 16:07

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#3 Příspěvek od freeco »

Tak tady je ten combofix, toolbary sem smazal, co nepoužívám ...


ComboFix 10-04-06.05 - freeco 07.04.2010 20:17:57.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3070.2184 [GMT 2:00]
Spuštěný z: c:\users\freeco\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
SP: ESET NOD32 Antivirus 3.0 *disabled* (Updated) {E5E70D32-0101-4B98-A4D6-D1D15C3BB448}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\users\freeco\AppData\Roaming\Microsoft\Internet Explorer\qiPSearchbar.dll
c:\windows\Downloaded Program Files\IDropPTB.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-03-07 do 2010-04-07 )))))))))))))))))))))))))))))))
.

2010-04-07 18:10 . 2010-04-07 18:10 -------- d-----w- C:\32788R22FWJFW
2010-04-07 15:06 . 2010-04-07 15:10 -------- d-----w- c:\program files\trend micro
2010-04-07 15:06 . 2010-04-07 15:10 -------- d-----w- C:\rsit
2010-03-31 06:44 . 2010-02-23 06:39 916480 ----a-w- c:\windows\system32\wininet.dll
2010-03-31 06:43 . 2010-02-23 04:55 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2010-03-31 06:43 . 2010-02-23 06:33 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-03-31 06:43 . 2010-02-23 06:33 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-03-30 20:11 . 2010-03-30 20:11 -------- d-----w- c:\program files\Common Files\Java
2010-03-28 17:31 . 2010-03-29 13:46 -------- d-----w- c:\users\freeco\AppData\Roaming\ICQ
2010-03-28 17:31 . 2010-03-28 17:31 -------- d-----w- c:\users\freeco\AppData\Local\AOL
2010-03-27 10:02 . 2010-03-27 10:02 -------- d-----w- c:\program files\Common Files\Skype
2010-03-26 18:09 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-03-26 18:08 . 2010-03-26 18:08 -------- d-----w- c:\program files\PC Connectivity Solution
2010-03-26 18:07 . 2010-03-26 18:07 77824 ----a-w- c:\programdata\OviInstallerCache\{DEE1E2E5-B553-4F88-9DE7-23CBEA5D739C}\Installer\CommonCustomActions\Run_XML6_SP1.exe
2010-03-26 18:07 . 2010-03-26 18:07 50000 ----a-w- c:\programdata\OviInstallerCache\{DEE1E2E5-B553-4F88-9DE7-23CBEA5D739C}\Installer\CommonCustomActions\pcswpc.exe
2010-03-26 18:06 . 2010-03-11 07:17 64164264 ----a-w- c:\programdata\OviInstallerCache\{DEE1E2E5-B553-4F88-9DE7-23CBEA5D739C}\NokiaOviSuite2Installer.exe
2010-03-25 15:04 . 2010-03-25 15:04 -------- d-----w- c:\program files\iPod
2010-03-25 15:04 . 2010-03-25 15:04 -------- d-----w- c:\program files\iTunes
2010-03-25 14:54 . 2010-03-25 14:54 72488 ----a-w- c:\programdata\Apple Computer\Installer Cache\iTunes 9.0.3.15\SetupAdmin.exe
2010-03-22 11:05 . 2010-03-22 11:05 -------- d-----w- c:\program files\Ubisoft
2010-03-19 18:59 . 2010-03-19 18:59 -------- d-----w- c:\program files\Common Files\PCSuite
2010-03-19 18:58 . 2010-03-19 18:04 34701512 ----a-w- c:\programdata\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Nokia_PC_Suite_cze_web.exe
2010-03-19 18:58 . 2010-03-19 18:58 95232 ----a-w- c:\programdata\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\pcswpcsi.exe
2010-03-19 18:58 . 2010-03-19 18:58 8192 ----a-w- c:\programdata\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstCCD.exe
2010-03-19 18:58 . 2010-03-19 18:58 61440 ----a-w- c:\programdata\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstPCSFEMsi.exe
2010-03-19 18:58 . 2010-03-19 18:58 10240 ----a-w- c:\programdata\Installations\{19DC9559-9C20-4A46-A67D-7ECBA52A2788}\Installer\CommonCustomActions\UninstPCS.exe
2010-03-11 07:17 . 2010-03-11 07:17 64164264 ----a-w- c:\users\freeco\AppData\Roaming\Nokia\Ovi Suite\Software Updater\NokiaOviSuite2Installer.exe
2010-03-11 07:01 . 2010-02-20 23:06 24064 ----a-w- c:\windows\system32\nshhttp.dll
2010-03-11 07:01 . 2010-02-20 20:53 411648 ----a-w- c:\windows\system32\drivers\http.sys
2010-03-11 07:01 . 2010-02-20 23:05 30720 ----a-w- c:\windows\system32\httpapi.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-04-07 18:18 . 2008-12-21 22:09 657424 ----a-w- c:\windows\system32\perfh005.dat
2010-04-07 18:18 . 2008-12-21 22:09 137698 ----a-w- c:\windows\system32\perfc005.dat
2010-04-07 18:12 . 2009-09-25 17:40 -------- d-----w- c:\program files\Common Files\Akamai
2010-04-07 18:11 . 2008-12-21 18:01 12 ----a-w- c:\windows\bthservsdp.dat
2010-04-07 18:10 . 2008-12-21 22:49 -------- d-----w- c:\users\freeco\AppData\Roaming\Skype
2010-04-07 17:57 . 2008-12-21 22:50 -------- d-----w- c:\users\freeco\AppData\Roaming\skypePM
2010-04-07 17:30 . 2009-01-05 16:44 -------- d-----w- c:\program files\BS.Player ControlBar
2010-04-07 14:31 . 2008-12-22 11:50 -------- d-----w- c:\program files\Common Files\Nero
2010-04-07 14:22 . 2008-12-22 11:50 -------- d-----w- c:\programdata\Nero
2010-04-05 18:18 . 2009-11-13 18:13 -------- d-----w- c:\program files\Steam
2010-04-05 10:58 . 2008-12-21 17:25 680 ----a-w- c:\users\freeco\AppData\Local\d3d9caps.dat
2010-04-01 18:39 . 2008-12-21 19:28 27430 ----a-w- c:\users\freeco\AppData\Roaming\nvModes.dat
2010-04-01 18:39 . 2009-01-18 10:52 215160 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-04-01 18:13 . 2009-01-18 10:52 138544 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-03-30 20:11 . 2009-01-04 17:05 -------- d-----w- c:\program files\Java
2010-03-28 17:31 . 2008-12-21 18:53 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-03-26 18:06 . 2009-12-22 15:40 -------- d-----w- c:\programdata\OviInstallerCache
2010-03-25 15:04 . 2009-09-10 13:51 -------- d-----w- c:\program files\Common Files\Apple
2010-03-25 15:04 . 2009-09-10 13:55 -------- d-----w- c:\programdata\Apple Computer
2010-03-21 18:49 . 2009-05-18 13:21 -------- d-----w- c:\program files\Common Files\Steam
2010-03-19 19:08 . 2009-10-10 08:38 -------- d-----w- c:\users\freeco\AppData\Roaming\Nokia
2010-03-19 18:59 . 2009-10-10 08:41 -------- d-----w- c:\program files\Common Files\Nokia
2010-03-19 18:59 . 2009-10-10 08:45 -------- d-----w- c:\program files\Nokia
2010-03-19 18:58 . 2009-11-29 09:38 -------- d-----w- c:\programdata\Installations
2010-03-11 07:44 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-03-11 07:11 . 2008-12-22 08:36 -------- d-----w- c:\programdata\Microsoft Help
2010-03-09 02:28 . 2009-01-04 17:05 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-02-28 21:10 . 2010-02-28 21:10 -------- d-----w- c:\program files\VideoLAN
2010-02-25 08:08 . 2008-12-21 17:26 156704 ----a-w- c:\users\freeco\AppData\Local\GDIPFONTCACHEV1.DAT
2010-02-24 09:16 . 2009-10-03 07:22 181632 ------w- c:\windows\system32\MpSigStub.exe
2010-02-22 18:13 . 2010-02-27 11:31 52224 ----a-w- c:\users\freeco\AppData\Roaming\Mozilla\Firefox\Profiles\h801rgli.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
2010-02-22 18:13 . 2010-02-27 11:31 101376 ----a-w- c:\users\freeco\AppData\Roaming\Mozilla\Firefox\Profiles\h801rgli.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
2010-02-14 19:13 . 2010-02-14 19:13 -------- d-----w- c:\programdata\McAfee
2010-02-13 10:44 . 2010-02-13 10:44 12212040 ----a-w- c:\programdata\OviInstallerCache\{927AA2A2-7631-4EA2-A1F9-252D27B9D0A2}\Installer\CommonCustomActions\WMFDist11-WindowsXP-X86-ENU.exe
2010-02-13 10:43 . 2010-02-13 10:43 13930312 ----a-w- c:\programdata\OviInstallerCache\{927AA2A2-7631-4EA2-A1F9-252D27B9D0A2}\Installer\CommonCustomActions\WMFDist11-WindowsXP-X64-ENU.exe
2010-02-13 10:43 . 2010-02-13 10:43 77824 ----a-w- c:\programdata\OviInstallerCache\{927AA2A2-7631-4EA2-A1F9-252D27B9D0A2}\Installer\CommonCustomActions\Run_XML6_SP1.exe
2010-02-13 10:43 . 2010-02-13 10:43 61440 ----a-w- c:\programdata\OviInstallerCache\{927AA2A2-7631-4EA2-A1F9-252D27B9D0A2}\Installer\CommonCustomActions\WMF11Runx86.exe
2010-02-13 10:43 . 2010-02-13 10:43 58880 ----a-w- c:\programdata\OviInstallerCache\{927AA2A2-7631-4EA2-A1F9-252D27B9D0A2}\Installer\CommonCustomActions\WMF11Runx64.exe
2010-02-13 10:43 . 2010-02-13 10:43 50000 ----a-w- c:\programdata\OviInstallerCache\{927AA2A2-7631-4EA2-A1F9-252D27B9D0A2}\Installer\CommonCustomActions\pcswpc.exe
2010-02-13 10:43 . 2010-02-13 10:43 98302544 ----a-w- c:\programdata\OviInstallerCache\{927AA2A2-7631-4EA2-A1F9-252D27B9D0A2}\Nokia_Ovi_Suite_webinstaller_ALL.exe
2010-02-10 10:03 . 2010-02-10 10:03 -------- d-----w- c:\program files\Creative
2010-02-07 18:19 . 2010-02-07 18:15 -------- d-----w- c:\users\freeco\AppData\Roaming\vlc
2010-01-25 12:00 . 2010-02-24 03:33 471552 ----a-w- c:\windows\system32\secproc_isv.dll
2010-01-25 12:00 . 2010-02-24 03:32 152576 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-01-25 12:00 . 2010-02-24 03:32 152064 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-01-25 12:00 . 2010-02-24 03:33 471552 ----a-w- c:\windows\system32\secproc.dll
2010-01-25 11:58 . 2010-02-24 03:32 332288 ----a-w- c:\windows\system32\msdrm.dll
2010-01-25 08:21 . 2010-02-24 03:32 526336 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-01-25 08:21 . 2010-02-24 03:32 346624 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-01-25 08:21 . 2010-02-24 03:32 518144 ----a-w- c:\windows\system32\RMActivate.exe
2010-01-25 08:21 . 2010-02-24 03:32 347136 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-01-23 09:26 . 2010-02-24 03:33 2048 ----a-w- c:\windows\system32\tzres.dll
2010-01-21 13:53 . 2010-01-21 13:53 18048 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2010-01-17 20:33 . 2010-01-17 20:33 36864 ----a-w- c:\users\freeco\AppData\Roaming\Autodesk\DWG TrueView 2010\R7\enu\ContextualTabSelectorRules.dll
2010-01-13 16:50 . 2010-01-13 18:09 24567912 ----a-w- c:\programdata\Installations\{4C911A61-39EA-41CC-AB3C-FE3BFFDB5F78}\NokiaSoftwareUpdaterSetup_cs.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-18 125952]
"DAEMON Tools Lite"="d:\programy\DAEMON Tools Lite\daemon.exe" [2008-12-29 687560]
"Skype"="d:\programy\Skype\Phone\Skype.exe" [2010-03-09 26100520]
"NokiaOviSuite2"="c:\program files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" [2010-02-24 385928]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-18 202240]
"Easy ShutDown"="d:\programy\Easy ShutDown\EasyShutDown.exe" [2010-02-22 574464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\program files\Common Files\Nokia\MPlatform\NokiaMServer" [X]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-18 1008184]
"OSD"="c:\program files\C&E\OSD\osd.exe" [2007-09-20 561152]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-07-18 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-07-18 8466432]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-07-18 81920]
"PWRISOVM.EXE"="d:\programy\PowerISO\PWRISOVM.EXE" [2008-03-14 233472]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RtHDVCpl.exe" [2008-12-11 6703648]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2008-12-11 1833504]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2007-12-21 1443072]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"NokiaMusic FastStart"="c:\program files\Nokia\Ovi Player\NokiaOviPlayer.exe" [2010-03-04 2192672]
"Adobe Reader Speed Launcher"="d:\programy\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"QuickTime Task"="d:\programy\QuickTime\QTTask.exe" [2009-11-10 417792]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-02-15 141608]

c:\users\freeco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-3-16 113664]
StrongDC - z stupce.lnk - c:\users\freeco\Desktop\StrongDC\StrongDC.exe [2009-6-14 3116544]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2008-10-25 98696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2010-02-25 08:09 1217872 ----a-w- c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):a9,70,25,5d,03,03,ca,01

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2009-01-28 717296]
R2 OsdService;OsdService;c:\program files\C&E\OSD\OsdService\OsdService.exe [2007-09-03 53248]
R3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu;d:\hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S0 Si3531;SiI-3531 SATA Controller;c:\windows\system32\DRIVERS\Si3531.sys [2009-02-05 212520]
S1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-01-18 21504]
S2 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2007-12-21 468224]
S3 CEBFilter;CEBFilter;c:\program files\C&E\OSD\OsdService\cebuffer.sys [2007-09-04 5120]
S3 CEIO;CEIO;c:\program files\C&E\OSD\OsdService\ceio.sys [2007-08-31 4608]
S3 cKBFilter;cKBFilter;c:\program files\C&E\OSD\OsdService\kbfiltr.sys [2007-08-31 7168]
S3 itecir;ITECIR Infrared Receiver;c:\windows\system32\DRIVERS\itecir.sys [2007-01-08 46592]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
Akamai REG_MULTI_SZ Akamai
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-04-07 c:\windows\Tasks\User_Feed_Synchronization-{0646269E-C965-489C-A058-ED6A0459DB61}.job
- c:\windows\system32\msfeedssync.exe [2010-03-31 04:54]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\freeco\AppData\Roaming\Mozilla\Firefox\Profiles\h801rgli.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
FF - component: c:\users\freeco\AppData\Roaming\Mozilla\Firefox\Profiles\h801rgli.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\FFExternalAlert.dll
FF - component: c:\users\freeco\AppData\Roaming\Mozilla\Firefox\Profiles\h801rgli.default\extensions\{7b13ec3e-999a-4b70-b9cb-2617b8323822}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\freeco\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
FF - plugin: d:\programy\Adobe\Reader 9.0\Reader\browser\nppdf32.dll
FF - plugin: d:\programy\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: d:\programy\QuickTime\Plugins\npqtplugin.dll
FF - plugin: d:\programy\QuickTime\Plugins\npqtplugin2.dll
FF - plugin: d:\programy\QuickTime\Plugins\npqtplugin3.dll
FF - plugin: d:\programy\QuickTime\Plugins\npqtplugin4.dll
FF - plugin: d:\programy\QuickTime\Plugins\npqtplugin5.dll
FF - plugin: d:\programy\QuickTime\Plugins\npqtplugin6.dll
FF - plugin: d:\programy\QuickTime\Plugins\npqtplugin7.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
d:\programy\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency", 1600);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.debug", false);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.agedWeight", 2);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.bucketSize", 1);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight", 25);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("browser.formfill.prefixWeight", 5);
d:\programy\Mozilla Firefox\greprefs\all.js - pref("html5.enable", false);
d:\programy\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
d:\programy\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
d:\programy\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
d:\programy\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
d:\programy\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
d:\programy\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
d:\programy\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
d:\programy\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
d:\programy\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-MNS - d:\programy\Mobile Net Switch\MNS.exe
MSConfigStartUp-Nokia FastStart - c:\program files\Nokia\Nokia Music\NokiaMusic.exe
AddRemove-UnityWebPlayer - c:\users\freeco\AppData\Local\Unity\WebPlayer\Uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-07 20:33
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2010-04-07 20:38:34
ComboFix-quarantined-files.txt 2010-04-07 18:38

Před spuštěním: Volných bajtů: 22 332 747 776
Po spuštění: Volných bajtů: 31 114 129 408

- - End Of File - - 9D627FD4053E1309C9033F9DE9107CD7
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#4 Příspěvek od Caroprd111 »

Jak to vypadá s PC :???:
Obrázek
Nahoru
freeco
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 07 dub 2010 16:07

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#5 Příspěvek od freeco »

No už se to drží v mnohem přijatelnějších hodnotách, nicméně to ještě občas vystřelí, ale to bude způsobenu už asi jednotlivými programi ... každopádně PC jde plynuleji, za to díky!
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#6 Příspěvek od Caroprd111 »

Poprosím o nový log z RSIT.
Obrázek
Nahoru
freeco
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 07 dub 2010 16:07

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#7 Příspěvek od freeco »

Logfile of random's system information tool 1.06 (written by random/random)
Run by freeco at 2010-04-07 21:51:07
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 30 GB (15%) free of 196 GB
Total RAM: 3070 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:51:23, on 7.4.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18904)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\C&E\OSD\osd.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
D:\Programy\PowerISO\PWRISOVM.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
D:\Programy\DAEMON Tools Lite\daemon.exe
D:\Programy\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
D:\Programy\Easy ShutDown\EasyShutDown.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATICFE.EXE
C:\Windows\ehome\ehmsas.exe
C:\Users\freeco\Desktop\StrongDC\StrongDC.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
D:\Programy\Skype\Plugin Manager\skypePM.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
D:\Programy\Mozilla Firefox\firefox.exe
D:\Programy\QIP Infium JadrisPack\infium.exe
C:\Users\freeco\Desktop\Viry\RSIT.exe
C:\Program Files\trend micro\freeco.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [OSD] C:\Program Files\C&E\OSD\osd.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PWRISOVM.EXE] D:\Programy\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Programy\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "D:\Programy\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Programy\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [Skype] "D:\Programy\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [Easy ShutDown] D:\Programy\Easy ShutDown\EasyShutDown.exe :silent
O4 - HKCU\..\Run: [EPSON Stylus DX9400F Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICFE.EXE /FU "C:\Users\freeco\AppData\Local\Temp\E_SFA75.tmp" /EF "HKCU"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: StrongDC – zástupce.lnk = C:\Users\freeco\Desktop\StrongDC\StrongDC.exe
O4 - Startup: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)
O16 - DPF: {A93B47FD-9BF6-4DA8-97FC-9270B9D64A6C} (VaPgCtrl Class) - http://213.235.170.187/plugin/h263ctrl.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Autodesk Data Management Job Dispatch - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe
O23 - Service: Autodesk EDM Server - Autodesk - C:\Program Files\Autodesk\Data Management Server 2008\Server\Webserver\Connectivity.EDMWS.Server.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - D:\Hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: OsdService - Unknown owner - C:\Program Files\C&E\OSD\OsdService\OsdService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 9671 bytes

======Scheduled tasks folder======

C:\Windows\tasks\User_Feed_Synchronization-{0646269E-C965-489C-A058-ED6A0459DB61}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-12-21 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19 137600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"OSD"=C:\Program Files\C&E\OSD\osd.exe [2007-09-20 561152]
"NvSvc"=C:\Windows\system32\nvsvc.dll [2007-07-19 86016]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2007-07-19 8466432]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2007-07-19 81920]
"PWRISOVM.EXE"=D:\Programy\PowerISO\PWRISOVM.EXE [2008-03-15 233472]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2008-12-11 6703648]
"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2008-12-11 1833504]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2007-12-21 1443072]
"NokiaMServer"=C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup []
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]
"NokiaMusic FastStart"=C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe [2010-03-04 2192672]
"Adobe Reader Speed Launcher"=D:\Programy\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-12-22 35760]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2009-12-11 948672]
"QuickTime Task"=D:\Programy\QuickTime\QTTask.exe [2009-11-11 417792]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-02-15 141608]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"DAEMON Tools Lite"=D:\Programy\DAEMON Tools Lite\daemon.exe [2008-12-29 687560]
"Skype"=D:\Programy\Skype\Phone\Skype.exe [2010-03-09 26100520]
"NokiaOviSuite2"=C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe [2010-02-24 385928]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]
"Easy ShutDown"=D:\Programy\Easy ShutDown\EasyShutDown.exe [2010-02-22 574464]
"EPSON Stylus DX9400F Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICFE.EXE [2007-03-23 182272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\Program Files\Steam\Steam.exe [2010-02-25 1217872]

C:\Users\freeco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Gamma.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
StrongDC – zástupce.lnk - C:\Users\freeco\Desktop\StrongDC\StrongDC.exe
Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk - C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\Windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-04-07 20:38:45 ----SHD---- C:\$RECYCLE.BIN
2010-04-07 20:38:36 ----D---- C:\Windows\temp
2010-04-07 20:38:34 ----A---- C:\ComboFix.txt
2010-04-07 20:13:04 ----A---- C:\Windows\MBR.exe
2010-04-07 20:13:03 ----A---- C:\Windows\NIRCMD.exe
2010-04-07 20:12:57 ----A---- C:\Windows\PEV.exe
2010-04-07 20:12:56 ----A---- C:\Windows\SWREG.exe
2010-04-07 20:12:55 ----A---- C:\Windows\zip.exe
2010-04-07 20:12:55 ----A---- C:\Windows\grep.exe
2010-04-07 20:12:54 ----A---- C:\Windows\sed.exe
2010-04-07 20:12:53 ----A---- C:\Windows\SWSC.exe
2010-04-07 20:12:34 ----D---- C:\Windows\ERDNT
2010-04-07 20:10:48 ----D---- C:\ComboFix
2010-04-07 20:10:29 ----D---- C:\Qoobox
2010-04-07 20:10:11 ----A---- C:\Windows\SWXCACLS.exe
2010-04-07 20:10:04 ----D---- C:\32788R22FWJFW
2010-04-07 17:06:26 ----D---- C:\Program Files\trend micro
2010-04-07 17:06:24 ----D---- C:\rsit
2010-04-07 16:21:49 ----D---- C:\Config.Msi
2010-03-31 08:44:08 ----A---- C:\Windows\system32\mshtml.dll
2010-03-31 08:44:04 ----A---- C:\Windows\system32\ieframe.dll
2010-03-31 08:44:02 ----A---- C:\Windows\system32\urlmon.dll
2010-03-31 08:44:02 ----A---- C:\Windows\system32\iertutil.dll
2010-03-31 08:44:01 ----A---- C:\Windows\system32\wininet.dll
2010-03-31 08:44:00 ----A---- C:\Windows\system32\occache.dll
2010-03-31 08:44:00 ----A---- C:\Windows\system32\msfeeds.dll
2010-03-31 08:43:59 ----A---- C:\Windows\system32\mstime.dll
2010-03-31 08:43:59 ----A---- C:\Windows\system32\iedkcs32.dll
2010-03-31 08:43:56 ----A---- C:\Windows\system32\ieui.dll
2010-03-31 08:43:55 ----A---- C:\Windows\system32\iepeers.dll
2010-03-31 08:43:54 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-03-31 08:43:54 ----A---- C:\Windows\system32\ieUnatt.exe
2010-03-31 08:43:53 ----A---- C:\Windows\system32\jsproxy.dll
2010-03-31 08:43:53 ----A---- C:\Windows\system32\iesysprep.dll
2010-03-31 08:43:52 ----A---- C:\Windows\system32\msfeedssync.exe
2010-03-31 08:43:52 ----A---- C:\Windows\system32\ie4uinit.exe
2010-03-31 08:43:51 ----A---- C:\Windows\system32\iesetup.dll
2010-03-31 08:43:51 ----A---- C:\Windows\system32\iernonce.dll
2010-03-30 22:11:56 ----D---- C:\ProgramData\Sun
2010-03-30 22:11:54 ----D---- C:\Program Files\Common Files\Java
2010-03-30 22:11:39 ----A---- C:\Windows\system32\javaws.exe
2010-03-30 22:11:39 ----A---- C:\Windows\system32\javaw.exe
2010-03-30 22:11:39 ----A---- C:\Windows\system32\java.exe
2010-03-28 19:31:20 ----D---- C:\Users\freeco\AppData\Roaming\ICQ
2010-03-27 12:02:07 ----D---- C:\Program Files\Common Files\Skype
2010-03-26 20:08:26 ----D---- C:\Program Files\PC Connectivity Solution
2010-03-25 17:04:06 ----D---- C:\Program Files\iPod
2010-03-25 17:04:04 ----D---- C:\Program Files\iTunes
2010-03-22 13:07:40 ----A---- C:\Windows\system32\XAudio2_5.dll
2010-03-22 13:07:40 ----A---- C:\Windows\system32\xactengine3_5.dll
2010-03-22 13:07:40 ----A---- C:\Windows\system32\d3dcsx_42.dll
2010-03-22 13:07:40 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2010-03-22 13:07:39 ----A---- C:\Windows\system32\d3dx11_42.dll
2010-03-22 13:07:38 ----A---- C:\Windows\system32\d3dx10_41.dll
2010-03-22 13:07:38 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2010-03-22 13:07:37 ----A---- C:\Windows\system32\XAudio2_4.dll
2010-03-22 13:07:37 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2010-03-22 13:07:37 ----A---- C:\Windows\system32\D3DX9_41.dll
2010-03-22 13:07:36 ----A---- C:\Windows\system32\xactengine3_4.dll
2010-03-22 13:07:36 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2010-03-22 13:07:35 ----A---- C:\Windows\system32\d3dx10_40.dll
2010-03-22 13:07:35 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\XAudio2_3.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\xactengine3_3.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2010-03-22 13:07:34 ----A---- C:\Windows\system32\D3DX9_40.dll
2010-03-22 13:07:33 ----A---- C:\Windows\system32\XAudio2_2.dll
2010-03-22 13:07:33 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2010-03-22 13:07:33 ----A---- C:\Windows\system32\xactengine3_2.dll
2010-03-22 13:07:32 ----A---- C:\Windows\system32\XAudio2_1.dll
2010-03-22 13:07:32 ----A---- C:\Windows\system32\XAPOFX1_0.dll
2010-03-22 13:07:31 ----A---- C:\Windows\system32\xactengine3_1.dll
2010-03-22 13:07:31 ----A---- C:\Windows\system32\X3DAudio1_4.dll
2010-03-22 13:07:30 ----A---- C:\Windows\system32\d3dx10_38.dll
2010-03-22 13:07:30 ----A---- C:\Windows\system32\D3DCompiler_38.dll
2010-03-22 13:07:29 ----A---- C:\Windows\system32\XAudio2_0.dll
2010-03-22 13:07:29 ----A---- C:\Windows\system32\xactengine3_0.dll
2010-03-22 13:07:29 ----A---- C:\Windows\system32\X3DAudio1_3.dll
2010-03-22 13:07:29 ----A---- C:\Windows\system32\D3DX9_38.dll
2010-03-22 13:07:28 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-03-22 13:07:27 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-03-22 13:07:27 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-03-22 13:07:26 ----A---- C:\Windows\system32\xactengine2_9.dll
2010-03-22 13:07:26 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-03-22 13:07:25 ----A---- C:\Windows\system32\d3dx10_35.dll
2010-03-22 13:07:25 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2010-03-22 13:07:24 ----A---- C:\Windows\system32\xactengine2_8.dll
2010-03-22 13:07:24 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-03-22 13:07:24 ----A---- C:\Windows\system32\d3dx9_35.dll
2010-03-22 13:07:23 ----A---- C:\Windows\system32\d3dx10_34.dll
2010-03-22 13:07:23 ----A---- C:\Windows\system32\D3DCompiler_34.dll
2010-03-22 13:07:22 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-03-22 13:07:20 ----A---- C:\Windows\system32\d3dx10_33.dll
2010-03-22 13:07:20 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2010-03-22 13:07:18 ----A---- C:\Windows\system32\d3dx10.dll
2010-03-22 13:05:51 ----D---- C:\Program Files\Ubisoft
2010-03-19 20:59:09 ----D---- C:\Program Files\Common Files\PCSuite
2010-03-11 09:01:17 ----A---- C:\Windows\system32\nshhttp.dll
2010-03-11 09:01:11 ----A---- C:\Windows\system32\httpapi.dll

======List of files/folders modified in the last 1 months======

2010-04-07 21:49:41 ----D---- C:\Users\freeco\AppData\Roaming\Skype
2010-04-07 21:36:22 ----D---- C:\Windows\System32
2010-04-07 21:36:21 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-04-07 21:36:20 ----D---- C:\Windows\inf
2010-04-07 21:30:02 ----D---- C:\Program Files\Common Files\Akamai
2010-04-07 20:42:29 ----D---- C:\ProgramData
2010-04-07 20:38:36 ----D---- C:\Windows
2010-04-07 20:33:45 ----A---- C:\Windows\system.ini
2010-04-07 20:31:58 ----SD---- C:\Windows\Downloaded Program Files
2010-04-07 20:26:26 ----D---- C:\Windows\system32\drivers
2010-04-07 20:26:26 ----D---- C:\Windows\AppPatch
2010-04-07 20:26:24 ----D---- C:\Program Files\Common Files
2010-04-07 19:57:20 ----D---- C:\Users\freeco\AppData\Roaming\skypePM
2010-04-07 19:32:03 ----SHD---- C:\Windows\Installer
2010-04-07 19:32:02 ----RD---- C:\Program Files
2010-04-07 19:31:47 ----SHD---- C:\System Volume Information
2010-04-07 19:30:50 ----D---- C:\Program Files\BS.Player ControlBar
2010-04-07 16:31:43 ----D---- C:\Program Files\Common Files\Nero
2010-04-07 16:22:14 ----D---- C:\ProgramData\Nero
2010-04-07 15:17:55 ----A---- C:\Windows\Irremote.ini
2010-04-06 11:08:23 ----D---- C:\Windows\Prefetch
2010-04-05 20:18:19 ----D---- C:\Program Files\Steam
2010-04-01 20:39:32 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-04-01 06:11:07 ----D---- C:\Windows\system32\migration
2010-04-01 06:11:07 ----D---- C:\Program Files\Internet Explorer
2010-03-31 23:09:18 ----D---- C:\Windows\system32\catroot
2010-03-31 23:09:00 ----D---- C:\Windows\winsxs
2010-03-31 08:41:23 ----D---- C:\Windows\system32\catroot2
2010-03-30 22:11:34 ----D---- C:\Program Files\Java
2010-03-29 08:50:36 ----D---- C:\Windows\Minidump
2010-03-28 19:31:26 ----HD---- C:\Program Files\InstallShield Installation Information
2010-03-27 12:02:08 ----D---- C:\Windows\system32\Tasks
2010-03-26 20:09:18 ----DC---- C:\Windows\system32\DRVSTORE
2010-03-26 20:06:45 ----D---- C:\ProgramData\OviInstallerCache
2010-03-25 17:04:06 ----D---- C:\Program Files\Common Files\Apple
2010-03-25 17:04:04 ----D---- C:\ProgramData\Apple Computer
2010-03-22 13:07:16 ----RSD---- C:\Windows\assembly
2010-03-21 20:49:32 ----D---- C:\Program Files\Common Files\Steam
2010-03-19 21:17:06 ----D---- C:\Windows\Globalization
2010-03-19 21:08:16 ----D---- C:\Users\freeco\AppData\Roaming\Nokia
2010-03-19 20:59:02 ----D---- C:\Program Files\Common Files\Nokia
2010-03-19 20:59:01 ----D---- C:\Program Files\Nokia
2010-03-19 20:58:04 ----D---- C:\ProgramData\Installations
2010-03-11 09:44:17 ----D---- C:\Program Files\Windows Mail
2010-03-11 09:44:17 ----D---- C:\Program Files\Movie Maker
2010-03-11 09:11:08 ----D---- C:\ProgramData\Microsoft Help
2010-03-09 04:28:20 ----A---- C:\Windows\system32\deploytk.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 easdrv;easdrv; C:\Windows\system32\DRIVERS\easdrv.sys [2007-12-21 30216]
R1 epfwtdir;epfwtdir; C:\Windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2008-03-14 46652]
R2 eamon;EAMON; C:\Windows\system32\DRIVERS\eamon.sys [2007-12-21 39944]
R3 CEBFilter;CEBFilter; \??\C:\Program Files\C&E\OSD\OsdService\cebuffer.sys [2007-09-04 5120]
R3 CEIO;CEIO; \??\C:\Program Files\C&E\OSD\OsdService\ceio.sys [2007-08-31 4608]
R3 cKBFilter;cKBFilter; \??\C:\Program Files\C&E\OSD\OsdService\kbfiltr.sys [2007-08-31 7168]
R3 CmBatt;Microsoft ACPI Control Method Battery Driver; C:\Windows\system32\DRIVERS\CmBatt.sys [2008-01-18 14208]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-12-11 2250272]
R3 itecir;ITECIR Infrared Receiver; C:\Windows\system32\DRIVERS\itecir.sys [2007-01-08 46592]
R3 NETw4v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw4v32.sys [2007-09-26 2251776]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-07-19 7599776]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-04-30 81408]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2006-11-02 1010560]
R3 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\DRIVERS\wmiacpi.sys [2008-01-18 11264]
S3 asd81kko;asd81kko; C:\Windows\system32\drivers\asd81kko.sys []
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-04-11 22528]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2008-01-18 92160]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-04-11 507904]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-04-11 29696]
S3 Cam5603D;WebCam; C:\Windows\System32\Drivers\BisonCam.sys [2007-06-01 753456]
S3 catchme;catchme; \??\C:\Users\freeco\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 dtscsi;dtscsi; C:\Windows\System32\Drivers\dtscsi.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2009-02-06 55280]
S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2007-03-08 8320]
S3 HdAudAddService;Microsoft 1.1 UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\Windows\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\Windows\system32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 k750mgmt;Sony Ericsson 750 USB WMC Device Management Drivers; C:\Windows\system32\DRIVERS\k750mgmt.sys [2005-02-11 81728]
S3 k750obex;Sony Ericsson 750 USB WMC OBEX Interface Drivers; C:\Windows\system32\DRIVERS\k750obex.sys [2005-02-11 79488]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-01-21 18048]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-12-30 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-04-11 148992]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-12-30 7936]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-12-30 7936]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2009-08-28 144672]
R2 Autodesk Data Management Job Dispatch;Autodesk Data Management Job Dispatch; C:\Program Files\Autodesk\Data Management Server 2008\Server\Dispatch\Connectivity.WindowsService.JobDispatch.exe [2007-02-13 32768]
R2 Autodesk EDM Server;Autodesk EDM Server; C:\Program Files\Autodesk\Data Management Server 2008\Server\Webserver\Connectivity.EDMWS.Server.exe [2007-02-13 49152]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-12-12 238888]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 ekrn;Eset Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2007-12-21 468224]
R2 MSSQL$AUTODESKVAULT;SQL Server (AUTODESKVAULT); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2009-05-27 29262680]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2009-09-25 75064]
R2 PnkBstrB;PnkBstrB; C:\Windows\system32\PnkBstrB.exe [2010-04-01 215160]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
R2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2008-11-24 239968]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2008-11-24 87904]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-02-15 545576]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-01-26 652800]
S2 OsdService;OsdService; C:\Program Files\C&E\OSD\OsdService\OsdService.exe [2007-09-03 53248]
S3 Adobe LM Service;Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2009-04-26 72704]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2008-12-22 79360]
S3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; D:\Hry\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2007-12-21 19200]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-09-25 651720]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 Macromedia Licensing Service;Macromedia Licensing Service; C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [2009-03-26 68096]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2010-03-09 332720]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2008-11-24 45408]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#8 Příspěvek od Caroprd111 »

Obrázek Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter


Obrázek Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe
  • Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
  • Po použití program vymažte. Pozor,antiviry ho mohou falešně označit za vir.

Obrázek Stáhněte a použijte http://oldtimer.geekstogo.com/TFC.exe


Obrázek Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe
  • Spusťte.
  • Klikněte na "CleanUp!". Potvrďte hlášky stiskem "Yes" (Bude následovat restart)


Obrázek Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
  • Nainstalujte a v průběhu instalace odškrtněte, že chcete instalovat yahoo toolbar.

    Obrázek Záložka Čistič
  • Dejte analyzovat, po dokončení dejte Spustit Ccleaner.

    Obrázek Záložka Registry
  • Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
    Obrázek OK Obrázek Zavřít
Obrázek
Nahoru
freeco
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 07 dub 2010 16:07

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#9 Příspěvek od freeco »

Vše sem provedl, díky za rady ;)
Nahoru
Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:
Kontaktovat uživatele Caroprd111

Re: Prosím o kontrolu, zpomelaní PC, neznámý důvod

#10 Příspěvek od Caroprd111 »

Nemáte zač :)
Obrázek
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“