vytazenie procesora 100% procesom ntvdm.exe

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
zork
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 28 Črc 2010 20:28

vytazenie procesora 100% procesom ntvdm.exe

#1 Příspěvek od zork »

nasiel sa u mna jeden spyware, ktory vytazoval procesor, ale pre istotu by som vas poprosil o kontrolu logu

PS: robim to prvy krat...,v pripade miernej demencie z mojej strany, poprosim o zhovievavost :)


Logfile of random's system information tool 1.08 (written by random/random)
Run by Ivo at 2010-07-28 21:26:19
Microsoft Windows 7 Ultimate
System drive C: has 7 GB (28%) free of 24 GB
Total RAM: 1919 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:26:30, on 28. 7. 2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\ASUSTPE.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\DU Meter\DUMeter.exe
C:\Program Files\Rainlendar2\Rainlendar2.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\Apache Software Foundation\Apache2.2\bin\ApacheMonitor.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Users\Ivo\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe
C:\Users\Ivo\Desktop\RSIT.exe
C:\Program Files\trend micro\Ivo.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ASUSTPE] C:\Windows\system32\ASUSTPE.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe
O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Monitor Apache Servers.lnk = C:\Program Files\Apache Software Foundation\Apache2.2\bin\ApacheMonitor.exe
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Previesť cieľ odkazu do formátu Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Previesť do Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Pridať cieľ odkazu do existujúceho súboru PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Pridať do existujúceho súboru PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O17 - HKLM\System\CCS\Services\Tcpip\..\{67C4E4C6-C1CA-4AF2-9099-253189464662}: Domain = mag-net.sk
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = mag-net.sk
O17 - HKLM\System\CS1\Services\Tcpip\..\{67C4E4C6-C1CA-4AF2-9099-253189464662}: Domain = mag-net.sk
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = mag-net.sk
O17 - HKLM\System\CS2\Services\Tcpip\..\{67C4E4C6-C1CA-4AF2-9099-253189464662}: Domain = mag-net.sk
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = mag-net.sk
O23 - Service: Apache2.2 - Apache Software Foundation - C:\Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - Unknown owner - C:\Program Files\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Browser Defender Update Service - Unknown owner - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd. - C:\Program Files\DU Meter\DUMeterSvc.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe

--
End of file - 7702 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-203743708-2698908214-2244023434-1002Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-203743708-2698908214-2244023434-1002UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
PC Tools Browser Guard BHO - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll [2010-01-22 567248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-27 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{472734EA-242A-422B-ADF8-83D1E48CC825} - PC Tools Browser Guard - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll [2010-01-22 567248]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2009-01-30 13605408]
"NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2009-01-30 92704]
"ASUSTPE"=C:\Windows\system32\ASUSTPE.exe [2007-01-16 106496]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-12-25 8129056]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-03-01 857648]
"HControlUser"=C:\Program Files\ASUS\ATK Hotkey\HControlUser.exe [2009-04-01 98304]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2010-04-07 2145000]
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DU Meter"=C:\Program Files\DU Meter\DUMeter.exe [2010-07-26 2749984]
"Rainlendar2"=C:\Program Files\Rainlendar2\Rainlendar2.exe [2010-07-11 2199040]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2009-10-30 369200]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Monitor Apache Servers.lnk - C:\Program Files\Apache Software Foundation\Apache2.2\bin\ApacheMonitor.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-07-28 21:26:19 ----D---- C:\rsit
2010-07-28 21:26:19 ----D---- C:\Program Files\trend micro
2010-07-28 20:44:41 ----A---- C:\Windows\SGDetectionTool.dll
2010-07-28 20:44:41 ----A---- C:\Windows\BDTSupport.dll
2010-07-28 20:44:40 ----A---- C:\Windows\PCTBDRes.dll
2010-07-28 20:44:40 ----A---- C:\Windows\PCTBDCore.dll
2010-07-28 20:44:22 ----A---- C:\Windows\system32\drivers\pctwfpfilter.sys
2010-07-28 20:44:22 ----A---- C:\Windows\system32\drivers\pctgntdi.sys
2010-07-28 20:44:11 ----A---- C:\Windows\system32\drivers\PCTCore.sys
2010-07-28 20:44:11 ----A---- C:\Windows\system32\drivers\PCTAppEvent.sys
2010-07-28 20:43:50 ----A---- C:\Windows\system32\drivers\pctplsg.sys
2010-07-28 20:43:34 ----D---- C:\Users\Ivo\AppData\Roaming\PC Tools
2010-07-28 20:43:34 ----D---- C:\ProgramData\PC Tools
2010-07-28 20:43:34 ----D---- C:\Program Files\Spyware Doctor
2010-07-28 20:43:34 ----D---- C:\Program Files\Common Files\PC Tools
2010-07-28 17:40:26 ----A---- C:\Windows\system32\drivers\SBREDrv.sys
2010-07-28 17:23:05 ----AD---- C:\ProgramData\TEMP
2010-07-28 17:14:44 ----DC---- C:\Windows\system32\DRVSTORE
2010-07-28 17:11:46 ----D---- C:\ProgramData\Lavasoft
2010-07-27 12:40:10 ----D---- C:\ProgramData\Media Center Programs
2010-07-27 12:40:01 ----A---- C:\Windows\system32\drivers\atksgt.sys
2010-07-27 12:39:59 ----A---- C:\Windows\system32\d3dx9_34.dll
2010-07-27 12:39:54 ----A---- C:\Windows\system32\drivers\lirsgt.sys
2010-07-27 01:33:00 ----D---- C:\Program Files\SystemRequirementsLab
2010-07-27 01:32:57 ----D---- C:\Users\Ivo\AppData\Roaming\SystemRequirementsLab
2010-07-27 01:32:45 ----D---- C:\Windows\Sun
2010-07-27 01:32:37 ----D---- C:\ProgramData\Sun
2010-07-27 01:32:36 ----D---- C:\Program Files\Common Files\Java
2010-07-27 01:28:58 ----A---- C:\Windows\system32\javaws.exe
2010-07-27 01:28:58 ----A---- C:\Windows\system32\javaw.exe
2010-07-27 01:28:58 ----A---- C:\Windows\system32\java.exe
2010-07-27 01:28:58 ----A---- C:\Windows\system32\deployJava1.dll
2010-07-27 01:28:38 ----D---- C:\Program Files\Java
2010-07-27 00:09:15 ----D---- C:\Windows\Panther
2010-07-26 23:20:04 ----D---- C:\Users\Ivo\AppData\Roaming\WinRAR
2010-07-26 22:10:36 ----RASH---- C:\MSDOS.SYS
2010-07-26 22:10:36 ----RASH---- C:\IO.SYS
2010-07-26 21:35:57 ----D---- C:\Users\Ivo\AppData\Roaming\vlc
2010-07-26 19:55:14 ----A---- C:\Windows\system32\xactengine2_10.dll
2010-07-26 19:55:14 ----A---- C:\Windows\system32\X3DAudio1_2.dll
2010-07-26 19:55:14 ----A---- C:\Windows\system32\d3dx9_36.dll
2010-07-26 19:55:14 ----A---- C:\Windows\system32\d3dx10_36.dll
2010-07-26 19:55:14 ----A---- C:\Windows\system32\D3DCompiler_36.dll
2010-07-26 18:04:05 ----D---- C:\ProgramData\Age of Empires 3
2010-07-26 18:03:42 ----D---- C:\Program Files\MSXML 4.0
2010-07-26 17:54:56 ----A---- C:\Windows\system32\d3dx9_26.dll
2010-07-26 17:54:52 ----A---- C:\Windows\system32\d3dx9_25.dll
2010-07-26 17:53:53 ----A---- C:\Windows\system32\d3dx9_32.dll
2010-07-26 17:53:51 ----A---- C:\Windows\system32\d3dx9_29.dll
2010-07-26 17:42:16 ----A---- C:\Windows\system32\msv1_0.dll
2010-07-26 17:41:25 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-07-26 17:41:25 ----A---- C:\Windows\system32\PresentationHost.exe
2010-07-26 17:41:25 ----A---- C:\Windows\system32\netfxperf.dll
2010-07-26 17:41:25 ----A---- C:\Windows\system32\mscoree.dll
2010-07-26 17:41:25 ----A---- C:\Windows\system32\dfshim.dll
2010-07-26 17:38:03 ----A---- C:\Windows\system32\MRT.exe
2010-07-26 17:37:12 ----A---- C:\Windows\system32\drivers\sffp_sd.sys
2010-07-26 17:26:33 ----D---- C:\Program Files\Microsoft Works
2010-07-26 17:25:20 ----D---- C:\Program Files\Microsoft Visual Studio
2010-07-26 17:25:19 ----D---- C:\Program Files\Common Files\DESIGNER
2010-07-26 17:23:37 ----D---- C:\Windows\PCHEALTH
2010-07-26 17:23:37 ----D---- C:\Program Files\Microsoft.NET
2010-07-26 17:11:42 ----A---- C:\Windows\system32\uxtuneup.dll
2010-07-26 17:11:42 ----A---- C:\Windows\system32\authuitu.dll
2010-07-26 17:11:11 ----A---- C:\Windows\system32\drivers\revoflt.sys
2010-07-26 17:11:03 ----D---- C:\Program Files\VS Revo Group
2010-07-26 17:08:18 ----A---- C:\Windows\system32\TURegOpt.exe
2010-07-26 17:07:55 ----D---- C:\Users\Ivo\AppData\Roaming\TuneUp Software
2010-07-26 17:07:42 ----D---- C:\Program Files\TuneUp Utilities 2010
2010-07-26 17:07:00 ----D---- C:\ProgramData\TuneUp Software
2010-07-26 17:05:45 ----D---- C:\Program Files\CCleaner
2010-07-26 17:04:05 ----D---- C:\ProgramData\FLEXnet
2010-07-26 16:48:32 ----D---- C:\Windows\sk-SK
2010-07-26 16:48:27 ----D---- C:\Windows\system32\drivers\sk-SK
2010-07-26 16:22:33 ----D---- C:\Program Files\Microsoft Visual Studio 8
2010-07-26 16:22:20 ----D---- C:\Program Files\PHP
2010-07-26 16:20:57 ----D---- C:\Program Files\Microsoft Office
2010-07-26 16:20:56 ----D---- C:\ProgramData\Microsoft Help
2010-07-26 16:14:00 ----D---- C:\Users\Ivo\AppData\Roaming\Macromedia
2010-07-26 16:08:44 ----A---- C:\Windows\system32\browserchoice.exe
2010-07-26 16:05:42 ----A---- C:\Windows\system32\shell32.dll
2010-07-26 16:05:39 ----A---- C:\Windows\system32\lsasrv.dll
2010-07-26 16:05:38 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-07-26 16:05:33 ----A---- C:\Windows\system32\drivers\usbhub.sys
2010-07-26 16:05:32 ----A---- C:\Windows\system32\drivers\usbehci.sys
2010-07-26 16:05:16 ----D---- C:\ProgramData\ALM
2010-07-26 16:05:01 ----A---- C:\Windows\system32\win32k.sys
2010-07-26 16:04:45 ----A---- C:\Windows\system32\wmp.dll
2010-07-26 16:04:38 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-07-26 16:04:37 ----A---- C:\Windows\system32\CertEnroll.dll
2010-07-26 16:04:35 ----A---- C:\Windows\system32\winresume.exe
2010-07-26 16:04:35 ----A---- C:\Windows\system32\winload.exe
2010-07-26 16:04:33 ----A---- C:\Windows\system32\wmploc.DLL
2010-07-26 16:04:10 ----A---- C:\Windows\system32\CPFilters.dll
2010-07-26 16:04:08 ----A---- C:\Windows\system32\msdri.dll
2010-07-26 16:04:05 ----A---- C:\Windows\system32\psisdecd.dll
2010-07-26 16:03:35 ----A---- C:\Windows\system32\winlogon.exe
2010-07-26 16:03:35 ----A---- C:\Windows\explorer.exe
2010-07-26 16:03:34 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-07-26 16:03:33 ----A---- C:\Windows\system32\wintrust.dll
2010-07-26 16:03:29 ----A---- C:\Windows\system32\inetcomm.dll
2010-07-26 16:03:27 ----A---- C:\Windows\system32\ntdll.dll
2010-07-26 16:03:26 ----A---- C:\Windows\system32\t2embed.dll
2010-07-26 16:03:23 ----A---- C:\Windows\system32\jscript.dll
2010-07-26 16:03:09 ----A---- C:\Windows\system32\mshtml.dll
2010-07-26 16:03:00 ----A---- C:\Windows\system32\ieframe.dll
2010-07-26 16:02:58 ----A---- C:\Windows\system32\urlmon.dll
2010-07-26 16:02:58 ----A---- C:\Windows\system32\mstime.dll
2010-07-26 16:02:56 ----A---- C:\Windows\system32\wininet.dll
2010-07-26 16:02:56 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-07-26 16:02:56 ----A---- C:\Windows\system32\iedkcs32.dll
2010-07-26 16:02:55 ----A---- C:\Windows\system32\jsproxy.dll
2010-07-26 16:02:48 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-07-26 16:02:47 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-07-26 16:02:42 ----A---- C:\Windows\system32\quartz.dll
2010-07-26 16:02:41 ----A---- C:\Windows\system32\msvidc32.dll
2010-07-26 16:02:41 ----A---- C:\Windows\system32\mciavi32.dll
2010-07-26 16:02:40 ----A---- C:\Windows\system32\msyuv.dll
2010-07-26 16:02:40 ----A---- C:\Windows\system32\msrle32.dll
2010-07-26 16:02:40 ----A---- C:\Windows\system32\iyuv_32.dll
2010-07-26 16:02:40 ----A---- C:\Windows\system32\avifil32.dll
2010-07-26 16:02:39 ----A---- C:\Windows\system32\tsbyuv.dll
2010-07-26 16:02:36 ----A---- C:\Windows\system32\kernel32.dll
2010-07-26 16:02:35 ----RA---- C:\Windows\system32\AdobePDFUI.dll
2010-07-26 16:02:34 ----A---- C:\Windows\system32\apphelp.dll
2010-07-26 16:01:34 ----A---- C:\Windows\system32\secproc_isv.dll
2010-07-26 16:01:33 ----A---- C:\Windows\system32\secproc.dll
2010-07-26 16:01:33 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-07-26 16:01:33 ----A---- C:\Windows\system32\RMActivate.exe
2010-07-26 16:01:32 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-07-26 16:01:32 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-07-26 16:01:32 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-07-26 16:01:32 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-07-26 15:57:42 ----D---- C:\Program Files\Apache Software Foundation
2010-07-26 15:57:03 ----A---- C:\Windows\system32\vbscript.dll
2010-07-26 15:55:18 ----A---- C:\Windows\system32\msasn1.dll
2010-07-26 15:54:58 ----A---- C:\Windows\system32\cabview.dll
2010-07-26 15:54:55 ----D---- C:\Users\Ivo\AppData\Roaming\Command and Conquer 3 Tiberium Wars
2010-07-26 15:54:34 ----D---- C:\Users\Ivo\AppData\Roaming\Command & Conquer 3 Kane's Wrath
2010-07-26 15:53:57 ----A---- C:\Windows\system32\tzres.dll
2010-07-26 15:48:52 ----D---- C:\Users\Ivo\AppData\Roaming\Google Chrome Backup
2010-07-26 15:48:26 ----SHD---- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2010-07-26 15:44:23 ----D---- C:\ProgramData\Adobe
2010-07-26 15:43:53 ----D---- C:\Program Files\Adobe
2010-07-26 15:43:41 ----D---- C:\Users\Ivo\AppData\Roaming\Adobe
2010-07-26 15:43:33 ----D---- C:\Program Files\DAEMON Tools Toolbar
2010-07-26 15:43:00 ----A---- C:\Windows\system32\drivers\sptd.sys
2010-07-26 15:42:11 ----D---- C:\Program Files\DAEMON Tools Lite
2010-07-26 15:41:54 ----D---- C:\Users\Ivo\AppData\Roaming\DAEMON Tools Lite
2010-07-26 15:41:51 ----D---- C:\ProgramData\DAEMON Tools Lite
2010-07-26 15:40:47 ----D---- C:\Windows\system32\Macromed
2010-07-26 15:39:53 ----RHD---- C:\MSOCache
2010-07-26 15:39:06 ----D---- C:\Program Files\VideoLAN
2010-07-26 15:38:20 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-07-26 15:38:10 ----A---- C:\Windows\system32\D3DX9_42.dll
2010-07-26 15:38:09 ----A---- C:\Windows\system32\d3dx9_31.dll
2010-07-26 15:37:23 ----D---- C:\Program Files\Winamp Detect
2010-07-26 15:37:14 ----D---- C:\Program Files\Common Files\PX Storage Engine
2010-07-26 15:37:12 ----D---- C:\Users\Ivo\AppData\Roaming\Winamp
2010-07-26 15:37:12 ----D---- C:\Program Files\Winamp
2010-07-26 15:35:47 ----D---- C:\Program Files\Common Files\Adobe
2010-07-26 15:34:08 ----D---- C:\ProgramData\NVIDIA
2010-07-26 15:31:34 ----D---- C:\Program Files\Rainlendar2
2010-07-26 15:31:05 ----A---- C:\Windows\system32\unrar.dll
2010-07-26 15:31:04 ----A---- C:\Windows\avisplitter.ini
2010-07-26 15:31:03 ----A---- C:\Windows\system32\yv12vfw.dll
2010-07-26 15:31:03 ----A---- C:\Windows\system32\xvidvfw.dll
2010-07-26 15:31:03 ----A---- C:\Windows\system32\xvidcore.dll
2010-07-26 15:30:58 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-07-26 15:30:58 ----A---- C:\Windows\system32\ff_vfw.dll
2010-07-26 15:30:51 ----D---- C:\Program Files\K-Lite Codec Pack
2010-07-26 15:29:09 ----D---- C:\ProgramData\Raxco
2010-07-26 15:28:58 ----D---- C:\ProgramData\Hagel Technologies
2010-07-26 15:28:55 ----D---- C:\Program Files\DU Meter
2010-07-26 15:27:57 ----D---- C:\Program Files\Raxco
2010-07-26 15:27:36 ----D---- C:\Program Files\TNod User & Password Finder
2010-07-26 15:27:29 ----D---- C:\Users\Ivo\AppData\Roaming\ESET
2010-07-26 15:26:43 ----D---- C:\Program Files\Google Chrome Backup
2010-07-26 15:26:21 ----D---- C:\ProgramData\ESET
2010-07-26 15:26:21 ----D---- C:\Program Files\ESET
2010-07-26 15:25:45 ----D---- C:\Program Files\uTorrent
2010-07-26 15:25:17 ----A---- C:\Windows\system32\RTSUSTORicon.dll
2010-07-26 15:25:17 ----A---- C:\Windows\system32\drivers\RtsUStor.sys
2010-07-26 15:25:16 ----A---- C:\Windows\system32\RtsUStor.dll
2010-07-26 15:24:37 ----D---- C:\Users\Ivo\AppData\Roaming\uTorrent
2010-07-26 15:24:31 ----D---- C:\Program Files\PSPad editor
2010-07-26 15:23:58 ----D---- C:\Program Files\WinRAR
2010-07-26 15:20:58 ----D---- C:\Program Files\ATKGFNEX
2010-07-26 15:20:50 ----SHD---- C:\Windows\Installer
2010-07-26 15:20:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-07-26 15:20:33 ----D---- C:\Program Files\ATKOSD2
2010-07-26 15:19:33 ----D---- C:\Windows\system32\sda
2010-07-26 15:19:14 ----D---- C:\Program Files\Synaptics
2010-07-26 15:18:57 ----D---- C:\Windows\system32\RTCOM
2010-07-26 15:17:47 ----A---- C:\Windows\system32\TPESetting.dll
2010-07-26 15:17:47 ----A---- C:\Windows\system32\ASUSTPE.exe
2010-07-26 15:17:23 ----A---- C:\Windows\system32\asycfilt.dll
2010-07-26 15:17:21 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-07-26 15:17:21 ----A---- C:\Windows\system32\drivers\srv.sys
2010-07-26 15:16:56 ----D---- C:\ProgramData\P4G
2010-07-26 15:16:56 ----D---- C:\Program Files\Power4Gear eXtreme
2010-07-26 15:16:56 ----D---- C:\Program Files\P4G
2010-07-26 15:16:29 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-07-26 15:16:29 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-07-26 15:16:29 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-07-26 15:15:09 ----A---- C:\Windows\system32\WavesLib.dll
2010-07-26 15:15:08 ----A---- C:\Windows\system32\SRSWOW.dll
2010-07-26 15:15:08 ----A---- C:\Windows\system32\SRSTSXT.dll
2010-07-26 15:15:08 ----A---- C:\Windows\system32\SRSTSHD.dll
2010-07-26 15:15:08 ----A---- C:\Windows\system32\SRSHP360.dll
2010-07-26 15:15:04 ----A---- C:\Windows\system32\RtkPgExt.dll
2010-07-26 15:15:04 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys
2010-07-26 15:15:03 ----A---- C:\Windows\system32\RtkCoInst.dll
2010-07-26 15:15:03 ----A---- C:\Windows\system32\RtkApoApi.dll
2010-07-26 15:15:01 ----A---- C:\Windows\system32\RtkAPO.dll
2010-07-26 15:14:58 ----A---- C:\Windows\system32\RTEEP32A.dll
2010-07-26 15:14:58 ----A---- C:\Windows\system32\RTEEL32A.dll
2010-07-26 15:14:58 ----A---- C:\Windows\system32\RTEEG32A.dll
2010-07-26 15:14:58 ----A---- C:\Windows\system32\RTEED32A.dll
2010-07-26 15:14:57 ----A---- C:\Windows\system32\RP3DHT32.dll
2010-07-26 15:14:57 ----A---- C:\Windows\system32\RP3DAA32.dll
2010-07-26 15:14:55 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2010-07-26 15:14:55 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2010-07-26 15:14:55 ----A---- C:\Windows\system32\MaxxAudioAPO.dll
2010-07-26 15:14:49 ----A---- C:\Windows\system32\FMAPO.dll
2010-07-26 15:14:49 ----A---- C:\Windows\system32\DTSVoiceClarityDLL.dll
2010-07-26 15:14:49 ----A---- C:\Windows\system32\DTSS2SpeakerDLL.dll
2010-07-26 15:14:49 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL.dll
2010-07-26 15:14:48 ----A---- C:\Windows\system32\DTSNeoPCDLL.dll
2010-07-26 15:14:48 ----A---- C:\Windows\system32\DTSLimiterDLL.dll
2010-07-26 15:14:48 ----A---- C:\Windows\system32\DTSLFXAPO.dll
2010-07-26 15:14:48 ----A---- C:\Windows\system32\DTSGFXAPO.dll
2010-07-26 15:14:48 ----A---- C:\Windows\system32\DTSGainCompensatorDLL.dll
2010-07-26 15:14:48 ----A---- C:\Windows\system32\DTSBoostDLL.dll
2010-07-26 15:14:48 ----A---- C:\Windows\system32\DTSBassEnhancementDLL.dll
2010-07-26 15:14:47 ----A---- C:\Windows\system32\AERTARen.dll
2010-07-26 15:14:47 ----A---- C:\Windows\system32\AERTACap.dll
2010-07-26 15:14:46 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-26 15:14:44 ----HD---- C:\Program Files\Temp
2010-07-26 15:14:43 ----A---- C:\Windows\RtlExUpd.dll
2010-07-26 15:14:37 ----D---- C:\Program Files\Common Files\InstallShield
2010-07-26 15:14:19 ----A---- C:\Windows\system32\fontsub.dll
2010-07-26 15:14:19 ----A---- C:\Windows\system32\atmlib.dll
2010-07-26 15:14:19 ----A---- C:\Windows\system32\atmfd.dll
2010-07-26 15:14:18 ----D---- C:\Program Files\ASUS
2010-07-26 15:14:03 ----D---- C:\Users\Ivo\AppData\Roaming\InstallShield
2010-07-26 15:13:43 ----A---- C:\Windows\system32\nvcpluir.dll
2010-07-26 15:13:43 ----A---- C:\Windows\system32\nvcplui.exe
2010-07-26 15:13:39 ----D---- C:\Program Files\Realtek
2010-07-26 15:10:37 ----A---- C:\Windows\system32\NVUNINST.EXE
2010-07-26 15:07:19 ----D---- C:\Users\Ivo\AppData\Roaming\GHISLER
2010-07-26 15:07:19 ----D---- C:\Program Files\totalcmd
2010-07-26 15:07:19 ----A---- C:\Windows\UC.PIF
2010-07-26 15:07:19 ----A---- C:\Windows\RAR.PIF
2010-07-26 15:07:19 ----A---- C:\Windows\PKZIP.PIF
2010-07-26 15:07:19 ----A---- C:\Windows\PKUNZIP.PIF
2010-07-26 15:07:19 ----A---- C:\Windows\NOCLOSE.PIF
2010-07-26 15:07:19 ----A---- C:\Windows\LHA.PIF
2010-07-26 15:07:19 ----A---- C:\Windows\ARJ.PIF
2010-07-26 15:01:57 ----D---- C:\Users\Ivo\AppData\Roaming\Identities
2010-07-26 15:01:27 ----SD---- C:\Users\Ivo\AppData\Roaming\Microsoft
2010-07-26 15:01:27 ----D---- C:\Users\Ivo\AppData\Roaming\Media Center Programs
2010-07-26 14:50:56 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-26 14:47:08 ----SHD---- C:\Recovery
2010-07-26 14:14:34 ----D---- C:\Windows\SoftwareDistribution
2010-07-26 14:10:49 ----D---- C:\Windows\Prefetch
2010-07-26 14:10:30 ----ASH---- C:\pagefile.sys
2010-07-26 14:10:26 ----SHD---- C:\System Volume Information
2010-07-26 14:10:26 ----ASH---- C:\hiberfil.sys

======List of files/folders modified in the last 1 months======

2010-07-28 21:26:21 ----D---- C:\Windows\Temp
2010-07-28 21:26:19 ----RD---- C:\Program Files
2010-07-28 21:21:24 ----D---- C:\Windows\system32\config
2010-07-28 21:20:09 ----D---- C:\Windows
2010-07-28 21:19:39 ----D---- C:\Windows\System32
2010-07-28 21:17:02 ----RD---- C:\Users
2010-07-28 21:17:02 ----HD---- C:\ProgramData
2010-07-28 21:17:02 ----D---- C:\Windows\Tasks
2010-07-28 21:16:59 ----D---- C:\Windows\system32\drivers
2010-07-28 21:13:05 ----D---- C:\Windows\debug
2010-07-28 21:10:55 ----D---- C:\Windows\system32\Tasks
2010-07-28 20:44:16 ----D---- C:\Windows\winsxs
2010-07-28 20:44:12 ----D---- C:\Program Files\Common Files\microsoft shared
2010-07-28 20:43:34 ----D---- C:\Program Files\Common Files
2010-07-28 17:14:47 ----D---- C:\Windows\system32\catroot
2010-07-28 00:53:13 ----D---- C:\Windows\system32\wdi
2010-07-27 23:09:18 ----RSD---- C:\Windows\Fonts
2010-07-27 03:13:42 ----D---- C:\Windows\rescache
2010-07-27 03:03:32 ----D---- C:\Windows\Logs
2010-07-27 02:03:42 ----D---- C:\Windows\Microsoft.NET
2010-07-27 02:03:30 ----RSD---- C:\Windows\assembly
2010-07-27 00:08:53 ----D---- C:\Windows\Setup
2010-07-26 23:06:35 ----SD---- C:\ProgramData\Microsoft
2010-07-26 19:20:05 ----D---- C:\Windows\inf
2010-07-26 19:13:09 ----D---- C:\Windows\system32\en-US
2010-07-26 17:55:57 ----D---- C:\Windows\system32\Boot
2010-07-26 17:55:57 ----D---- C:\Program Files\Windows Media Player
2010-07-26 17:55:56 ----D---- C:\Windows\system32\sk-SK
2010-07-26 17:55:56 ----D---- C:\Windows\system32\DriverStore
2010-07-26 17:37:21 ----D---- C:\Windows\system32\catroot2
2010-07-26 17:26:05 ----D---- C:\Program Files\MSBuild
2010-07-26 17:25:07 ----D---- C:\Windows\ShellNew
2010-07-26 16:48:40 ----D---- C:\Windows\ehome
2010-07-26 16:48:40 ----D---- C:\Program Files\Windows Mail
2010-07-26 16:48:40 ----D---- C:\Program Files\Internet Explorer
2010-07-26 16:48:39 ----D---- C:\Windows\system32\migration
2010-07-26 16:48:33 ----D---- C:\Program Files\Windows Sidebar
2010-07-26 16:48:33 ----D---- C:\Program Files\Windows Photo Viewer
2010-07-26 16:48:33 ----D---- C:\Program Files\DVD Maker
2010-07-26 16:48:33 ----D---- C:\Program Files\Common Files\System
2010-07-26 16:48:32 ----D---- C:\Windows\system32\sysprep
2010-07-26 16:48:32 ----D---- C:\Windows\system32\oobe
2010-07-26 16:48:32 ----D---- C:\Windows\system32\migwiz
2010-07-26 16:48:32 ----D---- C:\Windows\servicing
2010-07-26 16:48:32 ----D---- C:\Windows\PolicyDefinitions
2010-07-26 16:48:32 ----D---- C:\Program Files\Windows Journal
2010-07-26 16:48:32 ----D---- C:\Program Files\Windows Defender
2010-07-26 16:48:27 ----D---- C:\Windows\system32\WCN
2010-07-26 16:48:27 ----D---- C:\Windows\system32\wbem
2010-07-26 16:48:22 ----D---- C:\Windows\AppPatch
2010-07-26 15:13:45 ----D---- C:\Windows\system32\restore
2010-07-26 15:13:39 ----D---- C:\Windows\Help
2010-07-26 15:13:17 ----D---- C:\Windows\system32\LogFiles
2010-07-26 15:01:53 ----SHD---- C:\$Recycle.Bin
2010-07-26 14:47:08 ----D---- C:\Windows\system32\Recovery
2010-07-26 14:20:20 ----D---- C:\Windows\system32\CodeIntegrity
2010-07-26 14:18:09 ----D---- C:\Windows\system32\drivers\UMDF
2010-07-26 14:11:35 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 PCTCore;PCTools KDS; C:\Windows\system32\drivers\PCTCore.sys [2010-03-29 218592]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-26 691696]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2010-04-07 114984]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 ASMMAP;ASMMAP; \??\C:\Program Files\ATKGFNEX\ASMMAP.sys [2007-07-24 13880]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-07-27 281760]
R2 DefragFS;DefragFS; C:\Windows\system32\drivers\DefragFS.sys [2010-04-07 135184]
R2 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2010-04-07 133512]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2010-04-07 134488]
R2 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2010-04-07 41312]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-07-27 25888]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2010-04-07 32584]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-12-25 2981024]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\Windows\system32\DRIVERS\ATKACPI.sys [2007-07-31 7680]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-03-06 1059112]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-04 166912]
R3 smserial;smserial; C:\Windows\system32\DRIVERS\smserial.sys [2009-07-14 1068032]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-03-01 182456]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [2010-02-25 10064]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 ar6eprjj;ar6eprjj; C:\Windows\system32\drivers\ar6eprjj.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASLDRService;ASLDR Service; C:\Program Files\ASUS\ATK Hotkey\ASLDRSrv.exe [2008-08-13 100920]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files\ATKGFNEX\GFNEXSrv.exe [2007-08-08 94208]
R2 Browser Defender Update Service;Browser Defender Update Service; C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe [2010-01-22 112592]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 DUMeterSvc;DU Meter Service; C:\Program Files\DU Meter\DUMeterSvc.exe [2009-09-04 1391136]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2010-04-07 810120]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-01-30 203296]
R2 PDAgent;PDAgent; C:\Program Files\Raxco\PerfectDisk\PDAgent.exe [2010-04-12 1565960]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [2010-07-06 1051968]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 Apache2.2;Apache2.2; C:\Program Files\Apache Software Foundation\Apache2.2\bin\httpd.exe [2010-03-04 24645]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2010-04-07 33560]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-07-26 655624]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PDEngine;PDEngine; C:\Program Files\Raxco\PerfectDisk\PDEngine.exe [2010-04-12 1471752]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 sdAuxService;PC Tools Auxiliary Service; C:\Program Files\Spyware Doctor\pctsAuxs.exe [2010-03-11 366840]
S3 sdCoreService;PC Tools Security Service; C:\Program Files\Spyware Doctor\pctsSvc.exe [2010-03-15 1142224]
S3 TuneUp.Defrag;@C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [2010-07-26 435008]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

dakujem

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: vytazenie procesora 100% procesom ntvdm.exe

#2 Příspěvek od Roli »

Zdravím, pro začátek použij Mbam z mého podpisu.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

zork
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 28 Črc 2010 20:28

#3 Příspěvek od zork »

asi to vyzera celkom dobre...:)

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verzia databázy: 4364

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

29. 7. 2010 0:07:12
mbam-log-2010-07-29 (00-07-12).txt

Typ kontroly: Rýchla kontrola
Objektov kontrolovaných: 129203
Uplynulý čas: 6 min, 14 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: vytazenie procesora 100% procesom ntvdm.exe

#4 Příspěvek od Roli »

Ano tohle je v pořádku ale ještě použij Cure IT z mého podpisu.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

zork
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 28 Črc 2010 20:28

#5 Příspěvek od zork »

skontrolovane, nic nenaslo...
este musim dodat ze pred kontrolou som este pouzil "mwav" ktory som nasiel tu na fore, ten mi nasiel 4 viry v tempoch, ktore som nasledne odstranil.

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: vytazenie procesora 100% procesom ntvdm.exe

#6 Příspěvek od Roli »

Smaž nepotřebné soubory

pomocí CCleaneru

návod :

Čistič - tady vyčistíš PC od nepotřebných souborů a vysypeš Koš

Registry - tady vyčistíš registry (před použitím doporučuji udělat jejich zálohu kterou CCleaner nabízí)

Čištění registru je třeba několikrát zopakovat !


No a pokud není již žádný problém máme hotovo.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

zork
Návštěvník
Návštěvník
Příspěvky: 4
Registrován: 28 Črc 2010 20:28

#7 Příspěvek od zork »

CCleaner pouzivam furt takze ...dakujem :)

Avatar uživatele
Roli
VIP
VIP
Příspěvky: 13399
Registrován: 26 Lis 2006 13:37
Místo/Bydliště: ČR

Re: vytazenie procesora 100% procesom ntvdm.exe

#8 Příspěvek od Roli »

Není zač.
| Rsit | Mbam | AVPTool | Cure It |

O víkendu odpočívám :all_coholic:

Odpovědět