Zavirované pc

[gugacka]

zdravím, potřeboval bych od vás pomoci odvirovat další pc, jedná se o firemní pc, za pomoc s vyčištěním pošlu foru 200,-Kč, je to ok? Jestli ano tak zde je rsit

Logfile of random's system information tool 1.08 (written by random/random)
Run by Lynx at 2010-07-12 12:39:01
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 68 GB (89%) free of 76 GB
Total RAM: 447 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:39:10, on 12.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Documents and Settings\Lynx\Plocha\RSIT.exe
C:\Program Files\trend micro\Lynx.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{01B2526C-BE7F-47DD-85FF-A1CF6B8164B3}: NameServer = 194.228.41.65,194.228.41.113
O17 - HKLM\System\CS1\Services\Tcpip\..\{01B2526C-BE7F-47DD-85FF-A1CF6B8164B3}: NameServer = 194.228.41.65,194.228.41.113
O17 - HKLM\System\CS2\Services\Tcpip\..\{01B2526C-BE7F-47DD-85FF-A1CF6B8164B3}: NameServer = 194.228.41.65,194.228.41.113
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

--
End of file - 4846 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-29 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-06-29 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"VTTimer"=C:\WINDOWS\system32\VTTimer.exe [2005-03-08 53248]
"VTTrayp"=C:\WINDOWS\system32\VTtrayp.exe [2006-03-23 176128]
"AudioDeck"=C:\Program Files\VIAudioi\SBADeck\ADeck.exe [2005-09-06 450560]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-04-04 949376]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
InterVideo WinCinema Manager.lnk - C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Documents and Settings\Lynx\Local Settings\Temporary Internet Files\Content.IE5\HJB5FP7W\svchost[1].exe"="C:\Documents and Settings\Lynx\Local Settings\Temporary Internet Files\Content.IE5\HJB5FP7W\svchost[1].exe:*:Enabled:ldrsoft"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======File associations======

.js - edit - "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLED.EXE" /verb edit "%1"
.js - open - "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLED.EXE" /verb open "%1"
.scr - open - "%1" /S "%3"

======List of files/folders created in the last 1 months======

2010-07-12 12:38:22 ----D---- C:\Program Files\Common Files\Java
2010-07-12 12:38:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2010-07-12 12:37:36 ----A---- C:\WINDOWS\system32\javaws.exe
2010-07-12 12:37:36 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-07-12 12:37:35 ----A---- C:\WINDOWS\system32\javaw.exe
2010-07-12 12:37:35 ----A---- C:\WINDOWS\system32\java.exe
2010-07-09 14:30:20 ----D---- C:\Program Files\trend micro
2010-07-09 14:30:19 ----D---- C:\rsit
2010-07-09 13:58:09 ----D---- C:\Documents and Settings\Lynx\Data aplikací\Malwarebytes
2010-07-09 13:57:58 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-07-09 13:57:56 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-07-09 13:57:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-07-09 13:57:56 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-07-09 13:37:20 ----D---- C:\Program Files\CCleaner
2010-07-02 16:00:53 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2010-07-02 16:00:43 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2010-07-02 16:00:34 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2010-07-01 09:55:41 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-07-01 09:55:07 ----D---- C:\WINDOWS\Prefetch
2010-07-01 09:51:11 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2010-07-01 09:50:59 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2010-07-01 09:50:40 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2010-07-01 09:50:25 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2010-07-01 09:50:14 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2010-07-01 09:50:03 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2010-07-01 09:49:51 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2010-07-01 09:49:40 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2010-07-01 09:49:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2010-07-01 09:49:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2010-07-01 09:49:04 ----HDC---- C:\WINDOWS\$NtUninstallKB978251$
2010-07-01 09:48:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2010-07-01 09:48:39 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2010-07-01 09:48:24 ----HDC---- C:\WINDOWS\$NtUninstallKB977165$
2010-07-01 09:48:07 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2010-07-01 09:47:56 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2010-07-01 09:47:44 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2010-07-01 09:47:33 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2010-07-01 09:47:21 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2010-07-01 09:47:10 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2010-07-01 09:46:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2010-07-01 09:46:45 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2010-07-01 09:46:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2010-07-01 09:46:21 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2010-07-01 09:46:10 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2010-07-01 09:45:59 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2010-07-01 09:45:45 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2010-07-01 09:45:34 ----HDC---- C:\WINDOWS\$NtUninstallKB973354$
2010-07-01 09:45:22 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2010-07-01 09:45:09 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2010-07-01 09:44:57 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2010-07-01 09:44:47 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2010-07-01 09:44:34 ----HDC---- C:\WINDOWS\$NtUninstallKB971557$
2010-07-01 09:44:22 ----HDC---- C:\WINDOWS\$NtUninstallKB971486$
2010-07-01 09:44:10 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2010-07-01 09:43:59 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2010-07-01 09:43:47 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2010-07-01 09:43:37 ----HDC---- C:\WINDOWS\$NtUninstallKB969947$
2010-07-01 09:43:23 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2010-07-01 09:43:12 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2010-07-01 09:42:58 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2010-07-01 09:42:44 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2010-07-01 09:42:34 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2010-07-01 09:42:23 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2010-07-01 09:42:12 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2010-07-01 09:42:01 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2010-07-01 09:41:50 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2010-07-01 09:41:38 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2010-07-01 09:41:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2010-07-01 09:41:16 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2010-07-01 09:41:05 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2010-07-01 09:40:54 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2010-07-01 09:40:44 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2010-07-01 09:40:33 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2010-07-01 09:40:17 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2010-07-01 09:40:03 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2010-07-01 09:39:52 ----HDC---- C:\WINDOWS\$NtUninstallKB973687_1$
2010-07-01 09:39:42 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2010-07-01 09:39:31 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_1$
2010-07-01 09:39:21 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2010-07-01 09:39:11 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-07-01 09:39:01 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2010-07-01 09:38:48 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2010-07-01 09:38:35 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2010-07-01 09:38:23 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2010-07-01 09:38:13 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2010-07-01 09:38:01 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2010-07-01 09:37:52 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2010-07-01 09:37:40 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2010-07-01 09:37:31 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2010-07-01 09:37:20 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2010-07-01 09:33:30 ----D---- C:\WINDOWS\system32\cs
2010-07-01 09:33:30 ----D---- C:\WINDOWS\system32\bits
2010-07-01 09:33:30 ----D---- C:\WINDOWS\l2schemas
2010-07-01 09:27:24 ----D---- C:\WINDOWS\network diagnostic
2010-07-01 09:22:29 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2010-07-01 09:01:26 ----D---- C:\WINDOWS\ie8updates
2010-07-01 09:00:16 ----D---- C:\WINDOWS\WBEM
2010-07-01 08:59:16 ----HDC---- C:\WINDOWS\ie8
2010-07-01 08:59:16 ----D---- C:\WINDOWS\system32\cs-CZ
2010-06-13 16:55:36 ----A---- C:\WINDOWS\system32\drivers\usbprint.sys

======List of files/folders modified in the last 1 months======

2010-07-12 12:38:22 ----SHD---- C:\WINDOWS\Installer
2010-07-12 12:38:22 ----D---- C:\Program Files\Common Files
2010-07-12 12:37:48 ----D---- C:\WINDOWS\Temp
2010-07-12 12:37:36 ----D---- C:\WINDOWS\system32
2010-07-12 12:37:02 ----D---- C:\Program Files\Java
2010-07-12 12:35:21 ----D---- C:\Program Files\Mozilla Firefox
2010-07-09 15:30:29 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-07-09 14:30:20 ----RD---- C:\Program Files
2010-07-09 14:29:24 ----D---- C:\WINDOWS
2010-07-09 14:28:58 ----D---- C:\WINDOWS\system32\drivers
2010-07-09 13:56:14 ----D---- C:\WINDOWS\Debug
2010-07-02 16:01:09 ----HD---- C:\WINDOWS\inf
2010-07-02 16:01:05 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-07-02 16:01:03 ----HD---- C:\WINDOWS\$hf_mig$
2010-07-02 09:30:23 ----D---- C:\WINDOWS\system32\CatRoot2
2010-07-01 09:57:01 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-07-01 09:54:49 ----D---- C:\WINDOWS\system32\Setup
2010-07-01 09:54:49 ----D---- C:\WINDOWS\AppPatch
2010-07-01 09:54:49 ----D---- C:\Program Files\Messenger
2010-07-01 09:54:48 ----D---- C:\WINDOWS\system32\wbem
2010-07-01 09:54:47 ----RSD---- C:\WINDOWS\Fonts
2010-07-01 09:54:19 ----D---- C:\WINDOWS\security
2010-07-01 09:52:09 ----D---- C:\WINDOWS\system32\CatRoot
2010-07-01 09:49:31 ----D---- C:\Program Files\Outlook Express
2010-07-01 09:47:58 ----D---- C:\Program Files\Movie Maker
2010-07-01 09:37:32 ----D---- C:\WINDOWS\WinSxS
2010-07-01 09:33:53 ----D---- C:\WINDOWS\ehome
2010-07-01 09:33:50 ----D---- C:\WINDOWS\system32\inetsrv
2010-07-01 09:33:49 ----D---- C:\WINDOWS\ime
2010-07-01 09:33:49 ----D---- C:\WINDOWS\Help
2010-07-01 09:33:32 ----D---- C:\WINDOWS\system32\usmt
2010-07-01 09:33:31 ----D---- C:\Program Files\Internet Explorer
2010-07-01 09:33:30 ----D---- C:\WINDOWS\PeerNet
2010-07-01 09:29:58 ----D---- C:\WINDOWS\ServicePackFiles
2010-07-01 09:29:26 ----D---- C:\WINDOWS\system32\Restore
2010-07-01 09:29:26 ----D---- C:\WINDOWS\system32\npp
2010-07-01 09:29:25 ----D---- C:\WINDOWS\msagent
2010-07-01 09:29:24 ----D---- C:\WINDOWS\srchasst
2010-07-01 09:29:23 ----D---- C:\Program Files\NetMeeting
2010-07-01 09:29:21 ----D---- C:\WINDOWS\system32\Com
2010-07-01 09:29:19 ----D---- C:\Program Files\Windows Media Player
2010-07-01 09:29:18 ----D---- C:\Program Files\Windows NT
2010-07-01 09:29:14 ----D---- C:\Program Files\Common Files\System
2010-07-01 09:28:58 ----D---- C:\WINDOWS\system32\oobe
2010-07-01 09:28:56 ----D---- C:\WINDOWS\system
2010-07-01 09:00:18 ----D---- C:\WINDOWS\system32\config
2010-07-01 09:00:10 ----D---- C:\WINDOWS\Media

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 gagp30kx;Filtr Microsoft Generic AGPv3.0 pro procesorovou platformu K8; C:\WINDOWS\system32\DRIVERS\gagp30kx.sys [2008-04-13 46464]
R0 videX32;videX32; C:\WINDOWS\system32\DRIVERS\videX32.sys [2006-02-23 9728]
R0 xfilt;VIA SATA IDE Hot-plug Driver; C:\WINDOWS\system32\DRIVERS\xfilt.sys [2006-02-23 11264]
R1 nod32drv;nod32drv; C:\WINDOWS\system32\drivers\nod32drv.sys [2007-04-04 15424]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 AMON;AMON; C:\WINDOWS\system32\drivers\amon.sys [2007-04-04 512096]
R3 FETNDIS;VIA PCI 10/100Mb Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\fetnd5.sys [2001-08-17 27165]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 viagfx;viagfx; C:\WINDOWS\system32\DRIVERS\vtmini.sys [2006-04-13 252416]
R3 VIAudio;Vinyl AC'97 Audio Controller (WDM); C:\WINDOWS\system32\drivers\vinyl97.sys [2005-08-03 202112]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 MSICPL;MSICPL; \??\D:\install4\MSICPL.sys []
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 SONYPVU1;Sony USB Filter Driver (SONYPVU1); C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [2001-08-17 7552]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-04-12 153376]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-04-04 552064]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

-----------------EOF-----------------

[vyosek]

Čau

Kde jsi prisel na to ze je zavirovane RSIT nic neukazuje, jake jsou s PC problemy

[gugacka]

taky koukám že nic nevidim, v pátek mě zavolali, že na ně křičí nod že tam je vir, tak sem na to vletěl, smazal karanténu, projel mbamem ten našel asi 8 parchantů, pročistil sem ccleanerem a pak sem musel leťet pryč, s tim že to teď dodělám, a asi teda není co dodělávat, je to tutový?

[gugacka]

jo promiň, Ahoj, rád tě vidím (nebo spíš čtu)

[vyosek]

Pouze bych omezil veci spoustene po startu a nainstaloval nejaky fw, aktulizoval programy (reader)

Muzu poprosit o log z mbam a z nodu
Omezeni po startu chces napsat, nebo udelas sam napr pres CCleanerem

[gugacka]

už sem odtamtaď odletěl pryč, po startu jsem to omezil (akorát co si myslíš o adobe spped launcher, někde sem čet že adobe tvrdí že je to fakt účiný a nechávat to zaplý), s fw je to tam těžký, nechce se jim investovat, nějak to tam s nima udělá správce serveru, novýho radra jim tam možná někdy nahraju, teď se mi s tim nechtělo piplat (není to zas až tak důležitý), log už po ruce nemám, ale byly to nějaký koně v dočasnejch složkách a koši, asi si tam něco natáhly z webu, ale nejspíš se to ani nespustilo, jenom natáhlo a nod to zachytil, návod na ccleaner nepotřebuju (ale díky za nabídku )

To je po dlouhý době celkem snadná oprava, juchů, většinou je to na několik hodin skenování

takže díky a a taky

[vyosek]

Adobe speed launcher - pri dnesni rychlosti pc zbytecne

fw jsou i free verze http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

Jinak nemas zac, rad jsem pomohl

A koukej makat v N, at sem nemusis porad cpat logy

Tak zas nekdy , ciao!

[gugacka]

Adobe speed launcher - pri dnesni rychlosti pc zbytecne - jak kterých pc (před pár dny mi známej dotáhl ntbook dell, nějakejch 400mhz, 256mb ram, je to úžasný je to 15 let stará mašina a maká)

FW - Zdarma pro nekomerční použití - nelze použít

A koukej makat v N, at sem nemusis porad cpat logy - určitě, jenom teď přes prázdniny je to takový časově náročnější, a teď ještě k tomu dělámj na jednom projektu na www.multikulty.cz a to je taky dost časově náročný a potřebuju dát do kupy nějaký torzo redakce

[vyosek]

FW nekomercni - aha - je to firemni

Jinak myslim ze zde muzem